Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php @system("clear"); function mining($url, $header){ $kk= curl_init(); ..

Decoded Output download

 
<?php 
@system("clear"); 
function mining($url, $header){ 
        $kk= curl_init(); 
        curl_setopt($kk, CURLOPT_URL, $url); 
        curl_setopt($kk, CURLOPT_RETURNTRANSFER, TRUE); 
        curl_setopt($kk, CURLOPT_FOLLOWLOCATION, TRUE); 
        curl_setopt($kk, CURLOPT_CUSTOMREQUEST, "POST"); 
        curl_setopt($kk, CURLOPT_HTTPHEADER, $header); 
        curl_setopt($kk, CURLOPT_SSL_VERIFYPEER, FALSE); 
        curl_setopt($kk, CURLOPT_REFERER, "https://hashrange.com/dashboard"); 
        return curl_exec($kk); 
        curl_close($kk); 
} 
 
system("clear"); 
// warna 
$res="[0m"; 
$hitam="[0;30m"; 
$abu2="[1;30m"; 
$putih="[0;37m"; 
$putih2="[1;37m"; 
$red="[0;31m"; 
$red2="[1;31m"; 
$green="[0;32m"; 
$green2="[1;32m"; 
$yellow="[0;33m"; 
$yellow2="[1;33m"; 
$blue="[0;34m"; 
$blue2="[1;34m"; 
$purple="[0;35m"; 
$purple2="[1;35m"; 
$lblue="[0;36m"; 
$lblue2="[1;36m"; 
$biru="[1;34m"; 
$kuning="[1;33m"; 
$putih="[1;37m"; 
$banner="[1;32m"; 
 
$banner=$red2."  
$banner$putih  
 
$banner$red2                     
$banner$red2             
$banner$red2                
$banner$putih2             
$banner$putih2              
$banner$putih2                  
$banner $putih           $banner $red2 HECKER$banner $putih         
 
$banner $red2    *.* SELAMAT DATANG DI TUYUL MANIA *.* 
 
$banner $putih                         
 
 $banner $red2                     CREATIF :ARDAN Dj 
  $banner$putih                     INFO :  
$banner$red2  
$banner$putih  
 
$banner $red2                         "; 
 
 
 
echo $banner."
"; 
 
 
 
 
while(true){ 
$ua=array(); 
$ua[]="x-xsrf-token: eyJpdiI6IjA3UmUzR1VZMjVGdTZtYWQzVXU0M2c9PSIsInZhbHVlIjoiazZIWkJmOTMyenZMMUVIRXI5N0k3clRBclBweThlQnBJNjljTVVBOW9ScmFxaVlBbTVuSTJjMVM2dWJGQnNMTSIsIm1hYyI6IjM4ZjdjZjk3NjQzNTQ1ZmQyZDE1NDFkMjFlY2ZiYzc4MWU2NWIzZDdhNWZmNjk0MWUzZjdlMjhlNGNkZDczYTcifQ=="; 
$ua[]="x-csrf-token: 1AE4zdtp4cNnfmZaHsWibFa4vhVKItXGapHEUHbc"; 
$ua[]="user-agent: Mozilla/5.0 (Linux; Android 8.1.0; vivo 1808) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36"; 
$ua[]="cookie: __cfduid=d891878c6daaa2d7f961a00f8e12a8e981594562977"; 
$ua[]="cookie: cf_clearance=3523e45582ab75ec64f59c126bf090bb2633d3f5-1596038557-0-1z899bc373z86e8e496zc2c84cd2-150"; 
$ua[]="cookie: XSRF-TOKEN=eyJpdiI6ImlUR1VQelZVdng4VjljK3M4TlBCRlE9PSIsInZhbHVlIjoiTUJ1dWtEQkVBbEFjQXlUZmJuczh2TGIzS2JSZDZOMW9uaDV6M0lLWkRNbjlGOEhzYkFBbFJBYXpyRU1RMEZhXC8iLCJtYWMiOiI1N2Q3MjdhNDI3NDJkYWY0ZGFiMzAwOGIzYmMwMmEzMzIyODlkMzhhOWNlMGEwZjQzNjllNDhkMWM4YjAyNmUzIn0%3D"; 
$ua[]="cookie: hashrange_session=eyJpdiI6ImlHM1ZmWUJaU0V6clNJSFpibWlyZUE9PSIsInZhbHVlIjoiVDNUVW1lWUxzU1JmTTdxM2tJdTNtc24wV0FXQXBpR2xpQlFOSUtrS2FjUmFVa0JTdlloeG5oMmtPTmZna3lJUCIsIm1hYyI6ImI2NzdkNjE4NjdiNmI3ZTRkMjQ5ZGM0ZjQ1MDRmOGUxMjFjZjdlNThiZGQ0ODY0ZGU0YWQ5NGY5MDVkOTQyZTEifQ%3D%3D"; 
 
$id=mt_rand(2000000000,9999999999); 
$okeybro= json_decode(mining("https://hashrange.com/dashboard/mining?hash=$id&t=btc", $ua)); 
 
echo "Balance: {$okeybro->balance_satoshi} | Hashcoin: {$okeybro->balance_hashcoin}
"; 
 
} 
 
?>

Did this file decode correctly?

Original Code


<?php
@system("clear");
function mining($url, $header){
        $kk= curl_init();
        curl_setopt($kk, CURLOPT_URL, $url);
        curl_setopt($kk, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($kk, CURLOPT_FOLLOWLOCATION, TRUE);
        curl_setopt($kk, CURLOPT_CUSTOMREQUEST, "POST");
        curl_setopt($kk, CURLOPT_HTTPHEADER, $header);
        curl_setopt($kk, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($kk, CURLOPT_REFERER, "https://hashrange.com/dashboard");
        return curl_exec($kk);
        curl_close($kk);
}

system("clear");
// warna
$res="\033[0m";
$hitam="\033[0;30m";
$abu2="\033[1;30m";
$putih="\033[0;37m";
$putih2="\033[1;37m";
$red="\033[0;31m";
$red2="\033[1;31m";
$green="\033[0;32m";
$green2="\033[1;32m";
$yellow="\033[0;33m";
$yellow2="\033[1;33m";
$blue="\033[0;34m";
$blue2="\033[1;34m";
$purple="\033[0;35m";
$purple2="\033[1;35m";
$lblue="\033[0;36m";
$lblue2="\033[1;36m";
$biru="\033[1;34m";
$kuning="\033[1;33m";
$putih="\033[1;37m";
$banner="\033[1;32m";

$banner=$red2." 
$banner$putih 

$banner$red2                    
$banner$red2            
$banner$red2               
$banner$putih2            
$banner$putih2             
$banner$putih2                 
$banner $putih           $banner $red2 HECKER$banner $putih        

$banner $red2    *.* SELAMAT DATANG DI TUYUL MANIA *.*

$banner $putih                        

 $banner $red2                     CREATIF :ARDAN Dj
  $banner$putih                     INFO : 
$banner$red2 
$banner$putih 

$banner $red2                         ";



echo $banner."\n";




while(true){
$ua=array();
$ua[]="x-xsrf-token: eyJpdiI6IjA3UmUzR1VZMjVGdTZtYWQzVXU0M2c9PSIsInZhbHVlIjoiazZIWkJmOTMyenZMMUVIRXI5N0k3clRBclBweThlQnBJNjljTVVBOW9ScmFxaVlBbTVuSTJjMVM2dWJGQnNMTSIsIm1hYyI6IjM4ZjdjZjk3NjQzNTQ1ZmQyZDE1NDFkMjFlY2ZiYzc4MWU2NWIzZDdhNWZmNjk0MWUzZjdlMjhlNGNkZDczYTcifQ==";
$ua[]="x-csrf-token: 1AE4zdtp4cNnfmZaHsWibFa4vhVKItXGapHEUHbc";
$ua[]="user-agent: Mozilla/5.0 (Linux; Android 8.1.0; vivo 1808) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36";
$ua[]="cookie: __cfduid=d891878c6daaa2d7f961a00f8e12a8e981594562977";
$ua[]="cookie: cf_clearance=3523e45582ab75ec64f59c126bf090bb2633d3f5-1596038557-0-1z899bc373z86e8e496zc2c84cd2-150";
$ua[]="cookie: XSRF-TOKEN=eyJpdiI6ImlUR1VQelZVdng4VjljK3M4TlBCRlE9PSIsInZhbHVlIjoiTUJ1dWtEQkVBbEFjQXlUZmJuczh2TGIzS2JSZDZOMW9uaDV6M0lLWkRNbjlGOEhzYkFBbFJBYXpyRU1RMEZhXC8iLCJtYWMiOiI1N2Q3MjdhNDI3NDJkYWY0ZGFiMzAwOGIzYmMwMmEzMzIyODlkMzhhOWNlMGEwZjQzNjllNDhkMWM4YjAyNmUzIn0%3D";
$ua[]="cookie: hashrange_session=eyJpdiI6ImlHM1ZmWUJaU0V6clNJSFpibWlyZUE9PSIsInZhbHVlIjoiVDNUVW1lWUxzU1JmTTdxM2tJdTNtc24wV0FXQXBpR2xpQlFOSUtrS2FjUmFVa0JTdlloeG5oMmtPTmZna3lJUCIsIm1hYyI6ImI2NzdkNjE4NjdiNmI3ZTRkMjQ5ZGM0ZjQ1MDRmOGUxMjFjZjdlNThiZGQ0ODY0ZGU0YWQ5NGY5MDVkOTQyZTEifQ%3D%3D";

$id=mt_rand(2000000000,9999999999);
$okeybro= json_decode(mining("https://hashrange.com/dashboard/mining?hash=$id&t=btc", $ua));

echo "Balance: {$okeybro->balance_satoshi} | Hashcoin: {$okeybro->balance_hashcoin}\n";

}

?>

Function Calls

system 1

Variables

None

Stats

MD5 e8f000467429d42ef9cd107b9bb3ad4b
Eval Count 0
Decode Time 103 ms