HostOnNet Blog

Decrypt eval gzinflate base64_decode encryped php script

Looking for Linux Server Admin or WordPress Expert? We can help.

Today i see a php script, that is encrypted with

eval(gzinflate(base64_decode('JUNK_CODE_HERE')));

I tried to decrypt the script, but it have many levels of recurring gzinflate, base64_decode encryption. If some one runs a script encrypted like this, it take more server resource to do all decryption, must consider ioncube, phpshield or zend encoder for encoding php scripts.

I have written a php script that will decrypt scripts encoded with eval, gzinflate, base64_decode. The script can be modified to decrypt other combination of encryption like str_rot13

http://blog.hostonnet.com/files_hon/decode.phps

Posted in PHP

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.