Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/cvar1984/yapo
Yet another PHP Obfuscator
https://github.com/cvar1984/yapo
backdoors compiler encoder hacking hacktoberfest obfuscate obfuscation php shellcode webshell
Last synced: 3 days ago
JSON representation
Yet another PHP Obfuscator
- Host: GitHub
- URL: https://github.com/cvar1984/yapo
- Owner: Cvar1984
- License: gpl-3.0
- Created: 2020-06-30T16:46:40.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2024-12-04T12:42:52.000Z (18 days ago)
- Last Synced: 2024-12-19T07:07:12.718Z (3 days ago)
- Topics: backdoors, compiler, encoder, hacking, hacktoberfest, obfuscate, obfuscation, php, shellcode, webshell
- Language: PHP
- Homepage:
- Size: 6.79 MB
- Stars: 33
- Watchers: 5
- Forks: 8
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
# Yet another PHP Obfuscator
[![CodeFactor](https://www.codefactor.io/repository/github/cvar1984/yapo/badge)](https://www.codefactor.io/repository/github/cvar1984/yapo)this tools able to (de)compress your php shellcode string and inject
common file signature like jpeg to fuck webserver uploader or malware string scanner like what i made before.
no need to install whole shit, just download the single phar executable file and fuck them all.
you can download it from [Here](bin/yapo) or [here](https://github.com/Cvar1984/yapo/releases/).and also your shellcode won't works if the server disable fopen, fseek, fwrite, fclose, and include.
> DISCLAIMER use eval to obfuscate is gay### command
```sh
yapo make ...
```
### single compress
```sh
yapo make jpeg shell.php
```
### multiple file compress without signature injection
```sh
yapo make whatever shell1.php shell2.php
```
### multiple file compress using find
```sh
find ./myproject -type f -name \*.php -exec yapo make jpeg {} +\;
```
## Demo
[![asciicast](https://asciinema.org/a/545185.svg)](https://asciinema.org/a/545185)## signature
- jpeg: FFD8FFE2
- jpg: FFD8FFE2
- mp4: 1A45DFA3
- mpeg: 1A45DFA3
- luac: 1B4C7561
- lua: 1B4C7561
- zip: 504B0304
- pdf: %PDF-0-1
- mp3: 494433
- nes: 4E45531A
- linux: #!/usr/bin/env php
- shebang: #!/usr/bin/env php
- random string: none[Full definition](src/Yapo/Yapo.php)
[Compression method](http://www.faqs.org/rfcs/rfc1951.html)
[Contributing](CONTRIBUTING.md)