Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #18287

Re: How to decrypt php file :: $_F=__FILE__ $_X eval base64_decode

Show all headers | View raw

On Mon, 13 Apr 2020 20:16:23 -0700 (PDT), alex.maxis1990@gmail.com wrote:
> On Wednesday, March 24, 2010 at 5:39:21 PM UTC+8, SVCitian wrote:
>> We have a file in our company which was encrypted by the previous
>> programmer and he has left.
>> 
>> And, now we have to modify the file and we are unable (not knowing
>> how) to decrypt it to do any editing.
>> 
>> The encrypted file look like this:
>> 
>> <?php
>> 
>> $_F=__FILE__;
>> 
>> $_X='Pz48P3BocCAkX0Y9X19GSUxFX187JF9YPSdQenU4UG9CMmNDQWtYMFk5WDY5R1NVeEZYNjg3SkY5WVBT...
>> ...
>> ... ... 2tYNklwT3lSZlVqMHdPeVJmV0Qwd093PT0nKSk7Pz4=';
>> 
>> eval(base64_decode('JF9YPWJhc2 ... ... ... RfWD0wOw=='));
>> 
>> ?>
>> 
>> How can we convert it to plain text.. Is it at all possible.
>> 
>> the bottom eval(base64_decode('JF9YPWJhc2 ... ... ... RfWD0wOw=='));
>> 
>> decodes to (from this site: http://www.tareeinternet.com/scripts/byterun.php
>> )
>> 
>> to this:
>> 
>> $_X=b2s61i_d6c3d6($_X);
>> $_X=strtr($_X,'aouie123456','23456aouie1');
>> $_R=6r6g_r6pl2c6('__FILE__',"'".$_F."'",$_X);
>> 6v2l($_R);$_R=0;$_X=0;
>> 
>> or something like that..
>> 
>> How can I successfully decrypt the file fully??
>> 
>> Thank you for your help.
>
> your script look like webshell backdoor and mailer

And your followup looks like it is TEN YEARS TOO LATE.
google groopers!  Sheesh!

Back to comp.lang.php | Previous | Next — Previous in thread | Find similar

Thread

Re: How to decrypt php file :: $_F=__FILE__ $_X eval base64_decode alex.maxis1990@gmail.com - 2020-04-13 20:16 -0700
  Re: How to decrypt php file :: $_F=__FILE__ $_X eval base64_decode minajaich@gmail.com - 2020-04-14 22:31 -0700
  Re: How to decrypt php file :: $_F=__FILE__ $_X eval base64_decode Allodoxaphobia <trepidation@example.net> - 2020-04-15 14:16 +0000

csiph-web