PHP Decoder

Very useful for webmasters trying to identify what a specific code is doing.
(from WordPress themes/plugins or Joomla templates)

Original code:

Decoding Step 1 results:




Interesting Pieces Extracted
URL: http://w0rms.com/sayac.js
URL: http://i.imgur.com/Aqu2szC.png
URL: http://fonts.gstatic.com/l/font
URL: http://www.target.com/_filemanager/php/connector.php
URL: http://au2.php.net/manual/en/curl.setup.php
URL: http://au2.php.net/manual/en/curl.setup.php
URL: http://zone-h.com/archive/published
URL: http://dark-h.org/onhold/
URL: http://aljyyosh.org/onhold.php
URL: http://www.zone-h.com/notify/single
URL: http://dark-h.org/notify/kaydet.php
URL: http://aljyyosh.org/single.php
URL: http://www.zone-h.org/archive/notifier
URL: http://www.zone-h.org/archive/notifier
URL: http://www.zone-h.org/archive/notifier
URL: http://www.zone-h.org/archive/notifier
URL: http://www.zone-h.com/notify/single
URL: http://pastebin.com/raw.php
URL: http://domains.yougetsignal.com/domains.php
URL: https://mail.google.com/mail/feed/atom
URL: https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php
URL: http://networktools.nl/whois/
URL: http://networktools.nl/asinfo/
URL: http://networktools.nl/reverseip/
URL: http://www.magic-net.info/dns-and-ip-tools.dnslookup
URL: http://www.
URL: http://www.target.com/
URL: http://target.com/ctt_config/user-config.txt
URL: http://forum.indoxploit.or.id/
URL: http://w0rms.com/sayac.js