Can Obfuscated Php Script Be Decoded? by charliebiz(m): 11:57am On Mar 26, 2010 |
i want to know if an obfuscated php script can be decoded and how. |
Re: Can Obfuscated Php Script Be Decoded? by lojik(m): 2:28am On Apr 04, 2010 |
YES! 99% of php obfuscators use eval() function to run the original code one page at a time. To decode the obfuscated script, look for the eval() function on that same page and replace it with echo. it spews out the real code like a baby. If u need an obfuscator, check d free obfuscator i have on my site http://www.afrisoft.org . its called phplocker and i'm presently creating a more secure version that will be available for free in a week. @poster aw r u? long tyme no visualisation! dhtml told me he fixed my "email2database" script for you. Is it working fine now? |
Re: Can Obfuscated Php Script Be Decoded? by charliebiz(m): 7:13am On Apr 07, 2010 |
@ lojik Thanks bro. i have being tryin 2 reach u, even thru ur website chatroom bt noway.yeh, dhtml fixed it. Please can u advise in what way can a script be obfuscated or coded dat will b prevent it 4rm being replicated. I have already done an obfuscation with a software n don't know if it can b broken, i think i still have ur email address, che make i send am to u make u test ur power? ![grin](https://www.nairaland.com/faces/grin.png) |
Re: Can Obfuscated Php Script Be Decoded? by charliebiz(m): 7:58am On Apr 07, 2010 |
sent it to ya mail n waitin. ![cool](https://www.nairaland.com/faces/cool.png) |
Re: Can Obfuscated Php Script Be Decoded? by lojik(m): 1:09pm On Apr 07, 2010 |
What you sent is not really obfuscation. i have figured out your mysql username, password, host and database name without any decoding. What you did was just to change your variable names to very long names but no obfuscation was done on the real code. You want real obfuscation? its plain gibberish that you'd see in your code. even you wont recognise your own code. I just uploaded the updated version of my php obfuscator like 3 mins ago. download it and see real obfuscation in action: http://www.afrisoft.org/index.php/phplocker |
Re: Can Obfuscated Php Script Be Decoded? by charliebiz(m): 3:02pm On Apr 07, 2010 |
hw can i stop a php code 4rm being decoded. which practise or program do u advise? |
Re: Can Obfuscated Php Script Be Decoded? by Mobinga: 9:29pm On Jul 25, 2011 |
charliebiz:
hw can i stop a php code 4rm being decoded. which practise or program do u advise?
You cannot stop an obfuscated code from being decoded. Anything that can be Encoded can be Decoded. What obfuscation does is just make it difficult and time consuming for someone to decode it. Simple obfuscator gotten from StackOverFlow its CLI. <?php $infile=$_SERVER['argv'][1]; $outfile=$_SERVER['argv'][2]; if (!$infile || !$outfile) { die("Usage: php {$_SERVER['argv'][0]} <input file> <output file>\n" ; } echo "Processing $infile to $outfile\n"; $data="ob_end_clean();?>"; $data.=php_strip_whitespace($infile); // compress data $data=gzcompress($data,9); // encode in base64 $data=base64_encode($data); // generate output text $out='<?ob_start();$a=\''.$data.'\';eval(gzuncompress(base64_decode($a)));$v=ob_get_contents();ob_end_clean();?>'; // write output text file_put_contents($outfile,$out); ?> |
Re: Can Obfuscated Php Script Be Decoded? by tamilmaran: 12:42pm On Jan 26, 2012 |
how could it decode the php file encoded by turk mmcache please fnd sample encoded file. help me to decode it <?php /*This encoded file generated using PHPCoder ( http://phpcoder.shadonet.com) and Turck MMcache ( http://www.turcksoft.com/en/e_mmc.htm)*/ if (!is_callable("mmcache_load" ![wink](https://www.nairaland.com/faces/wink.png) && !@dl("TurckLoader.so" ![wink](https://www.nairaland.com/faces/wink.png) ) { die("This PHP script has been encoded using the excellent Turck MMcache Optimizer, to run it you must install <a href=\" http://www.turcksoft.com/en/e_mmc.htm\">Turck MMCache or the Turck Loader</a>" ![wink](https://www.nairaland.com/faces/wink.png) ; }mmcache_load('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'); ?> |
Re: Can Obfuscated Php Script Be Decoded? by Nobody: 9:55am On Jan 27, 2012 |
Just passing by. However, there are some techniques that allows you PHP to be safe - if you run them as a service. Or you make an API so that the main engine is kept hidden. EVen ioncube, zend and all those stuffs, i gat boys wey dey decode them easily. |
Re: Can Obfuscated Php Script Be Decoded? by ektbear: 3:58am On Jan 29, 2012 |
If obfuscated, can't one just put it in code reformatter of some sort?
I don't see how that will help. |
Re: Can Obfuscated Php Script Be Decoded? by tamilmaran: 3:34pm On Jan 29, 2012 |
im a beginner , some guys decoded the turkmmcahe files easily in free lancer. any experts tell how they do it, any tutorial links are most welcome, please help me Thanks i advance |
Re: Can Obfuscated Php Script Be Decoded? by amitrazib: 5:45pm On May 01, 2012 |
Please Decoded this. i obfuscated this raizlab software.. please help me. <?php $R6629C5988EEFCD88EA6F77A2AE672B96 = " http://xyz/"; function FD611C46F8E65D9E049AFE165DE18C264() { $R900BE0CBE7A2503685517B606B52F2A9 = "6"; $RE8747F814FD1D0F28FD88A1217302D07 = date("l, d F Y h:i a",time() + ($R900BE0CBE7A2503685517B606B52F2A9 * 3600)); print ("$RE8747F814FD1D0F28FD88A1217302D07" ![wink](https://www.nairaland.com/faces/wink.png) ; } function F251D164643533A527361DBE1A7B9235D() { echo '© 2010 <a href=" http://xyz" title="Meherul Haque" target="_self">Meherul</a>. Developed by: <a href=" http://xyz" title="Dot" target="_blank">Dot</a>'; } function F8CF04A9734132302F96DA8E113E80CE5() { error_reporting(0); if (!(include("Home.htm" ![wink](https://www.nairaland.com/faces/wink.png) )) { print("<p align=\"center\"><font face=\"Arial\" color=\" \">Sorry! Required File Not Found.</font></p>" ![wink](https://www.nairaland.com/faces/wink.png) ; } } function F8F7F4C1CE7A4F933663D10543562B096() { error_reporting(0); if (!(include("About.htm" ![wink](https://www.nairaland.com/faces/wink.png) )) { print("<p align=\"center\"><font face=\"Arial\" color=\" \">Sorry! Required File Not Found.</font></p>" ![wink](https://www.nairaland.com/faces/wink.png) ; } } function FFE4A76A7DE7B592F5FEF740A34740681() { error_reporting(0); if (!(include("Photo-Gallery.htm" ![wink](https://www.nairaland.com/faces/wink.png) )) { print("<p align=\"center\"><font face=\"Arial\" color=\" \">Sorry! Required File Not Found.</font></p>" ![wink](https://www.nairaland.com/faces/wink.png) ; } } function FBBAFF12800505B22A853E8B7F4EB6A22() { error_reporting(0); if (!(include("Contact.htm" ![wink](https://www.nairaland.com/faces/wink.png) )) { print("<p align=\"center\"><font face=\"Arial\" color=\" \">Sorry! Required File Not Found.</font></p>" ![wink](https://www.nairaland.com/faces/wink.png) ; } } ?> |