Oct 20, 2013 05:16 AM
(This post was last modified: Apr 20, 2014 06:31 AM by Keeper.)
![[Image: MVPhmzh.jpg]](https://i.imgur.com/MVPhmzh.jpg)
It's been a while since I last wrote something. This backdoor in particular was written during my summer vacation. It is an improved version of my previous one. This current one disposes with the following extra features:
- Database browser and modification menus
- Semi-nonalphanumeric server-side source
- PDO source with adjustments for IDS/WAF bypasses
- Additional obfuscation within the declaration of variables/arrays/functions using Kanji symbols,
Hepburn romanization system and particularly alt-symbols.
- MySQL queries' obfuscation and one-line source
- Hexdecimal/alphanumeric password generator
- Arbitrary file uploading to a certain directory
- Server information for the basic configuration settings of the server
- Arbitrary command execution
- Directory traversal menu for browsing directory contents
For the most of the code, there are several scripts and jQuery plugins for the smooth listing of the databases and the database menu. The requests are not asynchronous though - I didn't feel like meddling AJAX as well so.. The password generator is complete Javascript and the alphanumerical values are just extended strings so make sure you freeze the generator once you get a password because it's gonna overload your browser after running on for a while. I think the rest is all self-explanatory.
How to get it?
Link: https://mega.co.nz/#!UBlVTCSS
Key: fOGKLRWOsf-ZdfErl5KplmsCM6cMXdf_s_WoQv_OWxE
Note: Before you upload it make sure you edit the PDO constants with the appropriate credentials. The default one is: 'root' without a password.





![[Image: 4VGdw.jpg]](https://puu.sh/4VGdw.jpg)