Ever get a script that looks something like this???
split(/=/, $pair); $value =~ tr/+/ /; $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack(”C”, hex($1))/eg; $value =~ s/~!/ ~!/g; $value =~ s/(`|\*|\(|\)|\[|\])//g; $FORM{$name} = $value; $FORM{$name} = &untaint($FORM{$name}); } $FORM{’customerid’} =~ s/ //g; $delimiter = “|”; if ($stay_in_ssl) { $FORM{’MerchantApprovedURL’} =~ s/http:/https:/i; $FORM{’MerchantUnApprovedURL’} =~ s/http:/https:/i; } if ( $FORM{’mailprog’} =~ /(-server)/ ) { ($FORM{’mailprog’},@temp) = split(/ /,$FORM{’mailprog’}); $blat_server_temp = ” @temp”; } @common_sendmail_paths = (”/usr/sbin/sendmail”, “/usr/lib/sendmail”, “/usr/bin/sendmail”, “/bin/sendmail”, “/var/qmail/bin/qmail-inject”, “/usr/home/stormer/bin/sendmail”, “C:/winnt/system32/windmail.exe”, “C:/winnt/system32/blat.exe”, etc…
What a pain in the neck! It’s all one line of code and a complete pain in the ass to tweak and customize. Now with my simple Perl De-Obfuscator (decrypter) you can in seconds turn something like the above into something more pleasant and practical like this below:
read(STDIN, $buffer, $ENV{’CONTENT_LENGTH’});
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) { ($name, $value) = split(/=/, $pair);
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack(”C”, hex($1))/eg;
$value =~ s/~!/ ~!/g;
$value =~ s/(`|\*|\(|\)|\[|\])//g;
$FORM{$name} = $value;
$FORM{$name} = &untaint($FORM{$name});
} $FORM{’customerid’} =~ s/ //g;
$delimiter = “|”;
if ($stay_in_ssl) { $FORM{’MerchantApprovedURL’} =~ s/http:/https:/i;
$FORM{’MerchantUnApprovedURL’} =~ s/http:/https:/i;
} if ( $FORM{’mailprog’} =~ /(-server)/ ) { ($FORM{’mailprog’},@temp) = split(/ /,$FORM{’mailprog’});
$blat_server_temp = ” @temp”;
} @common_sendmail_paths = (”/usr/sbin/sendmail”, “/usr/lib/sendmail”, “/usr/bin/sendmail”, “/bin/sendmail”, “/var/qmail/bin/qmail-inject”, “/usr/home/stormer/bin/sendmail”, “C:/winnt/system32/windmail.exe”, “C:/winnt/system32/blat.exe”,
System Requirements
Features
- Installs in seconds
- Decrypted script works exactly the same as original only you can actually READ IT!
