|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 128
Members: 0
Total: 128
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Please help me decode this file |
|
Posted: Fri Aug 13, 2010 12:40 pm |
|
|
Ronale |
Beginner |
|
|
Joined: Aug 13, 2010 |
Posts: 4 |
|
|
|
|
|
|
|
Hi, I just stumble upon this forum. I hope somebody here can help me decode this file.
Code: | <?php /**/$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=484;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDc4KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>kr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==tmklFbapFMagd25jcUEPwtwVRJ9jd25MDBFVFoiXwJLIKXppcJEPwolVfucidtEPwtOgA0aTA0lNTlSJdo9mDB5gCBOsDB5gDBWJbUEpwe09weEIhWp7tMilCBOlFJEPwtkSd2YifolvdjppdMOlGt5XDuEJhUE7tMa4DbWIhtEpweShgWpZcby1Dbklb29VC2AIhtEJRJ4vC2xiF3YlFZ9sDbYjRMc1dMHVFoiXwJLIKXpZcby1Dbklb29VC2AIhtEJRJ4vC2xiF3YlFZ9sCB5pFuaSCbOlRmnPFtwpweShkoOiforINUnVcbFIOoy0CA1idMlXfBxifo9ZwtIIhUE7tJO0DbOScUE9wtOLCbOiRT5zcBxlC3WIhtEJA2l0cA1idMymcbwJRtwQwJxiFmkiGUEPwtkTDbOlaMyZDByJdoAJNT4JA2l0cA5idBAJhUEpweShkuOpfoxlwe0IkuOpfoxlBznfweSh |
Thanks in advance for any help |
|
|
|
|
|
|
|
|
Posted: Fri Aug 13, 2010 3:11 pm |
|
|
tsabitah |
Valuable expert |
|
|
Joined: Jul 07, 2010 |
Posts: 328 |
Location: surabaya |
|
|
|
|
|
|
Code: | <?php
require_once ( "../config.php") ;
if ( intval ( $_SESSION["login_admin_id"] ) == 0 )
{
header ( "location:index.php") ;
exit ( ) ;
}
require_once ( "../classes/misc.func.php") ;
require_once ( "../classes/manipulate.php") ;
$data = new DataManipulator ( ) ;
$title = $data->select ( "SiteManager","*",array ( "SiteVariable"=>"SiteName") ) ;
$title = $title[0] ;
?> |
|
|
|
|
|
|
|
|
|
Posted: Sat Aug 14, 2010 7:13 am |
|
|
Ronale |
Beginner |
|
|
Joined: Aug 13, 2010 |
Posts: 4 |
|
|
|
|
|
|
|
wow, thanks tsabitah.
Could you please decode another file? I'm not sure whether it's the same as the above one.
Code: | <?php /**/$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=1804;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGY1KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>kr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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 |
|
|
|
|
|
|
|
|
|
Posted: Sat Aug 14, 2010 7:35 am |
|
|
tsabitah |
Valuable expert |
|
|
Joined: Jul 07, 2010 |
Posts: 328 |
Location: surabaya |
|
|
|
|
|
|
Code: | <?php
session_start();
require_once("../config.php");
require_once("../classes/manipulate.php");
require_once("../classes/misc.func.php");
$data = new DataManipulator();
get_status_license();
if ($_POST) {
$post_array = $_POST;
$post_array["psd_password"] = md5($post_array["psd_password"]);
$admin_detail = $data->select("Admins", "*", array("AdminEmail" => addslashes($post_array["txtEmailAddress"]), "AdminPassword" => $post_array["psd_password"]));
if (!empty($admin_detail)) {
$admin_detail = $admin_detail[0];
$_SESSION["login_admin_id"] = intval($admin_detail["AdminID"]);
$_SESSION["login_admin_email"] = $admin_detail["AdminEmail"];
$_SESSION["admin_rights"]["r_home"] = intval($admin_detail["IsSite_Manage"]);
$_SESSION["admin_rights"]["r_coupon"] = intval($admin_detail["IsCoupon_Manage"]);
$_SESSION["admin_rights"]["r_website"] = intval($admin_detail["IsWebsite_Manage"]);
$_SESSION["admin_rights"]["r_tag"] = intval($admin_detail["IsTag_Manage"]);
$_SESSION["admin_rights"]["r_comment"] = intval($admin_detail["IsComment_Manage"]);
$_SESSION["admin_rights"]["r_account"] = intval($admin_detail["IsAccount_Manage"]);
$_SESSION["admin_rights"]["r_page"] = intval($admin_detail["IsPage_Manage"]);
header("location:home.php");
exit();
}
}
header("location:index.php");
?> |
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|