jakebur01 Posted April 27, 2007 Share Posted April 27, 2007 I bought some script from a lady when I was first starting out learning php. A few of the files have a lot of encoded junk in it. I cannot see any of the functions. Is there any way I could get around this or sort of convert all this encoded stuff to something I can look at and work with? Example: codelock.php <?php eval(base64_decode("b2Jfc3RhcnQoKTsgJGNvZGVsb2NrX2wgPSAiRkxZVS1JM1hULVBBOUFVUzFIWUpIUiI7ICRjb2RlbG9ja190ID0gYmFzZTY0X2RlY29kZSgiSlNBNEpsNXBVRGN3U0R3dVdpcDFLRWNwSzJwc0pTbzFQREZDSWxWaklrd2lZUjBuSlNSV09qQXNJV2t3TFN0MUNUdFFQek5CUFN0UmVpTXlRMmg5SWlzeFBDY3hQVTV5UlRrbURYUXFWaWdpTWtNc0tIRStNelJzZlQ5TE9VSXFKMWsvZWw4ME96QkZJVFlrYURFcEtEdzVRaXBZZUh3SklUTmJPRDArVlN4d2FqTjJNaVF3SmdCM1FUc3pTandzVXlsMWJoRnNLRGdxS3k0aFBURVdiVWN3UFY1OWYwNHRMRFpWSnpJc2FHOW1iakVoV1RrSmQzdGFK.................................... functions.php <?php if(file_exists('codelock.php')) {require_once('codelock.php'); $codelock_lock = new codelock(__FILE__); eval($codelock_lock->output());} return 1;?> REtkYno8XkkdSkJCHRtZTkxMW0lXHU0ZF0IdSF5eH0BFXRhJdX1ZVkInCg4JXU4dFjgHHQYBEhMWdD0cQEc1WUwdVBZFURkHA0JYWTs/RFZMPBVAD1dTOyQXFFUGBEgZAhU2JUNYQ04ERVUeQ1QrN1IGFwpfFRlhZR9aFFpDUU1HSVdbCgRSHxtDCVYBQwMDURcVHhlVQlAdFkMFEEBFFjRUWBYFEF9Z............................................... Thank you, Jake Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/ Share on other sites More sharing options...
MadTechie Posted April 27, 2007 Share Posted April 27, 2007 yep but its a pain use echo for the next code to reverse (replace eval) ie <?php echo (base64_decode("b2Jfc3RhcnQoKTsgJGNvZGVsb2NrX2wgPSAiRkxZVS1JM1hULVBBOUFVUzFIWUpIUiI7ICRjb2RlbG9ja190ID0gYmFzZTY0X2RlY29kZSgiSlNBNEpsNXBVRGN3U0R3dVdpcDFLRWNwSzJwc0pTbzFQREZDSWxWaklrd2lZUjBuSlNSV09qQXNJV2t3TFN0MUNUdFFQek5CUFN0UmVpTXlRMmg5SWlzeFBDY3hQVTV5UlRrbURYUXFWaWdpTWtNc0tIRStNelJzZlQ5TE9VSXFKMWsvZWw4ME96QkZJVFlrYURFcEtEdzVRaXBZZUh3SklUTmJPRDArVlN4d2FqTjJNaVF3SmdCM1FUc3pTandzVXlsMWJoRnNLRGdxS3k0aFBURVdiVWN3UFY1OWYwNHRMRFpWSnpJc2FHOW1iakVoV1RrSmQzdGFK.................................... Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/#findComment-239821 Share on other sites More sharing options...
jakebur01 Posted April 27, 2007 Author Share Posted April 27, 2007 heres what it echoed back. What do I need to do from here to break it down? ob_start(); $codelock_l = "FLYU-I3XT-PA9AUS1HYJHR"; $codelock_t = base64_decode("JSA4Jl5pUDcwSDwuWip1KEcpK2psJSo1PDFCIlVjIkwiYR0nJSRWOjAsIWkwLSt1CTtQPzNBPStReiMyQ2h9IisxPCcxPU5yRTkmDXQqVigiMkMsKHE+MzRsfT9LOUIqJ1k/el80OzBFITYkaDEpKDw5QipYeHwJITNbOD0+VSxwajN2MiQwJgB3QTszSjwsUyl1bhFsKDgqKy4hPTEWbUcwPV59f04tLDZVJzIsaG9mbjEhWTkJd3taJzYXNT06XyttJToxI2I6OkBmRyo1TjskS3N6J0MpOiEtIGg8MSUPchcsPEQjbAcnJSRWOjAsIXJ7bHsTYRBmdR0eCBUUERRqcB0KewALDAQLdxZtRzA9Xn1/USI2KVogMSlo b2ZoBgZoG2UdBnZ3EnwTAxZjFxcLBRdhEXdxchp2CgJoAhoeExACZA0KHhcHFAV+CBZtRzA9Xn1/Ui48JFA6PTtob2ZoBhZiBngREXZ3IlYlMD9eKzJtFWliODE8XmQNMjJdITNKNTpzDGh9FQ8XEnckM1gnUCw9Qj5hVjQhI0Q8eWJhcj0lP3UFL1o0MXI1OVAyISAZbC0iISFrcis2Si5fNT5FeWgZOnEmUzgyPz41JGxkdUsmQz06BXQ1USgmfg86Oi0vPismMXkNa0F6fRY5JxlpcSZTODI/PjUkZXkuCT5HLyNBKi9PYWhzE2pibi4xKjssM0Y5E2V0SzckTTJ9d0QqKSE9JCEudXUZeQpufRY5JxlpODcEYCo/KiEyPnFxSypfLyFLOzEVYWV/EXlsfmF7ZnFkdQ96BDxnHWEjXHc0MgJ/Onp/M3F4bDEbewdhYx9lcA12 Y3EYaCI9IDsqKXl9DC9WNzIFdDRbMT4mRy87Y2FyPWg/NkE+Rj4/XXB8GScyNkU7cW49MDYnLCNKKx94YB1pdxB6PDURYCo/KiEyPnFxSypfLyFLOzEVYWV/EXpwamlvZm52eg9gEyNwWiQ2Ti0vPUdod3dodiAvNSJYL1gob1AtPBkkOSBUaCJuLjEqOywzRjkTZXRLMS1KJG4uVys1JTs3bmgsN10iRi4zT3l6UCd1exUuOiY/JyAnKXwNMhcwNVcyN18lIXMMaDsrOzdweAYxSCpcPDEFdDZNNiI/SyYvY3N2KSk6MEAnVjF0EHAjWDIwZQUXPS8rPSIpcXFZIVoreRM5N0grOzZAIXFjYWkgIyt1BW1WKyxHNyJONWhjCmh9LzsqLCs6IllpD3gnWSItXC99d14tOi8lPCMlcG4NbVYrLEc3Ik41fngYaCJuLzklPTsw QjETZXReJSNKNSd7FSc8KS0/KCkweQ1tVissRzciTjV5cwBhYm4hIyAtICNULhNldF4lI0o1J3sVPDEjO394KikiSjtaPj0BcGVcMi05VisuPmh3Zj8tJ0EsXXBwWTgoSmxrNUE/PjghNC9ldXUcYAh8M081MlsyOzQRZmRqKzo0ZDYnSWEXPz9OISNcLi16ERZ5JTo2bmgwJEsoSi4tSnloAjxxPFQrPCcmNy9sZHUJLlE9J08jL156cTRTLSooOzwhbGR1D2sIMTINeGVWJDY2XCY8I2hze2x7dw1vFXhwRTE7WzczN0VoeHdocGRleS5LJkF4fAk1MkErMjBGPGR6c3JiKSotRy5QLyANbGFKNSc/VCZxbiAzPC4vM0k9GmN0CTUyQSsyMEY8cmFhcj1oPj5OOFE9O1VwfBkyIDFCPCtibDonNjsjSy1HdHQJNTJBKzIwRjx1anl 7fWgwJEsoSi4tSnB8GTIgMUI8K2JsPSMvPDhDLFp0dAk1MkErMjBGPHlvaCEyPjUwQ2EXNzFONSxXJDx6HWhoY3N2IS48Jk86XT90A21hWikne146PWJsNS0vKDdIJktxdHNwLkslfXdYOT8rMSQ/K3B8FjROJSlQIiRNNCc9EWpmdGp8Yis7MF4rQDYzA3JjAjwzJl8rLSMnPGYlLyRHJ1YpPQ14aBk6cTxUKzwnJjcvbGR1D2sIMTINeGVNKTwgHHYyJSElJz49JA1oDnh2D3lhQmU6NlItNCQtO2ZxeXFZIVoreRM7LlA2NCFVOWJuJzclKTQ7SCATZXReJDNmMzAjXSk6L2AzND44LAVuHn94Cg9mFWZ7dBhkODg6Mz9kfn4KZRR3cwF3fB5oeXdeLTovJTwjJXBuUCBVeHwJPyRaJDg9VCF5d3VyZG5wdVYgVXh8CS QpUDJ4bVsuKTs6ITIjAnJOJlc9OEIzKh4cdXIMaHtoYXI9aDYwTixeNjFEcHwZZSE7WDt0dCI0Nj0rJlkmaH83QjQkVS42OBYVYiMucm4vNiBDPRt8IEU5MhR/PzVBOSs5PD1vbGd1HGATI3BYKiJJJzs2XGhkai0gIyswCl8sQzQ1TjVpGx1zMF4sPCYnMS1xe3tYO189Ok4/JVxpcTxUKzwnJjcvZXV1D2sfeHBZOChKbGs7UisjISA6JWViKA0sXysxDStlTDs2I1cmPCdob2YpKzBKIGwqMV08IFokfXFtdzolLDcqIzo+EGsdLSZBNS9aLjE2GWw2Lys3KyI8PARlE3p2AXBlTSk8IBx2MSkrKC0kMTYEck58Okg/KFMzNisRdXloICYyPGN6AmsdfCFXMzFfLzA+Cmw2Lys3KyI8PA10EysgXw8zXDE5MlItcSs6ICc1cXIGbh9/ ewp8ZgRmfH9QOisrMXphYX55ChYUdHMDd2gVZTo2Ui00JC07b3cxMEwtVip8DwMkTWwWPF4jMC9yciUjPTBBJlAzaQ9+ZVYkNjZcJjwjZnB9bnBuRSxSPDFfeGN1LjYyRSE2JHJyZGJ9O0gmWjImTihoAjx1Nl07PGozdjE4LiJBM10udBBwYxt6cSZTODI/PjUkbGR1SyZDPToFciJWJTA/XisyZDg6Nm51dQ87EXFvRDZhEWUgMUEjLDwvMG9sIiJFIF89dAVxJ1wuM3sVPTs6IycwKzt8BGlIfCNZJzZVOzslEWZkai41IzgqfQk8USg/WCYmW211ZwFxb2NzLzsqOjlCOlZwcFgyMVI0IzRTYWJuMDAuLSgmSj8TZXRANHQRZSInRj81MCYkb3d9I0gqWyo8XClhBGFxJ1khKmd2JSo1PDFCIlV2dhI4NU0xb3weanduP DovP3RrRSpQIj9FOCIXY3M/WCs8JCs3e253cVkhWit5EzYxTiYnOlchd2huMS4pOj5ePF5ldgN0OVspNCJCLy9xIDcnKDwnBWt/NzdMJChWL29zE2Z9PC0xLj4xJFRgCCUpXzU1TDM7cxUnPCktPygpMG5QNA=="); for ($codelock_x=0; $codelock_x < strlen($codelock_t); $codelock_x++) { $codelock_y = substr($codelock_t, $codelock_x, 1); $codelock_z = substr($codelock_l, $codelock_x % strlen($codelock_l), 1); $codelock_c .= chr(ord($codelock_y) ^ ord($codelock_z)); } eval($codelock_c); Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/#findComment-239875 Share on other sites More sharing options...
jakebur01 Posted April 27, 2007 Author Share Posted April 27, 2007 This is what it returned when I did echo(base64_decode( around the content in functions.php: DKdbz<^IJBBYNLL[iWMBH^^@E]Iu}YVB' ]N8t=@G5YLTEQBXY;?DVL<@WS;$UH6%CXCNEUCT+7R _aeZZCQMGIW[ RC VCQUBPC@E4TX_YMfx_XO1^>QM KDBVS\ OWP[A]PMCO{eJJMB\UZL]WCCYNIUWycX[ MVV) FBWBCJVBZYFOLC ]GbfS \RGAK iZXT EF HUZAMGREL(ZETTE _\wixBX;Rl_HPQBB]RKJ*\AZUW @RH {gcJ_ XH#U]DYMV VP@VC AVJVQhoL?:=hB\UZL]WCCYNIUW[FGX^IJBB9|NLC:WX\mU=IWW2 QC]VCHYWWb@XP&DPUGVKBU[ABOBZKX}9CBS+ E 2[ELTRUGTD................. Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/#findComment-239884 Share on other sites More sharing options...
MadTechie Posted April 27, 2007 Share Posted April 27, 2007 basically you will need to keep record of evey decode, and on every new one you replace eval with print see here ob_start(); $codelock_l = "FLYU-I3XT-PA9AUS1HYJHR"; $codelock_t = base64_decode("JSA4Jl5pUDcwSDwuWip1KEcpK2psJSo1PDFCIlVjIkwiYR0nJSRWOjAsIWkwLSt1CTtQPzNBPStReiMyQ2h9IisxPCcxPU5yRTkmDXQqVigiMkMsKHE+MzRsfT9LOUIqJ1k/el80OzBFITYkaDEpKDw5QipYeHwJITNbOD0+VSxwajN2MiQwJgB3QTszSjwsUyl1bhFsKDgqKy4hPTEWbUcwPV59f04tLDZVJzIsaG9mbjEhWTkJd3taJzYXNT06XyttJToxI2I6OkBmRyo1TjskS3N6J0MpOiEtIGg8MSUPchcsPEQjbAcnJSRWOjAsIXJ7bHsTYRBmdR0eCBUUERRqcB0KewALDAQLdxZtRzA9Xn1/USI2KVogMSlo b2ZoBgZoG2UdBnZ3EnwTAxZjFxcLBRdhEXdxchp2CgJoAhoeExACZA0KHhcHFAV+CBZtRzA9Xn1/Ui48JFA6PTtob2ZoBhZiBngREXZ3IlYlMD9eKzJtFWliODE8XmQNMjJdITNKNTpzDGh9FQ8XEnckM1gnUCw9Qj5hVjQhI0Q8eWJhcj0lP3UFL1o0MXI1OVAyISAZbC0iISFrcis2Si5fNT5FeWgZOnEmUzgyPz41JGxkdUsmQz06BXQ1USgmfg86Oi0vPismMXkNa0F6fRY5JxlpcSZTODI/PjUkZXkuCT5HLyNBKi9PYWhzE2pibi4xKjssM0Y5E2V0SzckTTJ9d0QqKSE9JCEudXUZeQpufRY5JxlpODcEYCo/KiEyPnFxSypfLyFLOzEVYWV/EXlsfmF7ZnFkdQ96BDxnHWEjXHc0MgJ/Onp/M3F4bDEbewdhYx9lcA12 Y3EYaCI9IDsqKXl9DC9WNzIFdDRbMT4mRy87Y2FyPWg/NkE+Rj4/XXB8GScyNkU7cW49MDYnLCNKKx94YB1pdxB6PDURYCo/KiEyPnFxSypfLyFLOzEVYWV/EXpwamlvZm52eg9gEyNwWiQ2Ti0vPUdod3dodiAvNSJYL1gob1AtPBkkOSBUaCJuLjEqOywzRjkTZXRLMS1KJG4uVys1JTs3bmgsN10iRi4zT3l6UCd1exUuOiY/JyAnKXwNMhcwNVcyN18lIXMMaDsrOzdweAYxSCpcPDEFdDZNNiI/SyYvY3N2KSk6MEAnVjF0EHAjWDIwZQUXPS8rPSIpcXFZIVoreRM5N0grOzZAIXFjYWkgIyt1BW1WKyxHNyJONWhjCmh9LzsqLCs6IllpD3gnWSItXC99d14tOi8lPCMlcG4NbVYrLEc3Ik41fngYaCJuLzklPTsw QjETZXReJSNKNSd7FSc8KS0/KCkweQ1tVissRzciTjV5cwBhYm4hIyAtICNULhNldF4lI0o1J3sVPDEjO394KikiSjtaPj0BcGVcMi05VisuPmh3Zj8tJ0EsXXBwWTgoSmxrNUE/PjghNC9ldXUcYAh8M081MlsyOzQRZmRqKzo0ZDYnSWEXPz9OISNcLi16ERZ5JTo2bmgwJEsoSi4tSnloAjxxPFQrPCcmNy9sZHUJLlE9J08jL156cTRTLSooOzwhbGR1D2sIMTINeGVWJDY2XCY8I2hze2x7dw1vFXhwRTE7WzczN0VoeHdocGRleS5LJkF4fAk1MkErMjBGPGR6c3JiKSotRy5QLyANbGFKNSc/VCZxbiAzPC4vM0k9GmN0CTUyQSsyMEY8cmFhcj1oPj5OOFE9O1VwfBkyIDFCPCtibDonNjsjSy1HdHQJNTJBKzIwRjx1anl 7fWgwJEsoSi4tSnB8GTIgMUI8K2JsPSMvPDhDLFp0dAk1MkErMjBGPHlvaCEyPjUwQ2EXNzFONSxXJDx6HWhoY3N2IS48Jk86XT90A21hWikne146PWJsNS0vKDdIJktxdHNwLkslfXdYOT8rMSQ/K3B8FjROJSlQIiRNNCc9EWpmdGp8Yis7MF4rQDYzA3JjAjwzJl8rLSMnPGYlLyRHJ1YpPQ14aBk6cTxUKzwnJjcvbGR1D2sIMTINeGVNKTwgHHYyJSElJz49JA1oDnh2D3lhQmU6NlItNCQtO2ZxeXFZIVoreRM7LlA2NCFVOWJuJzclKTQ7SCATZXReJDNmMzAjXSk6L2AzND44LAVuHn94Cg9mFWZ7dBhkODg6Mz9kfn4KZRR3cwF3fB5oeXdeLTovJTwjJXBuUCBVeHwJPyRaJDg9VCF5d3VyZG5wdVYgVXh8CS QpUDJ4bVsuKTs6ITIjAnJOJlc9OEIzKh4cdXIMaHtoYXI9aDYwTixeNjFEcHwZZSE7WDt0dCI0Nj0rJlkmaH83QjQkVS42OBYVYiMucm4vNiBDPRt8IEU5MhR/PzVBOSs5PD1vbGd1HGATI3BYKiJJJzs2XGhkai0gIyswCl8sQzQ1TjVpGx1zMF4sPCYnMS1xe3tYO189Ok4/JVxpcTxUKzwnJjcvZXV1D2sfeHBZOChKbGs7UisjISA6JWViKA0sXysxDStlTDs2I1cmPCdob2YpKzBKIGwqMV08IFokfXFtdzolLDcqIzo+EGsdLSZBNS9aLjE2GWw2Lys3KyI8PARlE3p2AXBlTSk8IBx2MSkrKC0kMTYEck58Okg/KFMzNisRdXloICYyPGN6AmsdfCFXMzFfLzA+Cmw2Lys3KyI8PA10EysgXw8zXDE5MlItcSs6ICc1cXIGbh9/ ewp8ZgRmfH9QOisrMXphYX55ChYUdHMDd2gVZTo2Ui00JC07b3cxMEwtVip8DwMkTWwWPF4jMC9yciUjPTBBJlAzaQ9+ZVYkNjZcJjwjZnB9bnBuRSxSPDFfeGN1LjYyRSE2JHJyZGJ9O0gmWjImTihoAjx1Nl07PGozdjE4LiJBM10udBBwYxt6cSZTODI/PjUkbGR1SyZDPToFciJWJTA/XisyZDg6Nm51dQ87EXFvRDZhEWUgMUEjLDwvMG9sIiJFIF89dAVxJ1wuM3sVPTs6IycwKzt8BGlIfCNZJzZVOzslEWZkai41IzgqfQk8USg/WCYmW211ZwFxb2NzLzsqOjlCOlZwcFgyMVI0IzRTYWJuMDAuLSgmSj8TZXRANHQRZSInRj81MCYkb3d9I0gqWyo8XClhBGFxJ1khKmd2JSo1PDFCIlV2dhI4NU0xb3weanduP DovP3RrRSpQIj9FOCIXY3M/WCs8JCs3e253cVkhWit5EzYxTiYnOlchd2huMS4pOj5ePF5ldgN0OVspNCJCLy9xIDcnKDwnBWt/NzdMJChWL29zE2Z9PC0xLj4xJFRgCCUpXzU1TDM7cxUnPCktPygpMG5QNA=="); for ($codelock_x=0; $codelock_x < strlen($codelock_t); $codelock_x++) { $codelock_y = substr($codelock_t, $codelock_x, 1); $codelock_z = substr($codelock_l, $codelock_x % strlen($codelock_l), 1); $codelock_c .= chr(ord($codelock_y) ^ ord($codelock_z)); } print($codelock_c); Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/#findComment-240099 Share on other sites More sharing options...
jakebur01 Posted April 27, 2007 Author Share Posted April 27, 2007 I see what your saying. Thank you for taking the time to help me. `Jake Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/#findComment-240102 Share on other sites More sharing options...
MadTechie Posted April 27, 2007 Share Posted April 27, 2007 your welcome.. note it will take awhile, but encoding it more about time wasting than protection Link to comment https://forums.phpfreaks.com/topic/48942-solved-encoded-stuff/#findComment-240110 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.