{"id":59,"date":"2016-01-28T13:20:59","date_gmt":"2016-01-28T05:20:59","guid":{"rendered":"http:\/\/www.q25.net\/?p=59"},"modified":"2016-01-28T13:20:59","modified_gmt":"2016-01-28T05:20:59","slug":"linux-shell%e5%bf%ab%e9%80%9f%e6%9f%a5%e6%89%bephp%e6%9c%a8%e9%a9%ac","status":"publish","type":"post","link":"https:\/\/www.q25.net\/?p=59","title":{"rendered":"Linux shell\u5feb\u901f\u67e5\u627ePHP\u6728\u9a6c"},"content":{"rendered":"<p># find .\/ -name &#8220;*.php&#8221; |xargs egrep &#8220;phpspy|c99sh|milw0rm|eval\\(gunerpress|eval\\(base64_decoolcode|spider_bc&#8221;> \/tmp\/php.txt<\/p>\n<p># grep -r &#8211;include=*.php  &#8216;[^a-z]eval($_POST&#8217; . > \/tmp\/eval.txt<\/p>\n<p># grep -r &#8211;include=*.php  &#8216;file_put_contents(.*$_POST\\[.*\\]);&#8217; . > \/tmp\/file_put_contents.txt<\/p>\n<p># find .\/ -name &#8220;*.php&#8221; -type f -print0 | xargs -0 egrep &#8220;(phpspy|c99sh|milw0rm|eval\\(gzuncompress\\(base64_decoolcode|eval\\(base64_decoolcode|spider_bc|gzinflate)&#8221; | awk -F: &#8216;{print $1}&#8217; | sort | uniq<\/p>\n<p>\u67e5\u627e\u6700\u8fd1\u4e00\u5929\u88ab\u4fee\u6539\u7684PHP\u6587\u4ef6<\/p>\n<p>           #   find -mtime -1 -type f -name \\*.php<br \/>\n\u4fee\u6539\u7f51\u7ad9\u7684\u6743\u9650<\/p>\n<p>          # find -type f -name \\*.php -exec chmod 444 {} \\;<\/p>\n<p>          # find .\/ -type d -exec chmod 555{} \\;<\/p>\n","protected":false},"excerpt":{"rendered":"<p># find .\/ -name &#038;#82&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.q25.net\/index.php?rest_route=\/wp\/v2\/posts\/59"}],"collection":[{"href":"https:\/\/www.q25.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.q25.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.q25.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.q25.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=59"}],"version-history":[{"count":1,"href":"https:\/\/www.q25.net\/index.php?rest_route=\/wp\/v2\/posts\/59\/revisions"}],"predecessor-version":[{"id":60,"href":"https:\/\/www.q25.net\/index.php?rest_route=\/wp\/v2\/posts\/59\/revisions\/60"}],"wp:attachment":[{"href":"https:\/\/www.q25.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=59"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.q25.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=59"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.q25.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=59"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}