Regex Tester & Validator

Detects the 'tilak' PHP webshell/exploit (attributed to an0n_3xploiter), often hidden inside GIF images via a GIF89 header to bypass upload filters. Matches PHP code assigning obfuscated base64 payloads to $uexploit and $an0n_3xploiter variables, then executing them through eval(urldecode(base64_decode(...))) followed by exit. Tolerates leading binary/control characters, HTML-tag padding, and whitespace obfuscation. Used in malware scanning, WAF signatures, and file integrity checks to flag hidden backdoors.