Create system2022-08-22.php
Create system2022-08-22.php

from : https://zhuanlan.zhihu.com/p/550150061
该样本需要一些条件，前提是开启了php-xml拓展才可以，其原理就是用XML去注册一个registerPHPFunctions，也就是我们想要执行的system再利用getClosure去触发该方法而构成的webshell，其中即利用到了PHP的特性，利用registerNamespace和registerPHPFunctions来中断污点追踪，从而RCE
usage: xxx.php?3=whoami
tennc/webshell,360sec/webshell,tennc/webshell,tennc/webshell,tennc/webshell,360sec/webshell,tennc/webshell,tennc/webshell,360sec/webshell,360sec/webshell,tennc/webshell,tennc/webshell,360sec/webshell,360sec/webshell,360sec/webshell,360sec/webshell,tennc/webshell,360sec/webshell,tennc/webshell,360sec/webshell