Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $KFcFW='s';$AtN='6';$drUR='a';$H='i';$WGEPZ='d';$Hd='b';$uX='l';$rei='c';$bU='_';$pq..

Decoded Output download

?><?php
error_reporting(0); session_start(); system('clear'); $a=date('d'); $b=date("m"); $thoigian=date('d/m'); $day = []; $day= date('d-m-y'); $today = date("d-m-y"); $d = date("d-m"); $key = "dang_".substr(md5($today), 0 , 8); $long_url = "https://tooltranthuong.blogspot.com/p/key.html?key=$key"; $api_token = '5b233a2a4d592b536e6340391823aa72ed66aac4'; $api_url = "https://link1s.com/api?api={$api_token}&url={$long_url}"; $result = @json_decode(file_get_contents($api_url), true); while (true){ echo "[1;96mLu : Mi Ngy S i Mt Key
"; echo $BGreen."Truy Cp Vo Link ( Ly Key): $BWhite".$result["shortenedUrl"]."".$BGreen."
"; echo "[1;92mNhp Key  Vo Tool: [1;33m"; $keyy = trim(fgets(STDIN)); if ($keyy == $key) { sleep(1); echo "[1;35mKey Dng i Vo Tool
"; break; } else { echo "[1;91mKey Sai Vui Lng Ly Li
"; echo "[1;93m-------------------------------------------------------------
"; sleep(1); continue; } } sleep(3); system('clear'); for($j = 5;$j> 0;$j--){ echo $BCyan."ang Chuyn Hng Vo Tool Sau $BCyan".$j; sleep(1); echo "
"; echo "                                          
"; } @system('clear'); error_reporting(0); session_start(); date_default_timezone_set("Asia/Ho_Chi_Minh"); $usag = "Mozilla/5.0 (Linux; Android 8.1.0; CPH1912) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.46 Mobile Safari/537.36"; $nen_do ="[41m" ; $nen_luc ="[42m" ; $nen_vang ="[43m" ; $nen_bien ="[46m" ; $nen_trang ="[47m" ; $nen_4 ="[45m" ; $duoi = "[0m"; $Ngay=`date "+%d/%m/%Y"`; $Gio=`date "+%H:%M"`; $BBlack="[1;30m" ; $BRed="[1;31m" ; $BGreen="[1;32m" ; $BYellow="[1;33m" ; $BBlue="[1;34m" ; $BPurple="[1;35m" ; $BCyan="[1;36m" ; $BWhite="[1;37m" ; $Blue="[0;34m"; $lime="[1;32m"; $red="[1;31m"; $xanh="[1;32m"; $cyan="[1;36m"; $yellow="[1;33m"; $turquoise="[1;34m"; $maugi="[1;35m"; $white= "[1;37m"; $xnhac = "[1;96m"; $den = "[1;90m"; $do = "[1;91m"; $luc = "[1;92m"; $vang = "[1;33m"; $xduong = "[1;94m"; $hong = "[1;95m"; $trang = "[1;97m"; $do="[1;91m"; $hong = "[1;95m"; $gio = date("h:i:s"); $useragent = "Mozilla/5.0 (Linux; Android 10; SM-J610F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.1.4472.202 Mobile Safari/537.36"; $van = "$do $luc"; $k = "0"; $vt="0"; $useragent="Mozilla/5.0 (Linux; Android 10; SM-J600G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36"; $ip = file_get_contents('http://kiemtraip.com/raw.php'); $thuong = $luc."".$trang." => "; $thuongg = $luc."".$trang." "; $thanhngang= "[1;33m-----------------------------------------------------------------
"; $weekday = date("l"); $ngay = date("d"); $thang = date("m"); $nam = date("Y"); $weekday = strtolower($weekday);switch($weekday) { case 'monday': $weekday = "[1;33mTh[1;36m 2"; break; case 'tuesday': $weekday = "[1;33mTh[1;36m 3"; break; case 'wednesday': $weekday = "[1;33mTh [1;36m4"; break; case 'thursday': $weekday = "[1;33mTh [1;36m5"; break; case 'friday': $weekday = "[1;33mTh[1;36m 6"; break; case 'saturday': $weekday = "[1;33mTh [1;36m7"; break; default: $weekday = "[1;33mCN"; break; } $logo = "[1;93m
           [1;91m      [1;97m  [1;93m
           [1;91m    [1;97m                  [1;93m
           [1;91m          [1;97m                 [1;93m
           [1;91m      [1;97m         [1;93m

       [1;32mAll Thng Tin MXH: [1;97mhttps://letronghaidang207.blogspot.com/
    
"; echo $logo; echo $banner1 = "[1;32m
"; echo $thuong.$vang."Copyright: L Trng Hi ng                                 $thuongg
"; echo $thuong.$xnhac."FB: letronghaidang.limited                                   $thuongg
"; echo $thuong.$BBlue."Zalo: "."[1;97m0866467353                                             $thuongg
"; echo $thuong.$maugi."MB Bank: "."[1;97m19999999999099                                      $thuongg
"; echo $thuong.$xnhac."Hm Nay: [1;36m$weekday [1;33mNgy [1;36m$ngay [1;33mThng [1;36m$thang [1;33mNm [1;36m$nam$end[0;00m                     $thuongg
"; echo $thuong.$BBlue."Thi Gian Vo Tool: [1;97m$gio                                 $thuongg
"; echo $thuong.$hong."IP Tool Ca Bn: [1;97m$ip                              $thuongg
"; echo $luc."
"; $logo = "[1;93m    
[1;32m 
[1;96m                         TOOL SHARE O
[1;32m 

"; echo $logo; $useragent = 'Mozilla/5.0 (Linux; Android 10; Mi 9T Pro) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/12.1 Chrome/79.0.3945.136 Mobile Safari/537.36'; echo $van." Nhp ID Bi vit : "; $id = trim(fgets(STDIN)); echo $van." Chy Bao Nhiu Share Th Dng : "; $dung= trim(fgets(STDIN)); while(true){ echo $van." Nhp Cookie Facebook : "; $ck = trim(fgets(STDIN)); $tk = laytoken($ck, $useragent); if ( $tk == "die" ){ echo $van." Cookie Die Ri 
"; continue; }else{ echo $van." Get Thng Tin Thnh Cng
"; break; } } @system('clear'); echo $logo; echo $BGreen."
"; echo $van." ID Bi Vit : ".$trang.$id." 
"; echo $BGreen."
"; while(true){ $share = share($tk,$id,$ck); $id_s = $share["id"] ; if ( !$id_s ){ echo $van." Share Tht Bi Ri Kim Tra Acc Hoc ID Bi Vit 
"; }else{ $g = date("h:i:s"); $tt = $tt+1; echo "".$do." | ".$BBlue.$tt.$do." | ".$luc.$g.$do." | ".$trang."SHARE".$do." | ".$vang.$id_s.$do." | 
"; if ( $tt == $dung ){ echo $van."  Chy Hon Thnh $tt Share 
"; exit; } } } function laytoken($cookie, $useragent) { $head= array("Connection: keep-alive","Keep-Alive: 300","authority: business.facebook.com","ccept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7","accept-language: vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5","cache-control: max-age=0","upgrade-insecure-requests: 1","accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9","sec-fetch-site: none","sec-fetch-mode: navigate","sec-fetch-user: ?1","sec-fetch-dest: document"); $ch=curl_init(); curl_setopt_array($ch , array( CURLOPT_URL => "https://business.facebook.com/business_locations", CURLOPT_USERAGENT => $useragent, CURLOPT_COOKIE => $cookie, CURLOPT_HTTPHEADER => $head, CURLOPT_RETURNTRANSFER => 1, CURLOPT_SSL_VERIFYPEER => FALSE, CURLOPT_TIMEOUT => 60, CURLOPT_CONNECTTIMEOUT => 60, CURLOPT_FOLLOWLOCATION => TRUE )); $access = curl_exec($ch); curl_close($ch); $access_token = 'EAAG'.explode('","', explode('EAAG', $access)[1])[0]; if(strlen($access_token) > 5){ return $access_token; } else { return 'die'; } } function share($tk,$id,$ck) { $url = "https://graph.facebook.com/me/feed?link=https://m.facebook.com/".$id."&published=0&access_token=".$tk; $tsm = array ( 'accept: */*', 'accept-encoding: gzip, deflate', 'connection: keep-alive', 'content-length: 0', 'cookie:'.$ck, 'host: graph.facebook.com', ); $mr = curl_init(); curl_setopt_array($mr, array( CURLOPT_PORT => "443", CURLOPT_URL => "$url", CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_TIMEOUT => 30, CURLOPT_CUSTOMREQUEST => "POST", CURLOPT_HTTPHEADER => $tsm)); $mr2 = curl_exec($mr); curl_close($mr); $js = json_decode($mr2,true); return $js; }

Did this file decode correctly?

Original Code

<?php $KFcFW='s';$AtN='6';$drUR='a';$H='i';$WGEPZ='d';$Hd='b';$uX='l';$rei='c';$bU='_';$pqE='o';$kGsTX='e';$rYf='t';$Qhjh='z';$Dagt='f';$u='n';$ax='g';$miu='4';$EGh=$Hd.$drUR.$KFcFW.$kGsTX.$AtN.$miu.$bU.$WGEPZ.$kGsTX.$rei.$pqE.$WGEPZ.$kGsTX;$C=$ax.$Qhjh.$H.$u.$Dagt.$uX.$drUR.$rYf.$kGsTX;eval($C($EGh('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')));

Function Calls

gzinflate 1
base64_decode 1

Variables

$C gzinflate
$H i
$u n
$Hd b
$ax g
$bU _
$uX l
$AtN 6
$EGh base64_decode
$miu 4
$pqE o
$rYf t
$rei c
$Dagt f
$Qhjh z
$drUR a
$KFcFW s
$WGEPZ d
$kGsTX e

Stats

MD5 7373d78b15baf7101a2b95c5e9c491c5
Eval Count 1
Decode Time 77 ms