本帖最後由 qq398275924 於 2013-07-18 09:59:12 編輯
有幾個加密檔案 比較大 傳不上來, 大家能幫忙解密下嗎。
上次看到版主用 環境類比還原,這個怎麼做呢,,誰能協助下我。
QQ398275924
回複討論(解決方案)
http://www.0419dm.com/images/compat.txt
http://www.0419dm.com/images/eykj_cn.txt
http://www.0419dm.com/images/eykj_date.txt
http://www.0419dm.com/images/getip.txt
我上傳了,這4個加密檔案。 求解
我直接執行第一個代碼, 會報錯, 不知道報錯出來的是不是完整的代碼
eval( ''?> 0) { switch ($method) { case 8: $data = gzinflate($body, $maxlength); break; default: $error = "Unknown compression method."; return false; } } $crc = sprintf("%u", crc32($data)); $crcOK = $crc == $datacrc; $lenOK = $isize == strlen($data); if (!$lenOK || !$crcOK) { $error = ( $lenOK ? \'\' : \'Length check FAILED. \') . ( $crcOK ? \'\' : \'Checksum FAILED.\'); return false; } return $data; } if (version_compare(phpversion(), "5", "<")) { function serialize_fix($v) { return str_replace(\'O:11:"phprpc_date":7:{\', \'O:11:"PHPRPC_Date":7:{\', serialize($v)); } } else { function serialize_fix($v) { return serialize($v); } } function declare_empty_class($classname) { static $callback = null; $classname = preg_replace(\'/[^a-zA-Z0-9\\_]/\', \'\', $classname); if ($callback===null) { $callback = $classname; return; } if ($callback) { call_user_func($callback, $classname); } if (!class_exists($classname)) { if (version_compare(phpversion(), "5", "<")) { eval(\'class \' . $classname . \' { }\'); } else { eval(\'\r\n class \' . $classname . \' {\r\n private function __get($name) {\r\n $vars = (array)$this;\r\n $protected_name = "\\0*\\0$name";\r\n $private_name = "\\0\'.$classname.\'\\0$name";\r\n if (array_key_exists($name, $vars)) {\r\n return $this->$name;\r\n }\r\n else if (array_key_exists($protected_name, $vars)) {\r\n return $vars[$protected_name];\r\n }\r\n else if (array_key_exists($private_name, $vars)) {\r\n return $vars[$private_name];\r\n }\r\n else {\r\n $keys = array_keys($vars);\r\n $keys = array_values(preg_grep("/^\\\\\\\\x00.*?\\\\\\\\x00".$name."$/", $keys));\r\n if (isset($keys[0])) {\r\n return $vars[$keys[0]];\r\n }\r\n else {\r\n return NULL;\r\n }\r\n }\r\n }\r\n }\'); } } } declare_empty_class(ini_get(\'unserialize_callback_func\')); ini_set(\'unserialize_callback_func\', \'declare_empty_class\'); ?>'' )
找到更簡單的方法了。
代碼裡有eval, 將eval換成 echo, 輸出第一次,
然後將內容再複製進去, 再將eval換成echo,就可以了。
我測試了前2個。正常。