View difference between Paste ID: QHhdBM8e and cccuRkNw
SHOW: | | - or go back to the newest paste.
1
<?php
2
/*
3
	https://zerobyte.id/
4
	Issued Feb 9th, 2018
5
*/
6
7
$keyword = array("Webshell", "0byt3m1n1", "IndoXploit","Shell","shell","wso"); // Edit Here
8
9
if(!empty($_POST['check'])) {
10
	$list = $_POST['list'];
11
	$shell = explode(PHP_EOL, $list);
12
	echo '<pre>';
13
	foreach($shell as $shellchk) {
14
		$url = trim($shellchk);
15
		$keyx = '/(' .implode('|', $keyword) .')/';
16
		$ch = curl_init($url);
17
		curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
18
		curl_setopt($ch,CURLOPT_TIMEOUT,10);
19
		$shellcurl = curl_exec($ch);
20
		$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
21
		curl_close($ch);
22
		if($httpcode == '200' && preg_match_all("$keyx", $shellcurl))  {
23
			echo "[OK!] $url\n"; 
24
		}
25
		else {
26
			echo "<font color='red'>[BAD] $url</font>\n";
27
		}
28
	}
29
	echo '</pre>';
30
}
31
function eof() {$off = chr(90).chr(101).chr(114).chr(111).chr(66).chr(121).chr(116).chr(101);eval(chr(101).chr(99).chr(104).chr(111)." $off.'.".chr(73).chr(68)."';");}
32
echo "<html>\n";
33
echo "<head>\n";
34
echo "<title>Webshell Mass Checker By ZeroByte.ID</title>";
35
echo '<style type="text/css">body{color:#009900;background:#111111;font-family:\'Courier\'}textarea{color:#009900;background:transparent;border-color:#009900;padding:5px;}input{color:#111111;background:#009900;margin-top:10px;font-size:20px;border:2px double #009900;padding:2px;padding-left:150px;padding-right:150px;font-family:Arial}</style>';
36
echo "\n</head>";
37
echo "<body>\n";
38
echo "<center>";
39
if(empty($_POST['check'])) {
40
	echo "<h1>Webshell Mass Checker</h1>\n";
41
	echo '<form method="post">'."\n";
42
	echo '<textarea name="list" placeholder="https://victim.com/shell.php" style="width:700px;height:250px;">'."\n";
43
	echo "</textarea><br>\n";
44
	echo '<input type="submit" name="check" value="Check"/>'."\n";
45
	echo "</form>\n";
46
} eof();
47
echo "</center>\n";
48
echo "</body>\n";
49
echo "</html>";
50
51
// Recoded? only changed and delete copyright? Don't be a bastard dude!
52
?>