Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
237 views
in Technique[技术] by (71.8m points)

Decode an Encrypted PHP File Assistance

I have a file that I'm trying to decode but I'm not sure the best way to go about doing it. I've tried putting it through a few online tools but haven't had much luck...the code looks like this:

<?php

$zAkSoSavjFOn='jumbledcodeinhere';

$THkNltHSOjsXfQLzr=';))))aBSwinFbFxNm$(ireegf(rqbprq_46rfno(rgnysavmt(ynir';

$DzbOntpeGhMcan=strrev($THkNltHSOjsXfQLzr);

$WnJYuMUwKmRxBh=str_rot13($DzbOntpeGhMcan);

eval($WnJYuMUwKmRxBh);

?>

In all my playing I managed to extract the following with a php script:

eval(gzinflate(base64_decode(strrev($zAkSoSavjFOn))));

Could someone point me in the right direction on going about this process? Any help would be appreciated. :)

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)

The "jumbled code" is gzipped, base64-encoded, reversed PHP code that is almost certainly malicious.

Replace eval with echo and see what it gives you, that's what the code that is trying to run is.


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...