Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-20-2026, 14:00
Sh4DoVV Sh4DoVV is offline
Friend
 
Join Date: Sep 2023
Posts: 45
Rept. Given: 1
Rept. Rcvd 4 Times in 4 Posts
Thanks Given: 17
Thanks Rcvd at 79 Times in 17 Posts
Sh4DoVV Reputation: 4
Smile ioncube_loader_win_8.4 NTS x64 (Patched Expire)

Hi
ioncube loader evaluation , bypassed expire encoded php
Attached Files
File Type: rar ioncube_loader_win_8.4 NTS x64 (Patched Expire).rar (1.14 MB, 14 views)
Reply With Quote
The Following 3 Users Say Thank You to Sh4DoVV For This Useful Post:
msd43msd (06-16-2026), niculaita (05-20-2026), Zeokat (06-01-2026)
  #2  
Old 05-20-2026, 14:01
Sh4DoVV Sh4DoVV is offline
Friend
 
Join Date: Sep 2023
Posts: 45
Rept. Given: 1
Rept. Rcvd 4 Times in 4 Posts
Thanks Given: 17
Thanks Rcvd at 79 Times in 17 Posts
Sh4DoVV Reputation: 4
ioncube_loader_win_7.1 x64 (Patched Expire)

version 7.1
Attached Files
File Type: rar ioncube_loader_win_7.1 x64 (Patched Expire).rar (333.4 KB, 15 views)
Reply With Quote
The Following 2 Users Say Thank You to Sh4DoVV For This Useful Post:
niculaita (05-20-2026), Zeokat (06-01-2026)
  #3  
Old 05-27-2026, 18:58
dawwinci dawwinci is offline
Friend
 
Join Date: May 2026
Location: Romania
Posts: 4
Rept. Given: 0
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 3 Posts
dawwinci Reputation: 4
PHP 7.1 (ionCube loader v14.4)
https://github.com/dawwinci/ic71dump-opcodes
  • Added logic to force dynamic-key decoding before dumping
  • Patched loader_win_7.1.dll for expiry/trial handling

PHP 7.4 (ionCube loader v15.5)
https://github.com/dawwinci/ic74dump-opcodes
  • Fix for ioncube.dynamickey protected method opcode dumping
  • Fix for obfuscated names of standard PHP functions
  • Fix for trial-expired encoded ionCube files
Reply With Quote
The Following User Gave Reputation+1 to dawwinci For This Useful Post:
MarcElBichon (05-27-2026)
The Following 4 Users Say Thank You to dawwinci For This Useful Post:
blue_devil (05-30-2026), Sh4DoVV (05-28-2026), uranus64 (05-28-2026), Zeokat (06-01-2026)
  #4  
Old 06-10-2026, 04:54
dawwinci dawwinci is offline
Friend
 
Join Date: May 2026
Location: Romania
Posts: 4
Rept. Given: 0
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 3 Posts
dawwinci Reputation: 4
New update — PHP 8.1 (ionCube Loader v15.5)
https://github.com/dawwinci/ic81dump-opcodes
  • Full opcode dumping for ionCube-encoded PHP files
  • Accurate opcode and jump target recovery
  • Structured JSON output containing literals and operands, plus a human-readable opcode dump
Reply With Quote
The Following 2 Users Gave Reputation+1 to dawwinci For This Useful Post:
MarcElBichon (06-10-2026), uranus64 (06-15-2026)
The Following 2 Users Say Thank You to dawwinci For This Useful Post:
cjack (06-10-2026), Gyrus (06-10-2026)
  #5  
Old 06-11-2026, 03:58
dawwinci dawwinci is offline
Friend
 
Join Date: May 2026
Location: Romania
Posts: 4
Rept. Given: 0
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 3 Posts
dawwinci Reputation: 4
If possible, and if you have files encoded with ionCube PHP 8.1, please share them so I can use them for debugging and testing.

It would help me a lot, especially if the files are more complex and heavily encoded. Thank you!

Last edited by dawwinci; 06-12-2026 at 14:22.
Reply With Quote
  #6  
Old 06-22-2026, 15:39
dawwinci dawwinci is offline
Friend
 
Join Date: May 2026
Location: Romania
Posts: 4
Rept. Given: 0
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 3 Posts
dawwinci Reputation: 4
New update:

ionCube PHP 8.1 Opcode Dumper — Runtime Execution (ionCube Loader v15.5)
https://github.com/dawwinci/ic81dump-opcodes
  • Dynamic-key providers can now execute and return the required decryption key.
  • VM capture is scoped to the protected target function.
  • Added safe handling for the loader’s static_variables / MAP_PTR state.
  • Added post-materialization and bailout recovery.
  • Restores modified op-arrays, globals, handlers, and temporary state after capture.

Release:

ionCube PHP 8.x Static Decompiler — PHP 8.1–8.4 Support Update
https://github.com/dawwinci/ioncube-php8-decompiler
  • Added PHP 8.1–8.4 support.
  • Added version-specific handler and interned-string tables.
  • Fixed ABI-specific integer assignment decoding.
  • Corrected Zend opcode ranges and opcode names.
  • Added automatic PHP ABI detection and DLL mismatch validation.
  • Improved loader constant extraction and documentation.


ionCube PHP 8.x Static Opcode Extraction — PHP 8.1–8.4 Support
I’ve published my latest reverse-engineering research and tools for statically analyzing ionCube-protected PHP applications targeting PHP 8.1 through PHP 8.4.

Technical article and tools:
https://www.amariei.org/ioncube-php8-static-decode.html
Reply With Quote
The Following User Gave Reputation+1 to dawwinci For This Useful Post:
MarcElBichon (06-22-2026)
The Following User Says Thank You to dawwinci For This Useful Post:
niculaita (06-22-2026)
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 02:39.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )