Regex Tester & Validator
Test, validate and match regular expressions
Test, validate and match regular expressions
This regex detects obfuscated PHP code hidden within binary data or GIF images, a common technique for hiding web shells. It skips over non-printable characters and GIF headers before looking for a PHP opening tag. Finally, it specifically targets the assignment of the $hwini variable within 50 characters of the opening tag.