Bitcoin Forum

Economy => Services => Topic started by: TheBrute on March 09, 2016, 12:18:18 PM



Title: Decode this url For 5$ in BTC
Post by: TheBrute on March 09, 2016, 12:18:18 PM
Hello, I'm total noob in this and
i want to know what type of Encryption patterns is  used in encoding this url's !
whoever finish this i will send him 5$ via paypal or bitcoin !

Example url's : http://10.100.0.1/newusrmanagement.php?url=WGNBL3hlcFdNYkF4MC8vdnpiSHFLUFlQbWJrVzNJbm1OWkk1QmtHWW10MD0=
i want to know what is :-WGNBL3hlcFdNYkF4MC8vdnpiSHFLUFlQbWJrVzNJbm1OWkk1QmtHWW10MD0=
some more
http://10.100.0.1/showicon.php?url=ektzREhTQmpzVGorM2w0R2ZzRC9mbTBuRVVCWHpyUm44aGJLaEpRcmRIYz0=
http://10.100.0.1/view_logs/search_all_history.php?url=VXV4cnRmc3gzTUVmYW11WUN0S2RKT3BTWmdkVVdGTzBRTjhXRkEyRHl1OD0=


Title: Re: Decode this url For 1$ in BTC
Post by: rollin-sat on March 09, 2016, 12:19:58 PM
Hello, I'm total noob in this and
i want to know what type of Encryption patterns is  used in encoding this url's !
whoever finish this i will send him 1$ via paypal or bitcoin !

Example url's : http://10.100.0.1/newusrmanagement.php?url=WGNBL3hlcFdNYkF4MC8vdnpiSHFLUFlQbWJrVzNJbm1OWkk1QmtHWW10MD0=
i want to know what is :-WGNBL3hlcFdNYkF4MC8vdnpiSHFLUFlQbWJrVzNJbm1OWkk1QmtHWW10MD0=
some more
http://10.100.0.1/showicon.php?url=ektzREhTQmpzVGorM2w0R2ZzRC9mbTBuRVVCWHpyUm44aGJLaEpRcmRIYz0=
http://10.100.0.1/view_logs/search_all_history.php?url=VXV4cnRmc3gzTUVmYW11WUN0S2RKT3BTWmdkVVdGTzBRTjhXRkEyRHl1OD0=

it's safe open these links?!  ???


Title: Re: Decode this url For 1$ in BTC
Post by: TheBrute on March 09, 2016, 12:20:44 PM
Hello, I'm total noob in this and
i want to know what type of Encryption patterns is  used in encoding this url's !
whoever finish this i will send him 1$ via paypal or bitcoin !

Example url's : http://10.100.0.1/newusrmanagement.php?url=WGNBL3hlcFdNYkF4MC8vdnpiSHFLUFlQbWJrVzNJbm1OWkk1QmtHWW10MD0=
i want to know what is :-WGNBL3hlcFdNYkF4MC8vdnpiSHFLUFlQbWJrVzNJbm1OWkk1QmtHWW10MD0=
some more
http://10.100.0.1/showicon.php?url=ektzREhTQmpzVGorM2w0R2ZzRC9mbTBuRVVCWHpyUm44aGJLaEpRcmRIYz0=
http://10.100.0.1/view_logs/search_all_history.php?url=VXV4cnRmc3gzTUVmYW11WUN0S2RKT3BTWmdkVVdGTzBRTjhXRkEyRHl1OD0=

it's safe open these links?!  ???
you can't open that links ! it's from my local ISp's address


Title: Re: Decode this url For 1$ in BTC
Post by: minifrij on March 09, 2016, 02:55:19 PM
The strings look somewhat similar to something encrypted, perhaps using PHP's mcrypt (http://php.net/manual/en/function.mcrypt-encrypt.php) library with a 16 bit key.
If this is the case, the chances of you decrypting these messages is very small, due to you having to find the key. Due to the length of this key (16 bits), the chances of you brute-forcing this key is very low/impossible.


Title: Re: Decode this url For 1$ in BTC
Post by: TheBrute on March 09, 2016, 07:10:19 PM
The strings look somewhat similar to something encrypted, perhaps using PHP's mcrypt (http://php.net/manual/en/function.mcrypt-encrypt.php) library with a 16 bit key.
If this is the case, the chances of you decrypting these messages is very small, due to you having to find the key. Due to the length of this key (16 bits), the chances of you brute-forcing this key is very low/impossible.
i can provide you Source code of Site & all Javascripts maybe that can be useful?
and  they are very shitty coder's i think it's some simple url encoding encryption base64 & some others but i'm noob :( !


Title: Re: Decode this url For 1$ in BTC
Post by: minifrij on March 09, 2016, 07:22:47 PM
i can provide you Source code of Site & all Javascripts maybe that can be useful?
It's likely just going to be in the PHP files of the site; I doubt Javascript is used any of this. I could try to have a look, though I am no expert on hashing and encryption.

and  they are very shitty coder's i think it's some simple url encoding encryption base64 & some others but i'm noob :( !
Base64 is used to allow the encrypted message to be output as a string. It's needed if using the mcrypt library.


Title: Re: Decode this url For 1$ in BTC
Post by: lucasjkr on March 10, 2016, 04:42:30 PM
It's encrypted. No way for any of us to know - the urls referenced could indeed be decoded to valid URL's, or they could decode to ID's or keys for the server to look up from its database. So, unless the developer sucks, we really oughtn't be able to find out.

Maybe you could visit a couple, so that we can see what the decoded text is, and try to determine if it's something thats' encoded or being looked up.


Title: Re: Decode this url For 1$ in BTC
Post by: JustDie on March 10, 2016, 06:18:32 PM

you can't open that links ! it's from my local ISp's address

we got this

they could decode to ID's or keys for the server to look up from its database.


@OP if you want to know it just hack your ISP database  :P


Title: Re: Decode this url For 1$ in BTC
Post by: JustDie on March 10, 2016, 06:24:58 PM
i can provide you Source code of Site & all Javascripts maybe that can be useful?
It's likely just going to be in the PHP files of the site; I doubt Javascript is used any of this. I could try to have a look, though I am no expert on hashing and encryption.

and  they are very shitty coder's i think it's some simple url encoding encryption base64 & some others but i'm noob :( !
Base64 is used to allow the encrypted message to be output as a string. It's needed if using the mcrypt library.


IMO Its not going to be in the php files. also i cant hashing it with any hash i know


Title: Re: Decode this url For 1$ in BTC
Post by: minifrij on March 10, 2016, 06:42:17 PM
IMO Its not going to be in the php files.
Why wouldn't it be? If it's encrypted using PHP mcrypt_decrypt() could be used, and if it's in the database a query could be created to fetch the string back.


Title: Re: Decode this url For 1$ in BTC
Post by: TheBrute on March 11, 2016, 09:02:25 AM
IMO Its not going to be in the php files.
Why wouldn't it be? If it's encrypted using PHP mcrypt_decrypt() could be used, and if it's in the database a query could be created to fetch the string back.
i have uploaded a php shell their on one server which use same software so i can access their File Manager i  can provide you all files from www/html folders !


Title: Re: Decode this url For 1$ in BTC
Post by: TheBrute on March 11, 2016, 09:10:13 AM
Price updated to 5$ and you can use my PC with TeamViewer too if needed !  :)


Title: Re: Decode this url For 5$ in BTC
Post by: TheBrute on March 11, 2016, 10:22:29 AM
menu_id=86&getuserid=950 This is encoded in this  aGlVVXhraFlUQkdzbHpvSnVXUUVqMXhtRjdGcGI1VXdIaHFRSDNTajlnRT0=
 :)


Title: Re: Decode this url For 5$ in BTC
Post by: adaryian on March 11, 2016, 10:32:35 AM
menu_id=86&getuserid=950 This is encoded in this  aGlVVXhraFlUQkdzbHpvSnVXUUVqMXhtRjdGcGI1VXdIaHFRSDNTajlnRT0=
 :)

Well, here's my two cents on the subject.   It looks like part of this link "getuserid=950" would probably link to a MySQL database, and is definitely hashed and probably salted. 

This is an internal IP address, so I will assume you're using this for testing purposes, in which case, maybe you could look here for some guidance.

https://www.exploit-db.com/docs/Cracking_Salted_Hashes.pdf

Good luck! :)


Title: Re: Decode this url For 5$ in BTC
Post by: TheBrute on March 11, 2016, 03:36:48 PM
menu_id=86&getuserid=950 This is encoded in this  aGlVVXhraFlUQkdzbHpvSnVXUUVqMXhtRjdGcGI1VXdIaHFRSDNTajlnRT0=
 :)

Well, here's my two cents on the subject.   It looks like part of this link "getuserid=950" would probably link to a MySQL database, and is definitely hashed and probably salted. 

This is an internal IP address, so I will assume you're using this for testing purposes, in which case, maybe you could look here for some guidance.

https://www.exploit-db.com/docs/Cracking_Salted_Hashes.pdf

Good luck! :)
No i'm not doing this for learning !
and i'm not onto web programming etc.
i still need this anyone can do it ?


Title: Re: Decode this url For 5$ in BTC
Post by: minifrij on March 11, 2016, 04:35:22 PM
No i'm not doing this for learning !
and i'm not onto web programming etc.
i still need this anyone can do it ?
I can try to give it a look if you can provide the Source code.