Waraxe IT Security Portal
Login or Register
November 5, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 161
Members: 0
Total: 161
Full disclosure
4 vulnerabilities in ibmsecurity
32 vulnerabilities in IBM Security Verify Access
xlibre Xnest security advisory & bugfix releases
APPLE-SA-10-29-2024-1 Safari 18.1
SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600)
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
APPLE-SA-10-28-2024-8 visionOS 2.1
APPLE-SA-10-28-2024-7 tvOS 18.1
APPLE-SA-10-28-2024-6 watchOS 11.1
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1
Open Redirect / Reflected XSS - booked-schedulerv2.8.5
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Php -> I cant for the life of me decode this one ioncube file :(
Post new topicReply to topic View previous topic :: View next topic
I cant for the life of me decode this one ioncube file :(
PostPosted: Mon Jan 16, 2012 7:28 am Reply with quote
HappyToHelp
Regular user
Regular user
Joined: Jan 14, 2012
Posts: 20
Location: Uk




I purchased a script ages ago and need to get rid of some annoying offer that the link points back too called "Powered By"

I am positive it's in the "offerheader.php" file but can not decode the damn thing.

It's really getting me down because I was due to start marketing this thing last week, so far it's taken hours of my life away.

Please can someone help me out because I just need this file implemented.




Offer Header

<?php //0046b
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);

?>
4+oV5BRh1ZVfC/iuu5+J57KVIeXy2fmkNs5lIiTPv0s4XpFCUA/PJjnekDU8KDkxi3KCrhpxHCIU
eHW+BVUDyl5EepGMNf/Qv7AS772YAA771EPcXjjG8+fD5au9KDJ1Ol3BcFyIz4rYtv+W8lxYhPRl
fEK2hsAfKfNKNsmEWtrfwT0kLYK7ADoDXkKn/PMVWsDLyeNDjSReCvkXcjTbCkHop60B+cS75oHx
HKXPVbhhaqGpm6tfScF8/kBEoqAN4blZXIxcEfkegY7CPuKd1n3TyvEEdg+g8PCXO/yE8C/Mwuj8
+oE4cDf2Ox4qWhsHD5ipnLBmEzBlZASs+DEA5SmgyOfnfUaJZEHj4xbBZmuBKVjXhMXYQnKg5L11
cDx3ebNxstIigxcGedvEs0l9sP+U3+L2OlVbdlj5HsyLvBiECWpP2MK8zHLC8NxjOiTE55XxIKcC
EXgGoeSD9PkdlnVbfm6pmO87nsckApeFAcAfKIry5npt33QGrNZ/Yxbkio1BVZAtTkPd/y9OZsRG
F/V/EiknFVBkrBC2TK+0IX5dsIjVbgVeSCeZssyCr81HeqBpD11tQoDBNqfIKWcyTXyCxJIw9Rr9
lw8eC6Il2hvO8FELgmje2l8n4wmHvK6h3rIzLJkiUzz61QnQyiCTBJIWO9Q1YB8fXyetFw4Voknd
iY7TaxXbeEQRSHuaFj9D3xnXYoKL8cdB8kdXNJyUqE2eqpYI0qzGlTvHSCnXtjTeEw2XX+ph9Q4Z
rkit+s72W9TfDjdioVAEDOJPnIT/Q2aII1JCuB2rOpDEad0Wsh6hyFd/vhTWP9ZetE5LorcvRjbz
295JKrgWh5be0CCcJGkQo2YSCDdc7UPjoL2AbeRbfL1m+pZjV54FU2hoy+1NZs61dn05NZ5MOVqR
CBJnLSXfwnnkQExCraHpbIEhD47IQP6HEt0PrEWfxwusikOQ8Qj++Jq6ZOO+7uIVQIrXfcx/vyYK
DO4OVhKJg7t0jsnfGMxNpgNn4O2eiTXYKBNKTsG5jrgw2Gs4SyCkOckYX6jKINLnpO7qAMCYJKyd
YsLdNBBgmFpmoQcRAzXXKJ+vcBYfjP7VouPwA10Fk8q2vgu4T4DV2h+HiQP3H+dRuDJGHl84UN6+
2zvAL0zHgjXS5motqGzUyz81xYV4O/rpgXdHkQ7pub8OaJXvc+uTao+f/Y2nEnsTKWxV3rEKLigx
HtQ7jhJNTdXtlJ5ShRvdQUFQ5wVPaZaYO5t2kWbmVyxxH1SFuS5gNekSgn5IqLhllZMvrDyM438W
xc2OpW7UB3Hjl1wf1jzu5dRSjVI8Py7VQWD5PKEAybK9w+CL3sofSeOzeL29rMy=


Last edited by HappyToHelp on Mon Jan 16, 2012 10:15 am; edited 1 time in total
View user's profile Send private message Visit poster's website
PostPosted: Mon Jan 16, 2012 7:36 am Reply with quote
DvStone
Regular user
Regular user
Joined: Jan 15, 2012
Posts: 6




This archive is with problems…

It accuses error in heading

It dispatches by post the original…

You used which version of the IonCube?
View user's profile Send private message Send e-mail
PostPosted: Mon Jan 16, 2012 7:37 am Reply with quote
HappyToHelp
Regular user
Regular user
Joined: Jan 14, 2012
Posts: 20
Location: Uk




DvStone wrote:
This archive is with problems…

It accuses error in heading

It dispatches by post the original…

You used which version of the IonCube?


Hi There

I'm not too sure in all honestly, it's just a script we purchased a while back, truth is I have no clue about any of what you just mentioned sorry.
View user's profile Send private message Visit poster's website
PostPosted: Mon Jan 16, 2012 7:42 am Reply with quote
DvStone
Regular user
Regular user
Joined: Jan 15, 2012
Posts: 6




I noticed that you used an old version of ioncube, you to share with me? I am needing…

If you to arrange the original obtain to revert the code for you…
View user's profile Send private message Send e-mail
PostPosted: Mon Jan 16, 2012 7:47 am Reply with quote
HappyToHelp
Regular user
Regular user
Joined: Jan 14, 2012
Posts: 20
Location: Uk




DvStone wrote:
I noticed that you used an old version of ioncube, you to share with me? I am needing…

If you to arrange the original obtain to revert the code for you…


We did not secure this script it was already like it, the developer secured it even know it should not of been, I mean we paid for this script under the pretense that it was ready to be used Sad

I'm happy to trade something with you, I have 36,000 PR7-PR1 backlinks, I am very advanced in SEO and web development, I have hundreds of fantastic stuff.

I really need help with this because it's just beyond annoying now, thing is I'm not 100% sure that this offerheader.php file is going to be the exact file that has the "Powered By" code which points back to the link I am just guessing.

Ideally it's going to be the correct one etc... if you would be kind enuogh to decode it for me I would really really appreciate it.
View user's profile Send private message Visit poster's website
PostPosted: Mon Jan 16, 2012 7:51 am Reply with quote
johnburn
Advanced user
Advanced user
Joined: Jan 14, 2011
Posts: 199
Location: Malaysia




Code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>
</title>

<meta name="description" content="" />

<meta name="keywords" content="" />

<link rel="stylesheet" href="<?php echo $siteName; ?>css/style.css" type="text/css" />

<link href="<?php echo $siteName; ?>css/thickbox.css" rel="stylesheet" type="text/css" />
<script language="javascript">

var siteName = "<?php echo $siteName; ?>";

</script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/jquery-1.3.2.js"></script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/jquery.validate.js"></script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/ajax.js"></script>
<script language="javascript" src="<?php echo $siteName; ?>scripts/thickbox.js"></script>

</head>

<body>

<div id="wrapper">
View user's profile Send private message
PostPosted: Mon Jan 16, 2012 7:55 am Reply with quote
DvStone
Regular user
Regular user
Joined: Jan 15, 2012
Posts: 6




Rat…

It obtained something with mine?
View user's profile Send private message Send e-mail
PostPosted: Mon Jan 16, 2012 8:16 am Reply with quote
HappyToHelp
Regular user
Regular user
Joined: Jan 14, 2012
Posts: 20
Location: Uk




DvStone wrote:
Rat…

It obtained something with mine?


Thanks so much John, I just replied in the other thread. DV what do you mean RAT? I don't follow you...
View user's profile Send private message Visit poster's website
I cant for the life of me decode this one ioncube file :(
www.waraxe.us Forum Index -> Php
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.047 Seconds