Waraxe IT Security Portal
Login or Register
November 5, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 70
Members: 0
Total: 70
Full disclosure
4 vulnerabilities in ibmsecurity
32 vulnerabilities in IBM Security Verify Access
xlibre Xnest security advisory & bugfix releases
APPLE-SA-10-29-2024-1 Safari 18.1
SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600)
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
APPLE-SA-10-28-2024-8 visionOS 2.1
APPLE-SA-10-28-2024-7 tvOS 18.1
APPLE-SA-10-28-2024-6 watchOS 11.1
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1
Open Redirect / Reflected XSS - booked-schedulerv2.8.5
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Php -> ionCube not decoding?
Post new topicReply to topic View previous topic :: View next topic
ionCube not decoding?
PostPosted: Wed Jan 11, 2012 1:25 pm Reply with quote
MiniDjHedges
Regular user
Regular user
Joined: Apr 09, 2011
Posts: 5




Hi Smile

I'm trying to decode an ionCube file with "DeZender.DeIoncuber.06.09.2011". The encoded files that come with the download get decoded perfectly fine. But when I add my own encoded file, it doesn't decode it at all, it just moves the code about a little bit and adds line breaks in.

For example, here's the encoded file:
Code:
<?php //004d4
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');@dl($__ln);if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}@dl($__ln);}else{die('The file '.__FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the site administrator.');exit(199);
?>
4+oV507jHSy3CxxWtb/Gx4FSrj7sBIaH+wS8zvUyKf9D0BlaOenU7/fkmLcFCdst6X9nYEyeYF2I
2maI2wcLSvI9BZ0giYp4SMChbPmoo7teccuSrWcIJvsBZQ+7HWiFyIa1YwT/2V0uzlaWzxXa9U3i
wTF0ihY2PDE33P99KdGYn6T7xfWFYaeUrWWwnUet2CzurR+IhUhyZs9LcxrWmn25bg2xRQoglFsI
fk1RH/xEufEisDqv9548LEzSZxcw7pWbbAu2zfm95IxaUq7u0LCZcsmJMT8H8XwGQW4/ugUuO9pN
2OF645SFK5+OOUAMyO+4NI5CBMsFQ2oRa4nZdzBq98hW3IG+rN8xGzQVW7gtHeBUAFX8vwm9Eehh
hP6ep1nJJNZTbbhPUXlGuxYNqx+to/WZ2hTw92iwvXDMnX1sD0qEKgYRYX1tPf15Ja4nmGjmXcA6
xorumFfdClU8tdxA7qR97oBUcD9olsJvovwnLtNVzmPfSlaX/BScj/zohaMhXuMyBt9PuutpkbJO
EOvr72MatRTtca7dmzebp3WZ92dCQrdCYNuA/7rg1OXs5g46LY+t5ZNOdFnzDrH66jfQ5JuxoDsa
yuhftr4X8QLn5lDQUEKxdQabYQ7C98/R7A4tfC6yiNv3kFP7BAHvX3+YANz9rLF+k5/r3MDJFxrR
BFE39TQkSjvlJG5U6GaXjBgqUeK9IqgB/HcWVUvT2gQfLeg0VezQ4RVX2Iz2iPTB5BA1kPdUecfv
rfymfpz8tTnwdL3+AWIHw7encFCOwrEr1SGbvA8wW57xNJrNZ20/Y518TXRXDlqtq4reval9SqYV
vKMEu4WBz8kmKZR8UkF7hH4fkdemhKkMc3VncEAy0EDDmT1Uf+wgNVs7zNTX4+akadvw2ncCwNxr
Zvq0m1qCWdOE5OuACtpnEozoHguVdP7Xwi1PY0Yiiea/IodPZdG6IY+msWOTL+lrMTvHCjlYl/7Z
798FxdtRUyjLowye/Sn+pGNMMaF/fy/lMnnbS2xrAlRtbH55E1wlipOXOH7JuVmqzZY5O5R++mwN
4uYNlkuNmBcHTdh+GHa8UfyNkH6RSgpbgnsSzitiwFJMGbNSL+Q/KBhFGktfcgJ7dN7nL+ZoJ+ui
1bOWYy4mvwZuqDi1XP6+YDgGHJdPC1ww4CLeXMVHkksik7F0u07BWYc3DRiJnbmbkms3TT7b6aCg
miJYf2ZEhqmLek7tQFZjLeuvC3+vlPYOHLflAvbZqQj6KaCNAZKqokonLP2rBOMGO9Vu+KZtSRA9
5vqzXOcvfyN+gbRGD/gasyX5g4bOpBUbxx9qckL5YsYpRd+tPHYv4vAXQpxY1GxfQL/nUHd0+E5L
9/9WqbAEKSbFBOtLPvBM76/cgRG3Tu+Ah69tWM+Ih7p8sWLLXEJgkcmEUN9Nu9xEqJB1aRXD1aX6
ItLgawcGc9L0IGbGXG+8uSe0GBicR/NS53F1e40LC8d41v+RDQN82cM8Pd2zlTPlJb23pVJe1nGh
rxqLdCA6OqHIgm+Wp5l+jFdzNrVGWci0/Icpaa/Pn8s6WNMskUI1MVThK00BXx4zD884nK3SYNTr
ctsG1M/91aj65Mqj3f3BYMP191znofWdPrQGkkBRmSQt7hhcAhi4P91t2FgnZgijq5MC8ZZvHExa
f1O+0v/iw5lhZLRC+3Ebig8RAzbzy2CjIQVfjFPzlwAC8y1Ckf7X7mY7gAVgIRBW+pWoqO5P7uq9
2gMAZE0TVelsYSsaTKlKlA04s2LukGk6BkW1Kp/3LerYR21e2Jftp9IDPmkrMti5z+xhyOdZqk13
3cI+fAOb/PkQK2Kokzf1T62A1Z0jvebySPiqFUZa6DwQdaIxNiQLPvksbpyq2SGIz+pAhtpR8JEV
TyKTtm1Aled0xi0KXwPH2DpGXU6vl0Qpj1AoL7l2g/sJGAHklajnELINNcs4TkXle6PxUzhNHsdP
ABIUWgn+yYfrEJToqQE4ocAJA9VXV3uIobn3AtEqzo0tPPJ8+GvJKB7bEnvOfLBwdSjSXK1Adrp/
sZIPyk9LljlB2yPkiWx7/UiXiQSMLw4SOMYOJ+0SAI24fzHiTEVq06E11YvsAtXU4RFuv78XLHrL
kfpunc+rjz23ah/Wxw+U2NIeNgp6qtiCTtzsba6A/q03mLWBSfLTYs64Kqf6OVePLCtmlQpzu9pZ
NRz8R1Ua+m7CnAgnvUT0cefe2t8YZ3ck2mjEmnsgsMTKUrXk/Hccel7XAh0ZsTQlNbKbrVZ0CxwV
uD1joD+3Yf9HWzTn0wgp40d9rGoJynanTLndcJHAFWQr7qUpxQIw0svqhM0r1No+hsNFjI+XKFJ3
cZADovEc5x/fhCWkENsGpojqTbjjW//YC9otJ1ukm+azznKb/25MJ3bdDb5FXjxfH08kHRbvAwAj
DUsChNZWd/1jAeeiFeuiPlh1I4KZQSIzSvPBUYrxD3Th6xMq6NUJhE5PWp7ap9q67AVmGIdLYNLl
QRUo0pzSCiKHz8JSAGmY6X5Gc/0JZMQAaSp+/zzjgCIuJxht86vcKJSrMhOP+RWkbcTMDigmLpjr
PlyIkBNEoHndXwNJQD1TuLpLTqiXc8XqvElNrN7DKgm5ny7BFwOGkd08iDuONcl02hM5TjJCb0na
cL1507um/kyXr4GOALe7tPJCS811w+iDxU/IPcIyEL0RYZ3e37koqJyvSI2y/1Ksp9hI3vZK37R+
q+SqiSTvgMsM8CSi+8dElVIek/8suTohsMAUESVdYHNEBBsCGWZVvxNouyh5keCta/wMIVZ+T9wD
ru65T5IPPQkR7R+MK32Vl6w216dOUrKOg4fYMia6cNtRG9O9NqqghSIxnGF3cpDlw5JMx5XjJ/c+
wYVd5NjenhZOG4nW4v24toqk2thXYxcCEdGADL7qq6dVL9afc48D7rk41CJ5t01G+nJI7l2bXJDe
Y26CdQULWnst9PId62VV97xCyfOrJGCzbboGkK60Fbkis0tskOchq3kggOT7MYYl0Gb+3HAOcbKR
0rpBNKYXRnkn9tmfG5VHLNgjwvk5FbAK2abplw8Q+Nq=


And here's the decoded file:
Code:
<?php
/*********************/
/* */
/* Dezend for PHP5 */
/* NWS */
/* Nulled.WS */
/* */
/*********************/

if ( !extension_loaded( "ionCube Loader" ) )
{
$__oc = strtolower( substr( php_uname( ), 0, 3 ) );
$__ln = "ioncube_loader_".$__oc."_".substr( phpversion( ), 0, 3 ).( $__oc == "win" ? ".dll" : ".so" );
@dl( $__ln );
if ( function_exists( "_il_exec" ) )
{
return _il_exec( );
}
$__ln = "/ioncube/".$__ln;
$__oid = $__id = realpath( ini_get( "extension_dir" ) );
$__here = dirname( __FILE__ );
if ( 1 < strlen( $__id ) && $__id[1] == ":" )
{
$__id = str_replace( "\\", "/", substr( $__id, 2 ) );
$__here = str_replace( "\\", "/", substr( $__here, 2 ) );
}
$__rd = str_repeat( "/..", substr_count( $__id, "/" ) ).$__here."/";
$__i = strlen( $__rd );
while ( $__i-- )
{
if ( $__rd[$__i] == "/" )
{
$__lp = substr( $__rd, 0, $__i ).$__ln;
if ( file_exists( $__oid.$__lp ) )
{
$__ln = $__lp;
break;
}
}
}
@dl( $__ln );
}
else
{
exit( "The file ".( __FILE__ )." is corrupted.\n" );
}
if ( function_exists( "_il_exec" ) )
{
return _il_exec( );
}
echo "Site error: the file <b>".( __FILE__ )."</b> requires the ionCube PHP Loader ".basename( $__ln )." to be installed by the site administrator.";
exit( 199 );
echo "4+oV507jHSy3CxxWtb/Gx4FSrj7sBIaH+wS8zvUyKf9D0BlaOenU7/fkmLcFCdst6X9nYEyeYF2I\r\n2maI2wcLSvI9BZ0giYp4SMChbPmoo7teccuSrWcIJvsBZQ+7HWiFyIa1YwT/2V0uzlaWzxXa9U3i\r\nwTF0ihY2PDE33P99KdGYn6T7xfWFYaeUrWWwnUet2CzurR+IhUhyZs9LcxrWmn25bg2xRQoglFsI\r\nfk1RH/xEufEisDqv9548LEzSZxcw7pWbbAu2zfm95IxaUq7u0LCZcsmJMT8H8XwGQW4/ugUuO9pN\r\n2OF645SFK5+OOUAMyO+4NI5CBMsFQ2oRa4nZdzBq98hW3IG+rN8xGzQVW7gtHeBUAFX8vwm9Eehh\r\nhP6ep1nJJN";
echo "ZTbbhPUXlGuxYNqx+to/WZ2hTw92iwvXDMnX1sD0qEKgYRYX1tPf15Ja4nmGjmXcA6\r\nxorumFfdClU8tdxA7qR97oBUcD9olsJvovwnLtNVzmPfSlaX/BScj/zohaMhXuMyBt9PuutpkbJO\r\nEOvr72MatRTtca7dmzebp3WZ92dCQrdCYNuA/7rg1OXs5g46LY+t5ZNOdFnzDrH66jfQ5JuxoDsa\r\nyuhftr4X8QLn5lDQUEKxdQabYQ7C98/R7A4tfC6yiNv3kFP7BAHvX3+YANz9rLF+k5/r3MDJFxrR\r\nBFE39TQkSjvlJG5U6GaXjBgqUeK9IqgB/HcWVUvT2gQfLeg0VezQ4RVX2Iz2iPTB5BA1kPdUecfv\r\nrfymfpz8tTnwdL3+AWIH";
echo "w7encFCOwrEr1SGbvA8wW57xNJrNZ20/Y518TXRXDlqtq4reval9SqYV\r\nvKMEu4WBz8kmKZR8UkF7hH4fkdemhKkMc3VncEAy0EDDmT1Uf+wgNVs7zNTX4+akadvw2ncCwNxr\r\nZvq0m1qCWdOE5OuACtpnEozoHguVdP7Xwi1PY0Yiiea/IodPZdG6IY+msWOTL+lrMTvHCjlYl/7Z\r\n798FxdtRUyjLowye/Sn+pGNMMaF/fy/lMnnbS2xrAlRtbH55E1wlipOXOH7JuVmqzZY5O5R++mwN\r\n4uYNlkuNmBcHTdh+GHa8UfyNkH6RSgpbgnsSzitiwFJMGbNSL+Q/KBhFGktfcgJ7dN7nL+ZoJ+ui\r\n1bOWYy4mvwZuqDi1XP6+YDgGHJdPC1";
echo "ww4CLeXMVHkksik7F0u07BWYc3DRiJnbmbkms3TT7b6aCg\r\nmiJYf2ZEhqmLek7tQFZjLeuvC3+vlPYOHLflAvbZqQj6KaCNAZKqokonLP2rBOMGO9Vu+KZtSRA9\r\n5vqzXOcvfyN+gbRGD/gasyX5g4bOpBUbxx9qckL5YsYpRd+tPHYv4vAXQpxY1GxfQL/nUHd0+E5L\r\n9/9WqbAEKSbFBOtLPvBM76/cgRG3Tu+Ah69tWM+Ih7p8sWLLXEJgkcmEUN9Nu9xEqJB1aRXD1aX6\r\nItLgawcGc9L0IGbGXG+8uSe0GBicR/NS53F1e40LC8d41v+RDQN82cM8Pd2zlTPlJb23pVJe1nGh\r\nrxqLdCA6OqHIgm+Wp5l+jFdzNrVGWci0/Icpaa/P";
echo "n8s6WNMskUI1MVThK00BXx4zD884nK3SYNTr\r\nctsG1M/91aj65Mqj3f3BYMP191znofWdPrQGkkBRmSQt7hhcAhi4P91t2FgnZgijq5MC8ZZvHExa\r\nf1O+0v/iw5lhZLRC+3Ebig8RAzbzy2CjIQVfjFPzlwAC8y1Ckf7X7mY7gAVgIRBW+pWoqO5P7uq9\r\n2gMAZE0TVelsYSsaTKlKlA04s2LukGk6BkW1Kp/3LerYR21e2Jftp9IDPmkrMti5z+xhyOdZqk13\r\n3cI+fAOb/PkQK2Kokzf1T62A1Z0jvebySPiqFUZa6DwQdaIxNiQLPvksbpyq2SGIz+pAhtpR8JEV\r\nTyKTtm1Aled0xi0KXwPH2DpGXU6vl0Qpj1AoL7l2g/sJGAHkla";
echo "jnELINNcs4TkXle6PxUzhNHsdP\r\nABIUWgn+yYfrEJToqQE4ocAJA9VXV3uIobn3AtEqzo0tPPJ8+GvJKB7bEnvOfLBwdSjSXK1Adrp/\r\nsZIPyk9LljlB2yPkiWx7/UiXiQSMLw4SOMYOJ+0SAI24fzHiTEVq06E11YvsAtXU4RFuv78XLHrL\r\nkfpunc+rjz23ah/Wxw+U2NIeNgp6qtiCTtzsba6A/q03mLWBSfLTYs64Kqf6OVePLCtmlQpzu9pZ\r\nNRz8R1Ua+m7CnAgnvUT0cefe2t8YZ3ck2mjEmnsgsMTKUrXk/Hccel7XAh0ZsTQlNbKbrVZ0CxwV\r\nuD1joD+3Yf9HWzTn0wgp40d9rGoJynanTLndcJHAFWQr7qUpxQIw0svqhM0r";
echo "1No+hsNFjI+XKFJ3\r\ncZADovEc5x/fhCWkENsGpojqTbjjW//YC9otJ1ukm+azznKb/25MJ3bdDb5FXjxfH08kHRbvAwAj\r\nDUsChNZWd/1jAeeiFeuiPlh1I4KZQSIzSvPBUYrxD3Th6xMq6NUJhE5PWp7ap9q67AVmGIdLYNLl\r\nQRUo0pzSCiKHz8JSAGmY6X5Gc/0JZMQAaSp+/zzjgCIuJxht86vcKJSrMhOP+RWkbcTMDigmLpjr\r\nPlyIkBNEoHndXwNJQD1TuLpLTqiXc8XqvElNrN7DKgm5ny7BFwOGkd08iDuONcl02hM5TjJCb0na\r\ncL1507um/kyXr4GOALe7tPJCS811w+iDxU/IPcIyEL0RYZ3e37koqJyvSI2y/1Ksp9hI3v";
echo "ZK37R+\r\nq+SqiSTvgMsM8CSi+8dElVIek/8suTohsMAUESVdYHNEBBsCGWZVvxNouyh5keCta/wMIVZ+T9wD\r\nru65T5IPPQkR7R+MK32Vl6w216dOUrKOg4fYMia6cNtRG9O9NqqghSIxnGF3cpDlw5JMx5XjJ/c+\r\nwYVd5NjenhZOG4nW4v24toqk2thXYxcCEdGADL7qq6dVL9afc48D7rk41CJ5t01G+nJI7l2bXJDe\r\nY26CdQULWnst9PId62VV97xCyfOrJGCzbboGkK60Fbkis0tskOchq3kggOT7MYYl0Gb+3HAOcbKR\r\n0rpBNKYXRnkn9tmfG5VHLNgjwvk5FbAK2abplw8Q+Nq=";
?>


Could anyone explain why it's doing this?
View user's profile Send private message
ionCube not decoding?
www.waraxe.us Forum Index -> Php
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
 		All times are GMT
Page 1 of 1
Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group
Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
 Page Generation: 0.034 Seconds