Solved

Decompile .cfm file (ColdFusion 9)

Posted on 2010-11-27
11
2,712 Views
Last Modified: 2012-05-10
Hi there,

I need to decompile a .cfm file (ColdFusion 9) to make changes to it, but i lost my backup files and i have no way of editing my current .cfm file. Is there a way to do this?

I greatly appreciate the help.
0
Comment
Question by:ITXX
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 4
11 Comments
 
LVL 52

Expert Comment

by:_agx_
ID: 34224130
Are you talking about an encrypted file or just a regular page compiled an cached in (ie C:\ColdFusion9\wwwroot\WEB-INF\cfclasses) ?  
0
 

Author Comment

by:ITXX
ID: 34224160
The file is encrypted, i had moved my entire backup to another drive and now the drive is unreadable (i tried to undelete files but no luck).
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224247
If they're your own files, and were psuedo-encrypted with cfencode, there's unofficial versions of the decrypt algorithm floating around the net.  I've never used them. So I can't tell you if they work or not ..

http://stackoverflow.com/questions/4221494/why-cf8-encoded-cfm-file-doesnt-work-in-cf9-server
0
Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

 
LVL 52

Accepted Solution

by:
_agx_ earned 500 total points
ID: 34224252
... as stated in the link, cfencode doesn't really encrypt files. Just obfuscates.  If your files were really encrypted - by some other program- you may be out of luck.
0
 

Author Comment

by:ITXX
ID: 34224255
Ok, ill look in to that.

Thanks.
0
 

Author Closing Comment

by:ITXX
ID: 34224257
Not was i expecting, but pointed me in another direction.
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224265
And what were you expecting?

A) You never mentioned WHAT you used to "encrypt" these files. If you want a more specific answer you need to provide more details ...

B) Just for future reference, you'll find most people are suspicious when it comes to questions about decrypting anything.  I chose to give you the benefit of the doubt, that you're not doing anything illegal.  But many people wouldn't.  Some wouldn't even answer you at all
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224271
>> If you want a more specific answer you need to provide more details ...

.. and if they're your files, you should be able to tell us what was used to "encrypt" them ;-)

0
 

Author Comment

by:ITXX
ID: 34224275
It asked me to put in a comment when i graded the solution with a B, didnt think it would show here...

Anyway, the system im working on was developed by someone who basically got lost and never came back, (i had a backup, but its gone as well) now our organization has this non working system after paying thousands of dollars. The only way to fix it is to modify this particular file where i can have it point to where we need it to thats all

I guess ill have to have someone re-develop a brand new system for us if i cant have this file modified.
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224300
didnt think it would show here...

Well that certainly makes it better.   ;-)  Anyway, if you're not doing anything illegal. Then next time don't give up so easily.  Some questions are answered quickly. Others require several exchanges. But both sides need to participate.

i had a backup, but its gone as well

Not to sound unsympathetic, but that's why multiple backups are a must. But one has to make the best of the situation they're in.  Anyway, my point remains.  In order to "decrypt" anything .. you have to know what was used to encrypt it.  No way around it.  

All CF files are compiled into java byte code (ie .class files).  Those *can't* be easily reversed into plain CFML code.  But it doesn't seem like that's what you're talking about.  Aside from that, when it comes to CF code, the best guess is they were obfuscated with cfencode.   As I said, there are plenty of unofficial tools that will decrypt such a file. But since they're unofficial, and some from sources I can't verify, I won't post direct links to them.  Caveat emptor.

But again, if you don't know what was used to do the encryption,  you're stuck with basic trial and error.  It's like looking at an encrypted hex string and asking what algorithm should be used to decrypt it?  There's simply no way to tell..

0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224336
Frankly the more I look at this question, it sounds a little suspicious.  Some of your comments suggest you may be trying to decrypt code purchased from another company, not something your company wrote itself.  If that's true, most companies that sell software explicitly prohibit that.  You may want to review the terms about the legality of doing this ...
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hi, I will be creating today a basic tutorial on how we can create a Mail Custom Function and use it where ever we want. The main advantage about creating a custom function is that we can accommodate a range of arguments to pass to the Function and …
Recently while working on a project I got a very annoying cfdocument has no body error message. I had never seen this error before. So I checked the code. The code was pretty simple; it was Just showing me the cfdocumnt tag and inside that tag a …
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question