Home  >  Article  >  Backend Development  >  PHP eval-based N-layer encryption gzinflate str_rot13 base64 cracking method_PHP tutorial

PHP eval-based N-layer encryption gzinflate str_rot13 base64 cracking method_PHP tutorial

WBOY
WBOYOriginal
2016-07-13 17:09:511200browse

php tutorial eval-based N-layer encryption gzinflate str_rot13 base64 cracking method

PHP uses eval(gzinflate(str_rot13(base64_decode(‘BASE64 encrypted content’)))) to decrypt the core code
The following non-extended PHP encryption method:
There is one online here, which is pretty good. Trojan protection is okay, but code protection is not.
Correspondingly, I wrote a simple decryption,
Specifically for eval. This principle is very useful.
Special note: This decryption program seems to have to be used on PHP5,
I tested the code encrypted in eval(gzinflate(str_rot13(base64_decode(‘BASE64 encrypted content’)))) on PHP4 and could not decrypt it normally.

//Encrypted file content
$a="eval(gzinflate(str_rot13(base64_decode('Put BASE64 code here'))));";
function decodephp($a) {
$max_level=300; //Maximum number of levels
for($i=0;$i<$max_level;$i++) {
ob_start();
eval(str_replace(‘eval’,’echo’,$a));
$a = ob_get_clean();
if(strpos($a,’eval(gzinflate(str_rot13(base64_decode’)===false) {
return $a;
}
}
}
echo decodephp($a);
?>

php uses N-layer encryption eval(gzinflate(base64_decode(“codes”))) to crack
First of all, let me state that this is not my original work. I copied it from a foreign blog. I tested it myself and found it very useful.

If you want to see the decryption of the core code of PHP using eval(gzinflate(str_rot13(base64_decode('BASE64 encrypted content')))), please go here to view: PHP uses eval(gzinflate(str_rot13(base64_decode( 'BASE64 encrypted content')))) Decryption of core code.
Special note: This decryption program seems to have to be used on PHP5,
I tested the encrypted code in eval(gzinflate(base64_decode("codes"))) on PHP4 but could not decrypt it normally
Here is the code:

/*
Taken from [url]http://www.php.net/manual/de/function.eval.php#59862[/url]
Directions:
1. Save this snippet as decrypt.php
2. Save encoded PHP code in coded.txt
3. Create a blank file called decoded.txt (from shell do CHMOD 0666 decoded.txt)
4. Execute this script (visit decrypt.php in a web browser or do php decrypt.php in the shell)
5. Open decoded.txt, the PHP should be decrypted if not post the code on [url]http://www.ariadoss.com/forums/web-development/lamp[/url]

gzinflate executes the decryption method of encrypted code and translates it into Chinese text (this Chinese character is not in the original file. Hey)
1. Save this entire script as decrypt.php
2. Save the code that needs to be decrypted as coded.txt and in the same directory as decrypt.php.
3. Create a blank file named decoded.txt (the permissions of decoded.txt must be set to CHMOD 0666, which means it can be written. Of course, you do not need to create a file. As long as the folder has write permissions, the script will A document named decoded.txt will be automatically created. )
4. Run the decryption script (run decrypt.php in the browser and visit http://your domain name/storage directory/decrypt.php)
5. Open decoded.txt, the code should have been decrypted. If an error occurs, please send the code to [url]http://www.ariadoss.com/forums/web-development/lamp[/url]
*/
echo “nDECODE nested eval(gzinflate()) by DEBO Jurgen echo “1. Reading coded.txtn”;
$fp1 = fopen (“coded.txt”, “r”);
$contents = fread ($fp1, filesize (“coded.txt”));
fclose($fp1);
echo “2. Decodingn”;
while (preg_match(“/eval(gzinflate/”,$contents)) {
$contents=preg_replace(“//”, “”, $contents); eval(preg_replace(“/eval/”, “$contents=", $contents)); } echo “3. Writing decoded.txtn"; $fp2 = fopen("decoded.txt","w"); fwrite($fp2, trim($contents)); fclose($fp2);
?>

Let’s briefly talk about how to use gzinflate,eval(gzinflate(base64_decode(“codes”)));decoding-eval-gzinflate-base64_decode.
Save the above program file decrypt.php,
Of course, the file name can be set by yourself.
Create a coded.txt in the same directory as this file,
This contains encrypted codes, which are the codes in eval(gzinflate(base64_decode(“codes”)));
To put it more clearly, it is the cipher text executed in eval(gzinflate(base64_decode(“codes”))) to be decrypted.
Execute the saved file decrypt.php, which will generate a decoded.txt txt document in the same directory,
Open this document. Inside is the encrypted original code.

www.bkjia.comtruehttp: //www.bkjia.com/PHPjc/629706.htmlTechArticlephp tutorial N-layer encryption based on eval gzinflate str_rot13 base64 cracking method PHP uses eval(gzinflate(str_rot13(base64_decode(BASE64 Encrypted content)))) Non-expansion under decryption of core code...
Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn