Decode an Encrypted PHP File Assistance

丶灬走出姿态 提交于 2019-12-25 07:00:09

问题


I have a file that I'm trying to decode but I'm not sure the best way to go about doing it. I've tried putting it through a few online tools but haven't had much luck...the code looks like this:

<?php

$zAkSoSavjFOn='jumbledcodeinhere';

$THkNltHSOjsXfQLzr=';))))aBSwinFbFxNm$(ireegf(rqbprq_46rfno(rgnysavmt(ynir';

$DzbOntpeGhMcan=strrev($THkNltHSOjsXfQLzr);

$WnJYuMUwKmRxBh=str_rot13($DzbOntpeGhMcan);

eval($WnJYuMUwKmRxBh);

?>

In all my playing I managed to extract the following with a php script:

eval(gzinflate(base64_decode(strrev($zAkSoSavjFOn))));

Could someone point me in the right direction on going about this process? Any help would be appreciated. :)


回答1:


The "jumbled code" is gzipped, base64-encoded, reversed PHP code that is almost certainly malicious.

Replace eval with echo and see what it gives you, that's what the code that is trying to run is.



来源:https://stackoverflow.com/questions/12118531/decode-an-encrypted-php-file-assistance

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!