PHP Malware Analysis

Yo_Benji!_PS_2

md5: c3bc5c0971df012f9e931c226d3750bf

Jump to:

Screenshot


Attributes


Deobfuscated PHP code

OK, so I'm a bit disappointed.
I was thinking, "Hey, this is pretty fun.", then I'm like wtf?
You have to sanitize untrusted input. That's like infosec 101 stuff.
Make sure to check for sql injection while you're at it.

[thumbs_down_emoji]


Execution traces


Generated HTML code

<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">OK, so I'm a bit disappointed.
I was thinking, "Hey, this is pretty fun.", then I'm like wtf?
You have to sanitize untrusted input. That's like infosec 101 stuff.
Make sure to check for sql injection while you're at it.

[thumbs_down_emoji]

</pre></body></html>

Original PHP code

OK, so I'm a bit disappointed.
I was thinking, "Hey, this is pretty fun.", then I'm like wtf?
You have to sanitize untrusted input. That's like infosec 101 stuff.
Make sure to check for sql injection while you're at it.

[thumbs_down_emoji]