1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is here any one able to help me decrypt few php files, look inside

Discussion in 'General Programming Chat' started by Heineken, Apr 24, 2013.

  1. Heineken

    Heineken BANNED BANNED

    Joined:
    Aug 25, 2010
    Messages:
    306
    Likes Received:
    46
    Hey guys, recently i bought one really interesting script, but as i figured out how developer protecting it, is you give him domain he put it in some of crypted files, send you files and you can use it only on that domain. So what i would do is make it able to use it on any domain you want without licence, of course. Just am stuck with decrypting this files, googled everything... but nothing so i turned out to make a thread here.

    an example of code

    PHP:
    <?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x1054;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDU4NCk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4M2E0KSwnM1FiaUtCUGxGNjJlZjRNQ3ZIbldVeTV0SjlMRFgwTnpHQXhhWmNrUm9kWThzSVMvcWpyMXBWaCt1bUVUN3dPZz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>t||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***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iQ_V
    i tryed with unphp and it gives me some outputs but, but is there any one skilled well to combine all that?

    options i can pay for this, share whole script with community.

    cheers
     
  2. capripio

    capripio Regular Member

    Joined:
    Dec 25, 2010
    Messages:
    248
    Likes Received:
    157
    Occupation:
    Programmer
    Location:
    127.0.0.1
    lol its easy! but time consummer! I guess there must be some application for it don't sure!
     
  3. Heineken

    Heineken BANNED BANNED

    Joined:
    Aug 25, 2010
    Messages:
    306
    Likes Received:
    46
    yea but each string should be manually decrypted, if there is some online application for this, would be really nice if some one know to share it ;)
     
  4. capripio

    capripio Regular Member

    Joined:
    Dec 25, 2010
    Messages:
    248
    Likes Received:
    157
    Occupation:
    Programmer
    Location:
    127.0.0.1
    Yes if you need so much so why don't you do. It manually?
     
  5. capripio

    capripio Regular Member

    Joined:
    Dec 25, 2010
    Messages:
    248
    Likes Received:
    157
    Occupation:
    Programmer
    Location:
    127.0.0.1
    Well I am not sure if this file is corrupt or what when I try to decrypt it I got half code.

    Code:
    [TABLE]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"] ‘<ÀÀÁ=<ÀÁ<¸œè€4)Q¡¥ÌÁÀ¥Ì1¥•¹Í•Ñ¼…¹½Ñ¡•È‘½µ…¥¸¸œ¤ì‘=<ÀÁ<ÀÁ<ÀõÍÑÉ}É•Á±…” }}%1}|œ°ˆœˆ¸‘==<Á<Á<ÀÀ¸ˆœˆ°‘1=	1Ml==<ÀÀÀÁ<Àt ‘1=	1Ml==<ÀÀÀÀÁ<t ‘1=	1Ml<Á<ÀÁ=<ÀÀt ‘<ÀÀÁ<Á<ÀÀ°‘=<ÀÁ<ÀÀÀÀ¤°œÍE‰¥-	A±ØÉ•˜Ñ5Ù!¹]UäÕÑ(å1`Á9éá…i*I½‘dáÍ%L½Å©ÈÅÁY *ÕµPÝÝ=œôœ°	!%)-159=AEIMQUY]aei…‰‘•™¡¥©*±µ¹½ÁÅÉÍÑÕÙÝáåèÀÄÈÌÐÔØÜà䬼œ¤¤¤í™±½Í” ‘<ÀÀÁ<Á<ÀÀ¤í•Ù…° ‘=<ÀÁ<ÀÁ<À¤ì[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]require_once 'config.php';[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]$userId = $facebook->getUser();[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]if($userId){[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]try{[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]$userData = $facebook->api('/me');[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]}catch(FacebookApiException $e){[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]setcookie("fbsr_".$global['app_id'],'',time()-75000,"/");[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]setcookie("fbm_".$global['app_id'],'',time()-75000,"/");[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]if(isset($_COOKIE["fbm_".$global['app_id']])){[/TD]
    [/TR]
    [TR]
    [TD="class: webkit-line-number"][/TD]
    [TD="class: webkit-line-content"]$domain_cookie [/TD]
    [/TR]
    [/TABLE]
    
     
  6. Heineken

    Heineken BANNED BANNED

    Joined:
    Aug 25, 2010
    Messages:
    306
    Likes Received:
    46
    Hm, well i didnt even get to that part of the code, i got something different ... Because am not skilled at all with decrypting stuffs like this. I have basic knowlage just by googling.
     
  7. Schvamp

    Schvamp Power Member

    Joined:
    Feb 13, 2012
    Messages:
    684
    Likes Received:
    549
    Location:
    Hogwarts
    Just wanted to look into the code, dont know anything about crypting/encrypting..
    But i found something completly diffrent then the user above.

    Is your licence domain registered to ****yv**z.***?
     
  8. Heineken

    Heineken BANNED BANNED

    Joined:
    Aug 25, 2010
    Messages:
    306
    Likes Received:
    46
    well its registed to that domain, but i want to be able to use it on any domain i want, am trying but still i cant get it whole decrypted getting just part of it. That why i need help decrypting just first part of the code witch is in php tags
     
    Last edited: Apr 24, 2013