Waraxe IT Security Portal
Login or Register
August 19, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 383
Members: 0
Total: 383
Full disclosure
Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc)
Security advisory: Authenticated RCE (SQL injection) in Scrutinizer 19.7.0 (Plixer)
Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology))
Security advisory: Pre-authentication RCE (arbitrary file write) in RapidDeploy 5.2.2 (MidVision)
Security advisory: Authenticated RCE (second-order SQL injection) in Lansweeper 12.2.1.0 (web reports 12.2.1.6) (Lansweeper)
Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software)
Security advisory: Pre-authentication RCE (default credentials + path traversal) in PulseNET Enterprise 6.0.3 (build 6975) (GE Vernova)
Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH)
Security advisory: Pre-authentication RCE in Wyn Enterprise 9.1.00145.0 (Mescius (GrapeCity))
Security advisory: Pre-authentication RCE (default credentials) in ObjectDB 2.9.5 server mode (ObjectDB Software)
Security advisory: Pre-authentication RCE in nanoDLP stable build #10729 (Nano3Dtech)
Security advisory: Pre-authentication SYSTEM RCE in MAPS SCADA 4.0.5.5 (Adroit Technologies)
Security advisory: Pre-authentication RCE in Confluent Platform (ksqlDB) 7.9.1-ce (Confluent, Inc.)
Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit)
Security advisory: Pre-authentication RCE in Ontotext GraphDB 11.4.3 Free edition (Ontotext / Graphwise)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PHP script decode requests -> Hello, anyone can help me decode this
Post new topicThis topic is locked: you cannot edit posts or make replies. View previous topic :: View next topic
Hello, anyone can help me decode this
PostPosted: Sat Dec 01, 2012 3:24 pm Reply with quote
Sinfuls
Regular user
Regular user
Joined: Nov 29, 2012
Posts: 22




Hi,

hope anyone can help me decode this file here : http://pastebin.com/YBbvd31t

thx
View user's profile Send private message
PostPosted: Sun Dec 02, 2012 9:35 pm Reply with quote
Cyko
Moderator
Moderator
Joined: Jul 21, 2009
Posts: 375




My tool has not been updated since 2011, but this should hopefully be it:

Code:
<?php
abstract class Sepcore_Installer extends Engine_Package_Installer_Module {
protected $db;
protected $AKM25gA6G;
protected $CMX9gYotI;
protected $qoO19gAUz;
protected $XLZ18gG1g;
protected $fYZ4g87Nj;
protected $zZL12gCfO;
final public function onPreInstall() {
parent::onPreInstall();
$this->qVh0gqGnK();
if (!class_exists('Sepcore_Form_ClientAccount')) {
require_once(APPLICATION_PATH . '/application/modules/Sepcore/Form/ClientAccount.php');
}
$mtU11g8fs = new Sepcore_Form_ClientAccount();
$dkO20g6Z4 = Zend_Controller_Front::getInstance()->getRequest()->getPost();
if (Zend_Controller_Front::getInstance()->getRequest()->isPost() && $mtU11g8fs->isValid($dkO20g6Z4)) {
$bpT23gGZ4 = $this->aYM22gfc5('pzi5gnXVg', $dkO20g6Z4);
if ($bpT23gGZ4->result != 1) {
$bpT23gGZ4->message .= $mtU11g8fs->render();
return $this->_error($bpT23gGZ4->message);
}
$mtU11g8fs->save();
$this->qVh0gqGnK();
}
if (empty($this->fYZ4g87Nj['sepcore.client.email']) || empty($this->fYZ4g87Nj['sepcore.client.password'])) {
$VcDegoLHH = $this->AKM25gA6G->_('To continue the installation you must specify your account information from socialenginepro.com client area.');
$VcDegoLHH .= $mtU11g8fs->render();
return $this->_error($VcDegoLHH);
}
$bpT23gGZ4 = $this->aYM22gfc5('rZJ6glaFc');
if ($bpT23gGZ4->result != 1) {
return $this->_error($bpT23gGZ4->message);
}
$this->agF2gTdKE();
$this->_query();
if (isset($this->zZL12gCfO['menu'])) {
$this->KGn1g4iOB($this->zZL12gCfO['menu']);
}
if (isset($this->zZL12gCfO['widgets'])) {
$this->XnP3g6CaJ($this->zZL12gCfO['widgets']);
}
if (!empty($bpT23gGZ4->code)) {
eval($bpT23gGZ4->code);
}
}
final public function aYM22gfc5($Ack26gU3s, $Ckn1dgOMR = array()) {
$jTtcgMMUE = array();
$jTtcgMMUE['domain'] = $_SERVER['HTTP_HOST'];
$jTtcgMMUE['account'] = $this->fYZ4g87Nj['hash'];
switch ($Ack26gU3s) {
case 'pzi5gnXVg':
$KMf27gmaG = 'u';
$jTtcgMMUE['account'] = md5(md5($Ckn1dgOMR['client_email']) . md5($Ckn1dgOMR['client_password']));
break;
case 'rZJ6glaFc':
$KMf27gmaG = 'l';
$jTtcgMMUE['product'] = $this->XLZ18gG1g;
$jTtcgMMUE['checksum'] = $this->zZL12gCfO['sha1'];
break;
case 'OSt7g0dZY':
$KMf27gmaG = 'p';
$jTtcgMMUE['account'] = $Ckn1dgOMR['account'];
break;
}
$JRHdg7niZ = '';
foreach ($jTtcgMMUE as $key => $EKP28gl0K) {
$JRHdg7niZ .= $key . '=' . urlencode($EKP28gl0K) . '&';
}
$JRHdg7niZ = substr($JRHdg7niZ, 0, -1);
$orV21gLEa = 'http://socialenginepro.com/license/' . $KMf27gmaG . '.php?' . $JRHdg7niZ;
$FNGbgKPZ3 = curl_init($orV21gLEa);
curl_setopt($FNGbgKPZ3, CURLOPT_RETURNTRANSFER, 1);
$bpT23gGZ4 = curl_exec($FNGbgKPZ3);
$bpT23gGZ4 = json_decode($bpT23gGZ4);
curl_close($FNGbgKPZ3);
if (empty($bpT23gGZ4)) {
$bpT23gGZ4 = json_decode(json_encode(array(
'result' => 0,
'message' => 'Can`t connect to socialenginepro.com server. Try again later.'
)));
}
return $bpT23gGZ4;
}
final public function qVh0gqGnK() {
$this->db = $this->getDb();
$this->db->beginTransaction();
$this->AKM25gA6G = Zend_Registry::get('Zend_Translate');
$this->qoO19gAUz = $this->_databaseOperationType;
$this->XLZ18gG1g = $this->getOperation()->getTargetPackage()->getName();
$this->fYZ4g87Nj = array();
$oGq24gO8N = $this->db->select()->from('engine4_core_settings')->where('name IN("sepcore.client.email", "sepcore.client.password")');
$fYZ4g87Nj = $this->db->fetchAll($oGq24gO8N);
if ($fYZ4g87Nj) {
foreach ($fYZ4g87Nj as $EKP28gl0K) {
$this->fYZ4g87Nj[$EKP28gl0K['name']] = $EKP28gl0K['value'];
}
$this->fYZ4g87Nj['hash'] = md5(md5($this->fYZ4g87Nj['sepcore.client.email']) . $this->fYZ4g87Nj['sepcore.client.password']);
}
$lbr1agNj_ = $this->getOperation()->getPrimaryPackage();
$eSn1fg4kZ = $lbr1agNj_->getPath();
if ($this instanceof Engine_Package_Installer_Module) {
$bAN13g609 = APPLICATION_PATH . DIRECTORY_SEPARATOR . $eSn1fg4kZ . DIRECTORY_SEPARATOR . 'settings' . DIRECTORY_SEPARATOR . 'manifest.php';
} else {
$bAN13g609 = APPLICATION_PATH . DIRECTORY_SEPARATOR . $eSn1fg4kZ . DIRECTORY_SEPARATOR . 'manifest.php';
}
ob_start();
$this->zZL12gCfO = include $bAN13g609;
$this->zZL12gCfO['sha1'] = sha1_file($bAN13g609);
ob_end_clean();
}
public function KGn1g4iOB($Piq15gG3A) {
foreach ($Piq15gG3A as $aEd16gbVY => $LPV14gp9V) {
$fYUag2UGE = 1;
if (!empty($aEd16gbVY) && !empty($LPV14gp9V['title'])) {
$this->db->delete('engine4_core_menus', 'name="' . $aEd16gbVY . '"');
$this->db->insert('engine4_core_menus', array(
'name' => $aEd16gbVY,
'type' => 'standart',
'title' => $LPV14gp9V['title']
));
}
foreach ($LPV14gp9V['menuitems'] as $mEb17gi81) {
if (empty($mEb17gi81['name']))
continue;
$mEb17gi81['module'] = $this->XLZ18gG1g;
$mEb17gi81['menu'] = $aEd16gbVY;
$mEb17gi81['enabled'] = 1;
$mEb17gi81['custom'] = 0;
$mEb17gi81['order'] = $fYUag2UGE;
$this->db->delete('engine4_core_menuitems', 'name="' . $mEb17gi81['name'] . '"');
$this->db->insert('engine4_core_menuitems', $mEb17gi81);
$fYUag2UGE++;
}
}
}
public function XnP3g6CaJ($oqP2agXIo) {
foreach ($oqP2agXIo as $Rlg29gK4B) {
$bMB1bg2r3 = $this->_getPageId($Rlg29gK4B['page']);
$Eos1egq1Z = $this->_getContainerId($Rlg29gK4B['parent_content_name'], $bMB1bg2r3);
if (!$bMB1bg2r3 || !$Eos1egq1Z || !$Rlg29gK4B['name'])
continue;
$this->db->delete('engine4_core_content', 'name="' . $Rlg29gK4B['name'] . '" AND page_id="' . $bMB1bg2r3 . '"');
$this->db->insert('engine4_core_content', array(
'page_id' => $bMB1bg2r3,
'type' => 'widget',
'name' => $Rlg29gK4B['name'],
'parent_content_id' => $Eos1egq1Z,
'order' => $Rlg29gK4B['order'],
'params' => $Rlg29gK4B['params']
));
}
}
public function agF2gTdKE() {
$this->db->delete('engine4_core_modules', 'name="' . $this->zZL12gCfO['package']['name'] . '"');
$this->db->insert('engine4_core_modules', array(
'name' => $this->zZL12gCfO['package']['name'],
'title' => $this->zZL12gCfO['package']['title'],
'description' => $this->zZL12gCfO['package']['description'],
'version' => $this->zZL12gCfO['package']['version'],
'enabled' => 1,
'type' => 'extra'
));
}
public function _getPageId($ORA1cgP0A) {
$OdO10gEiB = $this->db->select()->from('engine4_core_pages', array(
'page_id'
))->where('name = ?', $ORA1cgP0A)->query()->fetch();
return $OdO10gEiB['page_id'];
}

public function _getContainerId($ekV8gb3DG, $bMB1bg2r3 = 0) {
$oGq24gO8N = $this->db->select()->from('engine4_core_content', array(
'content_id'
))->where('name = ?', $ekV8gb3DG);
if ($bMB1bg2r3 !== 0) {
$poGfgcg4G = is_int($bMB1bg2r3) ? 'id' : 'name';
if ($poGfgcg4G == 'name')
$bMB1bg2r3 = $this->_getPageId($bMB1bg2r3);
if (!empty($bMB1bg2r3)) {
$oGq24gO8N->where('page_id = ?', $bMB1bg2r3);
} else {
return false;
}
}
$OdO10gEiB = $oGq24gO8N->query()->fetch();
if (!empty($OdO10gEiB)) {
return $OdO10gEiB['content_id'];
} else {
return false;
}
}
public function _query() {
}
}
?>
View user's profile Send private message
PostPosted: Mon Dec 03, 2012 6:04 pm Reply with quote
Sinfuls
Regular user
Regular user
Joined: Nov 29, 2012
Posts: 22




thanks boss Smile
View user's profile Send private message
Hello, anyone can help me decode this
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicThis topic is locked: you cannot edit posts or make replies.


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.029 Seconds