Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
April 19, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 486
Members: 0
Total: 486
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Php -> ionCube not decoding?
Post new topic  Reply to topic View previous topic :: View next topic 
ionCube not decoding?
PostPosted: Wed Jan 11, 2012 1:25 pm Reply with quote
MiniDjHedges
Regular user
Regular user
 
Joined: Apr 09, 2011
Posts: 5




Hi Smile

I'm trying to decode an ionCube file with "DeZender.DeIoncuber.06.09.2011". The encoded files that come with the download get decoded perfectly fine. But when I add my own encoded file, it doesn't decode it at all, it just moves the code about a little bit and adds line breaks in.

For example, here's the encoded file:
Code:
<?php //004d4
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');@dl($__ln);if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}@dl($__ln);}else{die('The file '.__FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the site administrator.');exit(199);
?>
4+oV507jHSy3CxxWtb/Gx4FSrj7sBIaH+wS8zvUyKf9D0BlaOenU7/fkmLcFCdst6X9nYEyeYF2I
2maI2wcLSvI9BZ0giYp4SMChbPmoo7teccuSrWcIJvsBZQ+7HWiFyIa1YwT/2V0uzlaWzxXa9U3i
wTF0ihY2PDE33P99KdGYn6T7xfWFYaeUrWWwnUet2CzurR+IhUhyZs9LcxrWmn25bg2xRQoglFsI
fk1RH/xEufEisDqv9548LEzSZxcw7pWbbAu2zfm95IxaUq7u0LCZcsmJMT8H8XwGQW4/ugUuO9pN
2OF645SFK5+OOUAMyO+4NI5CBMsFQ2oRa4nZdzBq98hW3IG+rN8xGzQVW7gtHeBUAFX8vwm9Eehh
hP6ep1nJJNZTbbhPUXlGuxYNqx+to/WZ2hTw92iwvXDMnX1sD0qEKgYRYX1tPf15Ja4nmGjmXcA6
xorumFfdClU8tdxA7qR97oBUcD9olsJvovwnLtNVzmPfSlaX/BScj/zohaMhXuMyBt9PuutpkbJO
EOvr72MatRTtca7dmzebp3WZ92dCQrdCYNuA/7rg1OXs5g46LY+t5ZNOdFnzDrH66jfQ5JuxoDsa
yuhftr4X8QLn5lDQUEKxdQabYQ7C98/R7A4tfC6yiNv3kFP7BAHvX3+YANz9rLF+k5/r3MDJFxrR
BFE39TQkSjvlJG5U6GaXjBgqUeK9IqgB/HcWVUvT2gQfLeg0VezQ4RVX2Iz2iPTB5BA1kPdUecfv
rfymfpz8tTnwdL3+AWIHw7encFCOwrEr1SGbvA8wW57xNJrNZ20/Y518TXRXDlqtq4reval9SqYV
vKMEu4WBz8kmKZR8UkF7hH4fkdemhKkMc3VncEAy0EDDmT1Uf+wgNVs7zNTX4+akadvw2ncCwNxr
Zvq0m1qCWdOE5OuACtpnEozoHguVdP7Xwi1PY0Yiiea/IodPZdG6IY+msWOTL+lrMTvHCjlYl/7Z
798FxdtRUyjLowye/Sn+pGNMMaF/fy/lMnnbS2xrAlRtbH55E1wlipOXOH7JuVmqzZY5O5R++mwN
4uYNlkuNmBcHTdh+GHa8UfyNkH6RSgpbgnsSzitiwFJMGbNSL+Q/KBhFGktfcgJ7dN7nL+ZoJ+ui
1bOWYy4mvwZuqDi1XP6+YDgGHJdPC1ww4CLeXMVHkksik7F0u07BWYc3DRiJnbmbkms3TT7b6aCg
miJYf2ZEhqmLek7tQFZjLeuvC3+vlPYOHLflAvbZqQj6KaCNAZKqokonLP2rBOMGO9Vu+KZtSRA9
5vqzXOcvfyN+gbRGD/gasyX5g4bOpBUbxx9qckL5YsYpRd+tPHYv4vAXQpxY1GxfQL/nUHd0+E5L
9/9WqbAEKSbFBOtLPvBM76/cgRG3Tu+Ah69tWM+Ih7p8sWLLXEJgkcmEUN9Nu9xEqJB1aRXD1aX6
ItLgawcGc9L0IGbGXG+8uSe0GBicR/NS53F1e40LC8d41v+RDQN82cM8Pd2zlTPlJb23pVJe1nGh
rxqLdCA6OqHIgm+Wp5l+jFdzNrVGWci0/Icpaa/Pn8s6WNMskUI1MVThK00BXx4zD884nK3SYNTr
ctsG1M/91aj65Mqj3f3BYMP191znofWdPrQGkkBRmSQt7hhcAhi4P91t2FgnZgijq5MC8ZZvHExa
f1O+0v/iw5lhZLRC+3Ebig8RAzbzy2CjIQVfjFPzlwAC8y1Ckf7X7mY7gAVgIRBW+pWoqO5P7uq9
2gMAZE0TVelsYSsaTKlKlA04s2LukGk6BkW1Kp/3LerYR21e2Jftp9IDPmkrMti5z+xhyOdZqk13
3cI+fAOb/PkQK2Kokzf1T62A1Z0jvebySPiqFUZa6DwQdaIxNiQLPvksbpyq2SGIz+pAhtpR8JEV
TyKTtm1Aled0xi0KXwPH2DpGXU6vl0Qpj1AoL7l2g/sJGAHklajnELINNcs4TkXle6PxUzhNHsdP
ABIUWgn+yYfrEJToqQE4ocAJA9VXV3uIobn3AtEqzo0tPPJ8+GvJKB7bEnvOfLBwdSjSXK1Adrp/
sZIPyk9LljlB2yPkiWx7/UiXiQSMLw4SOMYOJ+0SAI24fzHiTEVq06E11YvsAtXU4RFuv78XLHrL
kfpunc+rjz23ah/Wxw+U2NIeNgp6qtiCTtzsba6A/q03mLWBSfLTYs64Kqf6OVePLCtmlQpzu9pZ
NRz8R1Ua+m7CnAgnvUT0cefe2t8YZ3ck2mjEmnsgsMTKUrXk/Hccel7XAh0ZsTQlNbKbrVZ0CxwV
uD1joD+3Yf9HWzTn0wgp40d9rGoJynanTLndcJHAFWQr7qUpxQIw0svqhM0r1No+hsNFjI+XKFJ3
cZADovEc5x/fhCWkENsGpojqTbjjW//YC9otJ1ukm+azznKb/25MJ3bdDb5FXjxfH08kHRbvAwAj
DUsChNZWd/1jAeeiFeuiPlh1I4KZQSIzSvPBUYrxD3Th6xMq6NUJhE5PWp7ap9q67AVmGIdLYNLl
QRUo0pzSCiKHz8JSAGmY6X5Gc/0JZMQAaSp+/zzjgCIuJxht86vcKJSrMhOP+RWkbcTMDigmLpjr
PlyIkBNEoHndXwNJQD1TuLpLTqiXc8XqvElNrN7DKgm5ny7BFwOGkd08iDuONcl02hM5TjJCb0na
cL1507um/kyXr4GOALe7tPJCS811w+iDxU/IPcIyEL0RYZ3e37koqJyvSI2y/1Ksp9hI3vZK37R+
q+SqiSTvgMsM8CSi+8dElVIek/8suTohsMAUESVdYHNEBBsCGWZVvxNouyh5keCta/wMIVZ+T9wD
ru65T5IPPQkR7R+MK32Vl6w216dOUrKOg4fYMia6cNtRG9O9NqqghSIxnGF3cpDlw5JMx5XjJ/c+
wYVd5NjenhZOG4nW4v24toqk2thXYxcCEdGADL7qq6dVL9afc48D7rk41CJ5t01G+nJI7l2bXJDe
Y26CdQULWnst9PId62VV97xCyfOrJGCzbboGkK60Fbkis0tskOchq3kggOT7MYYl0Gb+3HAOcbKR
0rpBNKYXRnkn9tmfG5VHLNgjwvk5FbAK2abplw8Q+Nq=


And here's the decoded file:
Code:
<?php
/*********************/
/*                   */
/*  Dezend for PHP5  */
/*         NWS       */
/*      Nulled.WS    */
/*                   */
/*********************/

if ( !extension_loaded( "ionCube Loader" ) )
{
    $__oc = strtolower( substr( php_uname( ), 0, 3 ) );
    $__ln = "ioncube_loader_".$__oc."_".substr( phpversion( ), 0, 3 ).( $__oc == "win" ? ".dll" : ".so" );
    @dl( $__ln );
    if ( function_exists( "_il_exec" ) )
    {
        return _il_exec( );
    }
    $__ln = "/ioncube/".$__ln;
    $__oid = $__id = realpath( ini_get( "extension_dir" ) );
    $__here = dirname( __FILE__ );
    if ( 1 < strlen( $__id ) && $__id[1] == ":" )
    {
        $__id = str_replace( "\\", "/", substr( $__id, 2 ) );
        $__here = str_replace( "\\", "/", substr( $__here, 2 ) );
    }
    $__rd = str_repeat( "/..", substr_count( $__id, "/" ) ).$__here."/";
    $__i = strlen( $__rd );
    while ( $__i-- )
    {
        if ( $__rd[$__i] == "/" )
        {
            $__lp = substr( $__rd, 0, $__i ).$__ln;
            if ( file_exists( $__oid.$__lp ) )
            {
                $__ln = $__lp;
                break;
            }
        }
    }
    @dl( $__ln );
}
else
{
    exit( "The file ".( __FILE__ )." is corrupted.\n" );
}
if ( function_exists( "_il_exec" ) )
{
    return _il_exec( );
}
echo "Site error: the file <b>".( __FILE__ )."</b> requires the ionCube PHP Loader ".basename( $__ln )." to be installed by the site administrator.";
exit( 199 );
echo "4+oV507jHSy3CxxWtb/Gx4FSrj7sBIaH+wS8zvUyKf9D0BlaOenU7/fkmLcFCdst6X9nYEyeYF2I\r\n2maI2wcLSvI9BZ0giYp4SMChbPmoo7teccuSrWcIJvsBZQ+7HWiFyIa1YwT/2V0uzlaWzxXa9U3i\r\nwTF0ihY2PDE33P99KdGYn6T7xfWFYaeUrWWwnUet2CzurR+IhUhyZs9LcxrWmn25bg2xRQoglFsI\r\nfk1RH/xEufEisDqv9548LEzSZxcw7pWbbAu2zfm95IxaUq7u0LCZcsmJMT8H8XwGQW4/ugUuO9pN\r\n2OF645SFK5+OOUAMyO+4NI5CBMsFQ2oRa4nZdzBq98hW3IG+rN8xGzQVW7gtHeBUAFX8vwm9Eehh\r\nhP6ep1nJJN";
echo "ZTbbhPUXlGuxYNqx+to/WZ2hTw92iwvXDMnX1sD0qEKgYRYX1tPf15Ja4nmGjmXcA6\r\nxorumFfdClU8tdxA7qR97oBUcD9olsJvovwnLtNVzmPfSlaX/BScj/zohaMhXuMyBt9PuutpkbJO\r\nEOvr72MatRTtca7dmzebp3WZ92dCQrdCYNuA/7rg1OXs5g46LY+t5ZNOdFnzDrH66jfQ5JuxoDsa\r\nyuhftr4X8QLn5lDQUEKxdQabYQ7C98/R7A4tfC6yiNv3kFP7BAHvX3+YANz9rLF+k5/r3MDJFxrR\r\nBFE39TQkSjvlJG5U6GaXjBgqUeK9IqgB/HcWVUvT2gQfLeg0VezQ4RVX2Iz2iPTB5BA1kPdUecfv\r\nrfymfpz8tTnwdL3+AWIH";
echo "w7encFCOwrEr1SGbvA8wW57xNJrNZ20/Y518TXRXDlqtq4reval9SqYV\r\nvKMEu4WBz8kmKZR8UkF7hH4fkdemhKkMc3VncEAy0EDDmT1Uf+wgNVs7zNTX4+akadvw2ncCwNxr\r\nZvq0m1qCWdOE5OuACtpnEozoHguVdP7Xwi1PY0Yiiea/IodPZdG6IY+msWOTL+lrMTvHCjlYl/7Z\r\n798FxdtRUyjLowye/Sn+pGNMMaF/fy/lMnnbS2xrAlRtbH55E1wlipOXOH7JuVmqzZY5O5R++mwN\r\n4uYNlkuNmBcHTdh+GHa8UfyNkH6RSgpbgnsSzitiwFJMGbNSL+Q/KBhFGktfcgJ7dN7nL+ZoJ+ui\r\n1bOWYy4mvwZuqDi1XP6+YDgGHJdPC1";
echo "ww4CLeXMVHkksik7F0u07BWYc3DRiJnbmbkms3TT7b6aCg\r\nmiJYf2ZEhqmLek7tQFZjLeuvC3+vlPYOHLflAvbZqQj6KaCNAZKqokonLP2rBOMGO9Vu+KZtSRA9\r\n5vqzXOcvfyN+gbRGD/gasyX5g4bOpBUbxx9qckL5YsYpRd+tPHYv4vAXQpxY1GxfQL/nUHd0+E5L\r\n9/9WqbAEKSbFBOtLPvBM76/cgRG3Tu+Ah69tWM+Ih7p8sWLLXEJgkcmEUN9Nu9xEqJB1aRXD1aX6\r\nItLgawcGc9L0IGbGXG+8uSe0GBicR/NS53F1e40LC8d41v+RDQN82cM8Pd2zlTPlJb23pVJe1nGh\r\nrxqLdCA6OqHIgm+Wp5l+jFdzNrVGWci0/Icpaa/P";
echo "n8s6WNMskUI1MVThK00BXx4zD884nK3SYNTr\r\nctsG1M/91aj65Mqj3f3BYMP191znofWdPrQGkkBRmSQt7hhcAhi4P91t2FgnZgijq5MC8ZZvHExa\r\nf1O+0v/iw5lhZLRC+3Ebig8RAzbzy2CjIQVfjFPzlwAC8y1Ckf7X7mY7gAVgIRBW+pWoqO5P7uq9\r\n2gMAZE0TVelsYSsaTKlKlA04s2LukGk6BkW1Kp/3LerYR21e2Jftp9IDPmkrMti5z+xhyOdZqk13\r\n3cI+fAOb/PkQK2Kokzf1T62A1Z0jvebySPiqFUZa6DwQdaIxNiQLPvksbpyq2SGIz+pAhtpR8JEV\r\nTyKTtm1Aled0xi0KXwPH2DpGXU6vl0Qpj1AoL7l2g/sJGAHkla";
echo "jnELINNcs4TkXle6PxUzhNHsdP\r\nABIUWgn+yYfrEJToqQE4ocAJA9VXV3uIobn3AtEqzo0tPPJ8+GvJKB7bEnvOfLBwdSjSXK1Adrp/\r\nsZIPyk9LljlB2yPkiWx7/UiXiQSMLw4SOMYOJ+0SAI24fzHiTEVq06E11YvsAtXU4RFuv78XLHrL\r\nkfpunc+rjz23ah/Wxw+U2NIeNgp6qtiCTtzsba6A/q03mLWBSfLTYs64Kqf6OVePLCtmlQpzu9pZ\r\nNRz8R1Ua+m7CnAgnvUT0cefe2t8YZ3ck2mjEmnsgsMTKUrXk/Hccel7XAh0ZsTQlNbKbrVZ0CxwV\r\nuD1joD+3Yf9HWzTn0wgp40d9rGoJynanTLndcJHAFWQr7qUpxQIw0svqhM0r";
echo "1No+hsNFjI+XKFJ3\r\ncZADovEc5x/fhCWkENsGpojqTbjjW//YC9otJ1ukm+azznKb/25MJ3bdDb5FXjxfH08kHRbvAwAj\r\nDUsChNZWd/1jAeeiFeuiPlh1I4KZQSIzSvPBUYrxD3Th6xMq6NUJhE5PWp7ap9q67AVmGIdLYNLl\r\nQRUo0pzSCiKHz8JSAGmY6X5Gc/0JZMQAaSp+/zzjgCIuJxht86vcKJSrMhOP+RWkbcTMDigmLpjr\r\nPlyIkBNEoHndXwNJQD1TuLpLTqiXc8XqvElNrN7DKgm5ny7BFwOGkd08iDuONcl02hM5TjJCb0na\r\ncL1507um/kyXr4GOALe7tPJCS811w+iDxU/IPcIyEL0RYZ3e37koqJyvSI2y/1Ksp9hI3v";
echo "ZK37R+\r\nq+SqiSTvgMsM8CSi+8dElVIek/8suTohsMAUESVdYHNEBBsCGWZVvxNouyh5keCta/wMIVZ+T9wD\r\nru65T5IPPQkR7R+MK32Vl6w216dOUrKOg4fYMia6cNtRG9O9NqqghSIxnGF3cpDlw5JMx5XjJ/c+\r\nwYVd5NjenhZOG4nW4v24toqk2thXYxcCEdGADL7qq6dVL9afc48D7rk41CJ5t01G+nJI7l2bXJDe\r\nY26CdQULWnst9PId62VV97xCyfOrJGCzbboGkK60Fbkis0tskOchq3kggOT7MYYl0Gb+3HAOcbKR\r\n0rpBNKYXRnkn9tmfG5VHLNgjwvk5FbAK2abplw8Q+Nq=";
?>


Could anyone explain why it's doing this?
View user's profile Send private message
ionCube not decoding?
  www.waraxe.us Forum Index -> Php
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Post new topic  Reply to topic  




Powered by phpBB © 2001-2008 phpBB Group






Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.178 Seconds