Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php 

/*   ________________________
    |                        |
    |   CRM & API solutions  |
    |        by NICK         |
    |                        |
    |   ALL RIGHTS RESERVED  |
    |________________________|
*/

${"\x47\x4cO\x42A\x4cS"}["\x79\x64\x63\x67\x66w\x6a\x77"]="\x6f\x53\x6fc\x6be\x74";${"\x47L\x4fB\x41L\x53"}["\x76\x67\x6b\x6c\x71\x66\x68\x77\x6c"]="\x73\x74r\x43\x61\x6c\x6c\x65\x72\x49d";${"\x47\x4cOBA\x4c\x53"}["\x72\x6c\x66x\x6f\x72\x74\x73\x79\x74\x6ct"]="\x6e\x75\x6d\x62\x65r";${"\x47L\x4fBA\x4c\x53"}["do\x6a\x70\x6b\x79m"]="str\x50\x72i\x6f\x72\x69\x74y";${"\x47L\x4fBAL\x53"}["\x77\x64vjx\x6f\x6c\x70\x6d\x79"]="\x73\x74\x72\x57a\x69\x74\x54i\x6de";${"G\x4c\x4f\x42A\x4cS"}["\x69\x68\x69\x74\x69\x70j\x6bg\x64"]="\x73t\x72\x43o\x6e\x74\x65\x78\x74";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x6d\x6f\x67\x73\x75\x70"]="\x70\x61\x73s";${"G\x4cO\x42\x41L\x53"}["\x76\x77u\x78\x76\x78x\x69\x75"]="\x64ec\x72ypt\x65\x64";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x66\x62p\x70\x6a\x70o\x6a\x70"]="iv";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x67\x68\x72\x79\x64\x74ha\x6c\x6f\x72"]="\x73\x53\x61\x6c\x74";${"G\x4c\x4f\x42A\x4c\x53"}["\x78ce\x64\x70\x72\x68f\x6e\x74rn"]="\x6d\x65th\x6fd";${"\x47L\x4f\x42\x41\x4c\x53"}["\x74\x65\x79\x70ovr"]="\x70\x61\x73s\x77\x6f\x72d";$gjfknbcdw="p\x61\x73s";${"G\x4c\x4f\x42\x41\x4c\x53"}["vdm\x65\x73mk\x63\x6b"]="k\x65\x79";${${"GLO\x42\x41L\x53"}["vdm\x65\x73\x6dk\x63\x6b"]}=$_REQUEST["\x6be\x79"];${$gjfknbcdw}="9B\x67\x48\x338h5DfRF8k\x37c\x74d1\x66t1qjf\x37\x48\x338\x46";function decryptPass($password){$rpszmmtmmx="\x73\x53\x61\x6c\x74";$nnpfcrr="\x6d\x65\x74\x68\x6f\x64";${$rpszmmtmmx}="\x529ajX\x64\x35\x34\x78\x36XO8Rd\x66\x66\x35\x68\x37ctd7\x65\x35\x66\x31\x47\x36\x53\x4d";${"GLO\x42\x41\x4c\x53"}["\x76m\x6c\x6f\x6f\x6a\x77\x77\x71"]="d\x65cry\x70ted";$ezotfbsx="\x69v";${$nnpfcrr}="ae\x73-\x32\x35\x36-\x63\x62c";${$ezotfbsx}="\x33\x687^\x68f\x6a8u\x6a\x34as%y\x4b";${${"\x47\x4cO\x42A\x4c\x53"}["\x76\x6d\x6coo\x6a\x77\x77\x71"]}=openssl_decrypt(base64_decode(${${"G\x4c\x4f\x42A\x4cS"}["\x74\x65\x79\x70\x6f\x76r"]}),${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x63ed\x70\x72\x68f\x6etr\x6e"]},${${"\x47\x4c\x4fB\x41\x4cS"}["\x67\x68ry\x64tha\x6cor"]},OPENSSL_RAW_DATA,${${"\x47\x4c\x4fBA\x4c\x53"}["\x6f\x66\x62ppj\x70\x6fj\x70"]});return${${"\x47\x4c\x4f\x42\x41L\x53"}["\x76\x77\x75\x78\x76\x78\x78\x69u"]};}if(${${"\x47L\x4f\x42\x41\x4cS"}["\x76\x64\x6des\x6dkc\x6b"]}==${${"\x47L\x4f\x42\x41L\x53"}["m\x6do\x67\x73\x75\x70"]}){$wjhjilxiws="\x73t\x72Ho\x73\x74";${"GL\x4f\x42AL\x53"}["e\x63\x70\x6b\x6fbh"]="\x73\x74\x72Ch\x61\x6e\x6eel";$pioliex="\x73t\x72\x55\x73\x65\x72";$qcgferkzc="\x70\x6f\x73";${"G\x4c\x4f\x42\x41\x4cS"}["\x6b\x79\x66q\x76\x62\x71\x62\x6d\x75"]="st\x72S\x65\x63\x72e\x74";${"G\x4cO\x42A\x4c\x53"}["\x6c\x6a\x6d\x64\x7a\x76\x77\x77\x67"]="nu\x6db\x65\x72";${$wjhjilxiws}="12\x37.\x30\x2e0\x2e\x31";${$pioliex}="c\x32c\x6c\x69\x6ek";$wvgxjrcl="\x6eumber";$ydjaxp="\x73\x74\x72\x4d\x61\x78\x52\x65\x74\x72\x79";${${"\x47L\x4f\x42\x41L\x53"}["k\x79\x66q\x76\x62q\x62\x6d\x75"]}="b\x34\x353\x34\x46\x649K\x64h\x36d\x31\x31\x36\x63ac755ahjfb6\x35\x45D\x671";${${"\x47\x4cO\x42\x41\x4cS"}["\x65\x63\x70k\x6f\x62h"]}=$_REQUEST["\x65\x78ten"];${${"\x47L\x4f\x42\x41\x4c\x53"}["\x69\x68\x69\x74i\x70\x6akg\x64"]}="from-i\x6e\x74e\x72\x6e\x61l";${${"\x47L\x4f\x42A\x4c\x53"}["w\x64\x76j\x78olp\x6d\x79"]}="30";$rfoqzkf="po\x73";${${"\x47\x4c\x4fBA\x4cS"}["\x64\x6f\x6apky\x6d"]}="1";${$ydjaxp}="\x32";${${"GL\x4fBA\x4c\x53"}["l\x6am\x64\x7av\x77w\x67"]}=strtolower(decryptPass($_REQUEST["\x6cogin"]));${$qcgferkzc}=strpos(${${"\x47LO\x42AL\x53"}["\x72l\x66\x78\x6f\x72\x74sy\x74lt"]},"\x6coc\x61l");if(${$wvgxjrcl}==null){exit();}if(${$rfoqzkf}===false){${"\x47L\x4f\x42\x41\x4c\x53"}["\x77\x72r\x64\x66rw"]="\x65rr\x6e\x6f";$dajtbcxckxp="\x6f\x53o\x63\x6b\x65\x74";$glxaqiu="\x65rrno";$tlnlmqdukmrp="\x65\x72rs\x74r";${$glxaqiu}=0;${$tlnlmqdukmrp}=0;${"\x47L\x4f\x42\x41LS"}["\x6d\x6e\x61\x77d\x6a\x78b\x66\x64\x6e"]="\x6fSoc\x6b\x65\x74";${${"G\x4c\x4f\x42A\x4c\x53"}["v\x67k\x6c\x71\x66\x68\x77\x6c"]}="\x57\x45B\x20\x43AL\x4c";$orvsbekadp="e\x72r\x73\x74\x72";${$dajtbcxckxp}=fsockopen("\x6c\x6f\x63a\x6c\x68ost",5038,${${"\x47\x4c\x4fBALS"}["\x77\x72\x72\x64\x66\x72\x77"]},${$orvsbekadp},20);if(!${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x6e\x61wdj\x78\x62\x66\x64\x6e"]}){echo"$errstr ($errno)\x3c\x62\x72\x3e\n";}else{${"\x47\x4cO\x42\x41L\x53"}["\x74\x76\x72u\x64ue\x73\x65j"]="o\x53\x6f\x63k\x65\x74";$muwpnpi="\x6f\x53\x6fc\x6b\x65t";fputs(${${"G\x4c\x4f\x42\x41L\x53"}["y\x64\x63\x67\x66\x77\x6aw"]},"\x41\x63\x74\x69o\x6e: lo\x67\x69\x6e\r\n");fputs(${${"\x47\x4cO\x42\x41LS"}["y\x64c\x67\x66\x77\x6aw"]},"Ev\x65n\x74\x73: o\x66\x66\r\n");${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65b\x73\x79\x74\x6a\x74"]="\x6fSoc\x6b\x65\x74";fputs(${${"\x47L\x4fB\x41LS"}["t\x76r\x75d\x75\x65se\x6a"]},"\x55sern\x61\x6d\x65: $strUser\r\n");${"\x47\x4c\x4f\x42AL\x53"}["\x64\x71\x6a\x6d\x79bx\x6bi\x6f"]="\x6f\x53o\x63\x6be\x74";fputs(${${"\x47L\x4f\x42A\x4cS"}["\x79dcg\x66wj\x77"]},"S\x65\x63re\x74: $strSecret\r\n\r\n");${"G\x4c\x4fB\x41\x4c\x53"}["\x78\x63\x63jdg\x78"]="\x6fS\x6f\x63\x6b\x65\x74";${"G\x4c\x4f\x42\x41L\x53"}["\x6f\x6a\x76\x77\x74g\x64\x65cq"]="o\x53\x6f\x63\x6be\x74";fputs(${$muwpnpi},"Ac\x74\x69\x6fn:\x20or\x69g\x69nat\x65\r\n");${"\x47L\x4f\x42\x41\x4c\x53"}["\x6aj\x71\x6d\x70\x69cj"]="o\x53\x6f\x63\x6b\x65\x74";fputs(${${"\x47\x4c\x4fB\x41LS"}["\x79\x64\x63\x67fw\x6aw"]},"\x43h\x61nn\x65l:\x20$strChannel\r\n");fputs(${${"\x47\x4c\x4f\x42\x41LS"}["o\x6a\x76\x77t\x67de\x63\x71"]},"Wa\x69\x74\x54im\x65: $strWaitTime\r\n");fputs(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["j\x6aqmp\x69\x63j"]},"\x43al\x6cerI\x64:\x20$strCallerId\r\n");${"\x47\x4cO\x42\x41L\x53"}["g\x62\x76xu\x6aq"]="o\x53\x6f\x63\x6be\x74";fputs(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x71j\x6dy\x62\x78\x6bio"]},"\x45x\x74en: $number\r\n");fputs(${${"G\x4cO\x42\x41\x4c\x53"}["gb\x76\x78uj\x71"]},"C\x6fn\x74\x65\x78t: $strContext\r\n");fputs(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x63\x63\x6a\x64g\x78"]},"P\x72\x69ori\x74y: $strPriority\r\n\r\n");fputs(${${"GLOB\x41\x4c\x53"}["e\x62\x73y\x74\x6a\x74"]},"Action:\x20\x4cogoff\r\n\r\n");sleep(2);fclose(${${"G\x4cO\x42A\x4cS"}["\x79\x64\x63gfw\x6a\x77"]});}echo"D\x6fne\x2e $strChannel\x20s\x68\x6fuld\x20be \x63a\x6c\x6c\x69\x6e\x67 no\x77\x2e"."<\x62\x72>".""."\x3cbr\x3e"."That's\x20\x61\x6cl\x20\x79\x6fu w\x69\x6cl\x20f\x69\x6e\x64\x20here";}else{exit();}}else{echo"1";}echo "\n";
?>

Show other level

Decrypted code level 1:



${"GLOBALS"}["ydcgfwjw"]="oSocket";${"GLOBALS"}["vgklqfhwl"]="strCallerId";${"GLOBALS"}["rlfxortsytlt"]="number";${"GLOBALS"}["dojpkym"]="strPriority";${"GLOBALS"}["wdvjxolpmy"]="strWaitTime";${"GLOBALS"}["ihitipjkgd"]="strContext";${"GLOBALS"}["mmogsup"]="pass";${"GLOBALS"}["vwuxvxxiu"]="decrypted";${"GLOBALS"}["ofbppjpojp"]="iv";${"GLOBALS"}["ghrydthalor"]="sSalt";${"GLOBALS"}["xcedprhfntrn"]="method";${"GLOBALS"}["teypovr"]="password";$gjfknbcdw="pass";${"GLOBALS"}["vdmesmkck"]="key";${${"GLOBALS"}["vdmesmkck"]}=$_REQUEST["key"];${$gjfknbcdw}="9BgH38h5DfRF8k7ctd1ft1qjf7H38F";function decryptPass($password){$rpszmmtmmx="sSalt";$nnpfcrr="method";${$rpszmmtmmx}="R9ajXd54x6XO8Rdff5h7ctd7e5f1G6SM";${"GLOBALS"}["vmloojwwq"]="decrypted";$ezotfbsx="iv";${$nnpfcrr}="aes-256-cbc";${$ezotfbsx}="3h7^hfj8uj4as%yK";${${"GLOBALS"}["vmloojwwq"]}=openssl_decrypt(base64_decode(${${"GLOBALS"}["teypovr"]}),${${"GLOBALS"}["xcedprhfntrn"]},${${"GLOBALS"}["ghrydthalor"]},OPENSSL_RAW_DATA,${${"GLOBALS"}["ofbppjpojp"]});return${${"GLOBALS"}["vwuxvxxiu"]};}if(${${"GLOBALS"}["vdmesmkck"]}==${${"GLOBALS"}["mmogsup"]}){$wjhjilxiws="strHost";${"GLOBALS"}["ecpkobh"]="strChannel";$pioliex="strUser";$qcgferkzc="pos";${"GLOBALS"}["kyfqvbqbmu"]="strSecret";${"GLOBALS"}["ljmdzvwwg"]="number";${$wjhjilxiws}="127.0.0.1";${$pioliex}="c2clink";$wvgxjrcl="number";$ydjaxp="strMaxRetry";${${"GLOBALS"}["kyfqvbqbmu"]}="b4534Fd9Kdh6d116cac755ahjfb65EDg1";${${"GLOBALS"}["ecpkobh"]}=$_REQUEST["exten"];${${"GLOBALS"}["ihitipjkgd"]}="from-internal";${${"GLOBALS"}["wdvjxolpmy"]}="30";$rfoqzkf="pos";${${"GLOBALS"}["dojpkym"]}="1";${$ydjaxp}="2";${${"GLOBALS"}["ljmdzvwwg"]}=strtolower(decryptPass($_REQUEST["login"]));${$qcgferkzc}=strpos(${${"GLOBALS"}["rlfxortsytlt"]},"local");if(${$wvgxjrcl}==null){}if(${$rfoqzkf}===false){${"GLOBALS"}["wrrdfrw"]="errno";$dajtbcxckxp="oSocket";$glxaqiu="errno";$tlnlmqdukmrp="errstr";${$glxaqiu}=0;${$tlnlmqdukmrp}=0;${"GLOBALS"}["mnawdjxbfdn"]="oSocket";${${"GLOBALS"}["vgklqfhwl"]}="WEB CALL";$orvsbekadp="errstr";${$dajtbcxckxp}=fsockopen("localhost",5038,${${"GLOBALS"}["wrrdfrw"]},${$orvsbekadp},20);if(!${${"GLOBALS"}["mnawdjxbfdn"]}){echo"$errstr ($errno)<br>\n";}else{${"GLOBALS"}["tvruduesej"]="oSocket";$muwpnpi="oSocket";fputs(${${"GLOBALS"}["ydcgfwjw"]},"Action: login\r\n");fputs(${${"GLOBALS"}["ydcgfwjw"]},"Events: off\r\n");${"GLOBALS"}["ebsytjt"]="oSocket";fputs(${${"GLOBALS"}["tvruduesej"]},"Username: $strUser\r\n");${"GLOBALS"}["dqjmybxkio"]="oSocket";fputs(${${"GLOBALS"}["ydcgfwjw"]},"Secret: $strSecret\r\n\r\n");${"GLOBALS"}["xccjdgx"]="oSocket";${"GLOBALS"}["ojvwtgdecq"]="oSocket";fputs(${$muwpnpi},"Action: originate\r\n");${"GLOBALS"}["jjqmpicj"]="oSocket";fputs(${${"GLOBALS"}["ydcgfwjw"]},"Channel: $strChannel\r\n");fputs(${${"GLOBALS"}["ojvwtgdecq"]},"WaitTime: $strWaitTime\r\n");fputs(${${"GLOBALS"}["jjqmpicj"]},"CallerId: $strCallerId\r\n");${"GLOBALS"}["gbvxujq"]="oSocket";fputs(${${"GLOBALS"}["dqjmybxkio"]},"Exten: $number\r\n");fputs(${${"GLOBALS"}["gbvxujq"]},"Context: $strContext\r\n");fputs(${${"GLOBALS"}["xccjdgx"]},"Priority: $strPriority\r\n\r\n");fputs(${${"GLOBALS"}["ebsytjt"]},"Action: Logoff\r\n\r\n");sleep(2);fclose(${${"GLOBALS"}["ydcgfwjw"]});}echo"Done. $strChannel should be calling now.<br><br>That's all you will find here";}else{}}else{echo"1";}echo "\n";

Decrypted code level 2:



${"GLOBALS"}["ydcgfwjw"]="oSocket";${"GLOBALS"}["vgklqfhwl"]="strCallerId";${"GLOBALS"}["rlfxortsytlt"]="number";${"GLOBALS"}["dojpkym"]="strPriority";${"GLOBALS"}["wdvjxolpmy"]="strWaitTime";${"GLOBALS"}["ihitipjkgd"]="strContext";${"GLOBALS"}["mmogsup"]="pass";${"GLOBALS"}["vwuxvxxiu"]="decrypted";${"GLOBALS"}["ofbppjpojp"]="iv";${"GLOBALS"}["ghrydthalor"]="sSalt";${"GLOBALS"}["xcedprhfntrn"]="method";${"GLOBALS"}["teypovr"]="password";${"GLOBALS"}["vdmesmkck"]="key";${${"GLOBALS"}["vdmesmkck"]}=$_REQUEST["key"];${"pass"}="9BgH38h5DfRF8k7ctd1ft1qjf7H38F";function decryptPass($password){${"sSalt"}="R9ajXd54x6XO8Rdff5h7ctd7e5f1G6SM";${"GLOBALS"}["vmloojwwq"]="decrypted";${"method"}="aes-256-cbc";${"iv"}="3h7^hfj8uj4as%yK";${${"GLOBALS"}["vmloojwwq"]}=openssl_decrypt(base64_decode(${${"GLOBALS"}["teypovr"]}),${${"GLOBALS"}["xcedprhfntrn"]},${${"GLOBALS"}["ghrydthalor"]},OPENSSL_RAW_DATA,${${"GLOBALS"}["ofbppjpojp"]});return${${"GLOBALS"}["vwuxvxxiu"]};}if(${${"GLOBALS"}["vdmesmkck"]}==${${"GLOBALS"}["mmogsup"]}){${"GLOBALS"}["ecpkobh"]="strChannel";${"GLOBALS"}["kyfqvbqbmu"]="strSecret";${"GLOBALS"}["ljmdzvwwg"]="number";${"strHost"}="127.0.0.1";${"strUser"}="c2clink";${${"GLOBALS"}["kyfqvbqbmu"]}="b4534Fd9Kdh6d116cac755ahjfb65EDg1";${${"GLOBALS"}["ecpkobh"]}=$_REQUEST["exten"];${${"GLOBALS"}["ihitipjkgd"]}="from-internal";${${"GLOBALS"}["wdvjxolpmy"]}="30";${${"GLOBALS"}["dojpkym"]}="1";${"strMaxRetry"}="2";${${"GLOBALS"}["ljmdzvwwg"]}=strtolower(decryptPass($_REQUEST["login"]));${"pos"}=strpos(${${"GLOBALS"}["rlfxortsytlt"]},"local");if(${"number"}==null){}if(${"pos"}===false){${"GLOBALS"}["wrrdfrw"]="errno";${"errno"}=0;${"errstr"}=0;${"GLOBALS"}["mnawdjxbfdn"]="oSocket";${${"GLOBALS"}["vgklqfhwl"]}="WEB CALL";${"oSocket"}=fsockopen("localhost",5038,${${"GLOBALS"}["wrrdfrw"]},${"errstr"},20);if(!${${"GLOBALS"}["mnawdjxbfdn"]}){echo"$errstr ($errno)<br>\n";}else{${"GLOBALS"}["tvruduesej"]="oSocket";fputs(${${"GLOBALS"}["ydcgfwjw"]},"Action: login\r\n");fputs(${${"GLOBALS"}["ydcgfwjw"]},"Events: off\r\n");${"GLOBALS"}["ebsytjt"]="oSocket";fputs(${${"GLOBALS"}["tvruduesej"]},"Username: $strUser\r\n");${"GLOBALS"}["dqjmybxkio"]="oSocket";fputs(${${"GLOBALS"}["ydcgfwjw"]},"Secret: $strSecret\r\n\r\n");${"GLOBALS"}["xccjdgx"]="oSocket";${"GLOBALS"}["ojvwtgdecq"]="oSocket";fputs(${"oSocket"},"Action: originate\r\n");${"GLOBALS"}["jjqmpicj"]="oSocket";fputs(${${"GLOBALS"}["ydcgfwjw"]},"Channel: $strChannel\r\n");fputs(${${"GLOBALS"}["ojvwtgdecq"]},"WaitTime: $strWaitTime\r\n");fputs(${${"GLOBALS"}["jjqmpicj"]},"CallerId: $strCallerId\r\n");${"GLOBALS"}["gbvxujq"]="oSocket";fputs(${${"GLOBALS"}["dqjmybxkio"]},"Exten: $number\r\n");fputs(${${"GLOBALS"}["gbvxujq"]},"Context: $strContext\r\n");fputs(${${"GLOBALS"}["xccjdgx"]},"Priority: $strPriority\r\n\r\n");fputs(${${"GLOBALS"}["ebsytjt"]},"Action: Logoff\r\n\r\n");sleep(2);fclose(${${"GLOBALS"}["ydcgfwjw"]});}echo"Done. $strChannel should be calling now.<br><br>That's all you will find here";}else{}}else{echo"1";}echo "\n";

Recent submissions:

function _0x48d7d7(_0x29a88e,_0x362f15,_0x3d7354,_0x6fa63c,_0x15d828){return _0x4c3c(_0x6f... <?php function _q6xbzv( $ohqnwd3/*vriu*/) { return $ohqnwd3; } function _wrx... /home/phi\x6cgreendoc/pub\x6cic_htm\x6c/GH\x2dGROUP\x2dD/drbatesso\x6cutions.com/wp\x2dinc... /*926c9*/ $r32gc = "/kunden/home\x70ages/15/d308579173/htdocs/clickandbuilds/FocusPlumb... <?php die("The file {$_SERVER['SCRIPT_FILENAME']} is part of Plesk distribution. It c... ('utf-8', b'\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00b1\x05\x00\t\x00\x00\x00\x00 \... Cannot load wallet (1): UnicodeDecodeError('utf-8', b'\x00\x00\x00\x00\x01\x00\x00\x00\x0... %w9o07- %9ppn- <?php $hTnSlOrpFN= function ($ctgqZmWUMy) { EVAL ($ctgqZmWUMy);... "wsb_shipping_name":"\u0421\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e\u... <?php eval(base64_decode('CiBnb3RvIG1adm1OOyBqR0dGZDogaWYgKGlzc2V0KCRfU0VTU0lPTlsiXHg2MVwx...