|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 166
Members: 0
Total: 166
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Quick php obfuscated 1 page |
|
Posted: Mon Jan 24, 2011 4:28 am |
|
|
ev0 |
Regular user |
|
|
Joined: Jan 24, 2011 |
Posts: 9 |
|
|
|
|
|
|
|
I've worked on decoding this for about an hour, and i'm struggling badly. If anyone can help, i'd greatly appreciate it
Code: | <?php if(!function_exists("TC9A16C47DA8EEE87")){function TC9A16C47DA8EEE87($T059EC46CFE335260){$T059EC46CFE335260=base64_decode($T059EC46CFE335260);$TC9A16C47DA8EEE87=0;$TA7FB8B0A1C0E2E9E=0;$T17D35BB9DF7A47E4=0;$T65CE9F6823D588A7=(ord($T059EC46CFE335260[1])<<8)+ord($T059EC46CFE335260[2]);$TBF14159DC7D007D3=3;$T77605D5F26DD5248=0;$T4A747C3263CA7A55=16;$T7C7E72B89B83E235="";$T0D47BDF6FD9DDE2E=strlen($T059EC46CFE335260);$T43D5686285035C13=__FILE__;$T43D5686285035C13=file_get_contents($T43D5686285035C13);$T6BBC58A3B5B11DC4=0;preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"),$T43D5686285035C13,$T6BBC58A3B5B11DC4);for(;$TBF14159DC7D007D3<$T0D47BDF6FD9DDE2E;){if(count($T6BBC58A3B5B11DC4)) exit;if($T4A747C3263CA7A55==0){$T65CE9F6823D588A7=(ord($T059EC46CFE335260[$TBF14159DC7D007D3++])<<8);$T65CE9F6823D588A7+=ord($T059EC46CFE335260[$TBF14159DC7D007D3++]);$T4A747C3263CA7A55=16;}if($T65CE9F6823D588A7&0x8000){$TC9A16C47DA8EEE87=(ord($T059EC46CFE335260[$TBF14159DC7D007D3++])<<4);$TC9A16C47DA8EEE87+=(ord($T059EC46CFE335260[$TBF14159DC7D007D3])>>4);if($TC9A16C47DA8EEE87){$TA7FB8B0A1C0E2E9E=(ord($T059EC46CFE335260[$TBF14159DC7D007D3++])&0x0F)+3;for($T17D35BB9DF7A47E4=0;$T17D35BB9DF7A47E4<$TA7FB8B0A1C0E2E9E;$T17D35BB9DF7A47E4++)$T7C7E72B89B83E235[$T77605D5F26DD5248+$T17D35BB9DF7A47E4]=$T7C7E72B89B83E235[$T77605D5F26DD5248-$TC9A16C47DA8EEE87+$T17D35BB9DF7A47E4];$T77605D5F26DD5248+=$TA7FB8B0A1C0E2E9E;}else{$TA7FB8B0A1C0E2E9E=(ord($T059EC46CFE335260[$TBF14159DC7D007D3++])<<8);$TA7FB8B0A1C0E2E9E+=ord($T059EC46CFE335260[$TBF14159DC7D007D3++])+16;for($T17D35BB9DF7A47E4=0;$T17D35BB9DF7A47E4<$TA7FB8B0A1C0E2E9E;$T7C7E72B89B83E235[$T77605D5F26DD5248+$T17D35BB9DF7A47E4++]=$T059EC46CFE335260[$TBF14159DC7D007D3]);$TBF14159DC7D007D3++;$T77605D5F26DD5248+=$TA7FB8B0A1C0E2E9E;}}else $T7C7E72B89B83E235[$T77605D5F26DD5248++]=$T059EC46CFE335260[$TBF14159DC7D007D3++];$T65CE9F6823D588A7<<=1;$T4A747C3263CA7A55--;if($TBF14159DC7D007D3==$T0D47BDF6FD9DDE2E){$T43D5686285035C13=implode("",$T7C7E72B89B83E235);$T43D5686285035C13="?".">".$T43D5686285035C13;return $T43D5686285035C13;}}}}eval(TC9A16C47DA8EEE87("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"));?> |
|
|
|
|
|
|
|
|
|
Posted: Mon Jan 24, 2011 5:46 am |
|
|
johnburn |
Advanced user |
|
|
Joined: Jan 14, 2011 |
Posts: 199 |
Location: Malaysia |
|
|
|
|
|
|
|
|
|
|
Posted: Mon Jan 24, 2011 5:48 am |
|
|
ev0 |
Regular user |
|
|
Joined: Jan 24, 2011 |
Posts: 9 |
|
|
|
|
|
|
|
Darn you replied LITERALLY 5 seconds after i got it myself. Thanks a ton for you help. You did however get a piece i was unable to. |
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|