Japanese English

PHP 難読化コードの復元・デコード

Wordpress　等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php goto lz430; uwvAb: error_reporting(0); goto EvbbW; yyO96: function animated_timer($tmr, $message) { date_default_timezone_set("\125\x54\103"); $col = array(b, c, h, k, m, u); $sym = array("\xe2\224\x80", "\x5c", "\x7c", "\x2f"); $timr = time() + $tmr; $a = 0; while (true) { $res = $timr - t...



難読化されたPHPコード

<?php
 goto lz430; uwvAb: error_reporting(0); goto EvbbW; yyO96: function animated_timer($tmr, $message) { date_default_timezone_set("\125\x54\103"); $col = array(b, c, h, k, m, u); $sym = array("\xe2\224\x80", "\x5c", "\x7c", "\x2f"); $timr = time() + $tmr; $a = 0; while (true) { $res = $timr - time(); if ($res < 1) { break; } $a += 1; $x = $col[array_rand($col)]; $nic = auth_animation($x); echo p . "\xd\x5b" . $x . $sym[$a % 4] . p . "\x5d\x20" . $message . "\40" . p . date("\110", $res) . $x . "\x3a" . p . date("\151", $res) . $x . "\72" . p . date("\x73", $res) . "\x20" . $nic[$a % count($nic)] . "\x20\40\x20"; usleep(100000); } echo "\15\33\133\113"; } goto FajEv; kEGfY: function display_banner() { $red = m; $green = h; $yellow = k; $cyan = c; $white = p; $reset = d; $magenta = u; $system_timezone_raw = shell_exec("\164\151\155\x65\x64\x61\x74\145\x63\164\154\40\x73\150\x6f\x77\x20\55\55\160\x72\x6f\x70\x65\162\164\171\75\124\x69\x6d\x65\x7a\x6f\156\x65\40\x2d\55\166\x61\154\x75\x65\x20\62\x3e\57\x64\145\x76\57\x6e\165\154\154"); $system_timezone = trim((string) $system_timezone_raw); date_default_timezone_set(!empty($system_timezone) ? $system_timezone : "\101\x73\151\141\x2f\113\x6f\x6c\x6b\x61\x74\x61"); $date = date("\x64\55\155\x2d\131"); $time = date("\150\72\151\72\x73\x20\101"); $server_status_raw = trim(strtolower(@file_get_contents(CONTROL_URL))); $server_status_display = $server_status_raw === "\157\156" ? $green . "\x4f\x6e\x6c\151\x6e\145" . $reset : $red . "\x4f\x66\146\x6c\151\156\x65" . $reset; $script_name = "\x75\x73\x64\160\x69\143\x6b\56\151\157\x20\x46\x61\165\143\x65\x74"; $creator_name = TELEGRAM_USERNAME; $youtube_link = "\171\157\165\164\165\142\x65\56\x63\x6f\x6d\x2f\100\x43\64\103\x4f\x49\x4e"; $telegram_link = "\x74\56\155\145\57\103\x34\x43\x4f\111\116\137\107\x72\157\165\x70"; echo $cyan . "\x2d\75\x3d\75\x3d\x3d\75\75\x3d\75\75\75\75\75\75\75\x3d\x3d\x20" . $yellow . "\342\x89\xab\x20\xe2\x94\x80\342\x94\x80\342\224\200\342\224\x80\x20\xe2\211\252\342\x80\xa2\xe2\x97\246\x20\342\235\x88\40\xe2\227\xa6\xe2\200\242\342\x89\xab" . $cyan . "\x20\342\x94\200\xe2\x94\200\342\224\200\xe2\x94\x80\x20\342\x89\xaa\75\x3d\x3d\75\75\75\x3d\x3d\75\75\75\x3d\75\75\75\x3d\x3d\55" . $reset . "\xa\xa"; echo "\40\40\40" . $green . "\342\x96\210\xe2\x96\x88\342\x96\x88\342\x96\x88\342\226\x88\342\x96\210\xe2\225\227\342\x96\x88\342\x96\x88\xe2\x95\x97\40\x20\xe2\226\210\xe2\x96\210\342\x95\x97\x20\xe2\226\x88\342\226\x88\xe2\x96\210\xe2\x96\x88\xe2\x96\x88\342\226\x88\342\x95\x97\40\xe2\226\x88\xe2\226\x88\342\226\x88\342\226\210\xe2\226\210\xe2\226\x88\xe2\225\227\x20\xe2\226\210\xe2\x96\210\342\x95\x97\xe2\x96\x88\342\226\210\xe2\226\x88\xe2\x95\x97\x20\40\40\342\226\210\xe2\226\210\xe2\x95\x97\x20\x20\x20\x20\x20\40\40\40\40\x20" . $reset . "\xa"; echo "\40\x20" . $green . "\342\x96\x88\342\226\x88\xe2\225\224\342\225\x90\xe2\x95\x90\xe2\225\x90\342\x95\220\xe2\x95\235\342\x96\x88\xe2\226\x88\xe2\x95\x91\x20\x20\xe2\x96\210\342\226\x88\xe2\x95\x91\342\226\x88\xe2\x96\210\xe2\x95\x94\xe2\225\x90\342\x95\220\342\225\x90\xe2\225\220\342\225\x9d\xe2\226\210\342\226\x88\342\x95\224\xe2\225\x90\342\x95\220\xe2\x95\x90\342\x96\x88\xe2\226\210\xe2\225\227\xe2\226\210\xe2\x96\x88\xe2\225\221\342\x96\210\342\226\x88\xe2\x96\x88\xe2\x96\x88\xe2\225\227\40\40\342\226\210\342\x96\x88\342\x95\x91\x20\x20\40\40\x20\x20\40\x20\40\40" . $reset . "\12"; echo "\x20\x20" . $green . "\xe2\226\210\342\226\x88\342\x95\x91\40\40\x20\40\40\342\226\210\342\226\210\xe2\226\x88\xe2\x96\210\342\x96\210\xe2\x96\x88\xe2\226\x88\342\x95\221\342\226\x88\xe2\x96\x88\342\225\x91\40\40\40\x20\x20\342\226\210\xe2\x96\210\342\x95\221\40\x20\40\xe2\x96\210\342\226\210\342\x95\x91\xe2\226\210\342\x96\x88\342\x95\221\342\x96\210\342\x96\x88\xe2\225\x94\342\226\210\xe2\226\x88\342\225\x97\40\342\x96\x88\xe2\226\210\xe2\225\221\40\x20\x20\x20\40\40\40\x20\x20\x20" . $reset . "\12"; echo "\40\x20" . $green . "\342\x96\210\342\226\x88\342\x95\221\x20\x20\x20\x20\x20\xe2\225\x9a\342\x95\220\342\225\x90\342\225\x90\xe2\x95\220\342\226\210\xe2\226\x88\342\x95\221\xe2\x96\210\xe2\x96\x88\342\x95\221\40\40\x20\40\x20\342\226\x88\342\x96\210\xe2\x95\x91\40\x20\40\342\x96\x88\xe2\x96\x88\xe2\225\221\xe2\226\210\xe2\x96\210\xe2\x95\221\342\x96\210\342\x96\210\xe2\x95\221\342\x95\232\xe2\x96\x88\342\x96\x88\xe2\x95\x97\342\226\x88\342\x96\210\342\x95\x91\40\x20\x20\40\x20\40\x20\40\x20\x20" . $reset . "\12"; echo "\40\40" . $green . "\342\x95\x9a\342\226\210\xe2\x96\210\xe2\226\210\342\x96\210\xe2\x96\x88\xe2\226\x88\xe2\x95\x97\40\40\x20\x20\x20\342\226\x88\xe2\226\210\xe2\x95\221\342\x95\x9a\xe2\x96\x88\342\226\210\342\x96\x88\xe2\x96\x88\342\226\210\xe2\226\x88\xe2\225\227\xe2\x95\x9a\xe2\x96\x88\342\226\x88\xe2\226\210\xe2\226\x88\342\x96\210\xe2\x96\x88\xe2\x95\224\342\225\x9d\xe2\x96\210\342\x96\210\xe2\225\x91\xe2\226\210\xe2\x96\x88\xe2\225\x91\x20\xe2\x95\232\342\x96\210\xe2\226\x88\342\x96\x88\342\226\x88\342\x95\x91\40\40\x20\x20\x20\40\x20\40\40\x20" . $reset . "\12"; echo "\40\x20\x20" . $green . "\342\225\x9a\342\225\x90\xe2\x95\x90\342\x95\x90\342\225\220\342\x95\220\xe2\x95\x9d\40\40\40\x20\x20\342\x95\232\xe2\x95\220\xe2\225\x9d\x20\342\225\232\342\225\x90\342\225\220\xe2\225\x90\342\x95\220\342\x95\x90\342\225\x9d\x20\xe2\225\232\xe2\225\x90\342\225\220\xe2\x95\220\xe2\x95\x90\342\x95\x90\342\225\235\x20\342\225\232\342\225\x90\342\x95\x9d\342\x95\232\xe2\225\220\342\225\220\342\225\220\342\x95\x9d\40\40\xe2\225\232\342\x95\220\xe2\x95\x90\xe2\x95\x90\xe2\x95\x9d\40\40\x20\40\40\x20\40\x20\40\40" . $reset . "\12\xa"; echo $cyan . "\55\x3d\75\x3d\x3d\75\75\75\x3d\75\x3d\75\75\x3d\75\x3d\75\x3d\75\x3d\75\75\x3d\75\75" . $red . "\40\103\x34\x43\117\111\116\40" . $cyan . "\x3d\75\x3d\x3d\75\x3d\75\75\75\75\x3d\75\x3d\x3d\x3d\75\x3d\75\x3d\75\x3d\x3d\x3d\x3d\55" . $reset . "\xa\12"; echo $magenta . "\x20\xe2\211\xab\x20" . $yellow . "\123\103\122\x49\120\x54\x20\111\116\106\x4f\122\115\101\x54\x49\117\116" . $magenta . "\40\342\x89\252" . $reset . "\xa"; echo $white . "\x20\123\x63\162\151\160\x74" . $reset . "\x20\x20\40\72\40" . $cyan . $script_name . $reset . "\xa"; echo $white . "\x20\103\162\145\141\x74\157\x72" . $reset . "\40\x20\x3a\x20" . $cyan . $creator_name . $reset . "\12"; echo $white . "\x20\x59\157\165\x54\165\x62\145" . $reset . "\40\40\x3a\x20" . $cyan . $youtube_link . $reset . "\xa"; echo $white . "\40\124\x65\154\x65\147\162\141\155" . $reset . "\x20\x3a\40" . $cyan . $telegram_link . $reset . "\12"; echo $magenta . str_repeat("\342\224\200", 40) . $reset . "\12"; echo $red . "\40\342\211\253\40" . $yellow . "\x4c\111\x56\105\x20\123\124\x41\124\x55\x53" . $red . "\x20\342\211\xaa" . $reset . "\xa"; echo $white . "\40\x53\x65\162\x76\x65\162" . $reset . "\40\x20\40\72\x20" . $server_status_display . $reset . "\xa"; echo $white . "\40\104\x61\164\145" . $reset . "\x20\x20\40\x20\x20\x3a\x20" . $green . $date . $reset . "\12"; echo $white . "\x20\124\151\155\145" . $reset . "\40\40\40\x20\x20\x3a\40" . $green . $time . $reset . "\xa"; echo $red . str_repeat("\342\x94\200", 40) . $reset . "\12"; } goto eO_nR; Qcev_: if (!json_decode($res_csrf, true)["\143\163\162\x66\x54\157\x6b\145\x6e"]) { echo m . "\x5b\41\x5d\x20\106\x61\151\x6c\145\144\x20\x74\x6f\40\147\x65\x74\x20\x43\123\x52\106\x20\164\x6f\153\145\156\x2c\40\162\145\164\162\171\x69\156\x67\56\x2e\x2e" . n; sleep(5); goto login; } goto XCRFH; S6u6C: echo p . n . "\x5b\x2b\135\x20" . c . "\x53\x74\141\x72\164\x69\156\x67\40\114\157\x67\151\x6e\40\x50\x72\157\143\145\163\x73\x2e\56\x2e" . n; goto fivRu; VvlNU: $login_data = json_decode($login_res, true); goto BHeUU; MiOia: $captcha_url = "\150\x74\164\x70\72\57\x2f{$apihost}\x2f\151\156\56\x70\150\160\x3f\153\x65\171\75{$apikey}\x26\x6d\x65\x74\x68\x6f\x64\75\x68\143\x61\x70\164\x63\x68\141\46\x73\151\164\145\x6b\x65\171\75{$sitekey}\46\160\141\x67\x65\x75\x72\154\75\150\164\164\160\x73\72\57\57\165\163\x64\160\151\x63\x6b\56\x69\157\57\x6c\x6f\147\x69\156"; goto MzK0Z; lz430: @system("\143\154\x65\141\162"); goto uwvAb; eO_nR: function auth_animation($w) { $lo = array($w . "\x57" . p . "\x61\x69\164\151\156\147\56\x2e\x2e\x2e", p . "\127" . $w . "\141" . p . "\x69\164\x69\156\x67\x2e\56\x2e\x2e", p . "\x57\141" . $w . "\151" . p . "\x74\x69\x6e\x67\x2e\x2e\56\56", p . "\x57\x61\x69" . $w . "\164" . p . "\151\x6e\147\x2e\56\56\x2e", p . "\x57\141\x69\164" . $w . "\151" . p . "\156\147\x2e\56\x2e\56", p . "\x57\x61\151\164\x69" . $w . "\156" . p . "\147\x2e\x2e\x2e\56", p . "\127\141\x69\x74\151\156" . $w . "\147" . p . "\56\56\56\56", p . "\x57\x61\151\x74\x69\156\x67" . $w . "\56" . p . "\56\56\x2e", p . "\127\141\151\x74\151\156\147\x2e" . $w . "\x2e" . p . "\56\x2e", p . "\127\x61\x69\164\151\156\x67\56\x2e" . $w . "\x2e" . p . "\56", p . "\127\x61\151\164\151\x6e\x67\56\56\x2e" . $w . "\x2e" . p . ''); return $lo; } goto yyO96; Xi8Sq: if (PHP_OS_FAMILY == "\114\x69\156\x75\170") { define("\156", "\12"); define("\x64", "\x1b\133\60\x6d"); define("\x6d", "\33\x5b\61\73\63\x31\155"); define("\150", "\x1b\x5b\x31\x3b\63\62\x6d"); define("\153", "\x1b\x5b\61\x3b\x33\x33\155"); define("\x62", "\33\x5b\x31\73\x33\x34\155"); define("\165", "\x1b\133\x31\73\x33\65\x6d"); define("\x63", "\33\133\x31\x3b\63\66\155"); define("\160", "\33\x5b\x31\73\x33\x37\x6d"); } else { define("\156", "\xa"); define("\x64", ''); define("\x6d", ''); define("\150", ''); define("\x6b", ''); define("\142", ''); define("\165", ''); define("\143", ''); define("\x70", ''); } goto ERf6q; ERf6q: function handle_password() { $password_banner = c . "\342\226\x88\342\x96\200\xe2\226\x88\40\342\x96\x84\342\x96\200\xe2\x96\210\x20\xe2\x96\x88\xe2\x96\x80\40\342\x96\x88\xe2\x96\x80\40\342\x96\210\342\x96\221\xe2\226\210\xe2\226\x91\342\226\x88\40\342\x96\x88\342\226\x80\342\x96\x88\40\xe2\226\210\xe2\x96\x80\342\226\210\40\xe2\226\210\342\x96\200\xe2\x96\204" . n . b . "\xe2\226\210\342\x96\x80\342\x96\200\40\xe2\226\x88\342\x96\x80\xe2\226\x88\x20\342\x96\204\xe2\x96\x88\x20\xe2\226\204\xe2\x96\210\40\xe2\x96\x80\342\226\x84\342\226\200\xe2\226\x84\xe2\226\200\x20\xe2\226\210\xe2\x96\204\342\226\210\40\342\226\210\xe2\x96\x80\342\x96\x84\x20\xe2\x96\210\xe2\x96\x84\342\226\x80" . d . n; system("\x63\154\145\141\x72"); echo $password_banner . n; echo p . "\x4c\151\x6e\153\x20\164\157\40\147\x65\x74\x20\160\141\163\163\x77\x6f\x72\x64\72\40" . k . PASSWORD_LINK . n; $input_password = readline(h . "\133\x3f\x5d\x20\x45\x6e\x74\x65\162\40\x4b\x65\x79\x3a\x20" . p); if ($input_password === SCRIPT_PASSWORD) { system("\143\x6c\x65\141\162"); echo n . n . n . k . "\x20\40\x20\40\x20\x20\x43\x68\145\x63\153\151\x6e\x67\40\113\145\171\x20\x28\360\x9f\224\x91\51\x2e\x2e\x2e" . d; sleep(4); system("\143\154\x65\141\162"); echo n . n . n . h . "\40\x20\40\x20\x20\40\113\145\171\40\x56\145\162\151\x66\151\x63\x61\x74\151\157\156\x20\123\x75\x63\x63\145\163\163\146\x75\x6c\40\50\xe2\234\x93\x29" . d; sleep(3); } else { echo n . m . "\133\x78\x5d\x20\x57\x72\157\x6e\147\x20\x4b\x65\171\41\40\123\x63\162\151\x70\164\40\x77\x69\x6c\154\40\x65\x78\x69\164\x20\x6e\x6f\167\56" . d . n; die; } } goto KSUys; x38pu: function getBalance($userAgent) { $balance_headers = array("\150\157\x73\164\x3a\x20\165\163\x64\160\151\x63\x6b\56\x69\x6f", "\141\143\143\x65\160\x74\x3a\x20\141\x70\x70\x6c\151\x63\141\164\x69\x6f\x6e\x2f\152\163\x6f\156\54\40\x74\145\x78\x74\57\160\154\x61\x69\156\x2c\x20\x2a\x2f\52", "\x75\163\x65\162\55\x61\x67\x65\x6e\x74\x3a\x20" . $userAgent, "\162\145\x66\145\162\x65\162\72\40\150\164\164\160\163\72\x2f\57\x75\x73\144\x70\151\143\x6b\x2e\x69\x6f\x2f\x66\x61\x75\x63\x65\x74"); $balance_res = curl("\150\x74\164\x70\163\72\57\57\x75\x73\x64\160\x69\143\153\56\151\x6f\x2f\141\160\151\57\141\x63\x63\157\x75\156\x74\57\164\x6f\153\x65\156\x73", null, $balance_headers)[1]; $balance_data = json_decode($balance_res, true); if (isset($balance_data["\144\141\164\141"][0]["\x62\141\154\141\x6e\143\145"])) { return number_format($balance_data["\x64\141\164\141"][0]["\x62\x61\154\x61\x6e\143\x65"] / 1.0E+18, 8, "\x2e", ''); } return null; } goto EtYf7; fivRu: $res_csrf = curl("\150\164\164\x70\163\x3a\x2f\57\165\x73\x64\160\151\x63\153\56\151\x6f\57\x61\x70\x69\57\141\165\164\150\57\x63\163\162\146", null, array("\165\163\145\162\x2d\141\x67\145\x6e\x74\x3a\x20" . $userAgent, "\162\x65\146\145\x72\145\x72\72\40\x68\164\x74\x70\x73\x3a\x2f\x2f\x75\x73\x64\x70\x69\143\153\56\151\157\x2f\x6c\157\x67\x69\156"))[1]; goto Qcev_; lx7OJ: system("\143\x6c\x65\x61\x72"); goto jaFJx; OS_dv: function solveCaptcha($url, $apihost, $apikey) { $res1 = curl($url, null, array("\x55\x73\145\x72\55\x41\147\x65\156\164\x3a\40\115\157\x7a\x69\154\x6c\x61\57\65\56\60"))[1]; if (strpos($res1, "\117\x4b\x7c") === false) { return array("\163\165\143\143\145\x73\x73" => false, "\x6d\x65\163\163\x61\x67\x65" => "\101\120\x49\40\105\162\162\157\x72\72\x20{$res1}"); } $captcha_id = explode("\x4f\x4b\x7c", $res1)[1]; for ($attempts = 1; $attempts <= 100; $attempts++) { echo p . "\15\133" . k . "\x7e" . p . "\x5d\40\127\141\x69\164\151\x6e\x67\x20\146\157\x72\40\103\x41\120\124\103\x48\101\40\162\x65\x73\165\154\164\40\x28" . p . $attempts . p . "\51\56\x2e\56" . d; sleep(5); $res = curl("\x68\164\164\x70\72\x2f\x2f{$apihost}\57\162\145\163\56\160\150\x70\77\153\x65\x79\75{$apikey}\x26\141\143\164\151\x6f\x6e\x3d\147\x65\x74\x26\x69\x64\75{$captcha_id}", null, array("\x55\x73\x65\x72\55\101\147\x65\x6e\164\72\x20\x4d\x6f\x7a\x69\x6c\154\141\x2f\65\56\x30"))[1]; if (strpos($res, "\117\x4b\x7c") === 0) { echo "\xd\x1b\x5b\x4b"; return array("\x73\x75\143\143\x65\163\163" => true, "\164\157\x6b\x65\x6e" => explode("\117\113\174", $res)[1]); } if (trim($res) !== "\x43\x41\x50\103\110\101\x5f\x4e\x4f\124\137\x52\105\101\x44\x59") { echo "\xd\x1b\x5b\113"; return array("\163\x75\143\x63\145\163\x73" => false, "\155\x65\163\x73\x61\147\x65" => "\x53\x6f\154\x76\x65\162\40\105\x72\x72\157\x72\x3a\x20{$res}"); } } return array("\x73\165\143\x63\x65\163\163" => false, "\155\x65\x73\x73\x61\x67\145" => "\115\141\x78\x20\141\164\x74\x65\155\x70\x74\x73\40\x72\145\x61\143\150\x65\144\x2e"); } goto x38pu; KSUys: function check_script_status() { echo p . "\x5b\176\135\40\x56\x65\162\x69\146\171\151\156\x67\x20\162\145\155\157\164\145\x20\x73\x65\162\x76\x65\162\x20\x73\164\141\164\x75\163\56\x2e\56" . n; $status = @file_get_contents(CONTROL_URL); if ($status === false) { echo m . "\x5b\41\135\x20\103\157\165\x6c\x64\40\x6e\157\164\x20\x63\x6f\x6e\x6e\x65\143\x74\x20\164\x6f\40\164\x68\145\40\x63\157\156\x74\x72\x6f\154\x20\163\145\x72\x76\x65\x72\56\40\x49\156\164\x65\162\156\145\164\x20\151\x73\163\165\x65\77" . n; die; } if (trim(strtolower($status)) !== "\157\x6e") { system("\x63\154\145\x61\x72"); display_banner(); echo m . "\x3d\75\75\75\x3d\x3d\x3d\x3d\x3d\x3d\x3d\75\75\75\x3d\75\x3d\x3d\75\x3d\x3d\75\x3d\75\x3d\x3d\75\x3d\x3d\x3d\75\75\x3d\75\x3d\75\75\x3d\x3d\75\x3d\x3d\75\x3d\x3d\x3d\x3d\x3d\75\75" . n; echo k . "\40\40\x53\x43\x52\111\x50\x54\40\111\123\40\103\125\122\x52\105\x4e\x54\114\x59\40\117\106\106\x4c\111\x4e\x45\40\102\131\x20\x54\x48\105\40\103\x52\105\x41\x54\x4f\122\x2e" . n; echo c . "\40\x20\x54\x65\154\145\147\162\x61\155\72\x20\x40" . TELEGRAM_USERNAME . n; echo m . "\x3d\75\x3d\75\75\75\75\75\75\x3d\75\75\x3d\x3d\x3d\x3d\75\x3d\x3d\x3d\75\75\x3d\75\75\x3d\x3d\75\x3d\x3d\75\x3d\75\75\75\x3d\x3d\75\75\75\x3d\75\75\x3d\75\x3d\x3d\75\x3d\75" . n . n; die; } echo h . "\x5b\xe2\x9c\223\135\x20\x53\143\162\151\x70\x74\40\151\163\x20\x61\165\x74\x68\157\162\x69\172\145\x64\40\164\157\x20\x72\x75\x6e\x2e" . n; sleep(2); } goto kEGfY; U4wxR: $email = Save("\x65\x6d\141\151\x6c\56\x74\x78\x74"); goto z79e4; wiPCz: define("\x50\x41\123\x53\x57\117\x52\x44\137\114\x49\116\x4b", "\150\164\164\x70\x73\72\57\57\145\x78\x65\56\x69\157\57\144\x48\146\141"); goto Xi8Sq; sbubW: login: goto tzXxq; D6CBI: if ($balance !== null) { echo h . "\x5b\360\x9f\222\260\135\x20" . p . "\x43\165\162\x72\145\x6e\x74\x20\102\x61\154\x61\156\143\145\x3a\40" . k . $balance . "\40\125\123\104\124\40\342\x99\x8e" . n; } else { echo m . "\x5b\x21\x5d\40\103\x6f\x75\x6c\x64\x20\156\157\164\x20\x66\145\x74\143\x68\x20\x62\x61\154\141\156\143\x65\x20\x61\164\x20\164\x68\x65\x20\155\x6f\155\x65\156\164\x2e" . n; } goto sGj1Q; bjAHp: display_banner(); goto S6u6C; sGj1Q: echo n; goto izvMK; tmlGE: $apikey = Save("\x58\145\x76\151\x6c\x2e\164\x78\164"); goto U4wxR; JioDU: $login_headers = array("\x68\x6f\163\164\72\40\165\163\144\x70\151\143\153\56\x69\157", "\143\157\x6e\164\145\156\x74\x2d\164\x79\160\x65\72\40\x61\x70\160\154\151\143\x61\164\151\x6f\x6e\x2f\152\163\157\x6e", "\x75\x73\145\x72\55\x61\147\145\156\164\72\40" . $userAgent, "\x6f\x72\x69\147\x69\156\x3a\40\x68\x74\x74\x70\163\72\57\x2f\165\163\144\x70\x69\143\x6b\x2e\151\157", "\x72\x65\146\145\162\145\162\x3a\40\x68\164\x74\x70\163\72\57\x2f\165\x73\x64\x70\x69\x63\153\56\151\x6f\x2f\x6c\x6f\x67\151\156"); goto dECIj; MzK0Z: $captchaResult = solveCaptcha($captcha_url, $apihost, $apikey); goto CYyc7; JQzqp: system("\143\x6c\x65\x61\x72"); goto OJmJO; dECIj: $login_res = curl("\x68\x74\164\160\x73\72\57\57\165\x73\x64\x70\151\143\x6b\56\x69\x6f\x2f\x61\x70\151\x2f\x61\165\164\150\57\163\151\147\x6e\x69\156", $login_payload, $login_headers)[1]; goto VvlNU; UWSjN: $userAgent = "\115\x6f\x7a\151\154\154\x61\x2f\x35\56\60\40\x28\114\x69\x6e\165\x78\73\40\x41\x6e\144\162\x6f\x69\144\x20\x31\60\x3b\40\113\51\40\x41\x70\x70\x6c\x65\127\145\x62\113\151\x74\57\65\x33\67\x2e\63\x36\x20\50\113\110\124\x4d\x4c\x2c\x20\x6c\x69\153\145\40\x47\x65\x63\x6b\157\51\x20\103\150\x72\x6f\x6d\x65\x2f\x31\x33\x37\56\x30\56\x30\56\x30\x20\115\x6f\142\x69\x6c\x65\x20\123\x61\x66\x61\162\151\57\x35\x33\x37\x2e\63\x36"; goto sbubW; izvMK: while (true) { echo p . "\x5b\x2b\x5d\x20" . c . "\103\150\x65\x63\153\151\x6e\147\40\146\x61\x75\143\x65\x74\40\x73\x74\x61\x74\x75\x73\40\146\162\157\155\40\163\x65\162\166\x65\x72\x2e\x2e\x2e" . n; $faucet_status_res = curl("\x68\164\164\x70\x73\72\57\x2f\x75\x73\x64\160\151\x63\153\x2e\x69\157\x2f\141\x70\151\57\x66\141\165\143\145\164", null, array("\165\x73\145\162\x2d\x61\147\145\x6e\164\x3a\x20" . $userAgent, "\162\145\146\145\x72\x65\x72\x3a\x20\150\164\x74\160\x73\72\57\57\x75\x73\144\160\151\x63\153\x2e\151\x6f\x2f\146\141\165\x63\x65\x74"))[1]; $faucet_status = json_decode($faucet_status_res, true); if (!isset($faucet_status["\x64\x61\x74\x61"]["\143\171\x63\154\145\137\x65\156\x64\145\144\137\141\x74"])) { echo m . "\133\41\135\x20\x43\157\165\154\144\x20\156\x6f\164\40\147\x65\x74\40\x66\x61\x75\143\x65\x74\40\x73\x74\141\x74\x75\x73\56\40\x52\145\164\162\x79\x69\156\x67\56\x2e\56" . n; sleep(60); continue; } $wait_time = strtotime($faucet_status["\144\x61\x74\141"]["\x63\171\x63\154\x65\137\145\156\144\x65\144\x5f\x61\164"]) - time(); if ($wait_time > 0) { animated_timer($wait_time + 5, p . "\x4e\145\170\164\40\x63\x6c\141\151\155\40\x61\x76\141\151\x6c\141\x62\154\145\x20\151\x6e"); } echo h . "\133\xe2\234\x93\135\40" . p . "\106\141\165\143\145\x74\x20\x69\163\40\162\x65\141\x64\171\40\164\x6f\x20\143\x6c\141\x69\x6d\41" . n; $faucet_captcha_url = "\x68\x74\164\x70\x3a\57\57{$apihost}\x2f\151\x6e\x2e\x70\150\160\77\153\145\x79\x3d{$apikey}\x26\x6d\145\x74\x68\157\x64\x3d\150\x63\141\160\x74\x63\x68\x61\x26\x73\x69\x74\x65\x6b\x65\171\x3d{$sitekey}\46\x70\x61\x67\145\x75\x72\154\x3d\150\x74\164\x70\x73\x3a\x2f\x2f\x75\x73\144\x70\x69\x63\x6b\56\151\157\57\x66\141\x75\143\145\164"; $faucetCaptchaResult = solveCaptcha($faucet_captcha_url, $apihost, $apikey); if (!$faucetCaptchaResult["\x73\x75\143\143\145\163\x73"]) { echo m . "\133\41\135\x20\106\x61\165\x63\145\164\x20\x43\x61\x70\x74\x63\x68\141\x20\146\141\151\x6c\x65\x64\x3a\x20" . $faucetCaptchaResult["\155\145\x73\163\x61\x67\145"] . n; sleep(30); continue; } echo h . "\133\342\234\223\135\x20" . p . "\x46\x61\165\x63\x65\x74\x20\103\141\x70\x74\143\150\x61\40\163\x6f\x6c\166\145\x64\40\x73\165\143\x63\145\x73\x73\146\x75\x6c\154\171\56" . n; echo p . "\x5b\x2b\135\40" . c . "\123\x75\142\x6d\x69\164\164\x69\x6e\147\x20\x63\x6c\141\151\x6d\40\162\x65\x71\165\145\163\164\x2e\x2e\x2e" . n; $claim_payload = json_encode(array("\143\141\160\x74\x63\150\x61\x5f\x74\157\x6b\x65\156" => "\x68\143\x61\x70\x74\143\x68\141\72" . $faucetCaptchaResult["\164\157\153\145\156"])); $claim_headers = array("\x68\x6f\163\x74\x3a\40\165\163\144\x70\x69\143\x6b\56\x69\x6f", "\x63\157\156\164\x65\156\x74\x2d\164\171\160\145\72\x20\141\160\x70\x6c\x69\143\x61\x74\151\x6f\156\x2f\152\x73\157\x6e", "\x75\163\145\x72\55\141\147\x65\156\x74\72\x20" . $userAgent, "\x6f\162\x69\147\151\x6e\72\x20\x68\164\164\x70\x73\x3a\x2f\x2f\x75\x73\x64\160\x69\143\153\x2e\151\157", "\162\145\146\x65\162\x65\162\72\x20\150\x74\164\160\163\72\x2f\x2f\165\x73\x64\160\x69\143\x6b\x2e\151\157\x2f\146\x61\165\x63\x65\x74"); $claim_res = curl("\150\x74\164\160\x73\72\x2f\57\165\x73\144\x70\x69\143\x6b\56\x69\x6f\57\x61\160\151\x2f\146\x61\x75\x63\x65\x74", $claim_payload, $claim_headers)[1]; $claim_data = json_decode($claim_res, true); if (isset($claim_data["\x64\141\164\x61"]["\143\x6c\x61\x69\155\145\x64\137\x61\x6d\x6f\165\156\x74"])) { $claimed_amount = number_format($claim_data["\x64\x61\x74\141"]["\x63\154\x61\151\x6d\145\x64\137\141\x6d\157\x75\156\164"] / 1.0E+18, 8, "\56", ''); echo h . "\x5b\360\237\216\211\x5d\40" . p . "\x43\x6c\x61\x69\x6d\x20\x73\165\143\143\x65\x73\x73\146\165\x6c\x21\40\x7c\x20" . p . "\x52\x65\x77\x61\x72\x64\x3a\40" . k . $claimed_amount . "\40\x55\123\104\124" . n; $new_balance = getBalance($userAgent); if ($new_balance !== null) { echo h . "\133\360\x9f\x92\xb0\x5d\x20" . p . "\x4e\145\167\x20\x42\141\x6c\141\156\x63\145\x3a\x20" . k . $new_balance . "\x20\x55\123\x44\x54\x20\xe2\231\x8e" . n . n; } } else { echo m . "\133\41\x5d\40\x43\x6c\x61\151\155\40\x66\x61\151\x6c\145\144\56\40\122\x65\x73\x70\x6f\156\x73\x65\x3a\40" . $claim_res . n; animated_timer(120, p . "\122\145\164\x72\x79\151\x6e\x67\40\x61\146\x74\145\162\40\x61\x20\163\150\x6f\162\164\x20\167\141\x69\164"); continue; } } goto LYl1P; xQGnd: define("\123\x43\122\111\x50\x54\x5f\120\101\x53\x53\127\117\x52\104", "\x43\64\x43\117\x49\x4e\x2d\103\110\x41\x4e\x4e\105\114\x2d\102\122\117"); goto wiPCz; eRtW8: echo h . "\133\342\x9c\x93\x5d\x20" . p . "\114\157\147\151\156\40\x43\x61\x70\164\x63\150\141\x20\x73\x6f\x6c\x76\145\x64\40\163\165\x63\x63\145\x73\163\x66\165\x6c\x6c\171\x2e" . n; goto aYqtz; R0vph: $balance = getBalance($userAgent); goto PzIO2; hmx63: define("\124\x45\x4c\105\107\122\101\x4d\x5f\x55\123\105\x52\x4e\101\x4d\105", "\103\x34\103\117\x49\x4e\x5f\103\122\x45\101\x54\117\x52"); goto xQGnd; BHeUU: if (!isset($login_data["\144\x61\x74\141"]["\163\165\x63\143\145\x73\x73"]) || $login_data["\144\141\x74\x61"]["\x73\x75\x63\x63\x65\x73\163"] !== "\114\157\x67\x69\x6e\x20\151\163\x20\x73\x75\x63\x63\x65\x73\x73\146\x75\154") { echo m . "\133\41\135\40\x4c\157\147\151\x6e\40\x66\x61\151\154\x65\144\41\x20\122\145\163\160\x6f\156\163\145\72\x20" . $login_res . n; sleep(10); goto login; } goto JQzqp; CYyc7: if (!$captchaResult["\163\165\x63\x63\145\163\x73"]) { echo m . "\x5b\x21\135\x20\x4c\x6f\147\151\156\x20\103\141\160\x74\143\x68\141\x20\146\x61\151\x6c\145\144\x3a\x20" . $captchaResult["\155\x65\x73\163\x61\147\145"] . n; sleep(10); goto login; } goto eRtW8; OJmJO: display_banner(); goto R0vph; vhJ_v: function Save($namadata) { if (file_exists($namadata)) { return file_get_contents($namadata); } else { $data = readline(k . n . "\x5b\77\135\x20\120\x6c\x65\141\x73\145\40\145\x6e\x74\x65\x72\40\x79\157\x75\162\x20" . str_replace("\56\164\x78\x74", '', $namadata) . "\72\x20" . h); file_put_contents($namadata, $data); return $data; } } goto OS_dv; z79e4: $password = Save("\160\x61\163\163\167\x6f\162\x64\56\x74\x78\164"); goto UWSjN; SE4bt: check_script_status(); goto nl6kB; nl6kB: $apihost = "\141\x70\x69\x2e\163\143\x74\147\x2e\170\x79\x7a"; goto tmlGE; FajEv: function curl($url, $post = 0, $httpheader = 0) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_CONNECTTIMEOUT => 30, CURLOPT_TIMEOUT => 60, CURLOPT_COOKIE => TRUE, CURLOPT_COOKIEFILE => "\143\157\x6f\153\151\145\56\x74\170\164", CURLOPT_COOKIEJAR => "\143\x6f\157\x6b\151\145\x2e\164\170\164", CURLOPT_HEADER => true)); if ($post) { curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, $post); } if ($httpheader) { curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader); } $response = curl_exec($ch); $header = substr($response, 0, curl_getinfo($ch, CURLINFO_HEADER_SIZE)); $body = substr($response, curl_getinfo($ch, CURLINFO_HEADER_SIZE)); if (curl_errno($ch)) { return array('', "\x43\x75\162\x6c\40\105\x72\162\x6f\x72\72\x20" . curl_error($ch)); } curl_close($ch); return array($header, $body); } goto vhJ_v; jaFJx: display_banner(); goto SE4bt; EvbbW: define("\103\117\116\x54\122\117\114\x5f\x55\122\x4c", "\x68\x74\x74\x70\x73\x3a\x2f\x2f\160\x61\x73\x74\145\142\x69\x6e\56\143\x6f\155\57\162\x61\167\57\123\x67\x54\114\x70\164\x6e\102"); goto hmx63; PzIO2: echo h . n . "\x5b\xe2\x9c\223\x5d\x20" . p . "\114\x6f\x67\151\x6e\40\x53\165\x63\x63\145\163\x73\x66\x75\154\x2e\x20\x57\145\x6c\143\x6f\155\145\40\x74\x6f\40\x74\x68\145\x20\x64\x61\163\150\x62\x6f\141\x72\x64\41" . n; goto D6CBI; EtYf7: handle_password(); goto lx7OJ; XCRFH: $sitekey = "\63\142\65\x61\145\145\x62\x61\55\x64\x35\70\x38\x2d\64\x34\67\x63\x2d\141\142\x36\x36\x2d\x66\x37\x36\x38\143\141\65\x61\64\67\62\145"; goto MiOia; aYqtz: $login_payload = json_encode(array("\145\x6d\x61\151\x6c" => $email, "\160\x61\163\x73\167\x6f\x72\144" => $password, "\143\141\x70\164\x63\150\141\137\x74\x6f\153\x65\156" => "\x68\x63\x61\160\x74\143\x68\x61\x3a" . $captchaResult["\x74\x6f\x6b\145\156"])); goto JioDU; tzXxq: system("\x63\x6c\145\x61\x72"); goto bjAHp; LYl1P: ?>

デコード(難読化解除)されたコード

<?php

@system("clear");
error_reporting(0);
define("CONTROL_URL", "https://pastebin.com/raw/SgTLptnB");
define("TELEGRAM_USERNAME", "C4COIN_CREATOR");
define("SCRIPT_PASSWORD", "C4COIN-CHANNEL-BRO");
define("PASSWORD_LINK", "https://exe.io/dHfa");
if (false) {
    define("n", "\n");
    define("d", "\33[0m");
    define("m", "\33[1;31m");
    define("h", "\33[1;32m");
    define("k", "\33[1;33m");
    define("b", "\33[1;34m");
    define("u", "\33[1;35m");
    define("c", "\33[1;36m");
    define("p", "\33[1;37m");
} else {
    define("n", "\n");
    define("d", '');
    define("m", '');
    define("h", '');
    define("k", '');
    define("b", '');
    define("u", '');
    define("c", '');
    define("p", '');
}
function handle_password()
{
    $password_banner = "█▀█ ▄▀█ █▀ █▀ █░█░█ █▀█ █▀█ █▀▄\n█▀▀ █▀█ ▄█ ▄█ ▀▄▀▄▀ █▄█ █▀▄ █▄▀\n";
    system("clear");
    echo "█▀█ ▄▀█ █▀ █▀ █░█░█ █▀█ █▀█ █▀▄\n█▀▀ █▀█ ▄█ ▄█ ▀▄▀▄▀ █▄█ █▀▄ █▄▀\n\n";
    echo "Link to get password: https://exe.io/dHfa\n";
    $input_password = readline("[?] Enter Key: ");
    if ($input_password === SCRIPT_PASSWORD) {
        system("clear");
        echo "\n\n\n      Checking Key (🔑)...";
        sleep(4);
        system("clear");
        echo "\n\n\n      Key Verification Successful (✓)";
        sleep(3);
    } else {
        echo "\n[x] Wrong Key! Script will exit now.\n";
        die;
    }
}
function check_script_status()
{
    echo "[~] Verifying remote server status...\n";
    $status = @file_get_contents(CONTROL_URL);
    if ($status === false) {
        echo "[!] Could not connect to the control server. Internet issue?\n";
        die;
    }
    if (trim(strtolower($status)) !== "on") {
        system("clear");
        display_banner();
        echo "==================================================\n";
        echo "  SCRIPT IS CURRENTLY OFFLINE BY THE CREATOR.\n";
        echo "  Telegram: @C4COIN_CREATOR\n";
        echo "==================================================\n\n";
        die;
    }
    echo "[✓] Script is authorized to run.\n";
    sleep(2);
}
function display_banner()
{
    $red = m;
    $green = h;
    $yellow = k;
    $cyan = c;
    $white = p;
    $reset = d;
    $magenta = u;
    $system_timezone_raw = shell_exec("timedatectl show --property=Timezone --value 2>/dev/null");
    $system_timezone = trim((string) $system_timezone_raw);
    date_default_timezone_set(!empty($system_timezone) ? $system_timezone : "Asia/Kolkata");
    $date = date("d-m-Y");
    $time = date("h:i:s A");
    $server_status_raw = trim(strtolower(@file_get_contents(CONTROL_URL)));
    $server_status_display = $server_status_raw === "on" ? "Online" : "Offline";
    $script_name = "usdpick.io Faucet";
    $creator_name = TELEGRAM_USERNAME;
    $youtube_link = "youtube.com/@C4COIN";
    $telegram_link = "t.me/C4COIN_Group";
    echo "-================= ≫ ──── ≪•◦ ❈ ◦•≫ ──── ≪=================-\n\n";
    echo "   ██████╗██╗  ██╗ ██████╗ ██████╗ ██╗███╗   ██╗          \n";
    echo "  ██╔════╝██║  ██║██╔════╝██╔═══██╗██║████╗  ██║          \n";
    echo "  ██║     ███████║██║     ██║   ██║██║██╔██╗ ██║          \n";
    echo "  ██║     ╚════██║██║     ██║   ██║██║██║╚██╗██║          \n";
    echo "  ╚██████╗     ██║╚██████╗╚██████╔╝██║██║ ╚████║          \n";
    echo "   ╚═════╝     ╚═╝ ╚═════╝ ╚═════╝ ╚═╝╚═══╝  ╚═══╝          \n\n";
    echo "-======================== C4COIN ========================-\n\n";
    echo " ≫ SCRIPT INFORMATION ≪\n";
    echo " Script   : usdpick.io Faucet\n";
    echo " Creator  : C4COIN_CREATOR\n";
    echo " YouTube  : youtube.com/@C4COIN\n";
    echo " Telegram : t.me/C4COIN_Group\n";
    echo $magenta . str_repeat("─", 40) . $reset . "\n";
    echo " ≫ LIVE STATUS ≪\n";
    echo " Server   : " . $server_status_display . $reset . "\n";
    echo " Date     : " . $date . $reset . "\n";
    echo " Time     : " . $time . $reset . "\n";
    echo $red . str_repeat("─", 40) . $reset . "\n";
}
function auth_animation($w)
{
    $lo = array($w . "W" . p . "aiting....", "W" . $w . "a" . p . "iting....", "Wa" . $w . "i" . p . "ting....", "Wai" . $w . "t" . p . "ing....", "Wait" . $w . "i" . p . "ng....", "Waiti" . $w . "n" . p . "g....", "Waitin" . $w . "g" . p . "....", "Waiting" . $w . "." . p . "...", "Waiting." . $w . "." . p . "..", "Waiting.." . $w . "." . p . ".", "Waiting..." . $w . "." . p . '');
    return $lo;
}
function animated_timer($tmr, $message)
{
    date_default_timezone_set("UTC");
    $col = array(b, c, h, k, m, u);
    $sym = array("─", "\\", "|", "/");
    $timr = time() + $tmr;
    $a = 0;
    while (true) {
        $res = $timr - time();
        if ($res < 1) {
            break;
        }
        $a += 1;
        $x = $col[array_rand($col)];
        $nic = auth_animation($x);
        echo "\r[" . $x . $sym[$a % 4] . p . "] " . $message . " " . p . date("H", $res) . $x . ":" . p . date("i", $res) . $x . ":" . p . date("s", $res) . " " . $nic[$a % count($nic)] . "   ";
        usleep(100000);
    }
    echo "\r\33[K";
}
function curl($url, $post = 0, $httpheader = 0)
{
    $ch = curl_init();
    curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_CONNECTTIMEOUT => 30, CURLOPT_TIMEOUT => 60, CURLOPT_COOKIE => TRUE, CURLOPT_COOKIEFILE => "cookie.txt", CURLOPT_COOKIEJAR => "cookie.txt", CURLOPT_HEADER => true));
    if ($post) {
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
    }
    if ($httpheader) {
        curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
    }
    $response = curl_exec($ch);
    $header = substr($response, 0, curl_getinfo($ch, CURLINFO_HEADER_SIZE));
    $body = substr($response, curl_getinfo($ch, CURLINFO_HEADER_SIZE));
    if (curl_errno($ch)) {
        return array('', "Curl Error: " . curl_error($ch));
    }
    curl_close($ch);
    return array($header, $body);
}
function Save($namadata)
{
    if (file_exists($namadata)) {
        return file_get_contents($namadata);
    } else {
        $data = readline("\n[?] Please enter your " . str_replace(".txt", '', $namadata) . ": " . h);
        file_put_contents($namadata, $data);
        return $data;
    }
}
function solveCaptcha($url, $apihost, $apikey)
{
    $res1 = curl($url, null, array("User-Agent: Mozilla/5.0"))[1];
    if (strpos($res1, "OK|") === false) {
        return array("success" => false, "message" => "API Error: {$res1}");
    }
    $captcha_id = explode("OK|", $res1)[1];
    for ($attempts = 1; $attempts <= 100; $attempts++) {
        echo "\r[~] Waiting for CAPTCHA result (" . $attempts . p . ")..." . d;
        sleep(5);
        $res = curl("http://{$apihost}/res.php?key={$apikey}&action=get&id={$captcha_id}", null, array("User-Agent: Mozilla/5.0"))[1];
        if (strpos($res, "OK|") === 0) {
            echo "\r\33[K";
            return array("success" => true, "token" => explode("OK|", $res)[1]);
        }
        if (trim($res) !== "CAPCHA_NOT_READY") {
            echo "\r\33[K";
            return array("success" => false, "message" => "Solver Error: {$res}");
        }
    }
    return array("success" => false, "message" => "Max attempts reached.");
}
function getBalance($userAgent)
{
    $balance_headers = array("host: usdpick.io", "accept: application/json, text/plain, */*", "user-agent: " . $userAgent, "referer: https://usdpick.io/faucet");
    $balance_res = curl("https://usdpick.io/api/account/tokens", null, $balance_headers)[1];
    $balance_data = json_decode($balance_res, true);
    if (isset($balance_data["data"][0]["balance"])) {
        return number_format($balance_data["data"][0]["balance"] / 1.0E+18, 8, ".", '');
    }
    return null;
}
handle_password();
system("clear");
display_banner();
check_script_status();
$apihost = "api.sctg.xyz";
$apikey = Save("Xevil.txt");
$email = Save("email.txt");
$password = Save("password.txt");
$userAgent = "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36";
login:
system("clear");
display_banner();
echo "\n[+] Starting Login Process...\n";
$res_csrf = curl("https://usdpick.io/api/auth/csrf", null, array("user-agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36", "referer: https://usdpick.io/login"))[1];
if (!json_decode($res_csrf, true)["csrfToken"]) {
    echo "[!] Failed to get CSRF token, retrying...\n";
    sleep(5);
    goto login;
}
$sitekey = "3b5aeeba-d588-447c-ab66-f768ca5a472e";
$captcha_url = "http://{$apihost}/in.php?key={$apikey}&method=hcaptcha&sitekey={$sitekey}&pageurl=https://usdpick.io/login";
$captchaResult = solveCaptcha($captcha_url, $apihost, $apikey);
if (!$captchaResult["success"]) {
    echo "[!] Login Captcha failed: " . $captchaResult["message"] . n;
    sleep(10);
    goto login;
}
echo "[✓] Login Captcha solved successfully.\n";
$login_payload = json_encode(array("email" => $email, "password" => $password, "captcha_token" => "hcaptcha:" . $captchaResult["token"]));
$login_headers = array("host: usdpick.io", "content-type: application/json", "user-agent: " . $userAgent, "origin: https://usdpick.io", "referer: https://usdpick.io/login");
$login_res = curl("https://usdpick.io/api/auth/signin", $login_payload, $login_headers)[1];
$login_data = json_decode($login_res, true);
if (!isset($login_data["data"]["success"]) || $login_data["data"]["success"] !== "Login is successful") {
    echo "[!] Login failed! Response: " . $login_res . n;
    sleep(10);
    goto login;
}
system("clear");
display_banner();
$balance = getBalance($userAgent);
echo "\n[✓] Login Successful. Welcome to the dashboard!\n";
if ($balance !== null) {
    echo "[💰] Current Balance: " . $balance . " USDT ♎" . n;
} else {
    echo "[!] Could not fetch balance at the moment.\n";
}
echo n;
while (true) {
    echo "[+] Checking faucet status from server...\n";
    $faucet_status_res = curl("https://usdpick.io/api/faucet", null, array("user-agent: " . $userAgent, "referer: https://usdpick.io/faucet"))[1];
    $faucet_status = json_decode($faucet_status_res, true);
    if (!isset($faucet_status["data"]["cycle_ended_at"])) {
        echo "[!] Could not get faucet status. Retrying...\n";
        sleep(60);
        continue;
    }
    $wait_time = strtotime($faucet_status["data"]["cycle_ended_at"]) - time();
    if ($wait_time > 0) {
        animated_timer($wait_time + 5, "Next claim available in");
    }
    echo "[✓] Faucet is ready to claim!\n";
    $faucet_captcha_url = "http://{$apihost}/in.php?key={$apikey}&method=hcaptcha&sitekey={$sitekey}&pageurl=https://usdpick.io/faucet";
    $faucetCaptchaResult = solveCaptcha($faucet_captcha_url, $apihost, $apikey);
    if (!$faucetCaptchaResult["success"]) {
        echo "[!] Faucet Captcha failed: " . $faucetCaptchaResult["message"] . n;
        sleep(30);
        continue;
    }
    echo "[✓] Faucet Captcha solved successfully.\n";
    echo "[+] Submitting claim request...\n";
    $claim_payload = json_encode(array("captcha_token" => "hcaptcha:" . $faucetCaptchaResult["token"]));
    $claim_headers = array("host: usdpick.io", "content-type: application/json", "user-agent: " . $userAgent, "origin: https://usdpick.io", "referer: https://usdpick.io/faucet");
    $claim_res = curl("https://usdpick.io/api/faucet", $claim_payload, $claim_headers)[1];
    $claim_data = json_decode($claim_res, true);
    if (isset($claim_data["data"]["claimed_amount"])) {
        $claimed_amount = number_format($claim_data["data"]["claimed_amount"] / 1.0E+18, 8, ".", '');
        echo "[🎉] Claim successful! | Reward: " . $claimed_amount . " USDT" . n;
        $new_balance = getBalance($userAgent);
        if ($new_balance !== null) {
            echo "[💰] New Balance: " . $new_balance . " USDT ♎" . n . n;
        }
    } else {
        echo "[!] Claim failed. Response: " . $claim_res . n;
        animated_timer(120, "Retrying after a short wait");
        continue;
    }
}

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.