Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* Coded By xSecurity | [email protected] | is-sec.com */$OOO000000=urldecode('%66%67%..
Decoded Output download
echo "
<form method='POST'>
<title> Bypass Cloudflare -> By xSecurity </title>
<center>
<style>
textarea {
font-family: Tahoma;
font-size: 13px;
border: dotted 1pt #cccccc;
}
input {
border: dotted 1pt #cccccc;
}
</style>
<pre>[#] Bypass CloudFlare [#]</pre>
<input type='text' name='target' value='".$_POST['target']."'/><input type='submit' name='start' value='Bypass' /><br>
<textarea cols='30' rows='10' name='sub'>
ftp.
webmail.
blog.
forum.
driect-connect.
vb.
cpanel.
forums.
home.
shop.
blogs.</textarea><br>";
$itz = array();
$target = $_POST['target'];
$subdomains = explode("
",$_POST['sub']);
if($_POST['start']) {
foreach($subdomains as $sub) {
$subs = @trim($sub);
$bypass = @gethostbyname($subs.$target);
if(intval($bypass)) {
echo "<font face='Tahoma' size='2pt' color='darkred'>Real IP : </font><input type='text' value='".$bypass."' size='24'> <br>";
}
}
}
echo "<br><font face='Tahoma' size='2pt'> Coded By xSecurity -> [email protected] -> is-sec.com </font>";
;Did this file decode correctly?
Original Code
<?php /* Coded By xSecurity | [email protected] | is-sec.com */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x554;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGFkKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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
Function Calls
| fopen | 1 |
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Stats
| MD5 | 836fbc5a3955f8989ce2e53dfe15d5a8 |
| Eval Count | 3 |
| Decode Time | 159 ms |