Jump to content


Photo

[Resolved] Can Anyone Decode This?


  • Please log in to reply
15 replies to this topic

#1 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 28 October 2006 - 10:24 AM

Can anyone decode this? I've tried base64 decoders with no luck.

$pageval = "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";eval(stripslashes(gzuncompress(base64_decode($pageval))));


#2 freeloader

freeloader
  • Members
  • PipPipPip
  • Advanced Member
  • 175 posts

Posted 28 October 2006 - 10:44 AM

Md5? If it is md5, you can't decode it.

#3 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 28 October 2006 - 06:33 PM

I don't think it's md5 as this is an encoded php page.

#4 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 28 October 2006 - 07:11 PM

The script tells you the functions to decode it...
http://wizardsofwebs....com/script.txt

#5 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 28 October 2006 - 07:40 PM

The script tells you the functions to decode it...
http://wizardsofwebs....com/script.txt

Thanks, but I know virtually nothing about PHP so this really doesn't do me any good.

#6 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 28 October 2006 - 07:42 PM

You asked to decode the script, that's the decoded script. What else did you need?

#7 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 28 October 2006 - 08:12 PM

Sorry, I didn't realize that. Thank you very much. What did you use to decode it?

#8 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 28 October 2006 - 08:33 PM

The end of the script you posted decodes it
base64_decode() then gzuncompress() then stripslashes().

#9 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 28 October 2006 - 09:06 PM

Thanks again but I really don't understand how to gzuncompress. I have other encoded strings that base64 will not deocode. Do you know what encoding is used in the line below?

if ($output !== stripslashes_ascii("eF7LyM9NLUhMT43PyczLji8uSExOBQBN3Qe/"))  die("error mid");

#10 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 28 October 2006 - 09:32 PM

That says "homepage_link_space"

#11 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 28 October 2006 - 10:05 PM

Could you explain for me the exact process you are using to decode these?

#12 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 28 October 2006 - 10:08 PM

The code contains a function called statout() that decodes the strings
function statout($mystring) {
	$mystring = gzuncompress(base64_decode($mystring));
	return $mystring;
}


#13 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 29 October 2006 - 01:46 AM

The code contains a function called statout() that decodes the strings

function statout($mystring) {
	$mystring = gzuncompress(base64_decode($mystring));
	return $mystring;
}

Thanks, but like I said, I know nothing about PHP and have no idea on how to use that function to decode the strings. Could you give me an example of the procedure to decode a string?

#14 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 29 October 2006 - 08:15 PM

<?php
function statout($mystring) {
$mystring = gzuncompress(base64_decode($mystring));
return $mystring;
}
echo statout('eF7LyM9NLUhMT43PyczLji8uSExOBQBN3Qe/');
?>


#15 wiseguy

wiseguy
  • Members
  • PipPip
  • Member
  • 15 posts

Posted 29 October 2006 - 09:40 PM

Got it! Thank you so much brendandonhue. You have been more than helpful.

#16 brendandonhue

brendandonhue
  • Members
  • PipPipPip
  • Advanced Member
  • 65 posts

Posted 30 October 2006 - 01:35 AM

No problem :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users