Aug 04 2010, 04:01 AM
step 1: create deb0rker script
step 2: remove the <?PHP and ?> from the files then run the deb0rker
index.php : 54 passes
_functions.php : 78 passes
brackets.php : 78 passes
console.php : 182 passes
install.php : 26 passes
for this i had to also remove ini_set('display_errors', '0'); and add it back in afterwards
include\calendar.php : 11 passes
include\chatboard.php : 78 passes
The rest seems to be encoded using the function btcodeprotect...
so here we go, btcodeprotect.php : 129 passes, then 25 passes and another 25 passes...
result?
I can't even continue to list how many passes it takes because it just gets ridiculous from there, basically PHP has to do somewhere around 400 or more passes before it even begins interpreting real php code...
anyways, after im done decoding these files and removing the stupid key then i'll post to downloads section, then as i FIX these skrewed up scripts i'll post updates here and updates to the download section.
STAY TUNED you may learn something
PHP Code:
<?PHP
$str = file_get_contents($argv[1]);
$i = 0;
while(substr($str, 0, 4) == 'eval') {
echo $i, ': ', substr($str, 0, 4), ' - ', $str, "\n\n";
$str = substr($str, 4);
eval('$str = ' . $str);
$i++;
}
file_put_contents($argv[1], '<?PHP' . "\n" . $str . "\n" . '?>');
?>step 2: remove the <?PHP and ?> from the files then run the deb0rker
index.php : 54 passes
_functions.php : 78 passes
brackets.php : 78 passes
console.php : 182 passes
install.php : 26 passes
for this i had to also remove ini_set('display_errors', '0'); and add it back in afterwards
include\calendar.php : 11 passes
include\chatboard.php : 78 passes
The rest seems to be encoded using the function btcodeprotect...
so here we go, btcodeprotect.php : 129 passes, then 25 passes and another 25 passes...
result?
PHP Code:
<?PHP
function btCodeProtect($decryptThis) {
foreach($_POST AS $key => $value) {
${$key} = $value;
global $value;
}
foreach($_GET AS $key => $value) {
${$key} = $value;
global $value;
}
foreach($_COOKIE AS $key => $value) {
${$key} = $value;
global $value;
}
foreach($_SESSION AS $key => $value) {
${$key} = $value;
global $value;
}
foreach($GLOBALS AS $key => $value) {
${$key} = $value;
global $value;
}
$decryptThis = str_replace("PROTECTEDSCRIPT", "K", $decryptThis);
$decryptThis = str_replace("COPYRIGHTBLUETHRUST", "M", $decryptThis);
$decryptThis = str_replace("BTCS3", "W", $decryptThis);
$decryptThis = str_replace("ACCESSDENIED", "Q", $decryptThis);
eval(gzinflate(base64_decode($decryptThis)));
}
?>I can't even continue to list how many passes it takes because it just gets ridiculous from there, basically PHP has to do somewhere around 400 or more passes before it even begins interpreting real php code...
anyways, after im done decoding these files and removing the stupid key then i'll post to downloads section, then as i FIX these skrewed up scripts i'll post updates here and updates to the download section.
STAY TUNED you may learn something
