Decompiling plugin

[jocasrb]

Hi guys. Im sorry if this is wrong thread, but i could not find better to fit.

Is it possible with ANY decompiler to get what is stored in some 'include <somefile>" file?
I would like to protect a plugin, so storing a password (string) into <somefile.inc> should do the job...or?

 

[fl0wer]

storing a password (string) into <somefile.inc>

lol

 

[jocasrb]

Whats lol, if i would like to use one sql database for multipe clients? Hmm

 

[fl0wer]

Protect amxx plugin is not possible

 

[fantom]

jocasrb, create rest api for all clients and give unique token. Use grip or curl module for quering api. Thats all what you need. It's no possible to protect include. Also you can create read only access user in database, but IMHO this is wrong way.

 

[jocasrb]

jocasrb, create rest api for all clients and give unique token. Use grip or curl module for quering api. Thats all what you need. It's no possible to protect include. Also you can create read only access user in database, but IMHO this is wrong way.

Thanks for trying to help! Well, im trying my best, but your second sentence i cant do nothing (probably also for first one)
I was thinking of giving several privileges (safe like ) to that user in db, with maybe also white+black list...

fl0wer well for professionals it is not possible to secure it for sure, but i dont see anything bad with trying to make it (really) hard to others :)
with interesting way of masking strings, i could send the .amxx to anyone if he want to try to decompile it (PM better only i think)

 

[fantom]

well for professionals it is not possible to secure it for sure, but i dont see anything bad with trying to make it (really) hard to others :)
with interesting way of masking strings, i could send the .amxx to anyone if he want to try to decompile it (PM better only i think)

You need to put raw password to sqlx module, and all what do you do doesn't make sense. But you can for sqlx module, and compile it with hardcoded credentials.

 

[jocasrb]

I quit include idea, so i will stick with my first idea of making weird calculations (i can do more ofc if the idea is not so stupid :D), like how will decompile retrieve these chars of the string:

string_password[ 0x10 + 0x02 + 0x01 - 0x11 - 0x01 ] = 0x70
string_password[ ( 0xA2 + 0x0 ) * ( 0xfcc / 0x7e4 ) - 0x144 ] = 0x30

 

[fl0wer]

as ready results

 

[jocasrb]

fl0wer is that 100% true, if we count we can block amxxdump, lysis, uncompress (and one more, something by spanish scripter)? Plus on that adding -d0 into amxxstudio's settings...

 

[fl0wer]

jocasrb, and why? Amxx plugins like a holes.

 

[jocasrb]

ok i saw all my math of char goes all in the junk, ty to a friend

0x12C                     BREAK              ; amx_test_string.sma:15
0x130                  ADDR.pri  0xFFFFFFEC  ; Msg[5]
0x138                     ADD.C  0xC         ; signed:  12
0x140                  MOVE.alt
0x144                 CONST.pri  0x72      
0x14C                    STOR.I
0x150                     BREAK              ; amx_test_string.sma:16
0x154                  ADDR.alt  0xFFFFFFEC
0x15C                 CONST.pri  0x30      
0x164                    STOR.I
0x168                     STACK  0x14        ; free 5 cells
0x170                  ZERO.pri
0x174                      RETN

point is, to offer a two types of plugin, first is like a 'test'...less cash but amxx + mysql + php...second is more money = .sma + direct access to mysql + php

 

[fl0wer]

And everything of this in 2019? Nice