AbyssGuard 1.7.7 PHP source code de-obfuscated

Thursday, April 11. 2013

"Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website." (Direct quote from their website.)

Utilizing the results from the project is pretty straightforward, just get an existing library and start using it to check incoming IP-addresses. One of the PHP-libraries is AbyssGuard. It is distributed under GPLv3 for personal use. Being an open-source fan I naturally like to exercise my GPLv3-given right to modify and distribute modified copies of the original work.

However, in this case the author chose not to distribute the source code. WTF?! It appears that the only format he chose to distribute the project is in obfuscated code. I don't much care about PHP's eval()-function and like to configure my PHP with disable_functions=eval whenever possible, so this piece won't even run on my box.

I did the only reasonable thing an open-source loving PHP-coder would do. I de-obfuscated the code and distributed it on my site with appropriate GPLv3-required notification about it. So feel free, it is at http://opensource.hqcodeshop.com/AbyssGuard/ for you to get it.

by Jari Turkia in Programming at 20:28 | Comments (5) | Share in LinkedIn

Comments
Display comments as (Linear | Threaded)

hqcodeshop on :

Thank you so much for the de-obfuscated version of this script. I have racked my brains and torn my hair out in frustration attempting to get the obfuscated script working on my web site. Yours worked immediately. Again, much thanks!
Comment (1)

DarthGamer76 on :

Have to thank you for your time de-obfuscating this. I was having a problem because one of the functions had the same name as another one in my framework. With your code, was finally able to rename it and everything works wondefully.
Comment (1)

Amunak on :

Funnily enough, I wrote to the author yesterday, and since he wasn't really pleasant, I deobfuscated the code too (without checking if someone else did the same). Your version looks a bit better I think, but anyway - for the reference: https://gist.github.com/Amunak/6259133
Comments (2)

Jari Turkia on :

The AbyssGuard code is ok. There is nothing I need to criticize about. What bothers me is a developer who perceives open-source GPLv3 free software as something, he can control to the point he does not release the source code. Mr. Julian: Doesn't that make it closed source? I did ask that from him in an e-mail, but he refused to answer me. Quote from GNU Affero General Public License: "When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things." Again Mr. Julian: Drop the GPL-license or publish the source!
Comment (1)

Amunak on :

I see your point. But I also know that the code could have been written better. At least the core part - communication with the honeypot API should actually use bitsets in the response. And overall there could be done some simple optimizations to the code to make it run better.

I also ran some speed test on the codes and the obfuscated is like 4 times slower.
Comments (2)

Add Comment
E-Mail addresses will not be displayed and will only be used for E-Mail notifications.
Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

Submitted comments will be subject to moderation before being displayed.

Calendar

Mon Tue Wed Thu Fri Sat Sun
← Back November '24 Forward →
        1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30  

Quicksearch

Archives

Categories

RSS feeds of this Blog

Blog Administration

Open login screen

Powered by

Parts of this serendipity template are by Abdussamad Abdurrazzaq and Jari Turkia. License