Waraxe IT Security Portal

:: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools ::

November 23, 2024

Menu

Home

Logout

Discussions

	Forums
	Members List
	IRC chat

Tools

	Base64 coder
	MD5 hash
	CRC32 checksum
	ROT13 coder
	SHA-1 hash
	URL-decoder
	Sql Char Encoder

Affiliates

	y3dips ITsec
	Md5 Cracker
	User Manuals
	AlbumNow

Content

	Content
	Sections
	FAQ
	Top

Info

	Feedback
	Recommend Us
	Search
	Journal
	Your Account

User Info

Membership:

Latest: MichaelSnaRe

New Today: 0

New Yesterday: 0

Overall: 9144

People Online:

Visitors: 48

Members: 0

Total: 48

Full disclosure

APPLE-SA-11-19-2024-5 macOS Sequoia 15.1.1
Local Privilege Escalations in needrestart
APPLE-SA-11-19-2024-4 iOS 17.7.2 and iPadOS 17.7.2
APPLE-SA-11-19-2024-3 iOS 18.1.1 and iPadOS 18.1.1
APPLE-SA-11-19-2024-2 visionOS 2.1.1
APPLE-SA-11-19-2024-1 Safari 18.1.1
Reflected XSS - fronsetiav1.1
XXE OOB - fronsetiav1.1
St. Poelten UAS | Path Traversal in Korenix JetPort 5601
St. Poelten UAS | Multiple Stored Cross-Site Scripting in SEH utnserver Pro
Apple web content filter bypass allows unrestricted access to blocked content (macOS/iOS/iPadOS/visionO S/watchOS)
SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-38877, CVE-2024-38878, CVE-2024-38879)
Security issue in the TX Text Control .NET Server for ASP.NET.
SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater
Unsafe eval() in TestRail CLI

IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Php -> ionCube not decoding?
	View previous topic :: View next topic

ionCube not decoding?

Posted: Wed Jan 11, 2012 1:25 pm

MiniDjHedges

Regular user

Joined: Apr 09, 2011

Posts: 5

I'm trying to decode an ionCube file with "DeZender.DeIoncuber.06.09.2011". The encoded files that come with the download get decoded perfectly fine. But when I add my own encoded file, it doesn't decode it at all, it just moves the code about a little bit and adds line breaks in.

For example, here's the encoded file:

Code:

<?php //004d4
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');@dl($__ln);if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}@dl($__ln);}else{die('The file '.__FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the site administrator.');exit(199);
?>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And here's the decoded file:

Code:

<?php
/*********************/
/* */
/* Dezend for PHP5 */
/* NWS */
/* Nulled.WS */
/* */
/*********************/

if ( !extension_loaded( "ionCube Loader" ) )
{
$__oc = strtolower( substr( php_uname( ), 0, 3 ) );
$__ln = "ioncube_loader_".$__oc."_".substr( phpversion( ), 0, 3 ).( $__oc == "win" ? ".dll" : ".so" );
@dl( $__ln );
if ( function_exists( "_il_exec" ) )
{
return _il_exec( );
}
$__ln = "/ioncube/".$__ln;
$__oid = $__id = realpath( ini_get( "extension_dir" ) );
$__here = dirname( __FILE__ );
if ( 1 < strlen( $__id ) && $__id[1] == ":" )
{
$__id = str_replace( "\\", "/", substr( $__id, 2 ) );
$__here = str_replace( "\\", "/", substr( $__here, 2 ) );
}
$__rd = str_repeat( "/..", substr_count( $__id, "/" ) ).$__here."/";
$__i = strlen( $__rd );
while ( $__i-- )
{
if ( $__rd[$__i] == "/" )
{
$__lp = substr( $__rd, 0, $__i ).$__ln;
if ( file_exists( $__oid.$__lp ) )
{
$__ln = $__lp;
break;
}
}
}
@dl( $__ln );
}
else
{
exit( "The file ".( __FILE__ )." is corrupted.\n" );
}
if ( function_exists( "_il_exec" ) )
{
return _il_exec( );
}
echo "Site error: the file <b>".( __FILE__ )."</b> requires the ionCube PHP Loader ".basename( $__ln )." to be installed by the site administrator.";
exit( 199 );
echo "4+oV507jHSy3CxxWtb/Gx4FSrj7sBIaH+wS8zvUyKf9D0BlaOenU7/fkmLcFCdst6X9nYEyeYF2I\r\n2maI2wcLSvI9BZ0giYp4SMChbPmoo7teccuSrWcIJvsBZQ+7HWiFyIa1YwT/2V0uzlaWzxXa9U3i\r\nwTF0ihY2PDE33P99KdGYn6T7xfWFYaeUrWWwnUet2CzurR+IhUhyZs9LcxrWmn25bg2xRQoglFsI\r\nfk1RH/xEufEisDqv9548LEzSZxcw7pWbbAu2zfm95IxaUq7u0LCZcsmJMT8H8XwGQW4/ugUuO9pN\r\n2OF645SFK5+OOUAMyO+4NI5CBMsFQ2oRa4nZdzBq98hW3IG+rN8xGzQVW7gtHeBUAFX8vwm9Eehh\r\nhP6ep1nJJN";
echo "ZTbbhPUXlGuxYNqx+to/WZ2hTw92iwvXDMnX1sD0qEKgYRYX1tPf15Ja4nmGjmXcA6\r\nxorumFfdClU8tdxA7qR97oBUcD9olsJvovwnLtNVzmPfSlaX/BScj/zohaMhXuMyBt9PuutpkbJO\r\nEOvr72MatRTtca7dmzebp3WZ92dCQrdCYNuA/7rg1OXs5g46LY+t5ZNOdFnzDrH66jfQ5JuxoDsa\r\nyuhftr4X8QLn5lDQUEKxdQabYQ7C98/R7A4tfC6yiNv3kFP7BAHvX3+YANz9rLF+k5/r3MDJFxrR\r\nBFE39TQkSjvlJG5U6GaXjBgqUeK9IqgB/HcWVUvT2gQfLeg0VezQ4RVX2Iz2iPTB5BA1kPdUecfv\r\nrfymfpz8tTnwdL3+AWIH";
echo "w7encFCOwrEr1SGbvA8wW57xNJrNZ20/Y518TXRXDlqtq4reval9SqYV\r\nvKMEu4WBz8kmKZR8UkF7hH4fkdemhKkMc3VncEAy0EDDmT1Uf+wgNVs7zNTX4+akadvw2ncCwNxr\r\nZvq0m1qCWdOE5OuACtpnEozoHguVdP7Xwi1PY0Yiiea/IodPZdG6IY+msWOTL+lrMTvHCjlYl/7Z\r\n798FxdtRUyjLowye/Sn+pGNMMaF/fy/lMnnbS2xrAlRtbH55E1wlipOXOH7JuVmqzZY5O5R++mwN\r\n4uYNlkuNmBcHTdh+GHa8UfyNkH6RSgpbgnsSzitiwFJMGbNSL+Q/KBhFGktfcgJ7dN7nL+ZoJ+ui\r\n1bOWYy4mvwZuqDi1XP6+YDgGHJdPC1";
echo "ww4CLeXMVHkksik7F0u07BWYc3DRiJnbmbkms3TT7b6aCg\r\nmiJYf2ZEhqmLek7tQFZjLeuvC3+vlPYOHLflAvbZqQj6KaCNAZKqokonLP2rBOMGO9Vu+KZtSRA9\r\n5vqzXOcvfyN+gbRGD/gasyX5g4bOpBUbxx9qckL5YsYpRd+tPHYv4vAXQpxY1GxfQL/nUHd0+E5L\r\n9/9WqbAEKSbFBOtLPvBM76/cgRG3Tu+Ah69tWM+Ih7p8sWLLXEJgkcmEUN9Nu9xEqJB1aRXD1aX6\r\nItLgawcGc9L0IGbGXG+8uSe0GBicR/NS53F1e40LC8d41v+RDQN82cM8Pd2zlTPlJb23pVJe1nGh\r\nrxqLdCA6OqHIgm+Wp5l+jFdzNrVGWci0/Icpaa/P";
echo "n8s6WNMskUI1MVThK00BXx4zD884nK3SYNTr\r\nctsG1M/91aj65Mqj3f3BYMP191znofWdPrQGkkBRmSQt7hhcAhi4P91t2FgnZgijq5MC8ZZvHExa\r\nf1O+0v/iw5lhZLRC+3Ebig8RAzbzy2CjIQVfjFPzlwAC8y1Ckf7X7mY7gAVgIRBW+pWoqO5P7uq9\r\n2gMAZE0TVelsYSsaTKlKlA04s2LukGk6BkW1Kp/3LerYR21e2Jftp9IDPmkrMti5z+xhyOdZqk13\r\n3cI+fAOb/PkQK2Kokzf1T62A1Z0jvebySPiqFUZa6DwQdaIxNiQLPvksbpyq2SGIz+pAhtpR8JEV\r\nTyKTtm1Aled0xi0KXwPH2DpGXU6vl0Qpj1AoL7l2g/sJGAHkla";
echo "jnELINNcs4TkXle6PxUzhNHsdP\r\nABIUWgn+yYfrEJToqQE4ocAJA9VXV3uIobn3AtEqzo0tPPJ8+GvJKB7bEnvOfLBwdSjSXK1Adrp/\r\nsZIPyk9LljlB2yPkiWx7/UiXiQSMLw4SOMYOJ+0SAI24fzHiTEVq06E11YvsAtXU4RFuv78XLHrL\r\nkfpunc+rjz23ah/Wxw+U2NIeNgp6qtiCTtzsba6A/q03mLWBSfLTYs64Kqf6OVePLCtmlQpzu9pZ\r\nNRz8R1Ua+m7CnAgnvUT0cefe2t8YZ3ck2mjEmnsgsMTKUrXk/Hccel7XAh0ZsTQlNbKbrVZ0CxwV\r\nuD1joD+3Yf9HWzTn0wgp40d9rGoJynanTLndcJHAFWQr7qUpxQIw0svqhM0r";
echo "1No+hsNFjI+XKFJ3\r\ncZADovEc5x/fhCWkENsGpojqTbjjW//YC9otJ1ukm+azznKb/25MJ3bdDb5FXjxfH08kHRbvAwAj\r\nDUsChNZWd/1jAeeiFeuiPlh1I4KZQSIzSvPBUYrxD3Th6xMq6NUJhE5PWp7ap9q67AVmGIdLYNLl\r\nQRUo0pzSCiKHz8JSAGmY6X5Gc/0JZMQAaSp+/zzjgCIuJxht86vcKJSrMhOP+RWkbcTMDigmLpjr\r\nPlyIkBNEoHndXwNJQD1TuLpLTqiXc8XqvElNrN7DKgm5ny7BFwOGkd08iDuONcl02hM5TjJCb0na\r\ncL1507um/kyXr4GOALe7tPJCS811w+iDxU/IPcIyEL0RYZ3e37koqJyvSI2y/1Ksp9hI3v";
echo "ZK37R+\r\nq+SqiSTvgMsM8CSi+8dElVIek/8suTohsMAUESVdYHNEBBsCGWZVvxNouyh5keCta/wMIVZ+T9wD\r\nru65T5IPPQkR7R+MK32Vl6w216dOUrKOg4fYMia6cNtRG9O9NqqghSIxnGF3cpDlw5JMx5XjJ/c+\r\nwYVd5NjenhZOG4nW4v24toqk2thXYxcCEdGADL7qq6dVL9afc48D7rk41CJ5t01G+nJI7l2bXJDe\r\nY26CdQULWnst9PId62VV97xCyfOrJGCzbboGkK60Fbkis0tskOchq3kggOT7MYYl0Gb+3HAOcbKR\r\n0rpBNKYXRnkn9tmfG5VHLNgjwvk5FbAK2abplw8Q+Nq=";
?>

Could anyone explain why it's doing this?

ionCube not decoding?

www.waraxe.us Forum Index -> Php

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

All times are GMT
Page 1 of 1

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.041 Seconds