Perl2Exe 1.0 9/5.0 2/6.0 – Code Obfuscation

20次阅读
没有评论

Perl2Exe 1.0 9/5.0 2/6.0 – Code Obfuscation

漏洞ID 1053566 漏洞类型
发布时间 2002-02-22 更新时间 2002-02-22
Perl2Exe 1.0 9/5.0 2/6.0 - Code ObfuscationCVE编号 N/A
Perl2Exe 1.0 9/5.0 2/6.0 - Code ObfuscationCNNVD-ID N/A
漏洞平台 Multiple CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/22272
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/6909/info

Perl2Exe obfuscates Perl source code using a reversible algorithm when converting it to an executable format. This occurs when the "encrypt" option is selected. Those who use Perl2Exe with the expectation that the source code will be concealed from the end user may have a false sense of security as a result. 

#!/usr/bin/perl

$known_plain = `cat sample.pl`;
$known_cipher_file = "sample";
$sizeline = `tail -c +811048 $known_cipher_file | strings | grep
NAME=_main.pl`;
@line = split /;/, $sizeline;
@size = split /=/, $line[1];
$known_cipher = `tail -c +811048 $known_cipher_file | head -c $size[1]`;
$key = $known_cipher ^ $known_plain;

$unknown_cipher = `tail -c +811048 perl2exe | head -c $size[1]`;

$unknown_plain = $unknown_cipher ^ $key;
print $unknown_plain, "n";

相关推荐: IRIX Performance Co-Pilot Remote Denial of Service Vulnerability

IRIX Performance Co-Pilot Remote Denial of Service Vulnerability 漏洞ID 1104261 漏洞类型 Failure to Handle Exceptional Conditions 发布时间 2…

正文完
 0