| View previous topic :: View next topic |
| Author |
Message |
ZEXEL Halfop

Joined: 27 Jun 2006 Posts: 45
|
Posted: Thu May 03, 2007 11:36 am Post subject: wooww... |
|
|
Ups! I've been read all source code about NETGATE 9.5. It's seem using strong encryption from TCL Pro 4.1! No one can decrypted it yet...
Nice work using TCL Pro 4.1  _________________ .:[ Knowledge Is The Power ]:. |
|
| Back to top |
|
 |
user

Joined: 18 Mar 2003 Posts: 1452 Location: Norway
|
Posted: Thu May 03, 2007 4:51 pm Post subject: Re: wooww... |
|
|
| ZEXEL wrote: | Ups! I've been read all source code about NETGATE 9.5. It's seem using strong encryption from TCL Pro 4.1! No one can decrypted it yet...  |
Tclpro's bytecode compilation is not encryption and you are not from Sweden. (you and KONTOL are probably the same person and you're both posting from indonesia)
You (aka odon) seem to have missed the feature that will optimize procs and omit the plain text version of their bodies, so reading your code requires nothing more than decoding the ascii85 encoded string (or loading the script and dumping what's in the interpreter. (loading the script should be done in a sandboxed environment))
Converting the bytecode (if you come by a script encoded by someone with a bit more clue than yourself) to readable code is not hard... Check: http://groups.google.com/group/comp.lang.tcl/msg/1204437fb12839e1
And generating plain Tcl code is also possible (but there are no public tools to do it - for obvious reasons )
Oh and for the record: The script still has its BACKDOORS and EXPLOITABLE BUGS and the code still sucks, so stay away from this piece of crap script unless you want to give away your bots/shells/boxes. _________________ Have you ever read "The Manual"? |
|
| Back to top |
|
 |
Sir_Fz Revered One

Joined: 27 Apr 2003 Posts: 3793 Location: Lebanon
|
Posted: Thu May 03, 2007 6:20 pm Post subject: Re: wooww... |
|
|
| user wrote: | | Tclpro's bytecode compilation is not encryption and you are not from Sweden. (you and KONTOL are probably the same person and you're both posting from indonesia) |
LOL good observation there; they(?) can't get any lamer  _________________ Follow me on GitHub
- Opposing
Public Tcl scripts |
|
| Back to top |
|
 |
Alchera Revered One

Joined: 11 Aug 2003 Posts: 3344 Location: Ballarat Victoria, Australia
|
Posted: Thu May 03, 2007 7:16 pm Post subject: |
|
|
No one can say they're not a persistent lot (probably a hang over from the Dutch colonial days).  _________________ Add [SOLVED] to the thread title if your issue has been.
Search | FAQ | RTM |
|
| Back to top |
|
 |
ZEXEL Halfop

Joined: 27 Jun 2006 Posts: 45
|
Posted: Fri May 04, 2007 1:31 pm Post subject: Re: wooww... |
|
|
| user wrote: | | Tclpro's bytecode compilation is not encryption and you are not from Sweden. (you and KONTOL are probably the same person and you're both posting from indonesia) |
Thx you for information & I appriciated all of it's! Just for you know, many cybercafe in Indonesia that use same connection gateway to Internet & I'm use SPEEDY ISP connection that have a little IP for public. That was "missunderstanding" about me KONTOL and odon! Maybe me and KONTOL connected in same IP coz we use SPEEDY ISP connection especially for cybercafe that we use but we don't same person like you thinking.  _________________ .:[ Knowledge Is The Power ]:.
Last edited by ZEXEL on Fri May 04, 2007 1:37 pm; edited 1 time in total |
|
| Back to top |
|
 |
ZEXEL Halfop

Joined: 27 Jun 2006 Posts: 45
|
Posted: Fri May 04, 2007 1:35 pm Post subject: |
|
|
| Alchera wrote: | No one can say they're not a persistent lot (probably a hang over from the Dutch colonial days).  |
behave sir...  _________________ .:[ Knowledge Is The Power ]:. |
|
| Back to top |
|
 |
Alchera Revered One

Joined: 11 Aug 2003 Posts: 3344 Location: Ballarat Victoria, Australia
|
Posted: Fri May 04, 2007 11:37 pm Post subject: |
|
|
A point of interest: Their forum post has been removed.
I guess they realised we weren't that clueless (again) after all.  _________________ Add [SOLVED] to the thread title if your issue has been.
Search | FAQ | RTM |
|
| Back to top |
|
 |
|