php-malware-analysis/webshells/general.php/83.166.240.162Wjun@Vi2loDJY6riQdgwMAAAAAM.upload-theme.scans at master · bediger4000/php-malware-analysis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

_SERVER
Array
(
    [UNIQUE_ID] => Wjun@Vi2loDJY6riQdgwMAAAAAM
    [SCRIPT_URL] => /wp-admin/update.php
    [SCRIPT_URI] => http://stratigery.com/wp-admin/update.php
    [HTTP_CONNECTION] => keep-alive
    [CONTENT_TYPE] => multipart/form-data; boundary=--------122117152418227
    [CONTENT_LENGTH] => 25340
    [HTTP_HOST] => stratigery.com
    [HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    [HTTP_REFERER] => http://stratigery.com/wp-admin/theme-install.php?upload
    [HTTP_USER_AGENT] => Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 OPR/32.0.1948.45
    [HTTP_COOKIE] => wordpress_d1513859054fuck=hydrad1513859054fuck; wordpress_test_cookie=WP+Cookie+check; wordpress_logged_ind1513859054fuck=hydrad1513859054fuck
    [PATH] => /usr/local/sbin:/usr/local/bin:/usr/bin
    [SERVER_SIGNATURE] =>
    [SERVER_SOFTWARE] => Apache/2.4.29 (Unix) PHP/7.2.0
    [SERVER_NAME] => stratigery.com
    [SERVER_ADDR] => 162.246.45.144
    [SERVER_PORT] => 80
    [REMOTE_ADDR] => 83.166.240.162
    [DOCUMENT_ROOT] => /srv/http/stratigery/htdocs
    [REQUEST_SCHEME] => http
    [CONTEXT_PREFIX] =>
    [CONTEXT_DOCUMENT_ROOT] => /srv/http/stratigery/htdocs
    [SERVER_ADMIN] => bediger@stratigery.com
    [SCRIPT_FILENAME] => /srv/http/stratigery/htdocs/fake_wp/wp-admin/update.php
    [REMOTE_PORT] => 61508
    [GATEWAY_INTERFACE] => CGI/1.1
    [SERVER_PROTOCOL] => HTTP/1.0
    [REQUEST_METHOD] => POST
    [QUERY_STRING] => action=upload-theme
    [REQUEST_URI] => /wp-admin/update.php?action=upload-theme
    [SCRIPT_NAME] => /wp-admin/update.php
    [PHP_SELF] => /wp-admin/update.php
    [REQUEST_TIME_FLOAT] => 1513859065.754
    [REQUEST_TIME] => 1513859065
)

_REQUEST
Array
(
    [action] => upload-theme
    [_wpnonce] => c34ce15e3f
    [_wp_http_referer] => /wp-admin/theme-install.php?tab=3Dupload
    [install-theme-submit] => Install Now
)

_COOKIE
 Array
(
    [wordpress_d1513859054fuck] => hydrad1513859054fuck
    [wordpress_test_cookie] => WP Cookie check
    [wordpress_logged_ind1513859054fuck] => hydrad1513859054fuck
)

_FILES

UPLOADED FILE themezip
 Array
(
    [name] => general.php
    [type] => application/octet-stream
    [tmp_name] => /tmp/php8Y88Jw
    [error] => 0
    [size] => 24598
)

END UPLOADED FILE themezip
 Uploaded file: /var/tmp/83.166.240.162Wjun@Vi2loDJY6riQdgwMAAAAAM.0.file

END _FILES
 $my_blog=http://stratigery.com/wp-admin