Need ioncube decoding

Hi guys, I know this question has been asked many times before. However that was a long time ago and these threads are ancient.

I have ioncube encoded files, which I want decoded. I need to check if there are no strange things in it. The usual free decoding stuff won't work.

Can someone help me out here?
Thanks, Mike

Deciding ioncube is practically impossible an even if u are able to decrypt u will only be able to decrypt part of it an not 100% ull have to rebuild the missing components. If the script is encrypted it's encrypted to protect the licensing on the script. An if the full code is encrypted it's to improve the security of the script.

Either way if the script is from a source u don't trust then don't use it. But there is always a reason it's encrypted.

Also if anyone claims to be able to decrypt ioncube it will never be free unless the method is outdated. It takes to much time and effort for it to be free.

KodMi said:

Deciding ioncube is practically impossible an even if u are able to decrypt u will only be able to decrypt part of it an not 100% ull have to rebuild the missing components. If the script is encrypted it's encrypted to protect the licensing on the script. An if the full code is encrypted it's to improve the security of the script.

Either way if the script is from a source u don't trust then don't use it. But there is always a reason it's encrypted.

Also if anyone claims to be able to decrypt ioncube it will never be free. It takes to much time and effort for it to be free.

Click to expand...

What a load of crap. It can be done, I've done it. For God sakes you can pay someone on Fiverr $5 to do it.

@KodMi And stop bumping threads from 2017

I didn't say it couldn't be done. I said practically impossible which means it's possible but not easy. So maybe you should read before you go off I also said it wouldn't be free if someone was offering to do it.

An if it's a thread thats in the first two pages of the category i don't consider it old.

Also to note if someone offering to do it for $5 it's probably not the latest ioncube


@UserBanned

It's not practically impossible. The fact that dozens of sellers on Fiverr is offering the service for $5 should hint at that.

UserBanned said:

It's not practically impossible. The fact that dozens of sellers on Fiverr is offering the service for $5 should hint at that.

Click to expand...

The fact that dozen of people are offering should raise a flag that it's not the latest version of ioncube which all user using ioncube utilize.. thus meaning those people selling are using the freely available decryption services that help decrypt older versions of ioncube.. if ioncube was so easily decryptable.. ioncube wouldn't have any business. They update Everytime they think it can be decrypted, thus changing there algorithm making it even harder.

Why don't u order the service for the lastest version encrypted ioncube bet they can't do it. Every single fiveer gig ask to view the files before they can confirm they can do it. Or they say version 10+ isnt supported. Which the lastest version is 10.2

There is a reason ioncube is the best at encryption and cost so much

Also on a side note have u ever bought anything from fiveer.. it's $5 for a reason.. cuz usually it cost them nothing or practically no work. Also everything on Fiverr isn't always $5 even tho they advertise at $5 try clicking a link some services cost a lot more then $5

@KodMi Did you even bother fact checking your statement? Ioncube encoder 10+ was released on Aug 24th 2017. OP posted on Aug 10 2017, that mean he was using a version less than 10. I've been purchasing fiverr gigs to decode ioncube for years! I just went to fiverr and found some sellers doing it for $5. Decoding ioncube is not "practically impossible", case closed.

Just because he posted Aug 10 2017.. doesn't mean I did. My statement remains correct.

Also just because the post was Aug 10 doesn't mean those gigs support the version he needed an I can bet they didnt at the til the free decoder code was released after 10 was released

An what u didn't do is check which version they supported in the gig. Go ahead decode ioncube urself without any tools or buying it let me know how that fairs out for ya. Just because someone makes it easier for it to be done doesn't mean the task of getting what the person accomplish not a hard task or near impossible.. if u can decode an ioncube script and it's not hard, the likely hood that script is even upto anymore is minimal an the security of that particular script is at risk. An if you deciding ioncube all the time sounds pretty illegal to me

send me your files!

phpdecode said:

send me your files!

Click to expand...

Who are you asking this to ?
Hopefully not the OP, MikeMynis was last seen: Aug 10, 2017

MisterF said:

Who are you asking this to ?
Hopefully not the OP, MikeMynis was last seen: Aug 10, 2017

Click to expand...

i have my own decoder and my site for decoding php files.

To be fair, both @KodMi and @UserBanned have valid points. No code protection can be 100%, and the aim is to make it as difficult, time consuming and expensive as possible to analyse the mechanisms and reverse engineer. The longer that a given solution is out there the more attention it receives, and the greater the chance that headway will be made in reverse engineering. The earliest encoding just used compiled code, which gave great performance and security as there were no decompilers and few who had studied PHP internals. That was fine until around (IIRC) 2006 when the BlueWind group first appeared in China, whereupon it was clear that more protection was needed. The ionCube solution evolved, balancing ever increasing protection with the need for performance, but as you would expect, the older the solution the more is known about it by reverse engineering teams. Users can also choose what protection options they use, as well as whether they want to protect using older versions of the software instead of the latest (ionCube version 10 comes with 9 and 8 too), so a file from the latest version of a tool might not take advantage of the best protection possible, or even actually be from the latest tool. That said though, decoding efforts rarely produce accurate code, or even syntactically correct code in some cases due to various mechanisms in the encoding, and the manual effort required to fix up code afterwards can be insurmountable. It's always a case of YMMV.

Right now the best protection mechanism is called Dynamic Keys, which was introduced into ionCube version 9, and allows code to be encrypted without any decryption key being stored. This causes a major issue for decoding efforts because you're dealing with cryptographic strength encryption where a long key was used and where the decryption key isn't in the files that you're being asked to decrypt, nor is it in any license file or anywhere else. The decryption key quite literally does not exist. There are going to be ways to attack the mechanism because there always is a way, but it's a game changer for protection and decoding sites alike as it changes the rules, and the approach a decoding site needs to take. We've not found a decoding site yet that can decode files protected with DynamicKeys if the mechanism has been used correctly and used well.

I totally agree with "ioncube" user except the last sentence! Files with dynamic keys CAN be decoded. It is just a matter of time and price. Usually the price is about $200 per file!

i had to do something similar a while ago, i used a good free tool i downloaded from a google search, if i find it somewhere on my computer i'll upload it and send it to you

phpdecode said:

I totally agree with "ioncube" user except the last sentence! Files with dynamic keys CAN be decoded. It is just a matter of time and price. Usually the price is about $200 per file!

Click to expand...

We've seen no evidence of that or had any reports of this (would be interested to know where you read of someone charging $200 ), but if the Loader is patched appropriately and (for example) a brute force method is employed, it's theoretically possible. The extent to which Dynamic Keys can be used is essentially unlimited though, such as with different parts of a codebase protected with different keys, and the user defined key generation code could even be protected with other Dynamic Keys. If the amount of effort required is E to work out today what the Dynamic Keys keys are, this can always be increased to E + E2 if those protecting their code do a bit more work.