AntiWPA Forum

Full Version: De-obfuscation of decoded ioncube
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi all,

How is it possible to deobfuscate the functions that are obfuscated such as:

$Dx = _obfuscate_DVdsMgM_EhYeOdsSc5GQIvCzIcPjk9QAEÿ( $iarr[file] );

Thanks,
suedoh
you maybe make the obfuscate keywords table to filte the dezended file,
just like someone hit the MD5 password by mysql. Wink

Like the following file 'config.ini' is actioned by the dezend tool 'php5.exe'.
==== Php dump help ====
USEG: [{/}|{-}command[:attributes]]
/force{/f} set to force mode
/import{/i} import class and function name[obfuscate name] from config file
/export{/e} export class and function name[obfuscate name] to config file
/obfuscate dump obfuscate name and its url encoded name
(09-04-2012 01:24 PM)flywin Wrote: [ -> ]you maybe make the obfuscate keywords table to filte the dezended file,
just like someone hit the MD5 password by mysql. Wink

Like the following file 'config.ini' is actioned by the dezend tool 'php5.exe'.
==== Php dump help ====
USEG: [{/}|{-}command[:attributes]]
/force{/f} set to force mode
/import{/i} import class and function name[obfuscate name] from config file
/export{/e} export class and function name[obfuscate name] to config file
/obfuscate dump obfuscate name and its url encoded name
I dont understand how use:
"/obfuscate dump obfuscate name and its url encoded name"

please give example of this command or explain to novice how use it! Angel
you need the passphrase to build your own lib
(11-02-2012 10:21 AM)gerard Wrote: [ -> ]you need the passphrase to build your own lib

Hi

where/how we can find passphrase ?


Best Regards,
h4sh3m
Hello FlyWin

Code:
Like the following file 'config.ini' is actioned by the dezend tool 'php5.exe'.
==== Php dump help ====
USEG: [{/}|{-}command[:attributes]]
/force{/f} set to force mode
/import{/i} import class and function name[obfuscate name] from config file
/export{/e} export class and function name[obfuscate name] to config file
/obfuscate dump obfuscate name and its url encoded name

i understand the concept but could you make an exemple of the command because this is not clear for me

i know this is for create a obfuscated dictionnnary but i would love to understand the way to use it

can you explain how to construct library
i have 75 k deobfuscated name & i would like to create more

thx you very much
Reference URL's