 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 93
 Members: 0
 Total: 93
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
tool to decode function_exists?? |
|
 Posted: Fri Aug 31, 2012 3:08 am |
 |
|
| arale |
| Regular user |
 |
|
| Joined: Aug 31, 2012 |
| Posts: 22 |
|
|
|
 |
|
 |
|
Hello,
Im new here, I have file with code look like below code.
- Whats this encrypted type?
- How to decode it? Is there any tool? Can you tell me about it?
Thanks
| Code: | | <?php if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29")) { function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E) { $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E); $T7FC56270E7A70FA81A5935B72EACBE29 = 0; $T9D5ED678FE57BCCA610140957AFAB571 = 0; $T0D61F8370CAD1D412F80B84D143E1257 = 0; $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3; $T800618943025315F869E4E1F09471012 = 0; $TDFCF28D0734569A6A693BC8194DE62BF = 16; |
|
|
|
|
|
|
|
|
|
| Posted: Fri Aug 31, 2012 9:21 am |
|
|
| demon |
| Moderator |
 |
|
| Joined: Sep 22, 2010 |
| Posts: 485 |
|
|
|
|
|
|
|
post the whole file and i'll decode it  |
|
_________________
Go BIG or go HOME ! |
|
|
|
|
Re: tool to decode function_exists?? |
|
| Posted: Fri Aug 31, 2012 10:27 am |
|
|
| Cyko |
| Moderator |
 |
|
| Joined: Jul 21, 2009 |
| Posts: 375 |
|
|
|
|
|
|
|
| arale wrote: | Hello,
Im new here, I have file with code look like below code.
- Whats this encrypted type?
- How to decode it? Is there any tool? Can you tell me about it? |
It is eval based encoding.
You already have the tool to decode it (the function to decode it is staring right infront of you - it is just obfuscated).
Replace the eval with highlight_string 
Then run it through phpformatter.com (and clean up any excess php tags).
Have fun! |
|
|
|
|
| Posted: Sat Sep 01, 2012 2:48 am |
|
|
| arale |
| Regular user |
|
|
| Joined: Aug 31, 2012 |
| Posts: 22 |
|
|
|
|
|
|
|
| so with this file type, there is no tool to decode automatically? Must do it manually? |
|
|
|
|
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
