12309.php
本文导语: 12309.php是一款高级的webshell。它主要致力于利用所有可能的方式执行shell命令。 主要特性如下: - you could choose desired function to execute code with (+pcntl_exec +ssh2_exec) - internal Perl, Python and SSI mini-webshells - save them to disk and run, if php syste...
12309.php是一款高级的webshell。它主要致力于利用所有可能的方式执行shell命令。
主要特性如下:
- you could choose desired function to execute code with (+pcntl_exec +ssh2_exec)
- internal Perl, Python and SSI mini-webshells - save them to disk and run, if php system functions are disabled
- backconnect/bind port on PHP, Python, and "classic" perl and C backconnect/bind. Also there are several small one-line backconnects on different languages, useful too coz they do not need to save temporary file somewhere
- fully interactive backconnect on Python (yes, you can run even vim & mc via backconnect!)
- on old php versions (such as 5.1.6, 5.2.9) this script could bypass open_basedir and read other users` files (if you`re running it with webserver`s rights, i.e. kind of apache-mpm-prefork or -worker, not kind of -itk or -peruser, and if your account is not in chroot/jail). Also there is ability to read files with mysql and with usual file_get_contents
- nice ex
您可能感兴趣的文章:
本站(WWW.)站内文章除注明原创外,均为转载、整理或搜集自网络。欢迎任何形式的转载,转载请注明出处。