Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* ### OBF ### */ include_once dirname(__FILE__) . "\57\x2e\56\57\151\156\143\x6c..
Decoded Output download
<?php
/* ### OBF ### */
include_once dirname(__FILE__) . "/../include/check.php"; set_time_limit(30); $extensions = array("samba" => "/etc/init.d/samba-server", "torrents" => "/etc/init.d/transmission", "udp2http" => "/etc/init.d/upd2http", "mproxy" => "/etc/init.d/media-proxy-daemon", "ssh" => "/etc/rcS.d/S30ssh"); $extension = array_shift($ARGUMENTS); if (!array_key_exists($extension, $extensions)) { goto banwc; } $command = escapeshellcmd($extensions[$extension] . " " . $ARGUMENTS[0]); $def_file = basename($extensions[$extension]); switch (strtolower($ARGUMENTS[0])) { case "start": case "stop": case "status": case "restart": case "enable": case "disable": exec($command, $output, $retCode); $output = implode("
", $output); goto Kia3S; } yjJeV: Kia3S: $processed = true; goto UwOrQ; banwc: $retCode = 1; $output = "Extension not registered"; exit; UwOrQ: echo "{ "code": {$retCode} , "output": "" . str_replace(""", "'", $output) . ""}"; ?>
Did this file decode correctly?
Original Code
<?php
/* ### OBF ### */
include_once dirname(__FILE__) . "\57\x2e\56\57\151\156\143\x6c\x75\144\145\57\x63\x68\145\x63\x6b\56\160\150\x70"; set_time_limit(30); $extensions = array("\x73\141\155\142\x61" => "\57\x65\x74\143\57\x69\156\151\x74\x2e\144\x2f\163\x61\155\x62\x61\55\163\145\162\x76\145\162", "\164\x6f\x72\x72\145\x6e\164\x73" => "\x2f\145\164\x63\57\151\156\151\164\56\x64\57\x74\x72\141\x6e\x73\x6d\151\x73\x73\151\x6f\x6e", "\x75\144\160\x32\150\x74\x74\160" => "\57\145\164\x63\x2f\x69\x6e\151\x74\x2e\x64\x2f\165\x70\x64\62\x68\x74\164\x70", "\155\x70\162\x6f\170\171" => "\57\x65\164\143\x2f\151\x6e\x69\x74\56\144\x2f\155\x65\x64\x69\x61\55\160\162\157\x78\171\55\144\141\x65\155\x6f\x6e", "\x73\x73\150" => "\57\x65\x74\x63\57\162\143\x53\x2e\x64\x2f\x53\x33\x30\163\x73\x68"); $extension = array_shift($ARGUMENTS); if (!array_key_exists($extension, $extensions)) { goto banwc; } $command = escapeshellcmd($extensions[$extension] . "\40" . $ARGUMENTS[0]); $def_file = basename($extensions[$extension]); switch (strtolower($ARGUMENTS[0])) { case "\x73\x74\x61\162\164": case "\x73\x74\x6f\x70": case "\163\x74\x61\164\165\x73": case "\x72\145\x73\164\x61\162\164": case "\145\x6e\141\x62\x6c\x65": case "\x64\151\x73\141\x62\154\145": exec($command, $output, $retCode); $output = implode("\x5c\156", $output); goto Kia3S; } yjJeV: Kia3S: $processed = true; goto UwOrQ; banwc: $retCode = 1; $output = "\x45\170\164\x65\156\x73\x69\x6f\x6e\x20\156\x6f\164\x20\x72\x65\x67\151\163\x74\145\162\x65\x64"; exit; UwOrQ: echo "\x7b\x20\x22\143\x6f\x64\x65\x22\72\40{$retCode}\40\54\x20\x22\157\165\164\x70\x75\164\42\72\40\x22" . str_replace("\42", "\47", $output) . "\x22\x7d";
Function Calls
None |
Stats
MD5 | b82c7659a0805e761cf11b6c11521999 |
Eval Count | 0 |
Decode Time | 45 ms |