Waraxe IT Security Portal
Login or Register
November 3, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 93
Members: 0
Total: 93
Full disclosure
Apache Struts2 Core Arbitrary Code Execution via OGNL SandboxEscape
Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel
Apache Struts2 Spring Plugin Uses a Previously Closed Resource
Apache Struts2 Core Integer Overflow
Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path
Apache Struts2 REST Plugin Fails to Properly Parse ChunkedRequests
Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback
Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass
[0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure)
[0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8)
[0day-rubbish] NUUO Crystal Server 3.19.0.85 unauthenticated upload.php PHP web-root write with fastcgi execution into server-side code execution as the web service account (9.8 Critical)
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15 010909 scenario ping condition command injection through the auto-executing ping thread (7.2)
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15 010909 IPsec tunnel address command injection through the route-management shell commands (7.2)
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15 010909 command injection in the Executer program activation path (7.2)
Re: CVE-2026-109618: PHP-CGI Pointer Underflow ? Remote Code Execution (CVSS 9.2)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PHP script decode requests -> can any one help me decode this.....
Post new topicReply to topic View previous topic :: View next topic
can any one help me decode this.....
PostPosted: Tue Oct 31, 2006 1:08 am Reply with quote
diegocure15
Active user
Active user
Joined: Sep 22, 2004
Posts: 27




<?php // script.
$OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=9712;eval((base64_decode('JE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO3doaWxlKC0tJE8wME8wME8wMClmZ2V0cygkTzAwME8wTzAwLDEwMjQpO2ZnZXRzKCRPMDAwTzBPMDAsNDA5Nik7JE9PMDBPMDBPMD0oYmFzZTY0X2RlY29kZShzdHJ0cihmcmVhZCgkTzAwME8wTzAwLDM3MiksJ0NrZmUrdi9KVlBnd3I3QVJtcXgxNm50RlRRS0dTOGhaYVVZOUViZGpPNW9sTUhwemNYMnlpczBMSUJENFczTnU9JywnQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODkrLycpKSk7ZXZhbCgkT08wME8wME8wKTs=')));return;?>
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
View user's profile Send private message
PostPosted: Tue Oct 31, 2006 3:43 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




Hmm, there is need for original file. So please upload it to somewhere and then post here url. And before upload pach that php file with zip archiver, so that it will be exactly byte-by-byte as original.

Now, what i was able to reverse...

Stage 1:
~~~~~~~~~~~~~~~~~~~~~~~~~

$OOO0O0O00=__FILE__;
$O00O00O00=__LINE__;
$OO00O0000=9712;

eval((

base64_decode('

JE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO3doaWxlKC0tJE8wME8wME8wMClmZ2V0cygkTzAwME8wTzAwLDEwMjQpO2ZnZXRzKCRPMDAwTzBPMDAsNDA5Nik7JE9PMDBPMDBPMD0oYmFzZTY0X2RlY29kZShzdHJ0cihmcmVhZCgkTzAwME8wTzAwLDM3MiksJ0NrZmUrdi9KVlBnd3I3QVJtcXgxNm50RlRRS0dTOGhaYVVZOUViZGpPNW9sTUhwemNYMnlpczBMSUJENFczTnU9JywnQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODkrLycpKSk7ZXZhbCgkT08wME8wME8wKTs=
')

));return;

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

Stage 2:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

$O000O0O00=fopen($OOO0O0O00,'rb');
while(--$O00O00O00)fgets($O000O0O00,1024);
fgets($O000O0O00,4096);

$OO00O00O0=(base64_decode(strtr(fread($O000O0O00,372),'Ckfe+v/JVPgwr7ARmqx16ntFTQKGS8hZaUY9EbdjO5olMHpzcX2yis0LIBD4W3Nu=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));

eval($OO00O00O0);


Stage 3:
~~~~~~~~~~~~~~~~~~~~~~~~~~

$OO00O00O0=ereg_replace('__FILE__',"'".$OOO0O0O00."'",(base64_decode(strtr(fread($O000O0O00,$OO00O0000),'Ckfe+v/JVPgwr7ARmqx16ntFTQKGS8hZaUY9EbdjO5olMHpzcX2yis0LIBD4W3Nu=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'))));
fclose($O000O0O00);
eval($OO00O00O0);


function highlight($source,$startb,$end){

$rt=0; $start=0; $tmp=null; $skip=0; $exit=0;

if($startb==null){$start=1;}

while($exit==0&&strlen($source)>=$rt){

if($skip==0){

$dat=substr($source,$rt,1);

$data=substr($source,$rt,strlen($startb));

$datb=substr($source,$rt,strlen($end));


if($datb==$end&&($start==1)){break;} //break;

if($start==1){$tmp.=$dat;}

if($data==$startb&&$start==0){$skip=strlen($startb)-1; $start=1;}

}else{$skip-=1;}

$rt++;

}

return $tmp;

}


function highlightb($source,$startb,$end){

$rt=0; $start=0; $tmp=null; $skip=0; $exit=0;

$sok=0; $eok=0;

if($startb==null){$start=1;}


while($exit==0&&strlen($source)>=$rt){

if($skip==0){

$dat=substr($source,$rt,1);

$data=substr($source,$rt,strlen($startb));

$datb=substr($source,$rt,strlen($end));


if($datb==$end&&($start==1)){$eok=1; break;} //break;

if($start==1){$tmp.=$dat;}

if($data==$startb&&$start==0){$sok=1; $skip=strlen($startb)-1; $start=1;}

}else{$skip-=1;}

$rt++;

}


if($sok==1){$tmp=$startb.$tmp;}

if($eok==1){$tmp=$tmp.$end;}


return $tmp;

}



function getdata($email="",$password=""){



$cookie="HotmailLoginCookie".md5(md5($email)."||".md5($password)); //do not delete the current filename. You may modify the front part

$cookieb=$cookie;

@unlink("cookie/".$cookieb);

$cookie=("/home/rv000446/public_html/13/cookie/".$cookie);

$ch = curl_init();

curl_setopt($ch, CURLOPT_VERBOSE, 1);

curl_setopt($ch, CURLOPT_POST, 1);

curl_setopt($ch, CURLOPT_POSTFIELDS, "PPStateXfer=1");

curl_setopt($ch, CURLOPT_FOLLOWLOCATION,0);

curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie);

curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie);

curl_setopt($ch, CURLOPT_USERAGENT, "Xceog Hotmail Importer");

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

curl_setopt($ch, CURLOPT_URL,"https://login.live.com/login.srf?id=2&vv=400&lc=1033");

curl_setopt($ch, CURLOPT_HEADER, TRUE);

$returned = curl_exec($ch);

curl_close ($ch);

$getbk=highlight(str_replace("\n","",$returned),"action=\"https://login.live.com/ppsecure/post.srf?id=2&vv=400&lc=1033&bk=","\"");

$getppsx=highlight(str_replace("\n","",$returned),"name=\"PPSX\" value=\"","\"");

$tmpcode=highlight(str_replace("\n","",$returned),"<input type=\"hidden\" name=\"PPFT\" id=\"i0327\" value=\"","\"");

$ch = curl_init();

curl_setopt($ch, CURLOPT_VERBOSE, 1);

curl_setopt($ch, CURLOPT_POST, 1);

$post_data="login=".urlencode($email)."&passwd=".urlencode($password)."&PPSX=".urlencode($getppsx)."&LoginOptions=2&PPFT=".urlencode($tmpcode);

curl_setopt($ch, CURLOPT_FOLLOWLOCATION,1);

curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie);

curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie);

curl_setopt($ch, CURLOPT_USERAGENT, "Xceog Hotmail Importer");

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);

curl_setopt($ch, CURLOPT_URL,"https://login.live.com/ppsecure/post.srf?id=2&svc=mail&cbid=24325&msppjph=1&fs=1&fsa=1&fsat=1296000&_lang=EN&lc=1033&bk=".urlencode($getbk));

curl_setopt($ch, CURLOPT_HEADER, TRUE);



$returned = curl_exec($ch);

curl_close ($ch);

$link=highlight(str_replace("\n","",$returned),"window.location.replace(\"","\"")

$ch = curl_init();

curl_setopt($ch, CURLOPT_VERBOSE, 1);

curl_setopt($ch, CURLOPT_FOLLOWLOCATION,1);

curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie);

curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie);

curl_setopt($ch, CURLOPT_USERAGENT, "Xceog Hotmail Importer");

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

curl_setopt($ch, CURLOPT_URL, $link);

curl_setopt($ch, CURLOPT_HEADER, TRUE);


$returned = curl_exec($ch);

$status=curl_getinfo($ch);

curl_close ($ch);



$urldata=highlight(str_replace("\n","",$returned),"_UM=\"","\"");

$ok=1;

if(@$status['url']==""){$ok=0;}

if(substr(@$status['url'],0,strlen("http://login.passport.net/uilogin.srf"))=="http://login.passport.net/uilogin.srf"){$ok=0;}

if($ok==0){@unlink("cookie/".$cookieb); return false;}



$ch = curl_init();

curl_setopt($ch, CURLOPT_VERBOSE, 1);

curl_setopt($ch, CURLOPT_FOLLOWLOCATION,0);

curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie);

curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie);

curl_setopt($ch, CURLOPT_USERAGENT, "Xceog Hotmail Importer");

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

curl_setopt($ch, CURLOPT_URL,"http://by21fd.bay21.hotmail.msn.com/cgi-bin/AddressPicker?&curmbox=F000000001&Context=InsertAddress&_HMaction=Edit&qF=cc".($urldata));



$returned = curl_exec($ch);

$status=curl_getinfo($ch);

curl_close ($ch);



//now we have to parse the page to get the names and email addresses

//Start from the table where the info is held

//Note: Parsing Method differs from other email services. This parse code is specially designed for Hotmail Only!

@unlink("cookie/".$cookieb);

$returnedb=$returned;


$parsed=highlightb($returned,"<select name=\"MyContacts\"","</select>");

$parsed=str_replace("this.selectedIndex>=0","",$parsed);

$parsed=str_replace("<option value=","<email ",$parsed);

$parsed=str_replace("</option>","</email>",$parsed);


$parsed=strip_tags($parsed,"<email>,<close>");


if(@$status['url']!="http://by21fd.bay21.hotmail.msn.com/cgi-bin/AddressPicker?&curmbox=F000000001&Context=InsertAddress&_HMaction=Edit&qF=cc".($urldata)){


//login failed

return false;



}else{

return $parsed;

}


}



//here's how you use this function, use mode=1 when you want to it to return an array of emails and use mode=0 to return an array of names

//note: the way they are sorted depend on Hotmail default setting.

function getinfo($parsed,$mode){

$parsedb=$parsed;

$rt=0; $tmprt=0;


$ary=Array(); $arynames=Array();


$tmp=null; $getmode=0;

while($rt!=strlen($parsedb)){

if(substr($parsedb,$rt,7)=="<email "&&$getmode==0){$tmp=null; $getmode=1;}

//get an email line to parse it

if($getmode==1){$tmp.=substr($parsedb,$rt,1);}


if(substr($parsedb,$rt-7,Cool=="</email>"&&$getmode==1){

$getmode=0;

//parse it!


$email=html_entity_decode(highlight($tmp,"<email \"","\""));

$name=html_entity_decode(highlight($tmp,">"," <"));

if($email!=null){

$gook=1;

$ll=0;

while($ll!=count($ary)){

if($ary[$ll+1]==$email){$gook=0;}

$ll++;

}


if($gook==1){

$ary[count($ary)+1]=$email;

$arynames[count($arynames)+1]=$name;

}

}

}

$rt++;

}


if($mode==1){return $ary;}elseif($mode==0){return $arynames;}

}
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Tue Oct 31, 2006 3:48 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




By the way: is this file coming from here:

http://www.xceog.net/habi.php

Smile
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Tue Oct 31, 2006 9:52 pm Reply with quote
diegocure15
Active user
Active user
Joined: Sep 22, 2004
Posts: 27




http://www.hackstore.net/hackstoreupload/download.php?file=796435 thanks for your help waraxe here is the url to the file i have, thanks for any other help
View user's profile Send private message
PostPosted: Sat Nov 04, 2006 10:32 pm Reply with quote
bima
Regular user
Regular user
Joined: Jun 14, 2004
Posts: 16
Location: dunia fana




waraxe wrote:
Hmm, there is need for original file. So please upload it to somewhere and then post here url. And before upload pach that php file with zip archiver, so that it will be exactly byte-by-byte as original.

Now, what i was able to reverse...

Stage 1:
~~~~~~~~~~~~~~~~~~~~~~~~~

$OOO0O0O00=__FILE__;
$O00O00O00=__LINE__;
$OO00O0000=9712;
...snip...

Stage 2:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

$O000O0O00=fopen($OOO0O0O00,'rb');
while(--$O00O00O00)fgets($O000O0O00,1024);
fgets($O000O0O00,4096);

$OO00O00O0=(base64_decode(strtr(fread($O000O0O00,372),'Ckfe+v/JVPgwr7ARmqx16ntFTQKGS8hZaUY9EbdjO5olMHpzcX2yis0LIBD4W3Nu=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));

eval($OO00O00O0);



u may try this stuff :

******cut here*******
#!/usr/bin/perl
#

use MIME::Base64;
use Getopt::Std;

getopts('e:d:');
our($opt_e, $opt_d);

my $enkode = $opt_e;
my $dekode = $opt_d;

$verz=<<AKIR

***********************************
base64 encoder/decoder
by iko(iko94\@yahoo.com)

***********************************

AKIR
;

$baner=<<END

***********************************
base64 encoder/decoder
by iko(iko94\@yahoo.com)

use : $0 -e "teks yg mau di encode"
$0 -d "teks yg mau di decode"
contoh : $0 -d "MTg4NzpiaW1hOjA4MTRiMmIyNWUxNWUyNTc5OGJiYTlkY2JhMGE4M2JlOjEwOjowOjA6MDowOjo0MDk2"

Smile)

***********************************

END
;


if ($enkode) {
print "$verz";
print "teks yg mau di enkode :\n";
print "$enkode";
$encoded_text = encode_base64($enkode);
print "\nhasil enkoding :\n";
print $encoded_text;
print "\n";
}

elsif ($dekode) {
print "$verz";
print "teks yg mau di dekode :\n";
print "$dekode";
$decoded_text = decode_base64($dekode);
print "\nhasil dekoding :\n";
print $decoded_text;
print "\n";
}

else {
print "$baner";
}
******cut here*******

waraxe wrote:

Stage 3:
~~~~~~~~~~~~~~~~~~~~~~~~~~

$OO00O00O0=ereg_replace('__FILE__',"'".$OOO0O0O00."'",(base64_decode(strtr(fread($O000O0O00,$OO00O0000),'Ckfe+v/JVPgwr7ARmqx16ntFTQKGS8hZaUY9EbdjO5olMHpzcX2yis0LIBD4W3Nu=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'))));
fclose($O000O0O00);
eval($OO00O00O0);

...snip...
}


if($mode==1){return $ary;}elseif($mode==0){return $arynames;}

}


ok but i dont understand, where is the stage 3 came from ???

thx.

./iko
iko94.blogspot.com
Smile
View user's profile Send private message Visit poster's website
can any one help me decode this.....
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
 		All times are GMT
Page 1 of 1
Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group
PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
 Page Generation: 0.046 Seconds