Դַ

1.ɱòʵ֣Զ͵webԶĲɱе10ѾܹɱĿǰĴ󲿷webţҪעеĲǲɱPHPŵģaspaspxڸǷΧjspĲ٣ΪдΪ˽linuxµwebshellɱ⡣

2.ܲɱɱʵ˶PHPı򵥸٣ܹɱţ

<?php
$a=$_POST['a'];
#fdsffd
$b='feafdea';
assert($a);
?>

ĺţԶ׷assertڵ$aԴֲɿأᱨȻ֧includefile_put_contentsȺŲɱ



3.ܺŲɱɱռ˴ܹܺܺžȷʶ𲢲ɱzendܡbase64ȼܶרŵĲɱ




4.PHP̬ţPHPԵַıԣ²ɱؼֺѶλרPHP̬ŵĲ



5.ͲɱרPHPDDOSŵĲɱܣĿǰPHPDDOSű
11

6.ļ޸ʱҺţΪչ˵С׷Ա˸ļ޸ʱҺļĬϳֻphpjspļ޸ʱ䣬ҪչļֻҪ޸main.pyɡ
88


7. Իʾݱ⼸ӦӦ飬ԶҪϢ·ŴԼļ޸ʱ䡣

ĿǰռwebshelٸwebshellѾǾ󲿷֡