How to Build a IonCube decoder?

[malwerd10]

Hello,

I founded here full stuff with file decoding requests, i'm was not found in the "deioncube.in forum" a Tutorial to build a decoder or learning about decoding. why?

Please post or send a tutorial for more info.

[sidxx55]

also need full decoder)) and tutor like biuld decoder for 5 minutes by own hands in 1 click (free and without sms))))
p/s/ seriously (attachment)

[ultrain]

(01-29-2017 12:22 PM)sidxx55 Wrote:  also need full decoder)) and tutor like biuld decoder for 5 minutes by own hands in 1 click (free and without sms))))
p/s/ seriously (attachment)

@sidxx55
your attached file is really appreciated!!
each encoder is quite interesting.

Days ago I downloaded your early projects
does that mean, Decompiler.class is a template on "opcodes->Source"?

[linpei]

(01-29-2017 12:22 PM)sidxx55 Wrote:  also need full decoder)) and tutor like biuld decoder for 5 minutes by own hands in 1 click (free and without sms))))
p/s/ seriously (attachment)

you have all encoders techonologies, can you share to us? ：(

[sidxx55]

(02-07-2017 01:50 AM)ultrain Wrote:  does that mean, Decompiler.class is a template on "opcodes->Source"?

yes, class is for rebuild opcodes to source...

[linpei]

(02-07-2017 01:29 PM)linpei Wrote:  

(01-29-2017 12:22 PM)sidxx55 Wrote:  also need full decoder)) and tutor like biuld decoder for 5 minutes by own hands in 1 click (free and without sms))))
p/s/ seriously (attachment)

you have all encoders techonologies, can you share to us? ：(

(02-15-2017 06:40 AM)sidxx55 Wrote:  

(02-07-2017 01:50 AM)ultrain Wrote:  does that mean, Decompiler.class is a template on "opcodes->Source"?

yes, class is for rebuild opcodes to source...

Can not get the real OPCODES which it was confused, how to rebuild the opcodes to source.

[sidxx55]

(02-15-2017 12:22 PM)linpei Wrote:  Can not get the real OPCODES which it was confused, how to rebuild the opcodes to source.

real opcodes are replaced, but is encrypted
this pdf give some answers about core work.

[linpei]

(02-15-2017 12:48 PM)sidxx55 Wrote:  

(02-15-2017 12:22 PM)linpei Wrote:  Can not get the real OPCODES which it was confused, how to rebuild the opcodes to source.

real opcodes are replaced, but is encrypted
this pdf give some answers about core work.

I saw your PDF, I gained a lot of knowledge. and now I try to use IDA analysis internal zend execute() function .

[Loomy]

In addition or followup to above guide: https://www.researchgate.net/publication...ploit_Kits

[Loomy]

My suggestion to first become intimate with PHP SRC and Zend Internals, before anything else. therafter picking one of many great decoder projects here most support up to php 5.3 files (most included some sample/.test) asnd see how they its done. get LeakedDecoder SRC to get a more fulller picture. dont dive straight into latst loaders, crawl b4 u walk or u fall flat on ur face. always keep in mind that no matter good or bad u might be at this, or first results might be, there is always someone far worse, named miguel