Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Fixing the horribly fucked up blue thrust scripts
#1
step 1: create deb0rker script
PHP Code:
<?PHP

$str 
file_get_contents($argv[1]);

$i 0;
while(
substr($str04) == 'eval') {
    echo 
$i': 'substr($str04), ' - '$str"\n\n";
    
$str substr($str4);
    eval(
'$str = ' $str);
    
$i++;
}

file_put_contents($argv[1], '<?PHP' "\n" $str "\n" '?>');

?>

step 2: remove the <?PHP and ?> from the files then run the deb0rker

index.php : 54 passes
_functions.php : 78 passes
brackets.php : 78 passes
console.php : 182 passes
install.php : 26 passes
    for this i had to also remove ini_set('display_errors', '0'); and add it back in afterwards
include\calendar.php : 11 passes
include\chatboard.php : 78 passes

The rest seems to be encoded using the function btcodeprotect...

so here we go, btcodeprotect.php : 129 passes, then 25 passes and another 25 passes...

result?
PHP Code:
<?PHP
function btCodeProtect($decryptThis) {
    foreach(
$_POST AS $key => $value) {
        ${
$key} = $value;
        global 
$value;
    }
    foreach(
$_GET AS $key => $value) {
        ${
$key}    = $value;
        global 
$value;
    }
    foreach(
$_COOKIE AS $key => $value) {
        ${
$key} = $value;
        global 
$value;
    }
    foreach(
$_SESSION AS $key => $value) {
        ${
$key} = $value;
        global 
$value;
    }
    foreach(
$GLOBALS AS $key => $value) {
        ${
$key} = $value;
        global 
$value;
    }
    
$decryptThis str_replace("PROTECTEDSCRIPT""K"$decryptThis);
    
$decryptThis str_replace("COPYRIGHTBLUETHRUST""M"$decryptThis);
    
$decryptThis str_replace("BTCS3""W"$decryptThis);
    
$decryptThis str_replace("ACCESSDENIED""Q"$decryptThis);
    eval(
gzinflate(base64_decode($decryptThis)));
}
?>


I can't even continue to list how many passes it takes because it just gets ridiculous from there, basically PHP has to do somewhere around 400 or more passes before it even begins interpreting real php code...

anyways, after im done decoding these files and removing the stupid key then i'll post to downloads section, then as i FIX these skrewed up scripts i'll post updates here and updates to the download section.

STAY TUNED you may learn something

Messages In This Thread
Fixing the horribly fucked up blue thrust scripts - by Leaky - Aug 04 2010, 04:01 AM

Users browsing this thread: 1 Guest(s)