PHP Ioncube 10 Decoder.. Need help!!

Status
Not open for further replies.
B

benjamin murdo

Newbie
Joined
Feb 7, 2020
Messages
1
Reaction score
0
I have two files PHP encode by Ioncube and I need to see the code. So, is there anyone help me to decode those files? Or someone has easytoyou.eu account and willing to lend the account to me? Please help me... Thanks
 
Advertise on BHW
got to see this .

are you providing the decript info,?

ioncube 128 bit, maybe 256 bit now days

can not be decrypted , never seen in my life , unless you got the de crypt code .
 
redarrow said:
can not be decrypted , never seen in my life , unless you got the de crypt code .
Click to expand...
Here's a little clue. The ioncube decrypts the output before php gets to run it. Otherwise, php won't understand what to run. What if you could stop php from executing the output and show the output instead? ;)
 
Gogol said:
Here's a little clue. The ioncube decrypts the output before php gets to run it. Otherwise, php won't understand what to run. What if you could stop php from executing the output and show the output instead? ;)
Click to expand...
Exactly.. the secret in ioncube.dll and php.dll files you can reverse engineering to output the result
 
AnonyServer said:
Please help me decrypt these files

m ega. nz/file/9iglSabC#Vta77qqtZTONN_ldRkcO3H3KEcBkRsNy7Qz7KZBJKnw

VirusTotal.com link proving files are clean: virustotal. com /gui/file/1e242def81bfafa042547e96c67ebd7a99f8acf0f3ca37e08c578c4f70e01d41/summary

Remove spaces on both links
Click to expand...

done, 53 files :)
mediafire. com/file/9xnezotgj1ikqns/dec_files.zip/file

VirusTotal.com : virustotal. com /gui/file/a95924b0f184ab78dd387f3f14c0b46e655b56230ded465a375af299359add16/summary

remove spaces ..
 
Magd Almuntaser said:
done, 53 files :)
mediafire. com/file/9xnezotgj1ikqns/dec_files.zip/file

VirusTotal.com : virustotal. com /gui/file/a95924b0f184ab78dd387f3f14c0b46e655b56230ded465a375af299359add16/summary

remove spaces ..
Click to expand...

you're trusting yourself :D
Browse this file;
*Ioncube 10
*Php 7
File; mega.nz/ file/ Gxpk1agC#KFbwa1b6jsqwjZKv7ElczNpNsXkhUftDfj9521P-6Cw
VirusTotal : https://www.virustotal.com/gui/file/0799cd21109591e606dafa4628425cec9d40f5c0f508eea0241809221edc335e/detection
 
Can you decode this as well?
Would be a nice release for the forum.

m e g a .nz/file/cXRCRIaZ#-kGlwWBp5VHHB3hL-PA5v_zB6bcu5PVzbcfuWDkxblA
 
rHessmann said:
Can you decode this as well?
Would be a nice release for the forum.

m e g a .nz/file/cXRCRIaZ#-kGlwWBp5VHHB3hL-PA5v_zB6bcu5PVzbcfuWDkxblA
Click to expand...

your zip file has 1634 encrypted files PHP7.1
don't worry i decode some files and nulled it :)
you can download and test it ..

mediafire .com /file/p4ld2lboqtshs44/cpanel_extended_3.8.0_whmcs.zip/file

VirusTotal.com : virustotal. com /gui/file/8e73c6d308bdd796237972e3637b38340a406320a1f3504421619cf1ceac742a/summary
 
That's awesome, Magd! Can you share the decoded version of the changed file too?
I'd like to reverse engineer the licensing algorithm.
 
Hi All. Can you help me in decoding this PHP files. It would be a great help. Thanks in advance...:):)
Mediafire. com/file/0mnwuqsr66w2vg1/aaa.zip/file
 
sam156239 said:
Hi All. Can you help me in decoding this PHP files. It would be a great help. Thanks in advance...:):)
Mediafire. com/file/0mnwuqsr66w2vg1/aaa.zip/file
Click to expand...

done, 47 files :)
mediafire. com/file/ulo49pijq3t4uc8/aaa.zip/file

VirusTotal.com : virustotal. com /gui/file/6f03302a9b3d42283021d103ffca84356b98314f39950b8fdd730ede32980ca3/summary
 
Hi, I have this ion cube 10.1/php7 source files (these are all php's regardless of extension). Have a hard time finding a code to unpack, would appreciate your help!
mediafire. com/file/fic72x5cky8ktir/src.rar/file
 
try to find some online decoder tool. i know they exists
 
Pzzz said:
Hi, I have this ion cube 10.1/php7 source files (these are all php's regardless of extension). Have a hard time finding a code to unpack, would appreciate your help!
mediafire. com/file/fic72x5cky8ktir/src.rar/file
Click to expand...

your files can't decode correctly encryption with (Dynamic key)
mediafire. com/file/nvdimwtu6amx021/2222.zip/file

VirusTotal.com : virustotal. com /gui/file/c39aeabf411b3aec6482945072a785df74afa3a324aff29e270c7fc67dc6ae3d/summary
 
Thx a lot, that's calrify stuff a bit. The keygen() for dynamic key is within functions.php in the source archive and that function is in turn encrypted with this pattern value (in the file below). If that can help, I'd appreciate that:

mediafire.com /file/wv838gsq0saezgj/pattern/file

I do have some experience hacking obfuscated bytecode stuff (i.e. a squirrel language interpreter with obfuscated bytecode within a linked library to a win32 native binary), but this php obfuscation is novel to me and it's not a purpose of my current research :)
 
Pzzz said:
Thx a lot, that's calrify stuff a bit. The keygen() for dynamic key is within functions.php in the source archive and that function is in turn encrypted with this pattern value (in the file below). If that can help, I'd appreciate that:

mediafire.com /file/wv838gsq0saezgj/pattern/file

I do have some experience hacking obfuscated bytecode stuff (i.e. a squirrel language interpreter with obfuscated bytecode within a linked library to a win32 native binary), but this php obfuscation is novel to me and it's not a purpose of my current research :)
Click to expand...

i will try if i can decode function.php file with dynamic key
 
Advertise on BHW
Status
Not open for further replies.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top