Need encoded PHP decoded.

Fuggz

Power Member

Mar 25, 2010

606

613

• Mar 24, 2011

• #1

I bought a few PHP scripts a while ago. The guy who sold them to me did so happily, then when I opened up the index.php, it was encoded, and anything I use the scripts on have his link on them. When I asked him about it, he made a snide remark like, "I just sold you the scripts, I retain the rights" and laughed.

Is there any way I can decode the php? I know how to escape javascript, but have no idea how to decode this.

TIA

 

Autumn

Elite Member

Nov 18, 2010

2,197

3,073

• Mar 24, 2011

• #2

It depends on how the script has been encoded.

Check out base64_decode()
http://php.net/manual/en/function.base64-decode.php

If you Google around there are probably some online versions that do this.

If it's been compiled to bytecode by zend encoder etc then I believe you're SOL.

 

bzy39

Regular Member

Jan 15, 2009

438

243

• Mar 24, 2011

• #3

post the sample of code, maybe can help...

 

Z

zelma143

Power Member

Jun 25, 2010

573

37

• Mar 24, 2011

• #4

yeah.. sample code pls..

may be can help you out..

 

sam.hunt0710

Elite Member

Executive VIP

Jr. VIP

Jan 8, 2010

13,623

8,249

• Mar 24, 2011

• #5

AFAIK, php scripts are encoded using ioncube or zend encoder to protect piracy.

You will need to hire a pro-cracker who can reverse engineer those scripts for you. This is NOT hack forums so I dont think we can discuss it here.

Search on some hack forums and hire someone if the scripts are worth it.

 

C

coderjeff

Junior Member

Nov 20, 2007

129

26

• Mar 26, 2011

• #6

This site can be useful to decode certain scripts:

http://www.showmycode.com/

 

thevil

Junior Member

Aug 17, 2010

190

190

• Mar 26, 2011

• #7

First you need to determine what type of coding was used.


What code does have strings have in the file? That should give a clue into what type of decoding you need

YTM0NZomIzI2OTsmeYQ==
dw(key,
ky+codeIt
i92(
function rm
varsJsCmds=""
JScript.Encode
%35%67%20
ar[0]
function process(ar)
$o=something:
$_F=__FILE__
eval(gzinflate(base64_decode('...')))



I suggest you just post the file and hope someone will decode it.

 

C

coderjeff

Junior Member

Nov 20, 2007

129

26

• Mar 26, 2011

• #8

I agree with thevil. Without seeing a portion of the file, no one can tell you how to decode it. The easy case in when they've just using simple encoding methods. It keeps the average person from making changes, but doesn't take much effort to decode. Quite often you just have to look for 'eval' in the script and change it to 'echo' and it will show you the unencoded script. Occasionally people will encode it multiple times and you'll have to repeat the process.

Other scripts use commercial encoding such as Zend or Ioncube. Occasionally you'll find a script where there is one decoding script that has been encrypted with Zend or Ioncube and the other files have been encoded using a more simple method. This seems to be the case when the developer didn't want to pay for expensive encoding of all the script. Decode the decoder, and the rest is easy.

 

C

coolguy

Junior Member

Dec 26, 2007

165

112

• Mar 26, 2011

• #9

you should check crypo.com where you would find lot of online tools to decode, probably it could help you

 

J

JenniferMartin

Regular Member

Jan 29, 2011

392

749

• Mar 26, 2011

• #10

send me your encoded page, will try to decode it for you

 

Checkmate

BANNED

Aug 9, 2010

1,658

687

• Mar 26, 2011

• #11

No free took will decode ionCube you will have to pay one of those sites to do it.

If they used ionCube to encode it that is.

 

D

deejayundoo

Newbie

May 8, 2011

18

0

• May 9, 2011

• #12

if someone can do this, i`m interested too.

 

S

simey69

Regular Member

Mar 27, 2009

326

1,489

• Jul 10, 2011

• #13

Checkmate said:

No free took will decode ionCube you will have to pay one of those sites to do it.

If they used ionCube to encode it that is.

Click to expand...

There are tools on the web, no charge, just download and go...
It depends on their age as to how good they are, some are good at older versions, some are more up to date.

Just be VERY CAREFUL when visiting these types of sites/forums with such software and tools.
Be EVEN MORE CAREFUL with what you download - VIRUS CHECK LOTS!!! locally and use VirusTotal too.
(ideally run whatever you get in a VirtualMachine to be even more safe, they're normally offline tools, so drop your net connection too, to ensure no trojan/backdoor activity - I run on an old laptop normally)
If you're not sure what you're doing and not aware of keeping yourself very safe online, don't explore these places... you're machine may end up infected and/or exploited

Si

 

C

Ceg3xow

Newbie

Jul 6, 2011

18

1

• Jul 10, 2011

• #14

I'm also interested if someone does that

 

B

brazero

Newbie

Oct 30, 2009

9

1

• Jul 25, 2011

• #15

I do that...
I can decode nearly all encoded files (ioncube, zend and others)
If you're interested i can open a new thread to share the scripts.