Thursday, April 24, 2014 Login · Register
    Login
Username

Password


Remember Me

Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.

 

    Users Online
  • · Members on IRC: 53   
  • · Total Members: 14,566
  • · Newest Member: longhost
  •  

     

        Related Ads
     

     

     

        Top 10 Forum Posters
    UserPosts
    bluechill1411   
    madf0x1277   
    cruizrisner1057   
    Qwexotic1034   
    Null Set869   
    auditorsec603   
    Override602   
    godofcereal599   
    TurboBorland585   
    Teddy469   
     

        Affiliates




  • iExploit


  • iExploit


  • WeChall





  • Thisislegal.com

  •  

        Related Ads
     

    View Thread
         
    Security Override Hacking Challenges Advanced Challenges
    PHP Advanced Level 2
    Register FAQ Members List Today's Posts Search

    Print Thread
    07-21-2013 05:32 AM PHP Advanced Level 2
    Could someone give some suggestion for PHP advance 2 challenge?
    http://securityoverride.org/challenges/advanced/2/
    I have clear commented things and print/var_dump all variables but still have no idea to continue Sad .
     
    Offline
    07-21-2013 09:27 AM RE: PHP Advanced Level 2
    If you unobfuscated everything, see what the script does and doing what will execute phpinfo()
     
    Offline
    07-23-2013 12:38 AM RE: PHP Advanced Level 2
    Oh man... That took forever
     
    Offline
    09-20-2013 03:16 AM RE: PHP Advanced Level 2
    Hi all, i deobfuscated all the code. But at the end I am nt able to understand what does it mean '/(?!\\##\$\$\$uu)=/'
    Could anyone give me a hint?
     
    Offline
    09-20-2013 10:24 AM RE: PHP Advanced Level 2
    savillum wrote:
    Hi all, i deobfuscated all the code.


    Are you sure?
     
    Offline
    02-04-2014 02:38 PM RE: PHP Advanced Level 2
    Hello,

    I got a question about obfuscation. How does it actually work? It would be nice if I had some understanding of the process, so I will know where to look at. And yes I did some research on google, but what I only get are "free obfuscators" not really helpfull. One thing that I see comming back is something about "echoing eval" and that base64 has to do with obfuscating.

    But yeah its like being told that 1 + 1 = 2, if you dont know how the + operator works, then you will never think of the - operator.
     
    Offline
    02-04-2014 03:14 PM RE: PHP Advanced Level 2
    Well there is no real explanation what to do. Everything that make your code worse to read would count as a techniqu. As you can see he renames variables, and does some base64 decoding : base64_decode(base64_decode. He also uses some easy encryption as rot13.

    Something which he hasn't use but which maybe helps you to learn a techniqu could be http://patriciopalladino.com/blog/2012/08/09/non-alphanumeric-javascript.htmlcript.html
    Join our IRC channal! irc.evilzone.org #Evilzone #SecurityOverride

    "The quieter you become the more you are able to hear."

    "With great power comes great responsibility"
     
    Offline
    02-05-2014 12:30 AM RE: PHP Advanced Level 2
    Lot of the code is redundant. It has been complicated to make it obfuscated.

    Go line by line and try to simplify the code.
     
    Offline
    02-05-2014 05:23 AM RE: PHP Advanced Level 2
    i have simplified the code but whats netx ??
    Shock
     
    Offline
    02-07-2014 07:47 PM RE: PHP Advanced Level 2
    the challenge trik is a function in the end, all the code only turn arround all the scrip
     
    Offline
    02-08-2014 08:42 AM RE: PHP Advanced Level 2
    k3y1and wrote:
    the challenge trik is a function in the end, all the code only turn arround all the scrip


    yeah but still i couldn't figure out how to execute phpinfo();
     
    Offline
    Jump to Forum:
    Forum powered by fusionBoard