Foro de elhacker.net

Aver quien me ayuda a decodificar este index que esta en base64 pero ami parecer esta ofuscado mas de 1 vez.
 

de ante mano muchas gracias.

Nadies sabe como decodificar ?? :S

Sólo tienes ese pedazo de código? Muestralo todo!

pues si como dices esta ofuscado mas de una vez y la verdad es mucho trabajo el tratar de volverlo a texto claro, a menos de que fuera indispensable, me evitaria el cansancio xD.

Pero de todas maneras tienes que ir quitando los eval() y decodificar el codigo que esta en base64.

Como ejemplo, cambiando el eval por un echo del base64_decode, queda así:

$lll=0;eval(base64_decode("JGxsbGxsbGxsbGxsPSdiYXNlNjRfZGVjb2RlJzs="));$ll=0;eval($lllllllllll("JGxsbGxsbGxsbGw9J29yZCc7"));$llll=0;$lllll=3;eval($lllllllllll("JGw9JGxsbGxsbGxsbGxsKCRvKTs="));$lllllll=0;$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);eval($lllllllllll("JGxsbGxsbGxsbGxsbGw9J3N0cmxlbic7"));$lllllllll=16;$llllllll="";for(;$lllll<$lllllllllllll($l);){if($lllllllll==0){$llllll=($llllllllll($l[$lllll++])<<8);$llllll+=$llllllllll($l[$lllll++]);$lllllllll=16;}if($llllll&0x8000){$lll=($llllllllll($l[$lllll++])<<4);$lll+=($llllllllll($l[$lllll])>>4);if($lll){$ll=($llllllllll($l[$lllll++])&0x0f)+3;for($llll=0;$llll<$ll;$llll++)$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];$lllllll+=$ll;}else{$ll=($llllllllll($l[$lllll++])<<8);$ll+=$llllllllll($l[$lllll++])+16;for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));$lllll++;$lllllll+=$ll;}}else$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);$llllll<<=1;$lllllllll--;}eval($lllllllllll("JGxsbGxsbGxsbGxsbD0nY2hyJzs="));$lllll=0;eval($lllllllllll("JGxsbGxsbGxsbD0iPyIuJGxsbGxsbGxsbGxsbCg2Mik7"));$llllllllll="";for(;$lllll<$lllllll;){$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);}eval($lllllllllll("JGxsbGxsbGxsbC49JGxsbGxsbGxsbGwuJGxsbGxsbGxsbGxsbCg2MCkuIj8iOw=="));eval($lllllllll);
 

Igual no parece un archivo muy grande así que si dale no mas :)

Saludos.

De donde sacaste el código?

 <?php
    $lll = 0;
    # eval(base64_decode("JGxsbGxsbGxsbGxsPSdiYXNlNjRfZGVjb2RlJzs="));
    $lllllllllll='base64_decode';
    $ll = 0;
    #eval($lllllllllll("JGxsbGxsbGxsbGw9J29yZCc7"));
    $llllllllll='ord';
    $llll  = 0;
    $lllll = 3;
    #eval($lllllllllll("JGw9JGxsbGxsbGxsbGxsKCRvKTs="));
    $l=$lllllllllll($o);
    $lllllll = 0;
    $llllll  = ($llllllllll($l[1]) << 8) + $llllllllll($l[2]);
    #eval($lllllllllll("JGxsbGxsbGxsbGxsbGw9J3N0cmxlbic7"));
    $lllllllllllll='strlen';
    $lllllllll = 16;
    $llllllll  = "";
    for (; $lllll < $lllllllllllll($l);) {
        if ($lllllllll == 0) {
            $llllll = ($llllllllll($l[$lllll++]) << 8);
            $llllll += $llllllllll($l[$lllll++]);
            $lllllllll = 16;
        }
        if ($llllll & 0x8000) {
            $lll = ($llllllllll($l[$lllll++]) << 4);
            $lll += ($llllllllll($l[$lllll]) >> 4);
            if ($lll) {
                $ll = ($llllllllll($l[$lllll++]) & 0x0f) + 3;
                for ($llll = 0; $llll < $ll; $llll++)
                    $llllllll[$lllllll + $llll] = $llllllll[$lllllll - $lll + $llll];
                $lllllll += $ll;
            } else {
                $ll = ($llllllllll($l[$lllll++]) << 8);
                $ll += $llllllllll($l[$lllll++]) + 16;
                for ($llll = 0; $llll < $ll; $llllllll[$lllllll + $llll++] = $llllllllll($l[$lllll]));
                $lllll++;
                $lllllll += $ll;
            }
        } else
            $llllllll[$lllllll++] = $llllllllll($l[$lllll++]);
        $llllll <<= 1;
        $lllllllll--;
    }
    #eval($lllllllllll("JGxsbGxsbGxsbGxsbD0nY2hyJzs="));
    $llllllllllll='chr';
    $lllll = 0;
    #eval($lllllllllll("JGxsbGxsbGxsbD0iPyIuJGxsbGxsbGxsbGxsbCg2Mik7"));
    $lllllllll="?".$llllllllllll(62);
    $llllllllll = "";
    for (; $lllll < $lllllll;) {
        $llllllllll .= $llllllllllll($llllllll[$lllll++] ^ 0x07);
    }
    #eval($lllllllllll("JGxsbGxsbGxsbC49JGxsbGxsbGxsbGwuJGxsbGxsbGxsbGxsbCg2MCkuIj8iOw=="));
    $lllllllll.=$llllllllll.$llllllllllll(60)."?";
    eval($lllllllll);
?> 

Es una web de un servidor de juegos..
http://mu-meteor.com/