Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php eval(base64_decode('CiBnb3RvIFFvNkhQOyBKNzBwTDogaW5pX3NldCgiXHg2NFwxNTFceDczXHg3MFx4NmNceDYxXDE3MVx4NWZcMTQ1XDE2MlwxNjJceDZmXDE2Mlx4NzMiLCAwKTsgZ290byBNejZ5czsgRDE4bzM6IGZ1bmN0aW9uIGlzVXNlckF1dGhlbnRpY2F0ZWQoKSB7IGlmIChpc3NldCgkX1NFU1NJT05bIlx4NzVceDczXDE0NVwxNjIiXSkpIHsgcmV0dXJuIHRydWU7IH0...



難読化されたPHPコード

<?php eval(base64_decode('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')); ?>

デコード(難読化解除)されたコード

<?php

eval("\n goto Qo6HP; J70pL: ini_set(\"\\x64\\151\\x73\\x70\\x6c\\x61\\171\\x5f\\145\\162\\162\\x6f\\162\\x73\", 0); goto Mz6ys; D18o3: function isUserAuthenticated() { if (isset(\$_SESSION[\"\\x75\\x73\\145\\162\"])) { return true; } return false; } goto FKQm9; H6tly: function login(\$username, \$password) { AdminsDatabase::connect(DATABASE); \$user = AdminsDatabase::getAdminByUsernamePassword(\$username, \$password); AdminsDatabase::closeConnection(); if (!empty(\$user)) { \$_SESSION[\"\\x75\\163\\x65\\162\"] = \$user; return true; } return false; } goto D18o3; I0Co1: define(\"\\x44\\x41\\124\\101\\x42\\x41\\x53\\105\", \"\\x2f\\166\\141\\162\\57\\x77\\x77\\167\\x2f\\x68\\164\\155\\x6c\\57\\117\\103\\127\\145\\x62\\x5f\\x44\\x41\\124\\x41\\102\\x41\\x53\\x45\\57\\x38\\x34\\71\\141\\70\\65\\x38\\144\\55\\71\\60\\x35\\67\\55\\64\\x30\\x39\\x33\\x2d\\142\\71\\x62\\143\\55\\x30\\x34\\143\\x30\\x64\\70\\141\\x64\\65\\143\\63\\141\\x2e\\144\\142\"); goto TPeC2; Mz6ys: require_once \"\\x61\\x73\\x73\\145\\164\\x73\\x2f\\x64\\x61\\x74\\141\\142\\141\\163\\x65\\x2f\\104\\x61\\164\\x61\\x62\\x61\\x73\\x65\\56\\x70\\x68\\160\"; goto Hwmfu; TPeC2: define(\"\\117\\103\\120\\x41\\123\\x53\\x57\\x44\", \"\\x2f\\x76\\x61\\x72\\x2f\\x77\\x77\\x77\\x2f\\150\\x74\\x6d\\154\\57\\x6f\\x63\\x70\\x61\\x73\\163\\167\\144\"); goto exk_u; H2V_g: function get_date_by_timestamp(\$timestamp) { \$date = (object) jDateTime::getdate(\$timestamp); return \"{\$date->year}\\x2f{\$date->mon}\\x2f{\$date->mday}\"; } goto eoHYW; FKQm9: function isAdminAuthenticated() { if (isUserAuthenticated() && \$_SESSION[\"\\165\\163\\x65\\162\"]->type == \"\\141\\144\\155\\151\\x6e\\x69\\x73\\164\\162\\141\\x74\\x6f\\162\") { return true; } return false; } goto klnv0; H2hWb: function get_current_date() { return strtotime(\"\\x6e\\x6f\\x77\"); } goto H2V_g; Hwmfu: require_once \"\\141\\163\\x73\\145\\164\\x73\\57\\154\\151\\142\\57\\x6a\\x64\\141\\x74\\x65\\164\\x69\\x6d\\x65\\56\\x63\\154\\141\\x73\\163\\56\\x70\\150\\160\"; goto I0Co1; eoHYW: function get_datetime_by_timestamp(\$timestamp) { \$date = (object) jDateTime::getdate(\$timestamp); return \"{\$date->year}\\57{\$date->mon}\\57{\$date->mday}\\x20\\x2d\\40{\$date->hours}\\72{\$date->minutes}\\72{\$date->seconds}\"; } goto ACooJ; mVW1o: function error_password_not_same() { echo \"\\x3c\\160\\x20\\x63\\154\\x61\\163\\x73\\75\\47\\x74\\145\\170\\x74\\55\\167\\141\\x72\\156\\151\\x6e\\x67\\x20\\x74\\145\\x78\\x74\\55\\x63\\145\\156\\164\\x65\\x72\\40\\146\\163\\x2d\\61\\x33\\x20\\155\\170\\55\\141\\x75\\164\\157\\x27\\76\\xd8\\261\\xd9\\x85\\330\\xb2\\40\\xd8\\271\\xd8\\250\\331\\210\\330\\261\\x20\\xd9\\210\\x20\\xd8\\xaa\\332\\xa9\\330\\261\\330\\247\\330\\xb1\\x20\\xd8\\xa2\\xd9\\206\\x20\\xdb\\x8c\\xda\\xa9\\xd8\\263\\330\\247\\331\\x86\\x20\\xd9\\206\\xdb\\214\\330\\xb3\\xd8\\xaa\\x3c\\57\\160\\x3e\"; } goto kyOig; cUqwY: date_default_timezone_set(\"\\x41\\163\\151\\141\\x2f\\x54\\x65\\150\\162\\x61\\x6e\"); goto H2hWb; zOlUB: function route(\$url = null) { if (!\$url) { echo \"\\x3c\\x73\\143\\162\\x69\\x70\\x74\\76\\x77\\x69\\156\\144\\157\\167\\x2e\\154\\x6f\\x63\\x61\\x74\\151\\157\\156\\x2e\\x68\\x72\\145\\x66\\40\\x3d\\40\\167\\x69\\156\\144\\x6f\\167\\x2e\\154\\x6f\\x63\\141\\164\\x69\\x6f\\x6e\\x2e\\x68\\x72\\145\\146\\56\\163\\x70\\x6c\\151\\164\\x28\\42\\77\\42\\51\\x5b\\x30\\x5d\\x3c\\57\\x73\\143\\162\\x69\\160\\164\\x3e\"; } echo \"\\x3c\\163\\x63\\162\\x69\\x70\\164\\x3e\\x77\\151\\x6e\\x64\\157\\167\\x2e\\x6c\\157\\143\\141\\x74\\x69\\x6f\\x6e\\x2e\\150\\x72\\x65\\146\\40\\75\\40\\47{\$url}\\x27\\74\\x2f\\x73\\143\\x72\\151\\x70\\x74\\76\"; } goto elHy2; kyOig: function error_login_failed() { echo \"\\x3c\\x70\\40\\x63\\154\\141\\x73\\163\\x3d\\47\\164\\x65\\170\\164\\55\\x64\\141\\x6e\\147\\x65\\162\\163\\x20\\164\\x65\\x78\\x74\\x2d\\143\\x65\\x6e\\x74\\x65\\x72\\x20\\x66\\x73\\55\\x31\\x33\\x20\\155\\170\\x2d\\x61\\165\\164\\157\\47\\76\\331\\x86\\330\\247\\xd9\\x85\\x20\\332\\251\\xd8\\xa7\\330\\261\\xd8\\xa8\\330\\xb1\\333\\x8c\\40\\333\\x8c\\330\\xa7\\40\\330\\xb1\\xd9\\205\\330\\xb2\\40\\xd8\\271\\330\\xa8\\331\\210\\330\\xb1\\40\\330\\247\\330\\264\\330\\xaa\\xd8\\xa8\\xd8\\xa7\\xd9\\x87\\x20\\330\\xa7\\330\\263\\330\\252\\x21\\74\\x2f\\x70\\x3e\"; } goto H6tly; ACooJ: function random_password_generator(\$level, \$length) { \$characters = array(\"\\145\\x61\\x73\\x79\" => \"\\60\\61\\62\\63\\64\\65\\66\\67\\70\\x39\", \"\\155\\x65\\x64\\151\\x75\\155\" => \"\\60\\61\\x32\\63\\64\\65\\66\\67\\x38\\71\\x61\\x62\\x63\\144\\145\\146\\x67\\150\\x69\\152\\153\\154\\155\\156\\x6f\\x70\\x71\\x72\\163\\x74\\x75\\x76\\167\\170\\x79\\x7a\", \"\\x64\\x69\\x66\\146\\151\\143\\x75\\x6c\\x74\" => \"\\60\\61\\x32\\x33\\x34\\x35\\66\\67\\70\\x39\\x61\\142\\143\\x64\\145\\146\\147\\150\\151\\x6a\\153\\154\\155\\x6e\\157\\160\\x71\\x72\\163\\164\\x75\\x76\\167\\170\\171\\172\\x41\\x42\\103\\104\\105\\x46\\107\\110\\x49\\112\\x4b\\x4c\\115\\x4e\\x4f\\120\\x51\\x52\\123\\124\\x55\\126\\127\\x58\\131\\132\"); return substr(str_shuffle(\$characters[\"{\$level}\"]), 0, (int) \$length); } goto zOlUB; klnv0: function logout() { if (isset(\$_SESSION)) { \$_SESSION = array(); } if (session_status() != PHP_SESSION_NONE) { session_destroy(); } } goto q5OdY; Qo6HP: error_reporting(0); goto J70pL; q5OdY: function terminal(\$command) { shell_exec(BASH_MANAGER . \$command); } goto o9VF0; o9VF0: function run_command_to_server(\$ip, \$username, \$password, \$port, \$command) { return shell_exec(\"\\163\\165\\144\\157\\x20\\x73\\x73\\150\\160\\141\\163\\x73\\40\\x2d\\x70\\x20{\$password}\\x20\\x73\\163\\x68\\40\\x2d\\160\\40{\$port}\\40\\55\\x6f\\x20\\x53\\x74\\162\\151\\143\\164\\x48\\x6f\\x73\\164\\113\\145\\171\\x43\\150\\x65\\143\\x6b\\x69\\x6e\\x67\\x3d\\156\\x6f\\x20{\$username}\\100{\$ip}\\x20\\x27{\$command}\\47\"); } goto mHkVK; elHy2: function error_username_exist() { echo \"\\74\\x70\\40\\143\\154\\x61\\x73\\x73\\x3d\\47\\164\\145\\170\\x74\\55\\167\\141\\162\\156\\x69\\x6e\\147\\40\\164\\x65\\170\\x74\\55\\143\\x65\\156\\164\\145\\162\\x20\\x66\\163\\55\\x31\\x33\\x20\\x6d\\170\\x2d\\141\\x75\\164\\157\\x27\\x3e\\xd8\\256\\xd8\\xb7\\xd8\\xa7\\x21\\x20\\xd9\\206\\xd8\\247\\xd9\\205\\40\\332\\xa9\\xd8\\xa7\\330\\261\\xd8\\250\\330\\261\\xdb\\214\\x20\\xd9\\x88\\xd8\\xac\\331\\x88\\xd8\\xaf\\40\\xd8\\xaf\\330\\xa7\\330\\xb1\\330\\xaf\\x2e\\40\\330\\257\\xd9\\210\\330\\xa8\\330\\247\\xd8\\261\\xd9\\x87\\x20\\xd8\\xa7\\xd9\\x85\\xd8\\252\\xd8\\255\\xd8\\247\\xd9\\206\\40\\332\\xa9\\331\\206\\xdb\\214\\xd8\\257\\x3c\\x2f\\160\\x3e\"; } goto mVW1o; exk_u: define(\"\\102\\101\\x53\\110\\x5f\\x4d\\x41\\116\\x41\\107\\x45\\x52\", \"\\x62\\141\\163\\150\\x20\\57\\166\\x61\\162\\57\\x77\\167\\167\\57\\x68\\x74\\x6d\\x6c\\x2f\\x4f\\x43\\127\\145\\x62\\x5f\\104\\x41\\124\\101\\x42\\101\\123\\x45\\x2f\\155\\x61\\x6e\\141\\147\\x65\\x2e\\x73\\150\\40\"); goto cUqwY; mHkVK: function copy_file_to_server(\$ip, \$username, \$password, \$port, \$srcFile, \$destFile) { \$dirname = dirname(\$destFile); run_command_to_server(\$ip, \$username, \$password, \$port, \"\\155\\x6b\\x64\\x69\\162\\40\\55\\x70\\x20{\$dirname}\\x3b\"); return shell_exec(\"\\x73\\x75\\x64\\x6f\\40\\x72\\163\\171\\x6e\\x63\\40\\55\\141\\x76\\x7a\\x20\\55\\55\\x64\\145\\154\\145\\x74\\x65\\x20\\x2d\\145\\40\\x27\\x73\\163\\x68\\x70\\x61\\163\\163\\40\\x2d\\160\\40{\$password}\\40\\163\\x73\\150\\40\\55\\x70\\40{\$port}\\40\\47\\40\\47{\$srcFile}\\x27\\40{\$username}\\100{\$ip}\\x3a\\x27{\$destFile}\\x27\");");


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.