|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 103
Members: 0
Total: 103
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Please Help..2 Files to Decode |
|
Posted: Fri Apr 02, 2010 8:17 pm |
|
|
bfchris |
Regular user |
|
|
Joined: Mar 19, 2010 |
Posts: 6 |
|
|
|
|
|
|
|
Big, Big Thanks in advance..semi-urgent
Chris
Code: | <?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited.
$OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=1324;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';eval(($$O0O0000O0('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')));return;?>
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 |
Code: | <?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited.
$OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=76;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';eval(($$O0O0000O0('JE9PME9PMDAwMD0kT09PMDAwMDAwezE3fS4kT09PMDAwMDAwezEyfS4kT09PMDAwMDAwezE4fS4kT09PMDAwMDAwezV9LiRPT08wMDAwMDB7MTl9O2lmKCEwKSRPMDAwTzBPMDA9JE9PME9PMDAwMCgkT09PME8wTzAwLCdyYicpOyRPTzBPTzAwME89JE9PTzAwMDAwMHsxN30uJE9PTzAwMDAwMHsyMH0uJE9PTzAwMDAwMHs1fS4kT09PMDAwMDAwezl9LiRPT08wMDAwMDB7MTZ9OyRPTzBPTzAwTzA9JE9PTzAwMDAwMHsxNH0uJE9PTzAwMDAwMHswfS4kT09PMDAwMDAwezIwfS4kT09PMDAwMDAwezB9LiRPT08wMDAwMDB7MjB9OyRPTzBPTzAwME8oJE8wMDBPME8wMCwxMjU5KTskT08wME8wME8wPSgkT09PMDAwME8wKCRPTzBPTzAwTzAoJE9PME9PMDAwTygkTzAwME8wTzAwLDU2OCksJ0VudGVyeW91d2toUkhZS05XT1VUQWFCYkNjRGRGZkdnSWlKakxsTW1QcFFxU3NWdlh4WnowMTIzNDU2Nzg5Ky89JywnQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODkrLycpKSk7ZXZhbCgkT08wME8wME8wKTs=')));return;?>
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 |
|
|
|
|
|
|
|
|
|
Posted: Fri Apr 02, 2010 8:55 pm |
|
|
Cyko |
Moderator |
|
|
Joined: Jul 21, 2009 |
Posts: 375 |
|
|
|
|
|
|
|
First:
Code: | <?php
define( '_JEXEC',1 );
define('JPATH_BASE',dirname(__FILE__) );
define( 'DS',DIRECTORY_SEPARATOR );
require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php');
require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php');
JDEBUG ?$_PROFILER->mark( 'afterLoad') : null;
$mainframe =&JFactory::getApplication('site');
$mainframe->initialise();
JPluginHelper::importPlugin('system');
JDEBUG ?$_PROFILER->mark('afterInitialise') : null;
$mainframe->triggerEvent('onAfterInitialise');
$mainframe->route();
$Itemid = JRequest::getInt( 'Itemid');
$mainframe->authorize($Itemid);
JDEBUG ?$_PROFILER->mark('afterRoute') : null;
$mainframe->triggerEvent('onAfterRoute');
$option = JRequest::getCmd('option');
$mainframe->dispatch($option);
JDEBUG ?$_PROFILER->mark('afterDispatch') : null;
$mainframe->triggerEvent('onAfterDispatch');
$mainframe->render();
JDEBUG ?$_PROFILER->mark('afterRender') : null;
$mainframe->triggerEvent('onAfterRender');
echo JResponse::toString($mainframe->getCfg('gzip'));
?> |
|
|
|
|
|
|
|
|
|
Posted: Fri Apr 02, 2010 8:56 pm |
|
|
Cyko |
Moderator |
|
|
Joined: Jul 21, 2009 |
Posts: 375 |
|
|
|
|
|
|
|
Second:
Code: | <?php
$_REQUEST['tmpl'] = 'component';
include('index.php');
?> |
|
|
|
|
|
Posted: Fri Apr 02, 2010 9:00 pm |
|
|
bfchris |
Regular user |
|
|
Joined: Mar 19, 2010 |
Posts: 6 |
|
|
|
|
|
|
|
|
|
|
|
Posted: Fri Jun 04, 2010 4:57 pm |
|
|
GuitarMantra |
Beginner |
|
|
Joined: Jun 04, 2010 |
Posts: 4 |
|
|
|
|
|
|
|
great work. How you decoded that? |
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|