#1
|
|||
|
|||
Ioncube 7 Decode
Hello,
I'am start a new Reversing Project I a owner of a Ioncube 8 License, but, i will try to decompile/decode my crypted ioncube php files. I found at Google a many tools that says 'yes we can decrypt' this for XX $ amount. Haha ! My Plan is, is have a PHP 5.3 Ioncube Decoder here, not for Ioncube 7. The Decoder is simply easy... A php.exe for Windows, and the Librarys. And a Manipulated Ioncube loader dll. Facts: The Ioncube Files have a First Bit for identify the Version. File Content is Base64 Encoded. Okay, now, whats the best methods to Attack this? Or have any Body more Informations about the Ioncube Loader? Thanks |
#2
|
||||
|
||||
I heard! there is a leaked package (Official Ioncube FULL source code) about 90 MB can be a good study source.
|
#3
|
|||
|
|||
Hey,
Yeah, i have the leaked ioncube source. Only the source code is a little bit tricky, so also the question of the best method to attack it I must say, the leaked source code is from an old version, or I am mistaken there? The source code also buzzing here on the board, and it the same with my own that i have? |
#4
|
||||
|
||||
could you post a link to the new leak? I only find old stuff.
|
#5
|
||||
|
||||
This is from November 2008
__________________
0z0n3 |
#6
|
|||
|
|||
Since your topic title is Ioncube 7 decode, here's a Ioncube 7 decoder/dezender whatever. It seems to work as I have tested it on Ioncube 7 files (they require minor cleanup and fixing).
Perhaps you can diff this ioncube loader against the original, if you can find the right version. I have looked for it all ready, it is the non-ts version. Code:
hxxps://mega.co.nz/#!N5IwEAiY!OxFusV7gjDVyz1Fy0ujS8ACjOEdOuZuSNSm1_5MNquA |
#7
|
||||
|
||||
@Ember
this bad hosting make other link thanks |
#8
|
|||
|
|||
Quote:
|
#10
|
|||
|
|||
Hello,
Thanks BAHEK, my Anti virus, alerts that contains a virus?! |
#11
|
|||
|
|||
(dezender_free) not working to decoded ionCube 7
The new version of this software is available? I could not decode the file! My file Code:
http://www.mediafire.com/?vo2923dxkb7ibia |
#12
|
|||
|
|||
Hello,
I have not found a newer Version... |
#13
|
|||
|
|||
Quote:
Attached decoded file. |
#14
|
||||
|
||||
Sorry here is the correct link:
__________________
0z0n3 |
#15
|
|||
|
|||
Hello,
I find more Infos about Decode Ioncube 7: https://media.blackhat.com/ad-12/Saher/bh-ad-12-stealing-from-thieves-Saher-slides.pdf |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
PHP Decode | S3ri@l CoDe9x | General Discussion | 1 | 04-11-2013 14:28 |