php-enable_functions-enumeration-script.php

php 危险函数枚举 用于安全运维 和渗透测试

msg("php enable_functions enumeration script");
   $func_arr=array('disk_total_space','disk_free_space','exec','passthru','shell_exec','system','popen','show_source','pclose','proc_open','dl','chmod','php_real_logo_guid','php_egg_logo_guid','php_ini_scanned_files','php_ini_loaded_file','readlink','linkinfo','symlink','link','set_file_buffer','exec','system','escapeshellcmd','escapeshellarg','passthru','proc_close','proc_terminate','proc_get_status','proc_nice','getmyuid','getmygid','getmyinode','putenv','getopt','sys_getloadavg','get_current_user','magic_quotes_runtime','set_magic_quotes_runtime','import_request_variables','debug_zval_dump','ini_alter','dl','pclose','popen','stream_socket_client','stream_socket_server','stream_socket_accept','stream_socket_pair','stream_get_transports','stream_wrapper_restore','get_headers','mail','mb_send_mail','openlog','syslog','closelog','flock','pfsockopen','posix_kill','apache_child_terminate','apache_get_modules','apache_get_version','apache_lookup_uri','apache_reset_timeout','apache_response_headers','virtual');
   $dis_func_arr = explode(",",get_cfg_var("disable_functions"));

  if($dis_func_arr[0]){

           foreach ($func_arr as $func) {

                    if(!in_array($func,$dis_func_arr)){

                             msg("Function:  $func   enable",1);

                    }
           }


  }else{

          msg("disable_functions none !!!",1);

  }

  function msg($text,$type=0){

          $def="[*]";
          $color="green";
          if($type ==1){

                  $def="[ ]" ;
                  $color="red";
          }else if ($type==-1){

                  $def="[-]";
          }
          echo "$def $text ";

  }





?>