Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php define("db_\x68ost","1\x32\x37\x2e0\x2e0\x2e1:\x33\x33\x30\x36");define("\x64\x62\x5f\x75\x73\x65\x72","\x61\x611\x35\x32\x78\x63\x68b\x70");define("d\x62_\x70\x61ss","jaZt\x59\x79P\x77");define("d\x62\x5fna\x6de","aa\x31\x352\x78c\x68\x62\x70_\x69n\x71ui\x72y");...



Obfuscated php code

<?php define("db_\x68ost","1\x32\x37\x2e0\x2e0\x2e1:\x33\x33\x30\x36");define("\x64\x62\x5f\x75\x73\x65\x72","\x61\x611\x35\x32\x78\x63\x68b\x70");define("d\x62_\x70\x61ss","jaZt\x59\x79P\x77");define("d\x62\x5fna\x6de","aa\x31\x352\x78c\x68\x62\x70_\x69n\x71ui\x72y");

Decoded(de-Obfuscated) php code

<?php

define("db_host", "127.0.0.1:3306");
define("db_user", "aa152xchbp");
define("db_pass", "jaZtYyPw");
define("db_name", "aa152xchbp_inquiry");


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.