Shulou(Shulou.com)05/31 Report--

This article will explain in detail about the code execution function and command execution function and Getshell method example analysis, Xiaobian think quite practical, so share to you as a reference, I hope you can read this article after harvest.

For reference only.

Code Execution Function VS Command Execution Function

I always wanted to organize the contents of these two pieces, but I didn't have time to do it. Until two days ago, I ran into a station that wrote a kitchen knife horse but couldn't connect to the kitchen knife. I didn't know how to continue, so I took this opportunity to organize the code execution function how to getshell and the command execution function how to getshell. If you have any ideas, you can exchange them together. So let's get down to business.

The principle of the chopper horse is actually to call the code execution function. The reason why the kitchen knife could execute system commands and upload files was also because it called the command execution function. The principle of command horse is to call the command execution function.

Both of these can getshell (subject to upload Malaysia) because there are some server restrictions, such as kitchen knife can not connect, or disabled certain functions, or use SQL injection to write files and XML vulnerabilities, so sometimes in the kitchen knife horse and command horse to upload Malaysia or there are some twists and turns, of course, can directly upload or write Malaysia except.

First, the knife horse:

The principle of the kitchen knife horse is to call the PHP code execution function, such as the following 1 and 2 two common words kitchen knife horse, is to call the eval function, assert function.

1. eval() function

So when we upload the kitchen knife horse of eval function, how to upload the horse without connecting the kitchen knife? continue to look down

Here I am first write an upload horse, and then use the upload horse to upload Malaysia, a bit of a one-off, but considering the amount of code Malaysia is too much, or suggest to write an upload horse, the following code is only 1kb.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.