Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(gzinflate(base64_decode(base64_decode(str_rot13('LyMFLzf1pR1SFQZmIwIOqUR2F0M..

Decoded Output download

//read flag.php :)
require("mosaa_key.php");

function decrypt($data, $key) {
    $cipher = "aes-128-cbc";
    $ivlen = openssl_cipher_iv_length($cipher);
    $c = base64_decode($data);
    $iv = substr($c, 0, $ivlen);
    $hmac = substr($c, $ivlen, $sha2len=32);
    $ciphertext_raw = substr($c, $ivlen+$sha2len);
    $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, $key, OPENSSL_RAW_DATA, $iv);
    $calcmac = hash_hmac('sha256', $ciphertext_raw, $key, true);
    if (!hash_equals($hmac, $calcmac)) {
        return null;
    }
    return $original_plaintext;
}

$key = $mkey;

$encrypted_data = "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";
$decrypted_data = decrypt($encrypted_data, $key);

eval($decrypted_data);

Did this file decode correctly?

Original Code

<?php

eval(gzinflate(base64_decode(base64_decode(str_rot13('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')))));

?>

Function Calls

gzinflate 1
str_rot13 1
base64_decode 2

Variables

None

Stats

MD5 4ba15fb437bcc07d3d21e5f6a2bea90f
Eval Count 1
Decode Time 46 ms