Skip to content

Instantly share code, notes, and snippets.

@sh4dowb
Last active October 17, 2023 21:36
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sh4dowb/04f6e62ff64271b7338758c724baf295 to your computer and use it in GitHub Desktop.
Save sh4dowb/04f6e62ff64271b7338758c724baf295 to your computer and use it in GitHub Desktop.
PHPkoru.com deobfuscator. Make sure to run it isolated, to prevent any attacks from eval'd code
<?php
// FOR NEW VERSION (1.0.6): https://gist.github.com/sh4dowb/86ad09b9bcbfce323b511395e446d616
// FOR 1.0.7: https://gist.github.com/sh4dowb/68c9e090a3006b1d19ce49a22529c0a5
$input = file_get_contents("untitled.php");
//edit this filename
// for decrypting advanced version contact me on telegram
$fge_ebg13 = "str_rot13";
$onfr64_qrpbqr = "base64_decode";
$eha_pbqr = "cnVuX2NvZGU=";
$CUCxbeh_z = array(1=>trim(explode('[/PHPkoru_Code]',explode('[PHPkoru_Code]',$input)[1])[0]));
$code = explode('s(__FILE__), $CUCxbeh_z);', explode("eval(\$fge_ebg13(", $input)[0])[1];
while(is_null($code) || strpos($code, "openssl_decrypt") === false){
eval("\$code = ". str_replace('eval', '', $code));
}
echo str_rot13(base64_decode(str_rot13(eval("return (openssl_decrypt".explode('openssl_decrypt', $code)[1]))));
@Ahmetreis96
Copy link

how to use?

@sh4dowb
Copy link
Author

sh4dowb commented Apr 23, 2021

how to use?

bu dosya ile aynı yere untitled.php adındaki şifrelenmiş dosyayı koyun ve bu dosyayı çalıştırın

@Krex38
Copy link

Krex38 commented Jan 4, 2023

fixlermisin aga denedim kodu calismadi

Parse error: syntax error, unexpected token "if" in C:\xampp\htdocs\newxd\acbeni.php(17) : eval()'d code on line 1

@sh4dowb
Copy link
Author

sh4dowb commented Jan 4, 2023

fixlermisin aga denedim kodu calismadi

Parse error: syntax error, unexpected token "if" in C:\xampp\htdocs\newxd\acbeni.php(17) : eval()'d code on line 1

dosyayı yollar mısın müsait vakitte bakayım

@sh4dowb
Copy link
Author

sh4dowb commented Mar 31, 2023

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment