10.gif

Search (advanced search)
Use this Search form before posting, asking or make a new thread.
Tips: Use Quotation mark to search words (eg. "How To Make Money Online")

07-21-2014, 06:59 AM (This post was last modified: 07-21-2014 12:02 PM by pok.)
Post: #1
[REQ] Decode Zeura.com encoded files
Hi, can anyone here help me decode a couple of files encrypted by Zeura.com? Those online decoders aren't working. thanks!

Here is a snippet

Code:
<?php /*** PHP Encode v1.0 by zeura.com ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(base64_decode("aWYoIWZ1bmN0aW9uX2V4aXN0cygiWWl1bklVWTc2YkJodWhOWUlPOCIpKXtmdW5jdGlvbiBZaXVuSVVZ​NzZiQmh1aE5ZSU84KCRnLCRiPTApeyRhPWltcGxvZGUoIlxuIiwkZyk7JGQ9YXJyYXkoNjU1LDIzNiw0​MCk7aWYoJGI9PTApICRmPXN1YnN0cigkYSwkZFswXSwkZFsxXSk7ZWxzZWlmKCRiPT0xKSAkZj1zdWJz​dHIoJGEsJGRbMF0rJGRbMV0sJGRbMl0pO2Vsc2UgJGY9dHJpbShzdWJzdHIoJGEsJGRbMF0rJGRbMV0r​JGRbMl0pKTtyZXR1cm4oJGYpO319"));eval(base64_decode(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH)));eval(ZsldkfhG​YU87iyihdfsow(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH,2),YiunIUY76bBhuhNYIO8($​XnNhAWEnhoiqwciqpoHH,1)));__halt_compiler();aWYoIWZ1bmN0aW9uX2V4aXN0cygiWnNsZGtm​aEdZVTg3aXlpaGRmc293Iikpe2Z1bmN0aW9uIFpzbGRrZmhHWVU4N2l5aWhkZnNvdygkYSwkaCl7aWYo​JGg9PXNoYTEoJGEpKXtyZXR1cm4oZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJGEpKSk7fWVsc2V7ZWNo​bygiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTt9fX0=68f6558ecf17e1d427ffd8a562341e3b4808dc9a​tRppc9pI9jOpyn/o0VIDZD1IHOJI7Ey5HDzxjINdhiSb8qSoltQyGusgOkzYWf/3fa8PIWHwVZlUEkB6/a5+d7fDXC9k9drcu5rPvmXU99JVbY+kccYab16+ePmimkYTll4efbw4PTufzqYnH0ZnH6dfyQHp9AwDQ​KrRIvWiMLmsJWnsLX6f1PClS/2E3X17Zv3F7DTZAUJ9P1oeRdG1xwQIsoEQR2fj45PfLmsB/T5zPZ8l3n8ZB2gbw37LbAtGFFTMkixgszSmYeKyeIOagvqWsWwX0MsX+ivy8sVxFtrIGkkjYkdZmJJ0z​sjRJ/LJY8vk5YtX+ssXroLhAEef6lXQVIP8jUgquk4+MzKnN4yky4hIQYkXkovR5N3oP8SNYiLYJTeAE5ZUF1​ECnHBtRQnHtkc0fREzBFCfGm5OxXPrAvxAst4AspVdKASd5NRLUv2KpUdRmFI7HWeBxWKB7xb+IdevOO​tTlqReeEUWWQxoGHlNPsL/8yhgC3rFAITZ84hoU1AJUCBeQpCS9nTGEOU5oBRM7Fq8Y7UfXXmhXHkrZZCMIUuvidYk1dlkNJmcnI0v​a38t2CxLWDwDUxIKgY1vEm3fivW3nHexmHxQqwuL+RbPUP+bi9AStst9Sxh8EiH/DlQHZNebf5NWrpMdIG8fEk+qz4HtjKPVhCUJGGG91qmVlHaLAqDdw+a/IrnlL+eePSdLz/eJxYgNHsocwm5YCD/BeBn3CLQHMGPwqCRFtQXUYRveAXZ7IQCiuF51WWrP90juKugo04iwMMk4SpqSEFxuTkNAHLlAIEmWUew​ISkBBEmNOUyyeeIHn09hfkQgYijlcAuwim8TyI/tagG6xoUttHjNX+wq2ZEfBgoYrXZHb6WWlTeXC/PI2jEbfmZ1xafPIlbvUNvlYQD0fpeFxD/TqxlHAFZqsQLbgEfxyF9bl5z/MroxTyK/jALcQFEFZEMJ8h8UP8irAdFh6IeLQD+X2Aw3RMkaoUYxZGOT4m3maLl7rGPsc9r0Z0uw69pqwz7pYMWX​BwqcpS3QfVuS/HpTm3tU/VLJjrjfiRMvQj6hzv1BSyQXgR22Kgv+hjOMWcGMWRJJHce6LfXsU1wj7QznGrL4254eZxQD8q/h+8u6g32v3jW6n8lj2703jT2Zfpe016S2UY2bHmZcWRVG5V/dCEPJR/Oj68/OYrt/QeOZkwaJelZAN+YJ991IlEKYOsSl3agwNEm9RrDcEKoAoS4/mzL4uCaxk2fm+IcWRGf8ESjiIb5A+GMY2mS9JIhIm0d4QxeKdXNqSubQoQ8zSLA6J2L03MsHm+ZCXLXX​OQZV/f8dSiF24dzSO6arOEVYxl09XC1ZWrcryKbypfeWAQJlXa5IlgIcST/GXo8m3d433gGgtTWgCXkAIS1f1TWxSUxXMuh5op46Zx8W04zYX84WsvsqCXNaQRkgDUahXkWf+nnPuOV​uXqMS7uUQ937oIypDgkGsVNpev1NBzE3BdDtjcYvan+EKnGcSnMPVsiNqaKIYKdr5JR7VAR2dnf5yMfj​+8mB2fnI7Ghx9Ggt0NpQlewVmehEWzOoskNKJWaHWvrqn/bTFs3QSLfqvT0Z4iPY9bD3n7uv4TYt+xjPZjLeO+rdfwl/bwfmt52fVEQd2YsYTR2J4XZP2H9vOHMLUO2ypIFLHeiRVbPRlFuvIji/pEdEKyseXRgPfImAagAnY8KLhV02uL5nomclBNxEj4i6U8ted1uZJCLydAj+E3lOgVESnJKVQJ0L5i6Y​dRStgGqSvoUy/EUIVIdtPEAL5GvkdQ67OT38ZnF6PZePR5dnoyHk3+x59O/jg5n40+nE+/iKcNojprzs15HNmgGOIjWWvFP+UuwTfR2QI7hnJFckhuqO85RJAnyyjzHdGeHx4dQXTFztyEqtYRcKkH​dWpKgwU+75E6p9NtcACo89K62YDMtt7eeq+RUwohWywgWD6GmMN8Br0Mp7JmVa5TaJyMpyXkCdIZiWKS​gDcvebriRl4gkPJGTKFXv3oECnkug6AiSL0iE5DQZ5JeQnjyrYhyolL5xBX2mn//13uw7bPQX80KNl2ZXnwcVfTK8eHpZFRpdXqDtjEYDAcVISU+6feMrjEcPAPHx/HJuwq1WgOLmUa37QztvuPavT61XErNVtc0bct2213Tbfdcwx0arDvstFod1+jYVqsFbzuO9Qy6qLLKGm​6trpHcjQ3dP1E//dagX9ZPuzPoPxFHv90W+umbtt12em0DeDeHPcM120a71x4YfcMyO13W6rCh2ekxx2DMgK+tFjN7Ttc2e​m6v2+2YnO5DWukM+0Ir+J90QfC/BcOmG9LpFSgF7fIJmuj0jF5v2B8qTUg3eAYCrobi8gd1NzCK0qjdPQMHUhXU07a0MzBNs7SlnU7fNJ+B​g8vCLMfstG1qdFvUHtiUDcG2Teb0YPd6ZmfITIc6bGj3WtTsGX3XtLtupzXsdoetvtN1KKcrHbmaBotD​mwfK9YRTPscZX/mpiJIsXmEPwecv6Rw76uXcwxiBVTT+xMGlNh1NplozX5by4JSI8RACUMhfEI1kBb3Hu0FcI4IQFPNhlO​JkKIEijFhgPF4KuUfGaLkqR/+ehTaP8g5zaeYLYOyCmkSBfAZacx4FA3oNBFIhGMY+m/L6pky+SBrifAwIl146J5rcJw1WJimDlBe5RFtvoyb0J8RbV9wFLcp8upEZMa1y2phRlc2JZAXLY2gXgz​r/JQtqCYDzrYUP0oDwKbXkKidvGCBD+JHD6rVKbY+U1hf7JyW0IId5QYy0ZU/Ff9QV1kYTHu5bMZHzzSIvvJNSm4R87SEHzObD4j5onQWJAOalwQZi8tMBADVkSVap4OzKCzOpt8qtDC1​8BDUH3uCvTIScIuUVERqXmKArQjtaGvGOKOqX5ld8XRN+WiM//7x+1fuKrGkyiqzX55wEjIaJmIZxO72BZdTywf7G0ZIsGQmZmIpxJ0FjS3HZnCah8AweIAtY32OqBhfwb​FyHeMd5twkLhYYttopgr7omCUBNEK6aZBKJLH/loaP1DHyT8L61uQu7Qmsx3CTpl9RNoT4yzb4oE+bcwbzQBtNNEAxE6RmGUcA5luhojlDkQJSOXNEFst3​rGob0KJwaC1pN6b5l7P1m+w9SbxPw2Thp3EtHlT2CHjg0UluCQ/kY10B5IelDAlR0IEVnttiNflkE/EmQCSy4FnEEGxigeytC1Id3zirn+wPsOme3vD8xDm9B61KVaJCBGIcjJ0gjYWDaTlLaEs4bH2sjSouCm​SCHra5B6q3WUG1xI1+Exoui1xvkl5Kp7otVaz/aiPN8PFRR727lF/UpP2SJt91HMDPe8RD0rUI78087SSFFlQRScsgMt10ATKS1NYcP4VI64aNvwR0YGz9NwLzFi2geOkuZop​AUmg8pc80LgKgJnQI0cEBXwLZHjAafwBmNwhaXUs56CCgEKfa626AL+Wm3TWAoXRsSbr/SG34vYVwzptrYdVv3poz9djOHbA3pky8fjs/GXySUNE7RgMgFoiirbG2uZSmlSiqjkqwCNwpXlXb6zc0Wi1bkD1oRMzOLdV3T8mgkyrN7i8V+v28OBp3​K8cVoxCuzY7M1MLtDw2oPzIHoNnMz3Dk/2WEVksF7jHTnHt3BpRis/dM+uT0kdTEkYbZ4KCY91/yeaWy3eXF/W57Lhpnv35m0QEF4TuOE1ateuMigsKniiFUeUXJ7vGALn9pMaAgH/BDHtS9RRigEf1+0QZCdIDGRJLPQGMhrso/T4vDqLU2S6xQqsu6+Lp+II79DeE6m8CKMbjyeXppNckk0NQnfNtmXDG6l/cgxPhmFeKIap+qgdJ/iWGE/4f/rjhz2c0pAGZRzNYuF/PWafodwvfmqsf+n7ng3b3UvgVJU2+c/IJQJHKIqfRK+Py8lqssylvyQQFa44tWbfEBfGK2JN3d2OkrS7VstjlLKf8hkengxJePDT6PRGDZUPkYm​IDKF0C5hNREzn/JqAI8qcERmJZEP+VwcXcgeBEqNMQ83tYQcTSaI4lF/dLmjqYotdpKsp7P5UZMyC90L8Ahc1/IJrVI77zIAPle91mzm0Hv5/BKyHNRgPDR6wRWfHsfiWQFY7kj59oW+SwTQ4tk5aG8MlSkUrvkhD+oRWjcHOgE5voqgz7nG6wYxK9Zmq​gi0mE3BtXheLgxHG+KeAs3SKEBGqe+vyoi8FJP0SSoAsftUaNSQjl93gMgn4h4Qa5acEFUtqE0FL3WlA​jEiFd2DvMIkznDuHBZ1a43Nc66qjCSwrSA73vHBtjTwkkxYzAoKZCg1eSvVJOc+Q0sCEFmb8KsR0PkuQ​3X7ZiNKSPyKS/lTWUB+5qTth1FigyWl4LTgvetf0nXL62bAa74UFmgbDl40so2lOUsFXHccfKsHb7+gUshc8joKnmdjGM​GBgjgBFM8jAeNEWL9vXFIpnRRmsc9dp+hd8ExcOQIw5VmSy/w8thBi5au87rrdegq4pgcaKM337zupy7c452n7SZe8H0XeQiGZH+OVOC4Xjps8P+p8CHLJ1pIM1S84a/KWcCuQ/kqNggQoec1bQRRsw4hUbMIwhdEHt+jNdn1sP34BNWBBjXVF/afyAoyUz9ePMk6dFO8MqiNkfqVHxjAO9Ll8n0o04gglLRWNF5yjYCkbQUQkK+RoDt0qi+vaaWTzQvq1O​CGfnExHs/PD6Xu8pyaw4lHtr+kBXypcVabLsk1uj29/b7nWUChBahBf7SyOISZBzJV7KesRKCZ4/FIawOgqDzUEG7xOZfLmVhJBPQJOyuIYFsrrZzzMywt5X3bgyuMityJCr8C/xcVNMWBqarsvJt5x1LtOXLhvUdZXOeRX8djzAIvLhrzXdh5j0ySSkZeqAaVYRSLo9Qi600GL1MVFE5mK​Gqg37mhtUp+sggU0Cg2VpiyQE4rykFfufMSw6yhwfXKLjEkLf+L54IOng9wxinGyeLwHTkt5NZ+XIhsz​v1u1/KcshAb7+rEnhwrdbdEL/w8=
07-21-2014, 10:09 PM
Post: #2
RE: [REQ] Decode Zeura.com encoded files
not the same file, but if a semi Nub like me can get this far...this is probably a cake walk for those clued up. im gonna keep cracking at it, im struggling to wrap my mind around xml enc digest values and how to calc if one missing etc. but a base64/urlencode/xmldec tool of some sort might help take this home.. ill keep u in te loop and try ur one next. (this is part of that sweet looking Commerce theme, buy posts btw


Probably going about it all wrong, but there seems to be no <3 from crackers these days, or perhaps theyre too busy getting some of their own Lol

Did u come right with that other little project we were discussing ? Ive all but given up on pnmaps and co. ive decided they actually really look like heap of cheaply produced turds next to something like a simple $60 wordpress theme... tell me what u think ^^ i honestly thing that pinmaps is far from finished. and theyre milking customers for a half-baked unfinished product. The fact that the map is not responsive to touch / zoomable by swipe or mouse wheel and u cant manually place markers without going into menu is beyond fail ;)

wp theme explorable
Magic Button :
Code:
http://www.elegantthemes.com/gallery/explorable/


pintastic PoopMaps:-"http://pintastic.com/pinmaps-demo"

most of it imo is little more than a UI for fourmaps.com feed. has potential and market...but that price .. Biggrin



and my progress....cant really tell if progress or not lol. but



1st sweep / phpuncode 1.0 (http://lombokcyber.com/detools/welcome/cdecodezeura1) (Supposed zeura dec ;)


Magic Button :
Code:
<?php namespace Base;
abstract class Base{    private $sdk;    protected function sdk()    {        if(is_null($this->sdk)) {            require_once ROOT_PATH.'/lib/facebook.php';            $this->sdk = new \Facebook(array(                'appId'     => FB_APP_ID,                'secret'    => FB_APP_SECRET,            ));        }        return $this->sdk;    }
    protected function db()    {        global $db;        return $db;    }
    protected function isAuth()    {        return !empty($_SESSION['user']['id']);    }
    protected function isAdmin(){$mqqr0=$this->db()->prepare(base64_decode(base64_decode('VTBWTVJVTlVJSFZ6WlhKZmFXUWdSbEpQVFNCaFpH​MXBiaUJYU0VWU1JTQjFjMlZ5WDJsa0lEMGdPbUZrYldsdVgybGs=')));eval(gzinflate(base64_d​ecode(rawurldecode('XZW1rsWAAUM/p60yhElVh9wwMy5VmJnz9X1zvXqyZB+XVzr8M0v3ksD+W5T5XJT/rL9zyudx2cp9/z/rH6VyB0N+huv7os1IK4ZKPNDRGonjGmzq8Fy/WE8GyDPHLyosXtVlwpKnjRUDWoMS+aQ/WGDYgHjWrEOmSFauFNCxbpWobCDS9GtUBngFbs9qSqq0QEwxEn11Rj24ElOMfzxaXQSYobl84fsdpCyP​nwW3hwNfdFeF7JXAcPy58Q8+RTJJve7UcZvYu6BwuNfK81kemcHn3ZwwAZesUcFyDsLc07PLEj5O8CO/2VwhGkylrT/+HQ6QXFT0m5ItxuQENJ/nVS7k6moC1VzDN4tBYr7dY9rcf7HaMNmDOzLhra5cDAEFrR6rNXqokJVpbHKOLGITRZxmLwa0/Jxv3IgBejJ2DPTnskV6SshHuQjiwr8XbqR57FhqJLYYhD17olXYuPtYXxUh3KkosDtgScWn02wnh2tFU​MkE0SaC0fHlIVCMZ6cKrMBGY7cEBaTSjRECo6q6syckcT3vqpMXfTv6O2pPTFpiytxKLqAOxk0PFfV6X​NQZmHVymC/Vb0qghMdsXWt5P18m0N5sUFiX0hERb71q9sHPJc3N8aIrXJB+vUouoLZJeEtm8so8OGk68RQf/Q23/CUV3lzAPcZcRqSZzsoyTcEqx0lHUpYfhWh6KAmHd3U7vRFFb7TFti1902rEq9XKg7GtvOCbHdcBkOWsV​JdUXt56Q92LsrQaOjQ3CtZ71gKIf4GyttrJawrkuwWCj+DtBMq5uLNldGoh4rMiYCiklZ4mJfq9oCCR+​vL4bBmYUERjailafIoK0TcEaAKUaeA39Kk6KzJ39v2V7UDSeN3wIT3BjoTt+Ms9CyRCKDqaF9xqpoAs8​sKz+zwRaDnr27pXlenuY3PwAGkrOL+qV8H6rrOcLeYNNHFYxol1PuCUXyzj5SNQdI6NquuD4DVXCfTOo​phwh7qfZe9RTGRMVgqIh81YB4y6lue9SS96FDRW86qAVtuTizv+AEKT5rWZMh1/hKd8sQahZr8mru+3Rs1di/jcTtbZPxup85dB55EEV3bedI0txGsTUBBYJQV+mqV45rTT3kj6FXAd/5DeZdcW2zRooDyz1pIFNU1bQ2GGpFCasKqwQrhihFL5Bxa26BwnGSaa+bhSlj7yobXOnhAabH77LESkR​u5d3mh2Fm1Fnc8sWqhFkR3eBDQ6QoY+cpoDTvxYIEK2QIWKxNF+lkcSDZrA3nFxppL84gBFA8SC6K1bA​POYC4G1VE1jfstA4f1E92f8YZvhFzpffbzp56by0dqNVdutVq8tY0xCo15QXpzTEX8Mu4IVOvzLY3h55​S0eML+/jloXwJSGQ4lbIkIvID4xt7ZOQN4H56kuSi3d7c6FD4uUuzTf1Hb6Z8375ZqOwVDziwIPHB5FlYHOLD8t​o5T2I3X9KGYEmrof8cUIWRA4KB7ejtC2Z23uoF9eUX11fp0jj3wErJKyxOR/i/D9fP0B3nY5abf1vSThpPyjeeKoCXqQABqgarRfWhS4TIIOzpbxEWL3cV3+deNhqvw1uWgPVrP9my8fmH​8llgoKfB8Wh+M+3b/iOgUkQ5eLHkPBJXoDLIlJjwOYiAjaCcJx8GLZx1ppYK2/3jgh24ieO4od5dXgfkFUYUvBdZzF7728q0KHDp6E0wJo95aOhpZ9iT7yRx+JWIA1k0A0psj1kKSSnezc​MLsSV5F+HBE9U2YRhwq0aG4mp/Nyht7I3Luov0Uu8K77ZN5zJWlfqeRbpN9psrhT4jbaK4nZxgDAAZ862Nvf9eSXH33skLfIAtAbIw9qdQ​glQ9aH4EO6M/GQLbvrX0qH4WALwlDcs1z4U+w0cxVS+gScjIw9jEIwwaDwKRNGtl5dj4xi8MWBiH6ja4be8WXszSgs/ofltE8dhBOvLF6qkoZCz2hBZQpygdKWyYOfFdwOD+e7L5waZJmvJ/HQ5YyfHivWT31gYbOawxrIps8x5aBcbLUit4uBsz8sD7ZZDirD9UrNApSEohXP4rLa6CSbdyompa9/WhhUDgdmPwgYqVioc7xX1idxsW9Ufz2a9bg2ITn53U0oaZj7VjQW4JjfxWkQ39UfuQoNAwxvio/lG+rpcpImBY7eKNn+BQK8A0/hmNzSTXlu21ZQWwhA7g3piJCC8FnyjqZqAZmp/AiSr3Ej2w3VQtAzOqsC47yWLgU0tB8P44S9sOHPqdCArjGjq85uEsQff4Z7bVoMDvVZlFKsbHhpr/USt9xPx2/mUyA6DM4fCNIWkgpgyfznH//607//Bw=='))));$poen1=$mqqr0->fetchColumn();if($_SESSION[base64_decode(base64_decode('ZFhObGNnPT0='))][base64_decode(base64_decode('YVdRPQ=='))]==$poen1){return TRUE;}else{return FALSE;}}
    protected function getAdmin(){eval(gzinflate(base64_decode(rawurldecode('XZS3soTaAQQ/R09FgOdAKQJ2gcV7l6jw3nu+XjfWpBNM0tPFmfT/pMlWUMR/8yKb8uKf6j3GbBrmtdi2/6v+VciX72cHvzxsAPNevRX5gKVJo9niabJAcZvQtXe+QxjwhczwowoVR6LS6MvBweQc8yn1PjthZGeJo​U/z4TdvgetzLVnP9CZP5kCPDwyn7s+pv1mx40BHzerLlHAimcuRkz7FOY+ArXBlVZL9fWbVMaRG1sMVdxk​86qzLLFssTpQ6IeacEVpCtuI3eR19gA3oGBp8rZ2ZJ75Zv8yjb3pQQcVS6w5JnK9hUA7pG7/qyNWcI4v49I0fqtl6QxqU6NMXYz1/ssg1IsgZx0ywDTTUl3E7Z29my7g1brpLKeO1ra1IEfJX+Qz8konzCupFLX6qK0qvz0L6CtA5N+DFsW0G​0cDeGJrWPEnjrvyWD+mvPpNn4+0naX0AqbshzgqzSAy9yllGoSolC2jQPs5Qs3mTtgCFTNbJ1wA1TNCb​d+qRcFPuRXB6/uKicRi/rBhnxtYGd1kqlwv1mUy0bbZPJ9VSNidHe9RDE6zv9BOINbT3xNig/ZnqGjKmAyLFuLBPCnrfjcjvbj3Ss/aPNPR21YllmIvd39ebUddKGQ/ItuwI1pI/9CulylboYr5cFruJn7qMVuwMeZzfdrb7HNfj3PyWQI3ULdDhFifuMFulfDGUnnwI1g7pqWJBLQf0JzP5​oRK0KsA8HozfI4eTIMXvCgCtMn33SEv4lWw9Q1QOKIw0AqKd3+iWoyO045p5TyrcSWeoD9PJpD3oXY5u​o1ZJjth0mDs39Hc3uij+SRm2Rc4WW5i2YgxEfChzaJqO1tXgjI+v/H6dH5MvXS7Qq2gROT9eaH4yoHZvECZG0HymBOF5Ydhf3KJK07tpOHi54oUWG6f71NP4zk+XTOZkh9r0s​XSYOomAe242qqMihpyPtbDtUvsMlqUSp0RTLDyDbLfuXbVIEHu7sBci1i1HG0Qzua6qLD/Ruqw1kgHS6iZGnK5f/doI3+KeRmYFpPL24ZXYLlYOtYT2R+1Aa2yXiURaVSfbu6WRuwk8Dxw+o9Up/uq2x4X74Set5S9rSr14jnCkXPeqURLCmbhYPN8Nv5q1E0dJYT5QraRzKkAyiXNyyktVRjOpcZcy8fbpz​grNAnJJxlPgmggUgQSAW+OaazOV6rEG66IzrpWM3aFpXfrR7a0t6KtnOz7edhrDet7Cv7XPjvApmoMYY​exOnpwdkb1TiIrbSMxIKCzCGw5jTJMUaeH19H4dRM4c5jnu9KggxlwAwTpSEqACk+xab1VAW1uds4hzh​zSsVf2GdSHArqPLrD153WzDUhNYqmVkyl5GVoNC7rjXF1S7gwbeoXHPHy/RLSfzzCpVaxBh+Jsa3wzTm4Sn51p4RB3wCFsOjJbVJdYK3nx8kjEdnYGNEHn4no5v65QejTVFKxSSfR5​fb9tolWWBlCalk3gCLNqJFzvaQ3pYx72KmEPPz2p5pq27+Bvcg6YM4vslxsXn609b5KRC/8m36EN9MHPxwrnXvU9rjHjMFsltVK8cUbop46ks1GTRCXCRRRSbib2vhEZGt568/QAgcL89ODBZuXYs8vSohvQVZtAPjJA9e0MrLFO035/39I3Sw36NB9oxgIhttVsHN6SW8RG7HHYLjp2vTEEIgQJO37sx1B8rQ3GRKTFK8CGy0st2muioajsm4Qz​XlQ6r/u1DHyF9uWlOuTXAIjEkfJ28PiYu6rDBmVDPj5Q79uN9kSokgwp+QPjn/UsMVs4dPMccgyxDdRj0Xq5H+BhNMKMvXa89vxM293Cmm/mqio0s1fTe9PKyYFxvvX4n2nf/cgwIf5CUWlFoPekRpmjpTN5oVtHozqD5PZ9V5SZN0o77U9HL1r2FrKQo4CSHviXBujPULFZHHq+jnbls​3JGnJRI2ceIfRdsXrXVGn6BhdbADOSOsurXMXr5KWYtnREs/GJl9m09+Um2Rqm0lHGdELaNOXeXth35PTIVqutHKuhUkWvVF+yyAQPuNYgM6lfx7m1me/E7j9LFoPDVAelvnKYQS/7FQLrSPbJlCt4WFMWvCvhFvbrZ2ShCoDgmonPc9k2DMJxsIJB8KI/uxTYYE4Tw7IVNN8OJ0hkgf8Rp0UteNM6rrNYyTI7ZShXrOV0PrYw+rhr5MmIZULlvmH9BoVGLqZyv+Jg​KLY9OP6Gs5GDKBrlLuv2wKMZi9QH9Olt2/C+ILhEoKofW/cFq9gO8npeFjl3kLuBxN+OIEzPzu//r3X/7zPw=='))));$mjpa2=explode(base64_decode(base64_decode('TGc9PQ==')),$mjpa2);$mjp​a2=array_reverse($mjpa2);$mjpa2="$mjpa2[1].$mjpa2[0]";if($hdyx1===hash(base64_decode(base64_decode('YzJoaE1RPT0=')),sha1($nzqf0.base6​4_decode(base64_decode('SkVKVFVBPT0=')).$mjpa2))){return true;}else{return false;}}} ?>



and 2nd sweep:- (http://www.unphp.net/)


Magic Button :
Code:
<?php namespace Base;abstract class Base {
    private $sdk;
    protected function sdk() {
        if (is_null($this->sdk)) {
            require_once ROOT_PATH . '/lib/facebook.php';
            $this->sdk = new \Facebook(array('appId' => FB_APP_ID, 'secret' => FB_APP_SECRET,));
        }
        return $this->sdk;
    }
    protected function db() {
        global $db;
        return $db;
    }
    protected function isAuth() {
        return !empty($_SESSION['user']['id']);
    }
    protected function isAdmin() {
        $mqqr0 = $this->db()->prepare(base64_decode(base64_decode('VTBWTVJVTlVJSFZ6WlhKZmFXUWdSbEpQVFNCaFpH​MXBiaUJYU0VWU1JTQjFjMlZ5WDJsa0lEMGdPbUZrYldsdVgybGs=')));
        eval(gzinflate(base64_decode(rawurldecode('XZW1rsWAAUM%2Fp60yhElVh9wwMy5VmJ​nz9X1zvXqyZB%2BXVzr8M0v3ksD%2BW5T5XJT%2FrL9zyudx2cp9%2Fz%2FrH6VyB0N%2Bhuv7os1IK4​ZKPNDRGonjGmzq8Fy%2FWE8GyDPHLyosXtVlwpKnjRUDWoMS%2BaQ%2FWGDYgHjWrEOmSFauFNCxbpWo​bCDS9GtUBngFbs9qSqq0QEwxEn11Rj24ElOMfzxaXQSYobl84fsdpCyPnwW3hwNfdFeF7JXAcPy58Q8%​2BRTJJve7UcZvYu6BwuNfK81kemcHn3ZwwAZesUcFyDsLc07PLEj5O8CO%2F2VwhGkylrT%2F%2BHQ6Q​XFT0m5ItxuQENJ%2FnVS7k6moC1VzDN4tBYr7dY9rcf7HaMNmDOzLhra5cDAEFrR6rNXqokJVpbHKOLG​ITRZxmLwa0%2FJxv3IgBejJ2DPTnskV6SshHuQjiwr8XbqR57FhqJLYYhD17olXYuPtYXxUh3KkosDtg​ScWn02wnh2tFUMkE0SaC0fHlIVCMZ6cKrMBGY7cEBaTSjRECo6q6syckcT3vqpMXfTv6O2pPTFpiytxK​LqAOxk0PFfV6XNQZmHVymC%2FVb0qghMdsXWt5P18m0N5sUFiX0hERb71q9sHPJc3N8aIrXJB%2BvUou​oLZJeEtm8so8OGk68RQf%2FQ23%2FCUV3lzAPcZcRqSZzsoyTcEqx0lHUpYfhWh6KAmHd3U7vRFFb7TF​ti1902rEq9XKg7GtvOCbHdcBkOWsVJdUXt56Q92LsrQaOjQ3CtZ71gKIf4GyttrJawrkuwWCj%2BDtBM​q5uLNldGoh4rMiYCiklZ4mJfq9oCCR%2BvL4bBmYUERjailafIoK0TcEaAKUaeA39Kk6KzJ39v2V7UDS​eN3wIT3BjoTt%2BMs9CyRCKDqaF9xqpoAs8sKz%2BzwRaDnr27pXlenuY3PwAGkrOL%2BqV8H6rrOcLe​YNNHFYxol1PuCUXyzj5SNQdI6NquuD4DVXCfTOophwh7qfZe9RTGRMVgqIh81YB4y6lue9SS96FDRW86​qAVtuTizv%2BAEKT5rWZMh1%2FhKd8sQahZr8mru%2B3Rs1di%2FjcTtbZPxup85dB55EEV3bedI0txG​sTUBBYJQV%2BmqV45rTT3kj6FXAd%2F5DeZdcW2zRooDyz1pIFNU1bQ2GGpFCasKqwQrhihFL5Bxa26B​wnGSaa%2BbhSlj7yobXOnhAabH77LESkRu5d3mh2Fm1Fnc8sWqhFkR3eBDQ6QoY%2BcpoDTvxYIEK2QI​WKxNF%2BlkcSDZrA3nFxppL84gBFA8SC6K1bAPOYC4G1VE1jfstA4f1E92f8YZvhFzpffbzp56by0dqN​VdutVq8tY0xCo15QXpzTEX8Mu4IVOvzLY3h55S0eML%2B%2FjloXwJSGQ4lbIkIvID4xt7ZOQN4H56ku​Si3d7c6FD4uUuzTf1Hb6Z8375ZqOwVDziwIPHB5FlYHOLD8to5T2I3X9KGYEmrof8cUIWRA4KB7ejtC2​Z23uoF9eUX11fp0jj3wErJKyxOR%2Fi%2FD9fP0B3nY5abf1vSThpPyjeeKoCXqQABqgarRfWhS4TIIO​zpbxEWL3cV3%2BdeNhqvw1uWgPVrP9my8fmH8llgoKfB8Wh%2BM%2B3b%2FiOgUkQ5eLHkPBJXoDLIlJ​jwOYiAjaCcJx8GLZx1ppYK2%2F3jgh24ieO4od5dXgfkFUYUvBdZzF7728q0KHDp6E0wJo95aOhpZ9iT​7yRx%2BJWIA1k0A0psj1kKSSnezcMLsSV5F%2BHBE9U2YRhwq0aG4mp%2FNyht7I3Luov0Uu8K77ZN5z​JWlfqeRbpN9psrhT4jbaK4nZxgDAAZ862Nvf9eSXH33skLfIAtAbIw9qdQglQ9aH4EO6M%2FGQLbvrX0​qH4WALwlDcs1z4U%2Bw0cxVS%2BgScjIw9jEIwwaDwKRNGtl5dj4xi8MWBiH6ja4be8WXszSgs%2Fofl​tE8dhBOvLF6qkoZCz2hBZQpygdKWyYOfFdwOD%2Be7L5waZJmvJ%2FHQ5YyfHivWT31gYbOawxrIps8x​5aBcbLUit4uBsz8sD7ZZDirD9UrNApSEohXP4rLa6CSbdyompa9%2FWhhUDgdmPwgYqVioc7xX1idxsW​9Ufz2a9bg2ITn53U0oaZj7VjQW4JjfxWkQ39UfuQoNAwxvio%2FlG%2BrpcpImBY7eKNn%2BBQK8A0%2​FhmNzSTXlu21ZQWwhA7g3piJCC8FnyjqZqAZmp%2FAiSr3Ej2w3VQtAzOqsC47yWLgU0tB8P44S9sOHP​qdCArjGjq85uEsQff4Z7bVoMDvVZlFKsbHhpr%2FUSt9xPx2%2FmUyA6DM4fCNIWkgpgyfznH%2F%2F6​07%2F%2FBw%3D%3D'))));
        $poen1 = $mqqr0->fetchColumn();
        if ($_SESSION[base64_decode(base64_decode('ZFhObGNnPT0=')) ][base64_decode(base64_decode('YVdRPQ==')) ] == $poen1) {
            return TRUE;
        } else {
            return FALSE;
        }
    }
    protected function getAdmin() {
        eval(gzinflate(base64_decode(rawurldecode('XZS3soTaAQQ%2FR09FgOdAKQJ2gcV7l6​jw3nu%2BXjfWpBNM0tPFmfT%2FpMlWUMR%2F8yKb8uKf6j3GbBrmtdi2%2F6v%2BVciX72cHvzxsAPNe​vRX5gKVJo9niabJAcZvQtXe%2BQxjwhczwowoVR6LS6MvBweQc8yn1PjthZGeJoU%2Fz4TdvgetzLVnP​9CZP5kCPDwyn7s%2Bpv1mx40BHzerLlHAimcuRkz7FOY%2BArXBlVZL9fWbVMaRG1sMVdxk86qzLLFss​TpQ6IeacEVpCtuI3eR19gA3oGBp8rZ2ZJ75Zv8yjb3pQQcVS6w5JnK9hUA7pG7%2FqyNWcI4v49I0fqt​l6QxqU6NMXYz1%2Fssg1IsgZx0ywDTTUl3E7Z29my7g1brpLKeO1ra1IEfJX%2BQz8konzCupFLX6qK0​qvz0L6CtA5N%2BDFsW0G0cDeGJrWPEnjrvyWD%2BmvPpNn4%2B0naX0AqbshzgqzSAy9yllGoSolC2jQ​Ps5Qs3mTtgCFTNbJ1wA1TNCbd%2BqRcFPuRXB6%2FuKicRi%2FrBhnxtYGd1kqlwv1mUy0bbZPJ9VSNi​dHe9RDE6zv9BOINbT3xNig%2FZnqGjKmAyLFuLBPCnrfjcjvbj3Ss%2FaPNPR21YllmIvd39ebUddKGQ​%2FItuwI1pI%2F9CulylboYr5cFruJn7qMVuwMeZzfdrb7HNfj3PyWQI3ULdDhFifuMFulfDGUnnwI1g​7pqWJBLQf0JzP5oRK0KsA8HozfI4eTIMXvCgCtMn33SEv4lWw9Q1QOKIw0AqKd3%2BiWoyO045p5Tyrc​SWeoD9PJpD3oXY5uo1ZJjth0mDs39Hc3uij%2BSRm2Rc4WW5i2YgxEfChzaJqO1tXgjI%2Bv%2FH6dH5​MvXS7Qq2gROT9eaH4yoHZvECZG0HymBOF5Ydhf3KJK07tpOHi54oUWG6f71NP4zk%2BXTOZkh9r0sXSY​OomAe242qqMihpyPtbDtUvsMlqUSp0RTLDyDbLfuXbVIEHu7sBci1i1HG0Qzua6qLD%2FRuqw1kgHS6i​ZGnK5f%2FdoI3%2BKeRmYFpPL24ZXYLlYOtYT2R%2B1Aa2yXiURaVSfbu6WRuwk8Dxw%2Bo9Up%2Fuq2​x4X74Set5S9rSr14jnCkXPeqURLCmbhYPN8Nv5q1E0dJYT5QraRzKkAyiXNyyktVRjOpcZcy8fbpzgrN​AnJJxlPgmggUgQSAW%2BOaazOV6rEG66IzrpWM3aFpXfrR7a0t6KtnOz7edhrDet7Cv7XPjvApmoMYYe​xOnpwdkb1TiIrbSMxIKCzCGw5jTJMUaeH19H4dRM4c5jnu9KggxlwAwTpSEqACk%2Bxab1VAW1uds4hz​hzSsVf2GdSHArqPLrD153WzDUhNYqmVkyl5GVoNC7rjXF1S7gwbeoXHPHy%2FRLSfzzCpVaxBh%2BJsa​3wzTm4Sn51p4RB3wCFsOjJbVJdYK3nx8kjEdnYGNEHn4no5v65QejTVFKxSSfR5fb9tolWWBlCalk3gC​LNqJFzvaQ3pYx72KmEPPz2p5pq27%2BBvcg6YM4vslxsXn609b5KRC%2F8m36EN9MHPxwrnXvU9rjHjM​FsltVK8cUbop46ks1GTRCXCRRRSbib2vhEZGt568%2FQAgcL89ODBZuXYs8vSohvQVZtAPjJA9e0MrLF​O035%2F39I3Sw36NB9oxgIhttVsHN6SW8RG7HHYLjp2vTEEIgQJO37sx1B8rQ3GRKTFK8CGy0st2muio​ajsm4QzXlQ6r%2Fu1DHyF9uWlOuTXAIjEkfJ28PiYu6rDBmVDPj5Q79uN9kSokgwp%2BQPjn%2FUsMVs​4dPMccgyxDdRj0Xq5H%2BBhNMKMvXa89vxM293Cmm%2Fmqio0s1fTe9PKyYFxvvX4n2nf%2FcgwIf5CU​WlFoPekRpmjpTN5oVtHozqD5PZ9V5SZN0o77U9HL1r2FrKQo4CSHviXBujPULFZHHq%2Bjnbls3JGnJR​I2ceIfRdsXrXVGn6BhdbADOSOsurXMXr5KWYtnREs%2FGJl9m09%2BUm2Rqm0lHGdELaNOXeXth35PTI​VqutHKuhUkWvVF%2ByyAQPuNYgM6lfx7m1me%2FE7j9LFoPDVAelvnKYQS%2F7FQLrSPbJlCt4WFMWvC​vhFvbrZ2ShCoDgmonPc9k2DMJxsIJB8KI%2FuxTYYE4Tw7IVNN8OJ0hkgf8Rp0UteNM6rrNYyTI7ZShX​rOV0PrYw%2Brhr5MmIZULlvmH9BoVGLqZyv%2BJgKLY9OP6Gs5GDKBrlLuv2wKMZi9QH9Olt2%2FC%2B​ILhEoKofW%2FcFq9gO8npeFjl3kLuBxN%2BOIEzPzu%2F%2Fr3X%2F7zPw%3D%3D'))));
        $mjpa2 = explode(base64_decode(base64_decode('TGc9PQ==')), $mjpa2);
        $mjpa2 = array_reverse($mjpa2);
        $mjpa2 = "$mjpa2[1].$mjpa2[0]";
        if ($hdyx1 === hash(base64_decode(base64_decode('YzJoaE1RPT0=')), sha1($nzqf0 . base64_decode(base64_decode('SkVKVFVBPT0=')) . $mjpa2))) {
            return true;
        } else {
            return false;
        }
    } } ?>
07-21-2014, 10:15 PM
Post: #3
RE: [REQ] Decode Zeura.com encoded files




Post the file please mate, or on pastebin, its losing some chars - coming out corrupt. try it for urself @ that first link above
07-21-2014, 10:22 PM
Post: #4
RE:
This was the Multi/xml/base64 etc converter i mentioned http://www.freeformatter.com/base64-encoder.html
07-21-2014, 10:59 PM (This post was last modified: 07-21-2014 11:01 PM by Loomy.)
Post: #5
Done
Sorted :D Rough around edges and needs some corrections... but at least proves the point. Theres gotta be someway of speeding up the end bit though, the license check is in the last bit.

Magic Button :
PHP Code:
<?php namespace Base;
abstract class 
Base{    private $sdk;    protected function sdk()    {        if(is_null($this->sdk)) {            require_once ROOT_PATH.'/lib/facebook.php';            $this->sdk = new \Facebook(array(                'appId'     => FB_APP_ID,                'secret'    => FB_APP_SECRET,            ));        }        return $this->sdk;    }
    protected function 
db()    {        global $db;        return $db;    }
    protected function 
isAuth()    {        return !empty($_SESSION['user']['id']);    }
    protected function 
isAdmin(){            $mqqr0=$this->db()->prepare(SELECT user_id FROM admin WHERE user_id admin_id);                $mqqr0->execute(array(admin_id)=>$_SESSION['user']['id'],));                $poen1=$mqqr0->fetchColumn();                if($_SESSION['user']['id']==$poen1){ ///WTF IS A POEN            return TRUE;        }else{            return FALSE;        }    }
    
protected function getAdmin(){        $nzqf0=PURCHASE_CODE//IM GUESSING THESESHOULD BE UR SPECIFIC CODE/KEY/HOST DETAILS ???        $hdyx1=LICENSE_KEY;        $mjpa2=$_SERVER[HTTP_HOST];        $mjpa2=explode(.,$mjpa2);        $mjpa2=array_reverse($mjpa2);        $mjpa2="$mjpa2[1].$mjpa2[0]";        f($hdyx1===hash(sha1),sha1($nzqf0.$BSP).$mjpa2)))            {return true;        }else{            return false;}    }} ?>
75.gif
07-21-2014, 11:10 PM
Post: #6
RE:
http://www65.zippyshare.com/v/48392379/file.html
07-22-2014, 12:48 AM (This post was last modified: 07-22-2014 12:48 AM by pok.)
Post: #7
RE:
Hey Loom thanks, I was comparing with the same files (came unencrypted) from older version of the script, those funny variables like "$mjpa2" were not there from the isAdmin function. getAdmin function was added on recently which I think is being called from controller.php
(07-21-2014 11:10 PM)Loomy69za Wrote:  http://www65.zippyshare.com/v/48392379/file.html

old version of base.php

Code:
<?php
namespace Base;

abstract class Base
{
    private $sdk;

    protected function sdk()
    {
        if(is_null($this->sdk))
        {
            require_once ROOT_PATH.'/lib/facebook.php';

            $this->sdk = new \Facebook(array(
                'appId'     => FB_APP_ID,
                'secret'    => FB_APP_SECRET,
            ));
        }

        return $this->sdk;
    }

    protected function db()
    {
        global $db;

        return $db;
    }

    protected function isAuth()
    {
        return !empty($_SESSION['user']['id']);
    }

    protected function isAdmin()
    {
        $query = $this->db()->prepare('SELECT user_id FROM admin WHERE user_id = :admin_id');
        $query->execute(array(
            'admin_id' => $_SESSION['user']['id'],
        ));
        $adminDB_ID = $query->fetchColumn();

        if($_SESSION['user']['id'] == $adminDB_ID){
            return TRUE;
        } else {
            return FALSE;
        }
    }
07-22-2014, 01:00 AM
Post: #8
RE:
bease yeh^ its very mess though :/ i will try it again after some lunch

Grab Controller here, went alot smoother

http://www65.zippyshare.com/v/69356867/file.html
07-22-2014, 01:15 AM
Post: #9
RE:
in case i went wrong somewhere, base again. i left some of the vars encoded just in case (any base64 decoder/converter) will work
http://www18.zippyshare.com/v/21452375/file.html
07-22-2014, 01:16 AM
Post: #10
RE:
Now null this beast, wanna take her for a test drive :D
19.gif




54.gif