Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(str_rot13(gzinflate(str_rot13(base64_decode('LUnHEq24Ef2aKY9qIlBsUrjknG7jIud8i..

Decoded Output download

system("clear");
$b = "[34;1m";
$k = "[33;1m";
$h = "[32;1m";
$w = "[37;1m";
$m = "[31;1m";

echo $b."	______________________

".$k."	   BOT  AUTO  CLAIM
".$k."	    Crypto BNB v1
".$b."	______________________

".$w."	  toolstermux.my.id 
".$w."	  t.me/config_geratis 
";
echo $b."	______________________

";

$pw = readline($w."	[] ".$k."Password ".$m.": ".$w);
if($pw == "bot_bnbv1"){
	echo $w."	[".$h."".$w."] ".$k."Unlock ".$h."Success! 
";
}else{
	echo $w."	[".$h."".$w."] ".$k."Unlock ".$m."Gagall! 
";
	echo $b."	______________________

";
	exit();
}
echo $b."	______________________

";

$URL = "https://bnbpayu.top/";
$headers = get_headers($URL);
$ses = $headers[7];
$cis = $headers[8];
//print_r($headers);
$ses = explode('csrf_cookie_name=',$ses)[1];
$ses = explode(';',$ses)[0];
$cis = explode('ci_session=',$cis)[1];
$cis = explode(';',$cis)[0];

echo $w."	[".$k."!".$w."] Akun Faucetpay
";
$email = readline($w."	[".$h."".$w."] Email ".$m.": ".$k);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://bnbpayu.top/");
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$ua=array(
	'user-agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Mobile Safari/537.36',
	'Cookie: HstCfa4814129=1700218270533; HstCmu4814129=1700218270533; __dtsu=10401698439626827D3C09BD3565C09B; _gcl_au=1.1.815999903.1700218310; _cc_id=c4f303e095f30990dd505972b258c4dc; sb_main_6c5ee4bdad99e4eb39d7ae088303067f=1; HstCnv4814129=4; HstCns4814129=4; RP_ADVERTISER_IN_PAGE_LIMIT=2; RP_ADVERTISER_IN_PAGE_INTERVAL_IN_SECONDS=3600; RP_ADVERTISER_IN_PAGE_DELAY_BEFORE_SHOW_IN_SECONDS=2; RP_ADVERTISER_IN_PAGE_DELAY_BETWEEN_SHOW_IN_SECONDS=5; RP_ADVERTISER_IN_PAGE_RESET_LIMIT=true; RP_ADVERTISER_IN_PAGE_POSITION_TYPE=TOP_RIGHT; dom3ic8zudi28v8lr6fgphwffqoz0j6c=63804282-1797-4943-9e02-ddc79f45d4a3%3A1%3A1; panoramaId_expiry=1701266203614; panoramaId=9cd8afc14a12542ae139153db274a9fb927a042ee13270885e7becc2322a9acb; panoramaIdType=panoDevice; sb_count_6c5ee4bdad99e4eb39d7ae088303067f=5; prefetchAd_6619232=true; csrf_cookie_name='.$ses.'; ci_session='.$cis.'; RP_ADVERTISER_IN_PAGE_CAP=1; HstCla4814129=1701180295791; HstPn4814129=7; HstPt4814129=24'
);
curl_setopt($ch, CURLOPT_HTTPHEADER, $ua);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
$res = curl_exec($ch);
$tkn = explode('token" value="',$res)[1];
$tkn = explode('">',$tkn)[0];

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://bnbpayu.top/auth/login");
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
$ua=array(
	'user-agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Mobile Safari/537.36',
	'Cookie: HstCfa4814129=1700218270533; HstCmu4814129=1700218270533; __dtsu=10401698439626827D3C09BD3565C09B; _gcl_au=1.1.815999903.1700218310; _cc_id=c4f303e095f30990dd505972b258c4dc; sb_main_6c5ee4bdad99e4eb39d7ae088303067f=1; HstCnv4814129=4; HstCns4814129=4; RP_ADVERTISER_IN_PAGE_LIMIT=2; RP_ADVERTISER_IN_PAGE_INTERVAL_IN_SECONDS=3600; RP_ADVERTISER_IN_PAGE_DELAY_BEFORE_SHOW_IN_SECONDS=2; RP_ADVERTISER_IN_PAGE_DELAY_BETWEEN_SHOW_IN_SECONDS=5; RP_ADVERTISER_IN_PAGE_RESET_LIMIT=true; RP_ADVERTISER_IN_PAGE_POSITION_TYPE=TOP_RIGHT; dom3ic8zudi28v8lr6fgphwffqoz0j6c=63804282-1797-4943-9e02-ddc79f45d4a3%3A1%3A1; panoramaId_expiry=1701266203614; panoramaId=9cd8afc14a12542ae139153db274a9fb927a042ee13270885e7becc2322a9acb; panoramaIdType=panoDevice; sb_count_6c5ee4bdad99e4eb39d7ae088303067f=5; prefetchAd_6619232=true; csrf_cookie_name='.$ses.'; ci_session='.$cis.'; RP_ADVERTISER_IN_PAGE_CAP=1; HstCla4814129=1701180295791; HstPn4814129=7; HstPt4814129=24'
);
curl_setopt($ch, CURLOPT_HTTPHEADER, $ua);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
$data=('wallet='.$email.'&csrf_token_name='.$tkn);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
$res = curl_exec($ch);

$pro = preg_match("/Proxy Detected!/i",$res);
if($pro == "1"){
	echo $w."	[".$m."".$w."] ".$k."Jangan Pake ".$m."VPN/Proxy ! 
";
	echo $b."	______________________

";
	exit();
}
		
$cek = preg_match("/Login Success/i",$res);
echo $k."	______________________

";

if($cek == "1"){
echo $w."	[".$h."".$w."] ".$k."Login ".$h."Success! 
";
echo $k."	______________________

";

for ($i = 1; $i <= $i; $i++) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://bnbpayu.top/faucet/currency/bnb");
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$ua=array(
	'user-agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Mobile Safari/537.36',
	'Cookie: HstCfa4814129=1700218270533; HstCmu4814129=1700218270533; __dtsu=10401698439626827D3C09BD3565C09B; _gcl_au=1.1.815999903.1700218310; _cc_id=c4f303e095f30990dd505972b258c4dc; sb_main_6c5ee4bdad99e4eb39d7ae088303067f=1; HstCnv4814129=4; HstCns4814129=4; RP_ADVERTISER_IN_PAGE_LIMIT=2; RP_ADVERTISER_IN_PAGE_INTERVAL_IN_SECONDS=3600; RP_ADVERTISER_IN_PAGE_DELAY_BEFORE_SHOW_IN_SECONDS=2; RP_ADVERTISER_IN_PAGE_DELAY_BETWEEN_SHOW_IN_SECONDS=5; RP_ADVERTISER_IN_PAGE_RESET_LIMIT=true; RP_ADVERTISER_IN_PAGE_POSITION_TYPE=TOP_RIGHT; dom3ic8zudi28v8lr6fgphwffqoz0j6c=63804282-1797-4943-9e02-ddc79f45d4a3%3A1%3A1; panoramaId_expiry=1701266203614; panoramaId=9cd8afc14a12542ae139153db274a9fb927a042ee13270885e7becc2322a9acb; panoramaIdType=panoDevice; sb_count_6c5ee4bdad99e4eb39d7ae088303067f=5; prefetchAd_6619232=true; csrf_cookie_name='.$ses.'; ci_session='.$cis.'; RP_ADVERTISER_IN_PAGE_CAP=1; HstCla4814129=1701180295791; HstPn4814129=7; HstPt4814129=24'
);
curl_setopt($ch, CURLOPT_HTTPHEADER, $ua);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
$res = curl_exec($ch);

$lim = preg_match("/Daily claim limit for this coin reached, please comeback again tomorrow./i",$res);
if($lim == "1"){
	echo $w."	[".$m."!".$w."] ".$m."Claim".$w." Limit! ".$k."Perhari
";
	echo $b."	______________________

";
	exit();
}

$cek = preg_match("/auto_faucet_token/i",$res);
if($cek == "1"){

$ftkn = explode('auto_faucet_token" value="',$res)[1];
$ftkn = explode('">',$ftkn)[0];
$csrf = explode('csrf_token_name" id="token" value="',$res)[1];
$csrf = explode('">',$csrf)[0];
$tkn = explode('token" value="',$res)[3];
$tkn = explode('">',$tkn)[0];
//print_r($tkn);
//echo $res;

//echo $ftkn."
";
//echo $csrf."
";
//echo $tkn."
";

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://bnbpayu.top/faucet/verify/bnb");
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
$ua=array(
	'user-agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Mobile Safari/537.36',
	'Cookie: HstCfa4814129=1700218270533; HstCmu4814129=1700218270533; __dtsu=10401698439626827D3C09BD3565C09B; _gcl_au=1.1.815999903.1700218310; _cc_id=c4f303e095f30990dd505972b258c4dc; sb_main_6c5ee4bdad99e4eb39d7ae088303067f=1; HstCnv4814129=4; HstCns4814129=4; RP_ADVERTISER_IN_PAGE_LIMIT=2; RP_ADVERTISER_IN_PAGE_INTERVAL_IN_SECONDS=3600; RP_ADVERTISER_IN_PAGE_DELAY_BEFORE_SHOW_IN_SECONDS=2; RP_ADVERTISER_IN_PAGE_DELAY_BETWEEN_SHOW_IN_SECONDS=5; RP_ADVERTISER_IN_PAGE_RESET_LIMIT=true; RP_ADVERTISER_IN_PAGE_POSITION_TYPE=TOP_RIGHT; dom3ic8zudi28v8lr6fgphwffqoz0j6c=63804282-1797-4943-9e02-ddc79f45d4a3%3A1%3A1; panoramaId_expiry=1701266203614; panoramaId=9cd8afc14a12542ae139153db274a9fb927a042ee13270885e7becc2322a9acb; panoramaIdType=panoDevice; sb_count_6c5ee4bdad99e4eb39d7ae088303067f=5; prefetchAd_6619232=true; csrf_cookie_name='.$ses.'; ci_session='.$cis.'; RP_ADVERTISER_IN_PAGE_CAP=1; HstCla4814129=1701180295791; HstPn4814129=7; HstPt4814129=24'
);
curl_setopt($ch, CURLOPT_HTTPHEADER, $ua);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
$data=('auto_faucet_token='.$ftkn.'&csrf_token_name='.$csrf.'&token='.$tkn);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
$res = curl_exec($ch);

$ck = preg_match("/Success!/i",$res);
if($ck == "1"){
$suc = explode("html: '",$res)[1];
$suc = explode(" BNB",$suc)[0];
	echo $w."	[".$h."".$w."] ".$k.$suc.$h." Success! ".$w."BNB
";
	
}
}
}
}else{
	echo $w."	[".$m."".$w."] ".$k."Login ".$m."Gagal! 
";
	echo $b."	______________________

";
	exit();
}

Did this file decode correctly?

Original Code

<?php
eval(str_rot13(gzinflate(str_rot13(base64_decode('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')))));
?>

Function Calls

strrev 2
gzinflate 4
str_rot13 5
gzuncompress 1
rawurldecode 1
base64_decode 5

Variables

None

Stats

MD5 7fcc3254167b871b385eea7305588c18
Eval Count 5
Decode Time 94 ms