Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $eval($O00O0O("JE8wTzAwMD0iY2RWQ3lXUmVBa3ZycWlCVEV0TVFaUGFZc2hOdXp3WFNETHhKb0dLZmJqbW5nSUZIbE9VcE9iZFlXakRQY3lxbnNKckNSdVpsS2hURnB2a0JOaUVMZVFtSUF3Zk16VlVHZ1h4SGF0U29oZTlpVEhjZllKOHFYd2tXS2p4MEtqbGdGR0dWZ1hlVmduZVZnc1ZWZzdoVmc3cVZnNEhWZzZoVmc3aFZnN3FWZzRlVmc3WmZZR2thTzNrb3oyNU1PM0R2T0dsQWZD...



Obfuscated php code

<?php $eval($O00O0O("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"));?>

Decoded(de-Obfuscated) php code

<?php

$eval($O00O0O("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"));

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.