cdw1p icon

Webshell Mass Checker

cdw1p | PRO | 04/24/18 12:44:35 AM UTC | 0 ⭐ | 724 👁️ | Never ⏰ | []
PHP |

1.88 KB

|

None

|

0 👍

/

0 👎

<?php
/*
    https://zerobyte.id/
    Issued Feb 9th, 2018
*/
 
$keyword = array("Webshell", "0byt3m1n1", "IndoXploit","Shell","shell","wso"); // Edit Here
 
if(!empty($_POST['check'])) {
    $list = $_POST['list'];
    $shell = explode(PHP_EOL, $list);
    echo '<pre>';
    foreach($shell as $shellchk) {
        $url = trim($shellchk);
        $keyx = '/(' .implode('|', $keyword) .')/';
        $ch = curl_init($url);
        curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
        curl_setopt($ch,CURLOPT_TIMEOUT,10);
        $shellcurl = curl_exec($ch);
        $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);
        if($httpcode == '200' && preg_match_all("$keyx", $shellcurl))  {
            echo "[OK!] $url\n"; 
        }
        else {
            echo "<font color='red'>[BAD] $url</font>\n";
        }
    }
    echo '</pre>';
}
function eof() {$off = chr(90).chr(101).chr(114).chr(111).chr(66).chr(121).chr(116).chr(101);eval(chr(101).chr(99).chr(104).chr(111)." $off.'.".chr(73).chr(68)."';");}
echo "<html>\n";
echo "<head>\n";
echo "<title>Webshell Mass Checker By ZeroByte.ID</title>";
echo '<style type="text/css">body{color:#009900;background:#111111;font-family:\'Courier\'}textarea{color:#009900;background:transparent;border-color:#009900;padding:5px;}input{color:#111111;background:#009900;margin-top:10px;font-size:20px;border:2px double #009900;padding:2px;padding-left:150px;padding-right:150px;font-family:Arial}</style>';
echo "\n</head>";
echo "<body>\n";
echo "<center>";
if(empty($_POST['check'])) {
    echo "<h1>Webshell Mass Checker</h1>\n";
    echo '<form method="post">'."\n";
    echo '<textarea name="list" placeholder="https://victim.com/shell.php" style="width:700px;height:250px;">'."\n";
    echo "</textarea><br>\n";
    echo '<input type="submit" name="check" value="Check"/>'."\n";
    echo "</form>\n";
} eof();
echo "</center>\n";
echo "</body>\n";
echo "</html>";
 
// Recoded? only changed and delete copyright? Don't be a bastard dude!
?>

Comments