Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
How to lose your hair & mind with Ioncube..
08-14-2017, 10:02 AM (This post was last modified: 08-14-2017 10:04 AM by Loomy.)
Post: #4
RE: How to lose your hair & mind with Ioncube..
(08-10-2017 03:34 AM)ggyy1919 Wrote:  I think you need disassembler or debugger to patch loaders, instead of trying to hook opcode via php module.

Have tried tying fat bait to Hook, but ioncube just wont bite Tongue
.
For me though the challenge & fun is trying to achieve through static analysis alone, without loader (or effectively replacing via php/c#)challenges vary, one that keeps cropping up is poor handling of near max value signed int32 by php itself - can skew results, in these cases just switch to c#, and severe lack of debugging skill. Only so far you can go with mashing buttons in IDA. still makes for great learning.

IMO challenge not so much opcodes retrieval. There is a craptonne of things going on within the loader, before it even gets to execution stage, IC has its own internal executor with many many little annoying changes to their structure & handling, optimizing out some, in the end , even for someone well familiar with zend internals can be frustrating.
Find all posts by this user
Quote this message in a reply
Post Reply 


Messages In This Thread
RE: How to lose your hair & mind with Ioncube.. - Loomy - 08-14-2017 10:02 AM

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us | Homepage | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication