Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Ioncube 7 Decode (https://forum.exetools.com/showthread.php?t=15091)

Bunshee 06-23-2013 05:34

Ioncube 7 Decode
 
Hello,

I'am start a new Reversing Project :D

I a owner of a Ioncube 8 License, but, i will try to decompile/decode my crypted ioncube php files.

I found at Google a many tools that says 'yes we can decrypt' this for XX $ amount. Haha !

My Plan is, is have a PHP 5.3 Ioncube Decoder here, not for Ioncube 7.
The Decoder is simply easy...

A php.exe for Windows, and the Librarys.

And a Manipulated Ioncube loader dll.

Facts:

The Ioncube Files have a First Bit for identify the Version.
File Content is Base64 Encoded.

Okay, now, whats the best methods to Attack this?
Or have any Body more Informations about the Ioncube Loader?

Thanks :)

Insid3Code 06-23-2013 18:46

I heard! there is a leaked package (Official Ioncube FULL source code) about 90 MB can be a good study source.

Bunshee 06-23-2013 19:07

Hey,

Yeah, i have the leaked ioncube source.

Only the source code is a little bit tricky, so also the question of the best method to attack it :)

I must say, the leaked source code is from an old version, or I am mistaken there? The source code also buzzing here on the board, and it the same with my own that i have?

deepzero 06-23-2013 21:55

could you post a link to the new leak? I only find old stuff.

daqstar 06-27-2013 22:20

This is from November 2008
 
1 Attachment(s)
This is from November 2008

Attachment 7036

Ember 06-29-2013 11:00

Since your topic title is Ioncube 7 decode, here's a Ioncube 7 decoder/dezender whatever. It seems to work as I have tested it on Ioncube 7 files (they require minor cleanup and fixing).

Perhaps you can diff this ioncube loader against the original, if you can find the right version. I have looked for it all ready, it is the non-ts version.

Code:

hxxps://mega.co.nz/#!N5IwEAiY!OxFusV7gjDVyz1Fy0ujS8ACjOEdOuZuSNSm1_5MNquA

nikre 06-30-2013 23:19

@Ember
this bad hosting
make other link
thanks

sendersu 07-01-2013 03:29

Quote:

Originally Posted by daqstar (Post 85475)
This is from November 2008

Attachment 7036

when I follow your link it said "Not found"

BAHEK 07-01-2013 17:00

Quote:

Originally Posted by nikre (Post 85548)
@Ember
this bad hosting
make other link
thanks

rghost.ru or mediafire or dropbox

Bunshee 07-04-2013 20:27

Hello,

Thanks BAHEK, my Anti virus, alerts that contains a virus?!

sezar21m 07-05-2013 16:33

(dezender_free) not working to decoded ionCube 7
The new version of this software is available?

I could not decode the file!

My file
Code:

http://www.mediafire.com/?vo2923dxkb7ibia

Bunshee 07-12-2013 01:46

Hello,

I have not found a newer Version... :(

uranus64 10-26-2013 16:35

1 Attachment(s)
Quote:

Originally Posted by sezar21m (Post 85634)
(dezender_free) not working to decoded ionCube 7
The new version of this software is available?

I could not decode the file!

My file
Code:

http://www.mediafire.com/?vo2923dxkb7ibia

I know is a little bit old post but ... maybe still need it decoded !
Attached decoded file.

daqstar 04-03-2014 23:05

1 Attachment(s)
Quote:

Originally Posted by sendersu (Post 85549)
when I follow your link it said "Not found"

Sorry here is the correct link:

Bunshee 04-05-2014 04:31

Hello,

I find more Infos about Decode Ioncube 7:

https://media.blackhat.com/ad-12/Saher/bh-ad-12-stealing-from-thieves-Saher-slides.pdf


All times are GMT +8. The time now is 21:52.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX