Category Archives: Hack

php file infection

this will strip a text section out of all files when run the the directory

find . -name “*.php” -exec sed -i ‘s/<?php $irmsykfenq.*$soyyhllyjf-1; ?>//’ ‘{}’ \;

the blue text is your from and to, in that you should have an example of the inserted text to copy the start and the end section, kinda like

$irmsykfenq. lots of clever code here $soyyhllyjf-1;

so you run that and it removes your definers and everything in between.

 

Advertisements

Hmmmm my site page have <?php eval(gzinflate(base64_decode at the start, smells hacky

Well, you can decode that here…

http://www.tareeinternet.com/scripts/decrypt.php

Aint that nice.

Also this is handy pandy too…

http://www.tareeinternet.com/scripts/byterun.php

Huzzah