BoniFaci, держи PHP: if ( !defined('BASEPATH')) exit('No direct script access allowed'); $config['base_url'] = 'http://aion-wingsofliberty.ru/'; $config['index_page'] = ''; $config['uri_protocol'] = 'AUTO'; $config['url_suffix'] = ''; $config['language'] = 'russian'; $config['charset'] = 'UTF-8'; $config['enable_hooks'] = FALSE; $config['subclass_prefix'] = 'MY_'; $config['permitted_uri_chars'] = 'A-Za-zРђ-РЇР°-СЏ=\s&0-9~%\.:_-'; $config['allow_get_array'] = TRUE; $config['enable_query_strings'] = FALSE; $config['controller_trigger'] = 'c'; $config['function_trigger'] = 'm'; $config['directory_trigger'] = 'd'; $config['log_threshold'] = 1; $config['log_path'] = ''; $config['log_date_format'] = 'Y-m-d H:i:s'; $config['stamp'] = 'e57ba8a325fb2048da3f52b50c427487ef860805'; $config['cache_path'] = ''; $config['encryption_key'] = 'fdultpbqrkvyjghcn'; $config['sess_cookie_name'] = 'ci_session'; $config['sess_expiration'] = 7200; $config['sess_expire_on_close'] = FALSE; $config['sess_encrypt_cookie'] = TRUE; $config['sess_use_database'] = TRUE; $config['sess_table_name'] = 'ci_sessions'; $config['sess_match_ip'] = TRUE; $config['sess_match_useragent'] = TRUE; $config['sess_time_to_update'] = 300; $config['cookie_prefix'] = ""; $config['cookie_domain'] = ""; $config['cookie_path'] = "/"; $config['cookie_secure'] = FALSE; $config['global_xss_filtering'] = TRUE; $config['csrf_protection'] = FALSE; $config['csrf_token_name'] = 'csrf_test_name'; $config['csrf_cookie_name'] = 'csrf_cookie_name'; $config['csrf_expire'] = 7200; $config['compress_output'] = FALSE; $config['time_reference'] = 'Europe/Moscow'; $config['rewrite_short_tags'] = TRUE; $config['proxy_ips'] = ''; $config['version'] = '2.4';
Большущее спасибо, GRRRL Power! +10 в репу добавил! Ещё такой щипитильный вопрос: можете выложить в личку этапы работы пусть даже в текстовом файле. Прошу описать этапы ещё и потому что таких файлов зашифрованных у меня много и не хотелось бы каждый раз с новым файлом лезьть на форум и тревожить вас. Принцип я читал на первой странице, пробовал сам делать, но потом зашёл в ступор, когда дошёл до этого: PHP: $O000O0O00=$OOO000O00($OOO0O0O00,'rb');$O0O00OO00($O000O0O00,0x48f);$OO00O00O0=$OOO0000O0($OOO00000O($O0O00OO00($O000O0O00,0x384),'iLzdhbrcN3HfsKDUaS8RjFQoMGZ9gyIT0pAt5YWxC2J/P7EBnuVve41qOmwl6kX+=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'));eval($OO00O00O0);
Если все файлы одинаково зашифрованы, то такой автоматический расшифровщик может помочь: PHP: <?php //имя файла обфусцированного скрипта $_filename = "ophp.txt"; $_script = file_get_contents($_filename); if(!preg_match('/<\?php(.+)\?>/s', $_script, $_s1)) die('Cannot decrypt 1'); $_s1 = $_s1[1]; $_s2 = str_replace('eval(', '$_s3=(', $_s1); if($_s2 == $_s1) die('Cannot decrypt 2'); eval($_s2); $_s4 = preg_replace('/\(\$\S+,\'rb\'\)/s', '(\''.$_filename.'\',\'rb\')', $_s3); if($_s4 == $_s3) die('Cannot decrypt 3'); $_s5 = str_replace('eval(', '$_s6=(', $_s4); if($_s5 == $_s6) die('Cannot decrypt 4'); eval($_s5); $_s7 = str_replace('eval(', '$_s10=(', $_s6); if($_s7 == $_s6) die('Cannot decrypt 5'); $_s8 = str_replace('die(', 'foo(', $_s7); if($_s8 == $_s7) print('Warn: Cannot decrypt 6<br>'); $_s9 = str_replace('while(', 'while(false&&', $_s8); if($_s9 == $_s8) print('Warn: Cannot decrypt 7<br>'); eval($_s9); $_s10 = htmlspecialchars($_s10); print <<<HERE <html><body><textarea rows=30 cols=100> $_s10 </textarea></body></html> HERE; function foo($a) {} ?>
Помогите декодировать код Добрый день, когда то давно закриптовал код с помощью Eugen Shell, а вот сейчас необходимо поправить его...Да вот исходник куда то подевался...Сервисами пробовал, echo вставлял(хотя может и криво). Вот примерчик кода: Люди добрые помогите пожалуйста, вернее объясните как расшифровать.
Такое впечатление, что все, что тут зашифровано, это PHP: ?><?php include "header.php"; ?><? А вся расшифровка - вставить echo вместо eval, получить некий контент, вставить в нем в свою очередь вместо eval echo, и всё.
Да, действительно там иклюд в качестве примера, сам криптованый код примерно на 4кб.. Спасибо, но есть небольшая проблема..Сделал все как указано.. есть одно НО(( К примеру выдал PHP: curl_setopt($ch, CURLO}_USERAGEN}, 'Mozillompatible; MSIE 5.0; }indows N} 5.0)'); за место PHP: curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/4.0 (compatible; MSIE 5.0; Windows NT 5.0)'); тоесть режет некоторые слова..Пробовал и на локалке и на хосте.. И еще после второй замены eval'a выдает PHP: ?>");} } @fclose ($file); } readfile($filecache); ///////////// exit; } ?><?
PHP: session_start ( ) ; require_once ( "../config.php") ; require_once ( "../classes/manipulate.php") ; require_once ( "../classes/misc.func.php") ; $data = new DataManipulator ( ) ; get_status_license ( ) ; if ( $_POST ) { $post_array = $_POST ; $post_array["psd_password"] = md5 ( $post_array["psd_password"] ) ; $admin_detail = $data->select ( "Admins","*",array ( "AdminEmail"=>addslashes ( $post_array["txtEmailAddress"] ) ,"AdminPassword"=>$post_array["psd_password"] ) ) ; if ( !empty ( $admin_detail ) ) { $admin_detail = $admin_detail[0] ; $_SESSION["login_admin_id"] = intval ( $admin_detail["AdminID"] ) ; $_SESSION["login_admin_email"] = $admin_detail["AdminEmail"] ; $_SESSION["admin_rights"]["r_home"] = intval ( $admin_detail["IsSite_Manage"] ) ; $_SESSION["admin_rights"]["r_coupon"] = intval ( $admin_detail["IsCoupon_Manage"] ) ; $_SESSION["admin_rights"]["r_website"] = intval ( $admin_detail["IsWebsite_Manage"] ) ; $_SESSION["admin_rights"]["r_tag"] = intval ( $admin_detail["IsTag_Manage"] ) ; $_SESSION["admin_rights"]["r_comment"] = intval ( $admin_detail["IsComment_Manage"] ) ; $_SESSION["admin_rights"]["r_account"] = intval ( $admin_detail["IsAccount_Manage"] ) ; $_SESSION["admin_rights"]["r_page"] = intval ( $admin_detail["IsPage_Manage"] ) ; header ( "location:home.php") ; exit ( ) ; } } header ( "location:index.php") ;
Помогите и мне никак немогу с 2 файлами справиться((( http://pastebin.com/GLqmCjmv http://pastebin.com/tgeqi02g
Помогите дешифровать PHP: <?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. eval(base64_decode('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')); ?>
$DGsLKvCm27eV = basename($ZrV0VdSRuUd1C2bTbu['xs_smname']); Это нормальный декодинг? помоему тут имена переменных не совсем коректно расшифровались