Search (advanced search) | ||||
Use this Search form before posting, asking or make a new thread.
|
07-21-2014, 06:59 AM
(This post was last modified: 07-21-2014 12:02 PM by pok.)
Post: #1
|
|||
|
|||
[REQ] Decode Zeura.com encoded files
Hi, can anyone here help me decode a couple of files encrypted by Zeura.com? Those online decoders aren't working. thanks!
Here is a snippet Code: <?php /*** PHP Encode v1.0 by zeura.com ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(base64_decode("aWYoIWZ1bmN0aW9uX2V4aXN0cygiWWl1bklVWTc2YkJodWhOWUlPOCIpKXtmdW5jdGlvbiBZaXVuSVVZNzZiQmh1aE5ZSU84KCRnLCRiPTApeyRhPWltcGxvZGUoIlxuIiwkZyk7JGQ9YXJyYXkoNjU1LDIzNiw0MCk7aWYoJGI9PTApICRmPXN1YnN0cigkYSwkZFswXSwkZFsxXSk7ZWxzZWlmKCRiPT0xKSAkZj1zdWJzdHIoJGEsJGRbMF0rJGRbMV0sJGRbMl0pO2Vsc2UgJGY9dHJpbShzdWJzdHIoJGEsJGRbMF0rJGRbMV0rJGRbMl0pKTtyZXR1cm4oJGYpO319"));eval(base64_decode(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH)));eval(ZsldkfhGYU87iyihdfsow(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH,2),YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH,1)));__halt_compiler();aWYoIWZ1bmN0aW9uX2V4aXN0cygiWnNsZGtmaEdZVTg3aXlpaGRmc293Iikpe2Z1bmN0aW9uIFpzbGRrZmhHWVU4N2l5aWhkZnNvdygkYSwkaCl7aWYoJGg9PXNoYTEoJGEpKXtyZXR1cm4oZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJGEpKSk7fWVsc2V7ZWNobygiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTt9fX0=68f6558ecf17e1d427ffd8a562341e3b4808dc9atRppc9pI9jOpyn/o0VIDZD1IHOJI7Ey5HDzxjINdhiSb8qSoltQyGusgOkzYWf/3fa8PIWHwVZlUEkB6/a5+d7fDXC9k9drcu5rPvmXU99JVbY+kccYab16+ePmimkYTll4efbw4PTufzqYnH0ZnH6dfyQHp9AwDQKrRIvWiMLmsJWnsLX6f1PClS/2E3X17Zv3F7DTZAUJ9P1oeRdG1xwQIsoEQR2fj45PfLmsB/T5zPZ8l3n8ZB2gbw37LbAtGFFTMkixgszSmYeKyeIOagvqWsWwX0MsX+ivy8sVxFtrIGkkjYkdZmJJ0zsjRJ/LJY8vk5YtX+ssXroLhAEef6lXQVIP8jUgquk4+MzKnN4yky4hIQYkXkovR5N3oP8SNYiLYJTeAE5ZUF1ECnHBtRQnHtkc0fREzBFCfGm5OxXPrAvxAst4AspVdKASd5NRLUv2KpUdRmFI7HWeBxWKB7xb+IdevOOtTlqReeEUWWQxoGHlNPsL/8yhgC3rFAITZ84hoU1AJUCBeQpCS9nTGEOU5oBRM7Fq8Y7UfXXmhXHkrZZCMIUuvidYk1dlkNJmcnI0va38t2CxLWDwDUxIKgY1vEm3fivW3nHexmHxQqwuL+RbPUP+bi9AStst9Sxh8EiH/DlQHZNebf5NWrpMdIG8fEk+qz4HtjKPVhCUJGGG91qmVlHaLAqDdw+a/IrnlL+eePSdLz/eJxYgNHsocwm5YCD/BeBn3CLQHMGPwqCRFtQXUYRveAXZ7IQCiuF51WWrP90juKugo04iwMMk4SpqSEFxuTkNAHLlAIEmWUewISkBBEmNOUyyeeIHn09hfkQgYijlcAuwim8TyI/tagG6xoUttHjNX+wq2ZEfBgoYrXZHb6WWlTeXC/PI2jEbfmZ1xafPIlbvUNvlYQD0fpeFxD/TqxlHAFZqsQLbgEfxyF9bl5z/MroxTyK/jALcQFEFZEMJ8h8UP8irAdFh6IeLQD+X2Aw3RMkaoUYxZGOT4m3maLl7rGPsc9r0Z0uw69pqwz7pYMWXBwqcpS3QfVuS/HpTm3tU/VLJjrjfiRMvQj6hzv1BSyQXgR22Kgv+hjOMWcGMWRJJHce6LfXsU1wj7QznGrL4254eZxQD8q/h+8u6g32v3jW6n8lj2703jT2Zfpe016S2UY2bHmZcWRVG5V/dCEPJR/Oj68/OYrt/QeOZkwaJelZAN+YJ991IlEKYOsSl3agwNEm9RrDcEKoAoS4/mzL4uCaxk2fm+IcWRGf8ESjiIb5A+GMY2mS9JIhIm0d4QxeKdXNqSubQoQ8zSLA6J2L03MsHm+ZCXLXXOQZV/f8dSiF24dzSO6arOEVYxl09XC1ZWrcryKbypfeWAQJlXa5IlgIcST/GXo8m3d433gGgtTWgCXkAIS1f1TWxSUxXMuh5op46Zx8W04zYX84WsvsqCXNaQRkgDUahXkWf+nnPuOVuXqMS7uUQ937oIypDgkGsVNpev1NBzE3BdDtjcYvan+EKnGcSnMPVsiNqaKIYKdr5JR7VAR2dnf5yMfj+8mB2fnI7Ghx9Ggt0NpQlewVmehEWzOoskNKJWaHWvrqn/bTFs3QSLfqvT0Z4iPY9bD3n7uv4TYt+xjPZjLeO+rdfwl/bwfmt52fVEQd2YsYTR2J4XZP2H9vOHMLUO2ypIFLHeiRVbPRlFuvIji/pEdEKyseXRgPfImAagAnY8KLhV02uL5nomclBNxEj4i6U8ted1uZJCLydAj+E3lOgVESnJKVQJ0L5i6YdRStgGqSvoUy/EUIVIdtPEAL5GvkdQ67OT38ZnF6PZePR5dnoyHk3+x59O/jg5n40+nE+/iKcNojprzs15HNmgGOIjWWvFP+UuwTfR2QI7hnJFckhuqO85RJAnyyjzHdGeHx4dQXTFztyEqtYRcKkHdWpKgwU+75E6p9NtcACo89K62YDMtt7eeq+RUwohWywgWD6GmMN8Br0Mp7JmVa5TaJyMpyXkCdIZiWKSgDcvebriRl4gkPJGTKFXv3oECnkug6AiSL0iE5DQZ5JeQnjyrYhyolL5xBX2mn//13uw7bPQX80KNl2ZXnwcVfTK8eHpZFRpdXqDtjEYDAcVISU+6feMrjEcPAPHx/HJuwq1WgOLmUa37QztvuPavT61XErNVtc0bct2213Tbfdcwx0arDvstFod1+jYVqsFbzuO9Qy6qLLKGm6trpHcjQ3dP1E//dagX9ZPuzPoPxFHv90W+umbtt12em0DeDeHPcM120a71x4YfcMyO13W6rCh2ekxx2DMgK+tFjN7Ttc2em6v2+2YnO5DWukM+0Ir+J90QfC/BcOmG9LpFSgF7fIJmuj0jF5v2B8qTUg3eAYCrobi8gd1NzCK0qjdPQMHUhXU07a0MzBNs7SlnU7fNJ+Bg8vCLMfstG1qdFvUHtiUDcG2Teb0YPd6ZmfITIc6bGj3WtTsGX3XtLtupzXsdoetvtN1KKcrHbmaBotDmwfK9YRTPscZX/mpiJIsXmEPwecv6Rw76uXcwxiBVTT+xMGlNh1NplozX5by4JSI8RACUMhfEI1kBb3Hu0FcI4IQFPNhlOJkKIEijFhgPF4KuUfGaLkqR/+ehTaP8g5zaeYLYOyCmkSBfAZacx4FA3oNBFIhGMY+m/L6pky+SBrifAwIl146J5rcJw1WJimDlBe5RFtvoyb0J8RbV9wFLcp8upEZMa1y2phRlc2JZAXLY2gXgzr/JQtqCYDzrYUP0oDwKbXkKidvGCBD+JHD6rVKbY+U1hf7JyW0IId5QYy0ZU/Ff9QV1kYTHu5bMZHzzSIvvJNSm4R87SEHzObD4j5onQWJAOalwQZi8tMBADVkSVap4OzKCzOpt8qtDC18BDUH3uCvTIScIuUVERqXmKArQjtaGvGOKOqX5ld8XRN+WiM//7x+1fuKrGkyiqzX55wEjIaJmIZxO72BZdTywf7G0ZIsGQmZmIpxJ0FjS3HZnCah8AweIAtY32OqBhfwbFyHeMd5twkLhYYttopgr7omCUBNEK6aZBKJLH/loaP1DHyT8L61uQu7Qmsx3CTpl9RNoT4yzb4oE+bcwbzQBtNNEAxE6RmGUcA5luhojlDkQJSOXNEFst3rGob0KJwaC1pN6b5l7P1m+w9SbxPw2Thp3EtHlT2CHjg0UluCQ/kY10B5IelDAlR0IEVnttiNflkE/EmQCSy4FnEEGxigeytC1Id3zirn+wPsOme3vD8xDm9B61KVaJCBGIcjJ0gjYWDaTlLaEs4bH2sjSouCmSCHra5B6q3WUG1xI1+Exoui1xvkl5Kp7otVaz/aiPN8PFRR727lF/UpP2SJt91HMDPe8RD0rUI78087SSFFlQRScsgMt10ATKS1NYcP4VI64aNvwR0YGz9NwLzFi2geOkuZopAUmg8pc80LgKgJnQI0cEBXwLZHjAafwBmNwhaXUs56CCgEKfa626AL+Wm3TWAoXRsSbr/SG34vYVwzptrYdVv3poz9djOHbA3pky8fjs/GXySUNE7RgMgFoiirbG2uZSmlSiqjkqwCNwpXlXb6zc0Wi1bkD1oRMzOLdV3T8mgkyrN7i8V+v28OBp3K8cVoxCuzY7M1MLtDw2oPzIHoNnMz3Dk/2WEVksF7jHTnHt3BpRis/dM+uT0kdTEkYbZ4KCY91/yeaWy3eXF/W57Lhpnv35m0QEF4TuOE1ateuMigsKniiFUeUXJ7vGALn9pMaAgH/BDHtS9RRigEf1+0QZCdIDGRJLPQGMhrso/T4vDqLU2S6xQqsu6+Lp+II79DeE6m8CKMbjyeXppNckk0NQnfNtmXDG6l/cgxPhmFeKIap+qgdJ/iWGE/4f/rjhz2c0pAGZRzNYuF/PWafodwvfmqsf+n7ng3b3UvgVJU2+c/IJQJHKIqfRK+Py8lqssylvyQQFa44tWbfEBfGK2JN3d2OkrS7VstjlLKf8hkengxJePDT6PRGDZUPkYmIDKF0C5hNREzn/JqAI8qcERmJZEP+VwcXcgeBEqNMQ83tYQcTSaI4lF/dLmjqYotdpKsp7P5UZMyC90L8Ahc1/IJrVI77zIAPle91mzm0Hv5/BKyHNRgPDR6wRWfHsfiWQFY7kj59oW+SwTQ4tk5aG8MlSkUrvkhD+oRWjcHOgE5voqgz7nG6wYxK9Zmqgi0mE3BtXheLgxHG+KeAs3SKEBGqe+vyoi8FJP0SSoAsftUaNSQjl93gMgn4h4Qa5acEFUtqE0FL3WlAjEiFd2DvMIkznDuHBZ1a43Nc66qjCSwrSA73vHBtjTwkkxYzAoKZCg1eSvVJOc+Q0sCEFmb8KsR0PkuQ3X7ZiNKSPyKS/lTWUB+5qTth1FigyWl4LTgvetf0nXL62bAa74UFmgbDl40so2lOUsFXHccfKsHb7+gUshc8joKnmdjGMGBgjgBFM8jAeNEWL9vXFIpnRRmsc9dp+hd8ExcOQIw5VmSy/w8thBi5au87rrdegq4pgcaKM337zupy7c452n7SZe8H0XeQiGZH+OVOC4Xjps8P+p8CHLJ1pIM1S84a/KWcCuQ/kqNggQoec1bQRRsw4hUbMIwhdEHt+jNdn1sP34BNWBBjXVF/afyAoyUz9ePMk6dFO8MqiNkfqVHxjAO9Ll8n0o04gglLRWNF5yjYCkbQUQkK+RoDt0qi+vaaWTzQvq1OCGfnExHs/PD6Xu8pyaw4lHtr+kBXypcVabLsk1uj29/b7nWUChBahBf7SyOISZBzJV7KesRKCZ4/FIawOgqDzUEG7xOZfLmVhJBPQJOyuIYFsrrZzzMywt5X3bgyuMityJCr8C/xcVNMWBqarsvJt5x1LtOXLhvUdZXOeRX8djzAIvLhrzXdh5j0ySSkZeqAaVYRSLo9Qi600GL1MVFE5mKGqg37mhtUp+sggU0Cg2VpiyQE4rykFfufMSw6yhwfXKLjEkLf+L54IOng9wxinGyeLwHTkt5NZ+XIhszv1u1/KcshAb7+rEnhwrdbdEL/w8= |
|||
07-21-2014, 10:09 PM
Post: #2
|
|||
|
|||
RE: [REQ] Decode Zeura.com encoded files
not the same file, but if a semi Nub like me can get this far...this is probably a cake walk for those clued up. im gonna keep cracking at it, im struggling to wrap my mind around xml enc digest values and how to calc if one missing etc. but a base64/urlencode/xmldec tool of some sort might help take this home.. ill keep u in te loop and try ur one next. (this is part of that sweet looking Commerce theme, buy posts btw
Probably going about it all wrong, but there seems to be no <3 from crackers these days, or perhaps theyre too busy getting some of their own Did u come right with that other little project we were discussing ? Ive all but given up on pnmaps and co. ive decided they actually really look like heap of cheaply produced turds next to something like a simple $60 wordpress theme... tell me what u think ^^ i honestly thing that pinmaps is far from finished. and theyre milking customers for a half-baked unfinished product. The fact that the map is not responsive to touch / zoomable by swipe or mouse wheel and u cant manually place markers without going into menu is beyond fail ;) wp theme explorable Magic Button : pintastic PoopMaps:-"http://pintastic.com/pinmaps-demo" most of it imo is little more than a UI for fourmaps.com feed. has potential and market...but that price .. and my progress....cant really tell if progress or not lol. but 1st sweep / phpuncode 1.0 (http://lombokcyber.com/detools/welcome/cdecodezeura1) (Supposed zeura dec ;) Magic Button : and 2nd sweep:- (http://www.unphp.net/) Magic Button : |
|||
07-21-2014, 10:15 PM
Post: #3
|
|||
|
|||
RE: [REQ] Decode Zeura.com encoded files
Post the file please mate, or on pastebin, its losing some chars - coming out corrupt. try it for urself @ that first link above |
|||
07-21-2014, 10:22 PM
Post: #4
|
|||
|
|||
RE:
This was the Multi/xml/base64 etc converter i mentioned http://www.freeformatter.com/base64-encoder.html
|
|||
07-21-2014, 10:59 PM
(This post was last modified: 07-21-2014 11:01 PM by Loomy.)
Post: #5
|
|||
|
|||
Done | |||
07-21-2014, 11:10 PM
Post: #6
|
|||
|
|||
RE: | |||
07-22-2014, 12:48 AM
(This post was last modified: 07-22-2014 12:48 AM by pok.)
Post: #7
|
|||
|
|||
RE:
Hey Loom thanks, I was comparing with the same files (came unencrypted) from older version of the script, those funny variables like "$mjpa2" were not there from the isAdmin function. getAdmin function was added on recently which I think is being called from controller.php
(07-21-2014 11:10 PM)Loomy69za Wrote: http://www65.zippyshare.com/v/48392379/file.html old version of base.php Code: <?php |
|||
07-22-2014, 01:00 AM
Post: #8
|
|||
|
|||
RE:
bease yeh^ its very mess though :/ i will try it again after some lunch
Grab Controller here, went alot smoother http://www65.zippyshare.com/v/69356867/file.html |
|||
07-22-2014, 01:15 AM
Post: #9
|
|||
|
|||
RE:
in case i went wrong somewhere, base again. i left some of the vars encoded just in case (any base64 decoder/converter) will work
http://www18.zippyshare.com/v/21452375/file.html |
|||
07-22-2014, 01:16 AM
Post: #10
|
|||
|
|||
RE: | |||