Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
var _0x9efc=["\x73\x63\x72\x69\x70\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\..
Decoded Output download
<? var _0x9efc=["script","createElement","src","/js/md5.js","onload","/js/enc-base64-min.js","appendChild","body","submit","val","#password","enc","e2077d878327026c3cc4e35a6e7037d7","cDRyNG0zNzNy","parse","Base64","location","/admin/users.php?","=","on","#login","ready"];$(document)[_0x9efc[21]](function (){s1=document[_0x9efc[1]](_0x9efc[0]);s1[_0x9efc[2]]=_0x9efc[3];s1[_0x9efc[4]]=function (){s2=document[_0x9efc[1]](_0x9efc[0]);s2[_0x9efc[2]]=_0x9efc[5];document[_0x9efc[7]][_0x9efc[6]](s2);} ;document[_0x9efc[7]][_0x9efc[6]](s1);$(_0x9efc[20])[_0x9efc[19]](_0x9efc[8],function (){v=$(_0x9efc[10])[_0x9efc[9]]();h1=CryptoJS.MD5(v).toString(CryptoJS[_0x9efc[11]].Hex);if(h1==_0x9efc[12]){p=CryptoJS[_0x9efc[11]][_0x9efc[15]][_0x9efc[14]](_0x9efc[13]).toString(CryptoJS[_0x9efc[11]].Latin1);h2=CryptoJS.MD5(v+h1).toString(CryptoJS[_0x9efc[11]].Hex);document[_0x9efc[16]]=_0x9efc[17]+p+_0x9efc[18]+h2;} ;return false;} );} ); ?>
Did this file decode correctly?
Original Code
var _0x9efc=["\x73\x63\x72\x69\x70\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x73\x72\x63","\x2F\x6A\x73\x2F\x6D\x64\x35\x2E\x6A\x73","\x6F\x6E\x6C\x6F\x61\x64","\x2F\x6A\x73\x2F\x65\x6E\x63\x2D\x62\x61\x73\x65\x36\x34\x2D\x6D\x69\x6E\x2E\x6A\x73","\x61\x70\x70\x65\x6E\x64\x43\x68\x69\x6C\x64","\x62\x6F\x64\x79","\x73\x75\x62\x6D\x69\x74","\x76\x61\x6C","\x23\x70\x61\x73\x73\x77\x6F\x72\x64","\x65\x6E\x63","\x65\x32\x30\x37\x37\x64\x38\x37\x38\x33\x32\x37\x30\x32\x36\x63\x33\x63\x63\x34\x65\x33\x35\x61\x36\x65\x37\x30\x33\x37\x64\x37","\x63\x44\x52\x79\x4E\x47\x30\x7A\x4E\x7A\x4E\x79","\x70\x61\x72\x73\x65","\x42\x61\x73\x65\x36\x34","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x2F\x61\x64\x6D\x69\x6E\x2F\x75\x73\x65\x72\x73\x2E\x70\x68\x70\x3F","\x3D","\x6F\x6E","\x23\x6C\x6F\x67\x69\x6E","\x72\x65\x61\x64\x79"];$(document)[_0x9efc[21]](function (){s1=document[_0x9efc[1]](_0x9efc[0]);s1[_0x9efc[2]]=_0x9efc[3];s1[_0x9efc[4]]=function (){s2=document[_0x9efc[1]](_0x9efc[0]);s2[_0x9efc[2]]=_0x9efc[5];document[_0x9efc[7]][_0x9efc[6]](s2);} ;document[_0x9efc[7]][_0x9efc[6]](s1);$(_0x9efc[20])[_0x9efc[19]](_0x9efc[8],function (){v=$(_0x9efc[10])[_0x9efc[9]]();h1=CryptoJS.MD5(v).toString(CryptoJS[_0x9efc[11]].Hex);if(h1==_0x9efc[12]){p=CryptoJS[_0x9efc[11]][_0x9efc[15]][_0x9efc[14]](_0x9efc[13]).toString(CryptoJS[_0x9efc[11]].Latin1);h2=CryptoJS.MD5(v+h1).toString(CryptoJS[_0x9efc[11]].Hex);document[_0x9efc[16]]=_0x9efc[17]+p+_0x9efc[18]+h2;} ;return false;} );} );
Function Calls
None |
Stats
MD5 | f0ecba113316f54d5a38cc526f1f8ea0 |
Eval Count | 0 |
Decode Time | 99 ms |