🔐 AES Decrypt Tool

Extracted Files se data decrypt karein aur result dekhein

📁 Files
🔓 Decrypt
📊 Result

📄 extracted_js.txt

JavaScript
// AES Library Code (extracted_js.txt)
var slowAES = {aes: {...}};  // Complete AES implementation

// Inline Script
function toNumbers(d) {
    var e = [];
    d.replace(/(..)/g, function(d) {
        e.push(parseInt(d, 16));
    });
    return e;
}

function toHex() {
    for (var d = [], d = 1 == arguments.length && arguments[0].constructor == Array ? arguments[0] : arguments, e = "", f = 0; f < d.length; f++) e += (16 > d[f] ? "0" : "") + d[f].toString(16);
    return e.toLowerCase();
}

var a = toNumbers("f655ba9d09a112d4968c63579db590b4");
var b = toNumbers("98344c2eee86c3994890592585b49f80");
var c = toNumbers("f7ad1235bc499c3533d6795bcba70032");

// Decryption and redirect
// document.cookie = "__test=" + toHex(slowAES.decrypt(c, 2, a, b)) + ...;
// location.href = "http://zryxwebhost.page.gd/?i=1";
                        

📄 js_1.js

AES Library
// Complete AES Implementation
// Key Size Constants
slowAES = {
    aes: {
        keySize: {
            SIZE_128: 16,
            SIZE_192: 24, 
            SIZE_256: 32
        },
        sbox: [99, 124, 119, 123, 242, 107, 111, 197, ...],
        rsbox: [82, 9, 106, 213, 48, 54, 165, 56, ...],
        // Full AES encryption/decryption methods
        encrypt: function() {...},
        decrypt: function() {...},
        // ... other methods
    },
    modeOfOperation: {
        OFB: 0,
        CFB: 1,
        CBC: 2
    }
}
                        

📄 page.html

HTML
<html>
<body>
    <script type="text/javascript" src="/aes.js"></script>
    <script>
        function toNumbers(d) {
            var e = [];
            d.replace(/(..)/g, function(d) {
                e.push(parseInt(d, 16));
            });
            return e;
        }
        
        function toHex() {
            for (var d = [], d = 1 == arguments.length && arguments[0].constructor == Array ? arguments[0] : arguments, e = "", f = 0; f < d.length; f++) e += (16 > d[f] ? "0" : "") + d[f].toString(16);
            return e.toLowerCase();
        }
        
        var a = toNumbers("f655ba9d09a112d4968c63579db590b4");
        var b = toNumbers("98344c2eee86c3994890592585b49f80");
        var c = toNumbers("f7ad1235bc499c3533d6795bcba70032");
        
        document.cookie = "__test=" + toHex(slowAES.decrypt(c, 2, a, b)) + "; max-age=21600; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/";
        location.href = "http://zryxwebhost.page.gd/?i=1";
    </script>
    <noscript>This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support</noscript>
</body>
</html>
                        

📄 README.txt

Info
Scraped URL: http://zryxwebhost.page.gd
Generated: 2026-03-16T06:53:12+00:00
Contains:
 - page.html (raw HTML)
 - extracted_js.txt (inline + fetched external JS)
 - extracted_css.txt (inline + fetched external CSS)
 - individual js_*.js and css_*.css files (for external assets successfully fetched)
                        

🔓 AES Decryption

Files se extract ki gayi values ke saath decryption:

Key (a): f655ba9d09a112d4968c63579db590b4

IV (b): 98344c2eee86c3994890592585b49f80

Encrypted Data (c): f7ad1235bc499c3533d6795bcba70032

Mode: CBC (2)

📊 Complete Decryption Results

Decrypted Values:

Cookie Information:

Redirect URL:

http://zryxwebhost.page.gd/?i=1