Decode IonCube & SourceGuardian Safely
Budget / Salary$250–750
TypeFreelance project
LocationRemote
Posted1 hour ago
I need a practical way to perform in-depth security analysis on commercial PHP packages that arrive encrypted. The solution must lift the protection on both IonCube (versions 10–15) and SourceGuardian (versions 11–17) so I can audit the true code that eventually runs under PHP 7.1 up to PHP 8.4.
What matters to me is accuracy and completeness of the reconstructed files, not licence circumvention. A clean, offline workflow is preferred, yet I am open to a small self-hosted web utility if that makes operation simpler for you. Either way, the result must run on a Linux server where only the standard PHP and CLI toolchain are present—no dependency on commercial loaders at decode time.
Key deliverables
• A working decoder that accepts IonCube 10–15 and SourceGuardian 11–17 archives or single files and outputs readable, executable PHP.
• Simple usage instructions plus any build scripts or binaries required to reproduce the tool in my own environment.
• A short demonstration run on one sample I provide so I can confirm that functions, classes, and comments remain intact.
Acceptance criteria
1. Decoded code executes without fatal errors on PHP 7.1, 8.0, and 8.4 nightly.
2. Variable names, control structures, and docblocks are preserved well enough for manual review.
3. No external licensing checks or callbacks persist in the output.
If you already maintain a private decoder or have the reverse-engineering experience to create one quickly, let me know the approach you plan to use and any constraints I should be aware of.
What matters to me is accuracy and completeness of the reconstructed files, not licence circumvention. A clean, offline workflow is preferred, yet I am open to a small self-hosted web utility if that makes operation simpler for you. Either way, the result must run on a Linux server where only the standard PHP and CLI toolchain are present—no dependency on commercial loaders at decode time.
Key deliverables
• A working decoder that accepts IonCube 10–15 and SourceGuardian 11–17 archives or single files and outputs readable, executable PHP.
• Simple usage instructions plus any build scripts or binaries required to reproduce the tool in my own environment.
• A short demonstration run on one sample I provide so I can confirm that functions, classes, and comments remain intact.
Acceptance criteria
1. Decoded code executes without fatal errors on PHP 7.1, 8.0, and 8.4 nightly.
2. Variable names, control structures, and docblocks are preserved well enough for manual review.
3. No external licensing checks or callbacks persist in the output.
If you already maintain a private decoder or have the reverse-engineering experience to create one quickly, let me know the approach you plan to use and any constraints I should be aware of.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.