首先將後門源代碼加密,獲得加密後的代碼。ide
$encode = <<<EOF if(!file_exists(dirname(dirname(dirname(__FILE__))).'/blog.51cto.com.chinaleo')){ header('Location:https://blog.51cto.com/chinaleo'); exit(); } EOF; echo base64_encode( gzdeflate( $encode ) );
獲得字符串「48xM01BMy8xJjU+tyCwuKdZIySzKS8xNxaDj4908fVzj4zU1NfXU9ZMzMvMSc1Lz9ZJy8tP1TA2TS/L1kvNz1TU1q3m5FKAgIzUxJbVIQ90nPzmxJDM/zyqjpKTASl8fVQ/cLHVNa4ReoGtKNCACnLUA」,這就是密文網站
eval( gzinflate( base64_decode( '48xM01BMy8xJjU+tyCwuKdZIySzKS8xNxaDj4908fVzj4zU1NfXU9ZMzMvMSc1Lz9ZJy8tP1TA2TS/L1kvNz1TU1q3m5FKAgIzUxJbVIQ90nPzmxJDM/zyqjpKTASl8fVQ/cLHVNa4ReoGtKNCACnLUA' ) ) );