 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 2806
 Members: 0
 Total: 2806
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
need help decoding PHP |
|
 Posted: Wed Mar 18, 2009 9:43 am |
 |
|
| oobbz |
| Regular user |
 |
|
| Joined: Mar 18, 2009 |
| Posts: 5 |
|
|
|
 |
|
 |
|
hi all expert and who can decode these files
wait a reply or pm me
thanks to all |
|
Last edited by oobbz on Mon Aug 31, 2009 2:38 pm; edited 1 time in total |
|
|
|
|
|
|
|
| Posted: Wed Mar 18, 2009 11:34 am |
|
|
| zerobytes |
| Valuable expert |
|
|
| Joined: Aug 30, 2008 |
| Posts: 199 |
|
|
|
|
|
|
|
Unfotunetly your code is heavily obfuscated but readable
| Code: |
<?php include_once "initial.php";
function T66F6181BCB4CFF4CD38FBC804A036DB6($TB068931CC450442B63F5B3D276EA4297)
{
return file_get_contents($TB068931CC450442B63F5B3D276EA4297 . '.html');
}
function TF3E1171F044117822FBD7B5E979B362F($T8D777F385D3DFEC8815D20F7496026DC)
{
return str_replace('{#DATA}', $T8D777F385D3DFEC8815D20F7496026DC, T66F6181BCB4CFF4CD38FBC804A036DB6('template_time'));
}
function T52065EE03734A95C36FB22900DB4BC13($katoo)
{
$T8D777F385D3DFEC8815D20F7496026DC = file_get_contents('http://bbs.pramool.com/webboard/followup.php3?katoo=' . $katoo);
return substr($T8D777F385D3DFEC8815D20F7496026DC, strpos($T8D777F385D3DFEC8815D20F7496026DC, 'checksum/index7.php?imgnum=') + 27, 80);
}
$T1350BAF4F40FFA836D8160FA25FFA728 = @file_get_contents('http://nundaung.sytes.net/anti.php');
$TA70CB7830A35F7926A91E23083FD41F3 = @file_get_contents('http://nundaung.sytes.net/time_ok.php');
if (!$T1350BAF4F40FFA836D8160FA25FFA728) exit();
if (!$TA70CB7830A35F7926A91E23083FD41F3) exit();
if ($T1350BAF4F40FFA836D8160FA25FFA728 > date('U') + 1000 || $T1350BAF4F40FFA836D8160FA25FFA728 < date('U') - 1000) exit();
if ($T1350BAF4F40FFA836D8160FA25FFA728 > $TA70CB7830A35F7926A91E23083FD41F3) exit();
$TB80BB7740288FDA1F201890375A60C8F = rand(10, 30);
$TD1EC3FE3AA3B0EBDB37F2BF7CDDF27DC = rand(30, 50);
$TD9EA717095B00E01DE343C56AA5F8C2B = file_get_contents('http://bbs.pramool.com/webboard/list.php3?cate=gam_ro1');
$T6A992D5529F459A44FEE58C733255E86 = substr($TD9EA717095B00E01DE343C56AA5F8C2B, strpos($TD9EA717095B00E01DE343C56AA5F8C2B, 'target=' . $TB80BB7740288FDA1F201890375A60C8F) + 8, 20);
$T8DF17C77AF23061EF4322D47D6C431FA = substr($TD9EA717095B00E01DE343C56AA5F8C2B, strpos($TD9EA717095B00E01DE343C56AA5F8C2B, 'target=' . $TD1EC3FE3AA3B0EBDB37F2BF7CDDF27DC) + 8, 20);
unset($T363B122C528F54DF4A0446B6BAB05515);
do {
$T18EA5D8C60DBD373299E448EC0F45112 = file_get_contents('http://bbs.pramool.com/webboard/list.php3?cate=gam_ro1');
$T032C085DD412302DF05B089FED0FD23B = substr($T18EA5D8C60DBD373299E448EC0F45112 , strpos($T18EA5D8C60DBD373299E448EC0F45112 , 'target=' . $TB80BB7740288FDA1F201890375A60C8F) + 8, 20);
$T72BCA5BAF62D5A9C12DC3985E045BF95 = substr($T18EA5D8C60DBD373299E448EC0F45112 , strpos($T18EA5D8C60DBD373299E448EC0F45112 , 'target=' . $TD1EC3FE3AA3B0EBDB37F2BF7CDDF27DC) + 8, 20);
if (($T6A992D5529F459A44FEE58C733255E86 != $T032C085DD412302DF05B089FED0FD23B) || ($T8DF17C77AF23061EF4322D47D6C431FA != $T72BCA5BAF62D5A9C12DC3985E045BF95)) {
$TFC74AC11C3510D626679DE24E0125FF6 = new database;
$TFC74AC11C3510D626679DE24E0125FF6->TD6416124E798B960978CFC2F30E1E2EB(SELECT_TIME);
$TFC74AC11C3510D626679DE24E0125FF6->T03A253AAAEDC3AFCC3D32DEEB4D4341D();
$T8D777F385D3DFEC8815D20F7496026DC = $TFC74AC11C3510D626679DE24E0125FF6->T8D777F385D3DFEC8815D20F7496026DC;
$T61831C659DE0AE1BCAC3AE3EFCC82A30 = $T8D777F385D3DFEC8815D20F7496026DC['time'];
$TFC74AC11C3510D626679DE24E0125FF6->TD6416124E798B960978CFC2F30E1E2EB(sprintf(UPDATE_TIME2, $T61831C659DE0AE1BCAC3AE3EFCC82A30));
$TFC74AC11C3510D626679DE24E0125FF6->TEC0CD3CB91FE82B9501F62A528EB07A9();
$TFC74AC11C3510D626679DE24E0125FF6->TD6416124E798B960978CFC2F30E1E2EB(sprintf(UPDATE_TIME, date('U')));
$TFC74AC11C3510D626679DE24E0125FF6->TEC0CD3CB91FE82B9501F62A528EB07A9();
$diff = (date('U') - $T61831C659DE0AE1BCAC3AE3EFCC82A30);
$TFC74AC11C3510D626679DE24E0125FF6->TD6416124E798B960978CFC2F30E1E2EB(sprintf(UPDATE_TIME3, $diff));
$TFC74AC11C3510D626679DE24E0125FF6->TEC0CD3CB91FE82B9501F62A528EB07A9();
$T865C0C0B4AB0E063E5CAA3387C1A8741++;
$T363B122C528F54DF4A0446B6BAB05515 = 1;
}
sleep(1);
} while ($T363B122C528F54DF4A0446B6BAB05515 != 1);
$T8D777F385D3DFEC8815D20F7496026DC = 'ÃÃà ¾×èõÃǨÃú ¡Òà Update ã¹ÃÕ¡ <div class="counter" id="COOL_REDIRECT">80</div>';
echo TF3E1171F044117822FBD7B5E979B362F($T8D777F385D3DFEC8815D20F7496026DC);
?>
|
ZeroBytes |
|
|
|
|
|
|
|
|
| Posted: Wed Mar 18, 2009 2:15 pm |
|
|
| oobbz |
| Regular user |
|
|
| Joined: Mar 18, 2009 |
| Posts: 5 |
|
|
|
|
|
|
|
thanks , zerobytes
who can decode these files
help me pls |
|
|
|
|
| Posted: Sat Mar 21, 2009 2:50 am |
|
|
| oobbz |
| Regular user |
|
|
| Joined: Mar 18, 2009 |
| Posts: 5 |
|
|
|
|
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB 2001-2008 phpBB Group
|
|
|
|
|
|
