|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 81
Members: 0
Total: 81
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Please Decode |
|
Posted: Tue Apr 03, 2012 9:20 pm |
|
|
firestone |
Beginner |
|
|
Joined: Apr 04, 2012 |
Posts: 1 |
|
|
|
|
|
|
|
Hello,
Can somebody decode the php script below?
Code: | [quote]
<?php if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29")) { function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E) { $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E); $T7FC56270E7A70FA81A5935B72EACBE29 = 0; $T9D5ED678FE57BCCA610140957AFAB571 = 0; $T0D61F8370CAD1D412F80B84D143E1257 = 0; $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3; $T800618943025315F869E4E1F09471012 = 0; $TDFCF28D0734569A6A693BC8194DE62BF = 16; $TC1D9F50F86825A1A2302EC2449C17196 = ""; $TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E); $TFF44570ACA8241914870AFBC310CDB85 = __FILE__; $TFF44570ACA8241914870AFBC310CDB85 = file_get_contents($TFF44570ACA8241914870AFBC310CDB85); $TA5F3C6A11B03839D46AF9FB43C97C188 = 0; preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188); for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;) { if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit; if ($TDFCF28D0734569A6A693BC8194DE62BF == 0) { $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]); $TDFCF28D0734569A6A693BC8194DE62BF = 16; } if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000) { $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4); $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4); if ($T7FC56270E7A70FA81A5935B72EACBE29) { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $T0D61F8370CAD1D412F80B84D143E1257++) $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1D412F80B84D143E1257]; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } else { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } } else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]; $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1; $TDFCF28D0734569A6A693BC8194DE62BF--; if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F) { $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196); $TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?"; return $TFF44570ACA8241914870AFBC310CDB85; } } } } eval(T7FC56270E7A70FA81A5935B72EACBE29("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")); ?> | [/quote] |
|
|
|
|
|
|
|
|
Posted: Tue Jul 03, 2012 1:52 pm |
|
|
astra1993 |
Advanced user |
|
|
Joined: Jun 20, 2012 |
Posts: 125 |
|
|
|
|
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|