sa arkadaşlar scriptin şifrelediği şifreyi çözme

sqolastik1

Katılımcı Üye
22 Nis 2013
325
0
z+8VAlUCKhI=
arkadaşlar bu şekilde elimde şifrelenmiş bi şifre var

function encrypt( $pure_string )
{
$iv_size = mcrypt_get_iv_size( MCRYPT_BLOWFISH, MCRYPT_MODE_ECB );
$iv = mcrypt_create_iv( $iv_size, MCRYPT_RAND );
$encrypted_string = mcrypt_encrypt( MCRYPT_BLOWFISH, ENCRYPTION_KEY, utf8_encode( $pure_string ), MCRYPT_MODE_ECB, $iv );
return base64_encode( $encrypted_string );

bu şekilde blowfish ile şifreliyor bunu nasıl çözebilirim yardımcı olurmusunuz
<?php
// Facebook Multi Page/Group Poster v2.2
// Created by Novartis (Safwan)

if ( count( get_included_files() ) == 1 )
die();

$config = array();
$config[ 'fileUpload' ] = true; // optional, Leave as is.
$adminOptions = array();
$successImg = "<img class=bottom src=\"img/check.png\" />";
$failImg = "<img class=bottom src=\"img/error.png\" />";
$warnImg = "<img class=bottom src=\"img/warning.png\" />";
$hardDemo = false;

// Function Definitions
function showHTML( $message, $heading = "", $title = "", $footer = "", $endExec = true )
{
global $loggedIn, $adminloggedIn, $adminOptions, $lang, $warn;
if ( empty( $adminOptions ) ) { //Need to set default options for initial install, as readSettings is not executed yet
$adminOptions[ 'theme' ] = 'modern';
$lang['Script Title'] = 'Facebook Multi Page/Group Poster';
$adminOptions[ 'scriptFooter' ] = '';
$lang['Usage Help'] = 'Usage Help';
$lang['Home'] = 'Home';
$adminOptions[ 'scriptLogo' ] = 'img/logo.png';
$adminOptions[ 'modernMBGC' ] = '#FFFFFF';
$adminOptions[ 'modernCBGC' ] = '#FFFFFF';
$adminOptions[ 'modernHBGC' ] = '#081E42';
$lang['DIR'] = 'LTR';
$adminOptions[ 'lang' ] = 'en';
}
if ( $heading == "" ) $heading = $lang['Heading'];
if ( $title == "" ) $title = $lang['Script Title'];
if ( $footer == "" ) $footer = $adminOptions[ 'scriptFooter' ];
$footer .= " | FBMPGP v.2.2";
$langs = glob( "lang/*.php" );
foreach ( $langs as $file ) {
$filename = substr( $file, 5, -9 );
if ( ( isset( $_COOKIE[ 'FBMPGPLang' ] ) && $_COOKIE[ 'FBMPGPLang' ] == $filename ) || ( !isset( $_COOKIE[ 'FBMPGPLang' ] ) && ( $adminOptions[ 'lang' ] == $filename ) ) )
$footer .= " | " . strtoupper( $filename );
else
$footer .= " | <a class=noul href='?lang=" . $filename . "'>" . strtoupper( $filename ) . "</a>";
}
$footer .= " |";
if ( $loggedIn ) {
$menu = '<li><a href="?logout">' . $lang['Logout'] . '</a></li>
<li><a href="?usershowhelp">' . $lang['Usage Help'] . '</a></li>';
if ( $adminOptions[ 'useCron' ] )
$menu .= '<li><a href="?crons">' . $lang['My Crons'] . '</a></li>';
$menu .= '<li><a href="?ucp">' . $lang['User CP'] . '</a></li>
<li><a href=".">' . $lang['Home'] . '</a></li>';
} elseif ( $adminloggedIn ) {
$menu = '<li><a href="?logout">' . $lang['Logout'] . '</a></li>';
if ( $adminOptions[ 'useCron' ] )
$menu .= '<li><a href="?crons">' . $lang['View Crons'] . '</a></li>';
$menu .= '<li><a href="?users">' . $lang['Users List'] . '</a></li>
<li><a href=".">' . $lang['Admin Panel'] . '</a></li>';
} else {
$menu = '<li><a href="?showhelp">' . $lang['Usage Help'] . '</a></li>
<li><a href=".">' . $lang['Home'] . '</a></li>';
}
$template = sanitizeOutput( file_get_contents( 'themes/' . $adminOptions[ 'theme' ] . '.html' ) );
if ( $adminOptions[ 'theme' ] != 'fbmpgp' )
$head = "*********
body, .nojqui { background-color: " . $adminOptions[ 'modernMBGC' ] . " !important; }
.main { background-color: " . $adminOptions[ 'modernCBGC' ] . " !important; }
.container-full { background-color: " . $adminOptions[ 'modernHBGC' ] . " !important; }
.ui-state-active,.ui-widget-content .ui-state-hover,ui-state-default .ui-state-hover,.ui-widget-header { background-color: " . $adminOptions[ 'modernHBGC' ] . " !important;\n background-image: none; !important;\n opacity: 1 !important; }
.ui-state-default, .ui-widget-content .ui-state-default, .ui-widget-header .ui-state-default { background-image: none !important;\n background-color: " . $adminOptions[ 'modernHBGC' ] . " !important;\n opacity: 0.7;\n color: white; }
</style>";
else
$head = "";
if ( $lang['DIR'] == 'RTL' )
$head .= "*********body { direction: rtl !important; } .list-inline { direction: ltr !important; } a.visit {float: left !important; }</style>";
if ( isset( $warn ) ) {
$footer .= "**********$.notify('Error: $warn', {globalPosition: 'bottom right', className: 'error'});</script>";
}
if ( isset( $_GET[ 'notify' ] ) )
$footer .= "**********$.notify('" . $_GET[ 'notify' ] . "', {globalPosition: 'top right', className: 'notify'});</script>";
$template = str_replace( array(
"%%title%%",
"%%head%%",
"%%logo%%",
"%%menu%%",
"%%h1%%",
"%%p%%",
"%%footer%%"
), array(
$title,
$head,
$adminOptions[ 'scriptLogo' ],
$menu,
$heading,
$message,
$footer
), $template );
echo $template;
if ( $endExec ) {
die( 0 );
}
}

function showLogin()
{
global $config, $warn, $step, $adminOptions, $lang;
showHTML( include_once( 'includes/login.php' ), $lang['Please Login Register'] );
}

function showHelp()
{
global $adminOptions, $lang;
if ( isset( $_COOKIE[ 'FBMPGPLang' ] ) && file_exists( 'lang/' . $_COOKIE[ 'FBMPGPLang' ] . '-help.html' ) )
showHTML( file_get_contents( 'lang/' . $_COOKIE[ 'FBMPGPLang' ] . '-help.html' ), $lang['Using'] . " " . $lang['Heading'] );
else
showHTML( file_get_contents( 'lang/' . $adminOptions[ 'lang' ] . '-help.html' ), $lang['Using'] . " " . $lang['Heading'] );
}

function checkLogin( $user, $hashed_pass, $uid = 0 )
{
global $dbName, $adminloggedIn, $loggedIn, $cookie, $warn, $step, $failImg, $lang;
global $tempData, $userName, $fullname, $password, $userId, $userToken, $pageData, $groupData, $userOptions, $userIds;
global $fb, $hardDemo;
if ( $db = new PDO( 'sqlite:' . $dbName . '-settings.db' ) ) { //Is admin Login?
$statement = $db->prepare( "SELECT * FROM Settings" );
if ( $statement ) {
$statement->execute();
} else {
showHTML( "$failImg Error while checking login/cookie information. Settings Database opened OK but statement execution failed." );
}
$tempData = $statement->fetchAll();
if ( ( strcasecmp( $user, $tempData[ 0 ][ 'admin' ] ) == 0 ) && ( $hashed_pass === md5( decrypt( $tempData[ 0 ][ 'adminpass' ] ) ) ) ) {
$adminloggedIn = true;
$cookie = base64_encode( "$user:" . $hashed_pass );
setcookie( 'FBMPGPLogin', $cookie );
if ( isset( $_GET[ 'logs' ] ) ) {
showLogs();
} elseif ( isset( $_GET[ 'rg' ] ) && !$hardDemo ) { //This ******* is used for Admin Token Install
authRedirect();
} elseif ( isset( $_GET[ 'users' ] ) ) {
require_once( 'includes/showusers.php' );
} elseif ( isset( $_GET[ 'crons' ] ) ) {
require_once( 'includes/showcrons.php' );
} elseif ( isset( $_GET[ 'clogs' ] ) ) {
if ( file_exists( $dbName . '-logs.db' ) )
unlink( $dbName . '-logs.db' );
header( "********: ./?logs" );
exit;
} else {
showHTML( include_once( 'includes/admin.php' ), $lang['Admin Panel'] );
}
}
} else {
showHTML( "$failImg Failed to open settings database while checking login information. Exiting..." );
}
if ( $db = new PDO( 'sqlite:' . $dbName . '-users.db' ) ) {
$statement = $db->prepare( "SELECT COUNT(*) FROM FB WHERE username = \"$user\"" );
if ( $statement ) {
$statement->execute();
} else {
showHTML( "$failImg Error while checking login/cookie information. Users Database opened OK but statement execution failed." );
}
if ( $statement->fetchColumn() > 0 ) {
if ( $uid ) {
$statement = $db->prepare( "SELECT * FROM FB WHERE username = \"$user\" AND userid = \"$uid\"" );
} else {
$statement = $db->prepare( "SELECT * FROM FB WHERE username = \"$user\"" );
}
if ( $statement ) {
$statement->execute();
} else {
showHTML( "$failImg Users Database query failed while checking login information" );
}
$tempData = $statement->fetchAll();
if ( !$tempData ) {
$warn = $lang['User does not exist'];
showLogin();
}
$userName = $tempData[ 0 ][ 'username' ];
$password = decrypt( $tempData[ 0 ][ 'password' ] );
$userToken = $tempData[ 0 ][ 'usertoken' ];
$fullname = $tempData[ 0 ][ 'fullname' ];
$pageData = $tempData[ 0 ][ 'pagedata' ];
$groupData = $tempData[ 0 ][ 'groupdata' ];
$userId = $tempData[ 0 ][ 'userid' ];
$userOptions = readOptions( $tempData[ 0 ][ 'useroptions' ] );
$userOptions = checkUserOptions( $userOptions );
$userOptions[ 'lastActive' ] = time();
saveUserOptions();
if ( $uid ) {
$statement = $db->prepare( "SELECT * FROM FB WHERE username = \"$user\"" );
if ( $statement ) {
$statement->execute();
} else {
showHTML( "$failImg Users Database query failed while checking id information" );
}
$tempData = $statement->fetchAll();
}
foreach ( $tempData as $s )
$userIds[ $s[ 'fullname' ] ] = $s[ 'userid' ];
}
} else {
showHTML( "$failImg Failed to open users database while checking login information. Exiting..." );
}
if ( ( strcasecmp( $user, $userName ) != 0 ) || ( $hashed_pass != md5( $password ) ) ) {
if ( isset( $_POST[ 'un' ] ) )
$warn = $lang['Incorrect login info'];
showLogin();
}
$cookie = base64_encode( "$userName:" . md5( $password ) );
$loggedIn = true;
}

function readSettings()
{
global $dbName, $config, $adminOptions, $failImg;
if ( $db = new PDO( 'sqlite:' . $dbName . '-settings.db' ) ) {
$statement = $db->prepare( "SELECT * FROM Settings" );
if ( $statement ) {
$statement->execute();
} else {
showHTML( "$failImg Settings reading failed!" );
}
$tempData = $statement->fetchAll();
$config[ 'appId' ] = $tempData[ 0 ][ 'appid' ];
$config[ 'secret' ] = $tempData[ 0 ][ 'secret' ];
$adminOptions = readOptions( $tempData[ 0 ][ 'adminoptions' ] );
if ( !isset( $adminOptions[ 'language' ] ) )
$adminOptions[ 'language' ] = 'en';
if ( !isset( $adminOptions[ 'enableDemo' ] ) )
$adminOptions[ 'enableDemo' ] = 0;
if ( !isset( $adminOptions[ 'enableNUR' ] ) )
$adminOptions[ 'enableNUR' ] = 1;
if ( !isset( $adminOptions[ 'enableARA' ] ) )
$adminOptions[ 'enableARA' ] = 1;
if ( !isset( $adminOptions[ 'minimumDelay' ] ) )
$adminOptions[ 'minimumDelay' ] = 1;
if ( !isset( $adminOptions[ 'defaultDelay' ] ) )
$adminOptions[ 'defaultDelay' ] = 5;
if ( !isset( $adminOptions[ 'adminTimeZone' ] ) )
$adminOptions[ 'adminTimeZone' ] = 'Asia/Karachi';
if ( !isset( $adminOptions[ 'adminTimeZoneId' ] ) )
$adminOptions[ 'adminTimeZoneId' ] = 243;
if ( !isset( $adminOptions[ 'useCron' ] ) )
$adminOptions[ 'useCron' ] = 0;
if ( !isset( $adminOptions[ 'lang' ] ) )
$adminOptions[ 'lang' ] = 'en';
if ( !isset( $adminOptions[ 'theme' ] ) )
$adminOptions[ 'theme' ] = 'modern';
if ( !isset( $adminOptions[ 'scriptTitle' ] ) )
$adminOptions[ 'scriptTitle' ] = '';
if ( !isset( $adminOptions[ 'scriptHeading' ] ) )
$adminOptions[ 'scriptHeading' ] = '';
if ( !isset( $adminOptions[ 'scriptFooter' ] ) )
$adminOptions[ 'scriptFooter' ] = '';
else
$adminOptions[ 'scriptFooter' ] = urldecode( $adminOptions[ 'scriptFooter' ] );
if ( !isset( $adminOptions[ 'scriptLogo' ] ) )
$adminOptions[ 'scriptLogo' ] = 'img/logo.png';
else
$adminOptions[ 'scriptLogo' ] = urldecode( $adminOptions[ 'scriptLogo' ] );
if ( !isset( $adminOptions[ 'modernMBGC' ] ) )
$adminOptions[ 'modernMBGC' ] = '#FFFFFF';
if ( !isset( $adminOptions[ 'modernCBGC' ] ) )
$adminOptions[ 'modernCBGC' ] = '#FFFFFF';
if ( !isset( $adminOptions[ 'modernHBGC' ] ) )
$adminOptions[ 'modernHBGC' ] = '#081E42';
date_default_timezone_set( $adminOptions[ 'adminTimeZone' ] );
$db = null;
} else {
showHTML( "$failImg Unable to open settings database. Exiting..." );
}
}

function readOptions( $opts )
{
$opts = explode( '|', $opts );
$options = array();
foreach ( $opts as $option ) {
@list( $paramName, $paramValue ) = explode( ':', $option );
if ( ( $paramName != "" ) && ( $paramValue != "" ) )
$options[ $paramName ] = $paramValue;
}
return $options;
}

function saveAdminOptions()
{
global $dbName, $adminOptions, $failImg;
if ( $db2 = new PDO( 'sqlite:' . $dbName . '-settings.db' ) ) {
$option = "";
foreach ( $adminOptions as $key => $value ) {
if ( ( $key != "" ) && ( $value != "" ) ) {
if ( $option != "" )
$option .= "|";
$option .= $key . ":" . $value;
}
}
$statement = $db2->prepare( "UPDATE Settings SET adminoptions=\"$option\" WHERE appid <> 0" );
if ( $statement )
$statement->execute();
else
showHTML( "$failImg Failed to save admin options." );
} else {
die( "$failImg Database open error while saving Admin Options." );
}
}

function saveUserOptions()
{
global $dbName, $userId, $userOptions, $failImg;
$pv = "";
foreach ( $userOptions as $pk => $ps ) {
if ( $pv != "" )
$pv .= "|";
$pv .= $pk . ":" . $ps;
}
if ( $db2 = new PDO( 'sqlite:' . $dbName . '-users.db' ) ) {
if ( is_numeric( $userId ) )
$statement = $db2->prepare( "UPDATE FB SET useroptions=\"$pv\" WHERE userid = \"$userId\"" );
else
$statement = $db2->prepare( "UPDATE FB SET useroptions=\"$pv\" WHERE username = \"$userId\"" );
if ( $statement ) {
$statement->execute();
} else {
showHTML( "$failImg Saving user options failed" );
}
} else {
die( "$failImg Database open error while saving User Options." );
}
}

function checkUserOptions( $opt )
{
if ( !isset( $opt[ 'userDisabled' ] ) )
$opt[ 'userDisabled' ] = 0;
if ( !isset( $opt[ 'signupDate' ] ) )
$opt[ 'signupDate' ] = 0;
if ( !isset( $opt[ 'lastActive' ] ) )
$opt[ 'lastActive' ] = 0;
if ( !isset( $opt[ 'disableReason' ] ) )
$opt[ 'disableReason' ] = '';
return $opt;
}

function authRedirect()
{
global $config, $userName;
$redirect = "https://www.facebook.com/v2.3/dialog/oauth?auth_type=rerequest";
$redirect .= "&client_id=" . $config[ 'appId' ];
$redirect .= "&redirect_uri=http://" . $_SERVER[ 'HTTP_HOST' ] . $_SERVER[ 'SCRIPT_NAME' ];
$redirect .= "&scope=public_profile,user_photos,user_groups,manage_pages,publish_pages,publish_actions";
if ( isset( $userName ) )
$redirect .= "&state=" . $userName . "|safInit";
else
$redirect .= "&state=adminToken";
header( "********: $redirect" );
exit;
}

function readURL( $url )
{
$ch = curl_init();
$timeout = 60; // set to zero for no timeout
curl_setopt( $ch, CURLOPT_URL, $url );
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt( $ch, CURLOPT_CONNECTTIMEOUT, $timeout );
$file_contents = curl_exec( $ch );
curl_close( $ch );
return $file_contents;
}

class Spintax
{
public function process( $text )
{
return preg_replace_callback(
'/\{(((?>[^\{\}]+)|(?R))*)\}/x',
array( $this, 'replace' ),
$text
);
}

public function replace( $text )
{
$text = $this -> process( $text[1] );
$parts = explode( '|', $text );
return $parts[ array_rand( $parts ) ];
}
}

function encrypt( $pure_string )
{
$iv_size = mcrypt_get_iv_size( MCRYPT_BLOWFISH, MCRYPT_MODE_ECB );
$iv = mcrypt_create_iv( $iv_size, MCRYPT_RAND );
$encrypted_string = mcrypt_encrypt( MCRYPT_BLOWFISH, ENCRYPTION_KEY, utf8_encode( $pure_string ), MCRYPT_MODE_ECB, $iv );
return base64_encode( $encrypted_string );
}

function decrypt( $encrypted_string )
{
$iv_size = mcrypt_get_iv_size( MCRYPT_BLOWFISH, MCRYPT_MODE_ECB );
$iv = mcrypt_create_iv( $iv_size, MCRYPT_RAND );
$decrypted_string = mcrypt_decrypt( MCRYPT_BLOWFISH, ENCRYPTION_KEY, base64_decode( $encrypted_string ), MCRYPT_MODE_ECB, $iv );
return rtrim( $decrypted_string, "\0\4" );
}

function parseYtUrl( $url )
{
/*
* Check if input string is a valid YouTube URL
* and try to extract the YouTube Video ID from it.
*/
$pattern = '#^(?:https?://)?(?:www\.)?(?:youtu\.be/|youtube\.com(?:/embed/|/v/|/watch\?v=|/watch\?.+&v=))([\w-]{11})(?:.+)?$#x';
preg_match( $pattern, $url, $matches );
return ( isset( $matches[ 1 ] ) ) ? $matches[ 1 ] : false;
}

function sanitizeOutput( $buffer )
{
$search = array(
'/\>[^\S ]+/s', // strip whitespaces after tags, except space
'/[^\S ]+\</s', // strip whitespaces before tags, except space
'/(\s)+/s' // shorten multiple whitespace sequences
);
$replace = array(
'>',
'<',
'\\1'
);
$buffer = preg_replace( $search, $replace, $buffer );
return $buffer;
}

function xssSqlClean()
{
// Function to check for SQL Injections and XSS Attacks. Will terminate execution if found
foreach ( $_REQUEST as $key => $data ) {
$data = strtolower( $data );

if ( strpos( $data, "base64_" ) !== false )
die( "Possible XSS / SQL Injection Attack" );

if ( strpos( $data, "union" ) !== false && strpos( $data, "select" ) !== false )
die( "Possible XSS / SQL Injection Attack" );
}
}
?> function.php dosyası bu
 
Üst

Turkhackteam.org internet sitesi 5651 sayılı kanun’un 2. maddesinin 1. fıkrasının m) bendi ile aynı kanunun 5. maddesi kapsamında "Yer Sağlayıcı" konumundadır. İçerikler ön onay olmaksızın tamamen kullanıcılar tarafından oluşturulmaktadır. Turkhackteam.org; Yer sağlayıcı olarak, kullanıcılar tarafından oluşturulan içeriği ya da hukuka aykırı paylaşımı kontrol etmekle ya da araştırmakla yükümlü değildir. Türkhackteam saldırı timleri Türk sitelerine hiçbir zararlı faaliyette bulunmaz. Türkhackteam üyelerinin yaptığı bireysel hack faaliyetlerinden Türkhackteam sorumlu değildir. Sitelerinize Türkhackteam ismi kullanılarak hack faaliyetinde bulunulursa, site-sunucu erişim loglarından bu faaliyeti gerçekleştiren ip adresini tespit edip diğer kanıtlarla birlikte savcılığa suç duyurusunda bulununuz.