Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode('DQoNCmVjaG8nPGh0bWw+DQo8dGl0bGU+UHN5Y28gTWlzdGU8L3RpdGxlPg0KPEJ..
Decoded Output download
echo'<html>
<title>Psyco Miste</title>
<BODY topmargin="0" leftmargin="0" align="center">
<form name="leformulaire" action="" method="post">
IP :<br>
<input name="pass" type=text length=30><br>
<input type=submit value="Get all sites!">
</form>
</body>
</html>' ;
$a=$_POST[pass];
if ($a != '') :
$site=$a ;
$ip=gethostbyname("$site");
{
$sites = array_map("site", getall("ip:$ip"));
$un=array_unique($sites);
echo "Scanning -> ", $ip, " ... " . '<br>';
echo "[+] Found : ".count($sites)." sites [+]
".'<br>';
foreach($un as $psyco){
$miste="http://$psyco/";
echo "$miste "."
".'<br>';
}
}
endif;
function site($link){
return str_replace("","",parse_url($link, PHP_URL_HOST));
}
function getall($p){
for($i = 1; $i <= 2000; $i += 10){
$ch = curl_init();
curl_setopt ($ch, CURLOPT_URL, "http://www.bing.com/search?q=".urlencode($p)."&first=".$i."&FORM=PERE");
curl_setopt ($ch, CURLOPT_USERAGENT, "msnbot/1.0 (http://search.msn.com/msnbot.htm)");
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_COOKIEFILE,getcwd().'/cookie.txt');
curl_setopt ($ch, CURLOPT_COOKIEJAR, getcwd().'/cookie.txt');
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
$data = curl_exec($ch);
preg_match_all('#;a=(.*?)" h="#',$data, $links);
foreach($links[1] as $link){
$allLinks[] = $link;
}
if(!preg_match('#"sw_next"#',$data)) break;
}
if(!empty($allLinks) && is_array($allLinks)){
return array_unique(array_map("urldecode", $allLinks));
}
}
Did this file decode correctly?
Original Code
<?php
eval(base64_decode('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'))
?>
Function Calls
| base64_decode | 1 |
Stats
| MD5 | 32111c6ca70182f9803219379dfe8767 |
| Eval Count | 1 |
| Decode Time | 71 ms |