Hi everybody,
I know that we can decode and see the output of php files that encoded with ioncube loader by reverse engineering the ioncube.dll.
but I don't have enough knowledge and information about .dll files.
can anybody help me to figure this out?
thanks
Hello! can you decode this file please, all I know is that it uses ioncube V10.put your files i will decode it for you![]()
Hello! can you decode this file please, all I know is that it uses ioncube V10.
https://www.mediafire.com/file/zkg3ohhvooz8rdo/index.php
well, it is impossible to get a tool online to do it.... at least I tried to find one if you know any please tell meLol, how many threads lately about decrypting IonCube...
well, it is impossible to get a tool online to do it.... at least I tried to find one if you know any please tell me![]()
well, my email is [email protected] if you can send it that way, but I do understand if you don't want to.I am probably using the same tool as the member who decoded what you posted, as its output is exactly the same as he posted, only that he changed the header to personalize it as his own.
But I am not sure if it is against the rules of the forum to post it here because I guess that there are members offering a similar service in the BST thread as I read here. So I am sorry but I'm not posting it.
well, my email is [email protected] if you can send it that way, but I do understand if you don't want to.
I am probably using the same tool as the member who decoded what you posted, as its output is exactly the same as he posted, only that he changed the header to personalize it as his own.
But I am not sure if it is against the rules of the forum to post it here because I guess that there are members offering a similar service in the BST thread as I read here. So I am sorry but I'm not posting it.
Sorry I don't know what you tool you use it
i've own my decoder and i updated every time you can search about me in google since 2009 till now:
ttmtt منزوع
or
ttmtt iCL0udin
and if my output same like your output that not mean my tool same like your tool
it's just reverse engineering dll that output the same results .. so you can try to decode your files in another decoder like (dezender.net, dezend.ir or any one) and see the results it's same
so please don't say (changed the header to personalize it as his own) it's generate by my tool
thank you![]()
Noted. So I can then say that your tool and the one I use are both good and correct. The one I use recently added PHP7.2. Before that, it used to be only up to PHP5.6
Not even IonCube is safe these days![]()
I really appreciate if you can send me this tool. I'm looking for such decoder since 2 years ago ...I am probably using the same tool as the member who decoded what you posted, as its output is exactly the same as he posted, only that he changed the header to personalize it as his own.
But I am not sure if it is against the rules of the forum to post it here because I guess that there are members offering a similar service in the BST thread as I read here. So I am sorry but I'm not posting it.
Please Decode these files too. Thank you very much.put your files i will decode it for you![]()
Hi, I'm looking for a tool to decode ioncube10+ for a while. Would you be so kind to send it to me too? [email protected]Done
https://easytoyou.eu/
Thank you so much for your help.By the way, I checked al files uploaded here asking for decryption and they all decrypt flawlessly with that service.
BUT, some of those files are not only encrypted with IonCube but also obfuscated. In those cases, you will have to find a way to put it back (de-obfuscate) after decrypting it, so it will be easier to read.
For example, if you find an already decrypted file with text like this:
fu\x6E\x63\x74\x69\x6F\x6E()
-Which is "function()"
That one is Hex Encoded ASCII. This means that you will need to replace every "\xNN" instance with a character. The same number, the same character. For example, "\x6E" = "n". That is why you will see "x\6E" twice in the word "function" as it has two "n"s.
\x66 = f
\x75 = u
\x6E = n
\x63 = c
\x74 = t
\x69 = i
\x6F = o
\x6E = n
Of course, you will ONLY replace the "\xNN" instances. In the example above, the "fu" and "()" from "function()" were written directly and you just pass it as it is and decode the rest.
You will find the codes table by searching on Google "hex coded ASCII"
Of course, there are many ways of obfuscating a script. This is just one. You will have to put your grey matter to work but it will be fun to try and succeed.
Cheers.