2019-08-06 00:06:32 +08:00
|
|
|
# WpBot hack group
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 10:07:08 +08:00
|
|
|
## php webshell name
|
2019-08-06 09:57:07 +08:00
|
|
|
|
2019-08-06 10:07:08 +08:00
|
|
|
Luqman1337 Mini shell
|
2019-08-06 09:57:07 +08:00
|
|
|
|
2019-08-06 10:09:37 +08:00
|
|
|
$ email = "luqmanid1337@gmail.com";
|
|
|
|
|
$ from = "From: V1 Shell<luqmanid1337@gmail.com";
|
|
|
|
|
$check3 = $_SERVER['DOCUMENT_ROOT'] . "/999MD999.html" ;
|
|
|
|
|
$text3 = http_get('hxps://hastebin.com/raw/puralijawo');
|
|
|
|
|
|
2019-08-06 00:05:14 +08:00
|
|
|
## DOWNLOAD URL
|
2019-08-06 00:04:15 +08:00
|
|
|
|
|
|
|
|
http://formfactset.org:8082/static/backdoorGood.txt
|
|
|
|
|
|
2019-08-06 10:04:33 +08:00
|
|
|
Botnet will connect formfactset.org:8081
|
|
|
|
|
|
|
|
|
|
|
2019-08-06 00:05:14 +08:00
|
|
|
## LIST
|
|
|
|
|
|
2019-08-06 10:06:04 +08:00
|
|
|
cce014c7dcac3919499de460ba5b17a6 one.txt has 55000 website list
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
af462134cd6828aca1ac1eb0fed068ac
|
|
|
|
|
|
2019-08-06 10:06:04 +08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2019-08-06 00:05:14 +08:00
|
|
|
## BOTNET MALWARE
|
|
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
47d704b79364e2ab333e614c166d0b7d
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
db08d343049c733a97bccaf394db56a2
|
|
|
|
|
|
2019-08-06 00:05:14 +08:00
|
|
|
## MODULE
|
|
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
755bce76cfcaa8198f13e8c258341bdc
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
04b0c9900e5c849bbff4f60d34c892cf
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
5f4290e27c373dfa3b92eb79650d078a
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
c326a0d37a33c1eb88eccf32431e0238
|
|
|
|
|
|
|
|
|
|
|
2019-08-06 00:05:14 +08:00
|
|
|
## MALWARE DOWNLOAD FROM
|
|
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
http://mongol-kino.mn/wp-content/uploads/2019/07/IcYbJa
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
https://indojayaprimergy.com/wp-content/plugins/apikey/3JQoFf
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
https://free-food.000webhostapp.com/wp-content/uploads/2019/06/vULqz9
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
https://tgm.tgmapartments.com/hack/f190Iw
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
http://boutique.liberal.ca/wp-content/uploads/2019/06/8puk0P
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
https://www.georgevaults.com/wp-content/uploads/2019/05/WOtgUS
|
2019-08-06 00:05:14 +08:00
|
|
|
|
2019-08-06 00:04:15 +08:00
|
|
|
http://www.skoda-bohemiamotors.pl/wp-content/uploads/2019/05/bunIjd
|
2019-08-06 09:57:07 +08:00
|
|
|
|
|
|
|
|
## PHP
|
|
|
|
|
|
|
|
|
|
pastebin.com/PuT9UvUS
|
|
|
|
|
pastebin.com/sTmYZ8wK
|
|
|
|
|
pastebin.com/6yK2y2Qm
|
|
|
|
|
pastebin.com/3uHxyFAZ
|
|
|
|
|
pastebin.com/fgwNrs5e
|
|
|
|
|
pastebin.com/zRj9ETT9
|
|
|
|
|
pastebin.com/fbHtDWxe
|
|
|
|
|
pastebin.com/cugKiQ7h
|
|
|
|
|
pastebin.com/JFtCDEJE
|
