Khi down c�c lo?i code ��?c share tr�n m?ng, ho?c sau khi site c?a b?n b? hack. B?n mu?n ki?m tra xem trong code c� b? ch�n shell hay kh�ng th? ngo�i vi?c s?a d?ng c�c tool ��?c vi?t b?ng php th? b?n c� th? s? d?ng Notepad ++
C�ch l�m nh� sau:
B�?c 1: T?i code v? m�y
B�?c 2: T?i Notepad ++ t?i ��y: DOWNLOAD
B�?c 3: C�i �?t v� m? ch?y Notepad ++ sau �� b?m t? h?p ph�m ctrl + shift + F
S? ��?c nh� trong h?nh
- Khung Find what: c�c b?n �i?n t? kh�a c?n t?m
- Khung Directory: ��?ng d?n �?n th� m?c ch?a code
M?t s? t? kh�a:
- Sau khi �i?n xong c�c b?n b?m Find All v� �?i �? ph?n m?m ti?n h�nh t?m ki?m
- Ph?n m?m s? t?m ki?m t?t c? c�c file c� ch?a t? kh�a eval( m� m?nh �ang t?m
V� �? ph�t hi?n ��?c 1 con shell r?i :D
End tut - Tut by Qu? l? - VHB Group
Have fun.
C�ch l�m nh� sau:
B�?c 1: T?i code v? m�y
B�?c 2: T?i Notepad ++ t?i ��y: DOWNLOAD
B�?c 3: C�i �?t v� m? ch?y Notepad ++ sau �� b?m t? h?p ph�m ctrl + shift + F
S? ��?c nh� trong h?nh
- Khung Find what: c�c b?n �i?n t? kh�a c?n t?m
- Khung Directory: ��?ng d?n �?n th� m?c ch?a code
M?t s? t? kh�a:
eval(
base64_encode(
base64_decode(
gzinflate(base64_decode(
gzinflate(str_rot13(base64_decode(
str_rot13(gzinflate(base64_decode(
$_F=__FILE__;
readdir(
ini_get(�disable_functions�)
ini_get(�safe_mode�)
- Sau khi �i?n xong c�c b?n b?m Find All v� �?i �? ph?n m?m ti?n h�nh t?m ki?m
- Ph?n m?m s? t?m ki?m t?t c? c�c file c� ch?a t? kh�a eval( m� m?nh �ang t?m
V� �? ph�t hi?n ��?c 1 con shell r?i :D
End tut - Tut by Qu? l? - VHB Group
Have fun.
Check shell trong code v?i Notepad ++
4/
5
Oleh
Unknown