convert.base64-encode & convert.base64-decode
:
base64
编码
/
解码
convert.quoted-printable-encode & convert.quoted-printable-decode
:
将 quoted-printable 字符串转换为 8-bit 字符串
3、 压缩过滤器:
zlib.deflate
和
zlib.inflate
bzip2.compress
和
bzip2.decompress
4、 加密过滤器:
mcrypt.tripledes和mdecrypt.tripledes等
readfile("php://filter/read=string.toupper/resource=http://www.example.com");//将www.example.com中的内容转换为大写后输出
file_put_contents("php://filter/write=string.rot13/resource=example.txt","Hello World");//将字符串”hello world”经过rot13编码后写入example.txt
/index.php?a=php://filter/read=convert.base64-encode/resource=index2.php
index.php:
<?php
include($_GET['a']);
结果如图:
https://www.leavesongs.com/PENETRATION/php-filter-magic.html