Solved

Decompile .cfm file (ColdFusion 9)

Posted on 2010-11-27
11
2,621 Views
Last Modified: 2012-05-10
Hi there,

I need to decompile a .cfm file (ColdFusion 9) to make changes to it, but i lost my backup files and i have no way of editing my current .cfm file. Is there a way to do this?

I greatly appreciate the help.
0
Comment
Question by:ITXX
  • 7
  • 4
11 Comments
 
LVL 52

Expert Comment

by:_agx_
ID: 34224130
Are you talking about an encrypted file or just a regular page compiled an cached in (ie C:\ColdFusion9\wwwroot\WEB-INF\cfclasses) ?  
0
 

Author Comment

by:ITXX
ID: 34224160
The file is encrypted, i had moved my entire backup to another drive and now the drive is unreadable (i tried to undelete files but no luck).
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224247
If they're your own files, and were psuedo-encrypted with cfencode, there's unofficial versions of the decrypt algorithm floating around the net.  I've never used them. So I can't tell you if they work or not ..

http://stackoverflow.com/questions/4221494/why-cf8-encoded-cfm-file-doesnt-work-in-cf9-server
0
 
LVL 52

Accepted Solution

by:
_agx_ earned 500 total points
ID: 34224252
... as stated in the link, cfencode doesn't really encrypt files. Just obfuscates.  If your files were really encrypted - by some other program- you may be out of luck.
0
 

Author Comment

by:ITXX
ID: 34224255
Ok, ill look in to that.

Thanks.
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 

Author Closing Comment

by:ITXX
ID: 34224257
Not was i expecting, but pointed me in another direction.
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224265
And what were you expecting?

A) You never mentioned WHAT you used to "encrypt" these files. If you want a more specific answer you need to provide more details ...

B) Just for future reference, you'll find most people are suspicious when it comes to questions about decrypting anything.  I chose to give you the benefit of the doubt, that you're not doing anything illegal.  But many people wouldn't.  Some wouldn't even answer you at all
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224271
>> If you want a more specific answer you need to provide more details ...

.. and if they're your files, you should be able to tell us what was used to "encrypt" them ;-)

0
 

Author Comment

by:ITXX
ID: 34224275
It asked me to put in a comment when i graded the solution with a B, didnt think it would show here...

Anyway, the system im working on was developed by someone who basically got lost and never came back, (i had a backup, but its gone as well) now our organization has this non working system after paying thousands of dollars. The only way to fix it is to modify this particular file where i can have it point to where we need it to thats all

I guess ill have to have someone re-develop a brand new system for us if i cant have this file modified.
0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224300
didnt think it would show here...

Well that certainly makes it better.   ;-)  Anyway, if you're not doing anything illegal. Then next time don't give up so easily.  Some questions are answered quickly. Others require several exchanges. But both sides need to participate.

i had a backup, but its gone as well

Not to sound unsympathetic, but that's why multiple backups are a must. But one has to make the best of the situation they're in.  Anyway, my point remains.  In order to "decrypt" anything .. you have to know what was used to encrypt it.  No way around it.  

All CF files are compiled into java byte code (ie .class files).  Those *can't* be easily reversed into plain CFML code.  But it doesn't seem like that's what you're talking about.  Aside from that, when it comes to CF code, the best guess is they were obfuscated with cfencode.   As I said, there are plenty of unofficial tools that will decrypt such a file. But since they're unofficial, and some from sources I can't verify, I won't post direct links to them.  Caveat emptor.

But again, if you don't know what was used to do the encryption,  you're stuck with basic trial and error.  It's like looking at an encrypted hex string and asking what algorithm should be used to decrypt it?  There's simply no way to tell..

0
 
LVL 52

Expert Comment

by:_agx_
ID: 34224336
Frankly the more I look at this question, it sounds a little suspicious.  Some of your comments suggest you may be trying to decrypt code purchased from another company, not something your company wrote itself.  If that's true, most companies that sell software explicitly prohibit that.  You may want to review the terms about the legality of doing this ...
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article  is about submitting  form through  ColdFusion.Ajax.submitForm to the action page and send a response back in JSON format which later can be decoded using ColdFusion.JSON.decode. By this way you can avoid the usual page refresh for subm…
The technique is by far very Simple! How we can export the ColdFusion query results to DOC file?  Well before writing this I researched a lot in Internet but did not found a good Answer anyways!  So i thought now i should share my small snippet w…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now