Decryption of PHP Files in script

 

Results 1 to 4 of 4
Hi, Does anybody know of a tool to decrypt php files that look like: PHP ...
  1. #1
    This Web Guy's Avatar
    This Web Guy is offline Junior Member
    Join Date
    Jun 2010
    Posts
    110
    Thanks
    16
    Thanked 32 Times in 30 Posts
    Blog Entries
    1

    Default Decryption of PHP Files in script

    Hi,

    Does anybody know of a tool to decrypt php files that look like:

    PHP Code:
    <?php    if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29"))  {   function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E)   {    $TF186217753C37B9B9F958D906208506E base64_decode($TF186217753C37B9B9F958D906208506E);    $T7FC56270E7A70FA81A5935B72EACBE29 0;    $T9D5ED678FE57BCCA610140957AFAB571 0;    $T0D61F8370CAD1D412F80B84D143E1257 0;    $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]);    $T3A3EA00CFC35332CEDF6E5E9A32E94DA 3;    $T800618943025315F869E4E1F09471012 0;    $TDFCF28D0734569A6A693BC8194DE62BF 16;    $TC1D9F50F86825A1A2302EC2449C17196 "";    $TDD7536794B63BF90ECCFD37F9B147D7F strlen($TF186217753C37B9B9F958D906208506E);    $TFF44570ACA8241914870AFBC310CDB85 __FILE__;    $TFF44570ACA8241914870AFBC310CDB85 file_get_contents($TFF44570ACA8241914870AFBC310CDB85);    $TA5F3C6A11B03839D46AF9FB43C97C188 0;    preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85$TA5F3C6A11B03839D46AF9FB43C97C188);    for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;)    {     if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit;     if ($TDFCF28D0734569A6A693BC8194DE62BF == 0)     {      $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);      $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]);      $TDFCF28D0734569A6A693BC8194DE62BF 16;     }     if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 0x8000)     {      $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4);      $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4);      if ($T7FC56270E7A70FA81A5935B72EACBE29)      {       $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3;       for ($T0D61F8370CAD1D412F80B84D143E1257 0$T0D61F8370CAD1D412F80B84D143E1257 $T9D5ED678FE57BCCA610140957AFAB571$T0D61F8370CAD1D412F80B84D143E1257++)        $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1D412F80B84D143E1257];       $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }      else      {       $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);       $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16;       for ($T0D61F8370CAD1D412F80B84D143E1257 0$T0D61F8370CAD1D412F80B84D143E1257 $T9D5ED678FE57BCCA610140957AFAB571$TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]);       $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }     }     else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++];     $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1;     $TDFCF28D0734569A6A693BC8194DE62BF--;     if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F)     {      $TFF44570ACA8241914870AFBC310CDB85 implode(""$TC1D9F50F86825A1A2302EC2449C17196);      $TFF44570ACA8241914870AFBC310CDB85 "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?";      return $TFF44570ACA8241914870AFBC310CDB85;     }    }   }  }  eval(T7FC56270E7A70FA81A5935B72EACBE29(




  2. #2
    mic141414's Avatar
    mic141414 is offline Regular Member
    Join Date
    Jul 2008
    Location
    USA
    Posts
    333
    Thanks
    257
    Thanked 104 Times in 70 Posts

    Default Re: Decryption of PHP Files in script

    i don't know if it will work but you can try this site http://ddecode.com/phpdecoder/

  3. #3
    roadhamster's Avatar
    roadhamster is offline Registered Member
    Join Date
    Mar 2012
    Posts
    74
    Thanks
    75
    Thanked 39 Times in 30 Posts

    Default Re: Decryption of PHP Files in script

    Just rename the functions and variables to more readable names and there you are. For example: rename $TFF44570ACA8241914870AFBC310CDB85 to $var_1 or something.

  4. The Following User Says Thank You to roadhamster For This Useful Post:

    This Web Guy (03-26-2013)

  5. #4
    This Web Guy's Avatar
    This Web Guy is offline Junior Member
    Join Date
    Jun 2010
    Posts
    110
    Thanks
    16
    Thanked 32 Times in 30 Posts
    Blog Entries
    1

    Default Re: Decryption of PHP Files in script

    Quote Originally Posted by roadhamster View Post
    Just rename the functions and variables to more readable names and there you are. For example: rename $TFF44570ACA8241914870AFBC310CDB85 to $var_1 or something.
    The decoder didn't work but that's a genius idea!


Similar Threads

  1. need script to clean CSV files
    By asi_av in forum White Hat SEO
    Replies: 0
    Last Post: 01-04-2012, 03:59 PM
  2. Anybody knows a MD5 decryption service?
    By darkstar69 in forum BlackHat Lounge
    Replies: 7
    Last Post: 11-11-2011, 05:39 PM
  3. Need Decryption Specialists
    By proxyman in forum Hire a Freelancer
    Replies: 1
    Last Post: 12-23-2009, 12:21 PM
  4. stumbleupon toolbar token decryption
    By amircx2 in forum Black Hat SEO
    Replies: 0
    Last Post: 02-25-2008, 06:51 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  




BlackHatWorld on Twitter BlackHatWorld on FaceBook


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103