Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/cvar1984/yapo

Yet another PHP Obfuscator
https://github.com/cvar1984/yapo

backdoors compiler encoder hacking hacktoberfest obfuscate obfuscation php shellcode webshell

Last synced: 3 days ago
JSON representation

Yet another PHP Obfuscator

Awesome Lists containing this project

README

        

# Yet another PHP Obfuscator
[![CodeFactor](https://www.codefactor.io/repository/github/cvar1984/yapo/badge)](https://www.codefactor.io/repository/github/cvar1984/yapo)

this tools able to (de)compress your php shellcode string and inject
common file signature like jpeg to fuck webserver uploader or malware string scanner like what i made before.
no need to install whole shit, just download the single phar executable file and fuck them all.
you can download it from [Here](bin/yapo) or [here](https://github.com/Cvar1984/yapo/releases/).

and also your shellcode won't works if the server disable fopen, fseek, fwrite, fclose, and include.
> DISCLAIMER use eval to obfuscate is gay

### command
```sh
yapo make ...
```
### single compress
```sh
yapo make jpeg shell.php
```
### multiple file compress without signature injection
```sh
yapo make whatever shell1.php shell2.php
```
### multiple file compress using find
```sh
find ./myproject -type f -name \*.php -exec yapo make jpeg {} +\;
```
## Demo
[![asciicast](https://asciinema.org/a/545185.svg)](https://asciinema.org/a/545185)

## signature
- jpeg: FFD8FFE2
- jpg: FFD8FFE2
- mp4: 1A45DFA3
- mpeg: 1A45DFA3
- luac: 1B4C7561
- lua: 1B4C7561
- zip: 504B0304
- pdf: %PDF-0-1
- mp3: 494433
- nes: 4E45531A
- linux: #!/usr/bin/env php
- shebang: #!/usr/bin/env php
- random string: none

[Full definition](src/Yapo/Yapo.php)

[Compression method](http://www.faqs.org/rfcs/rfc1951.html)

[Contributing](CONTRIBUTING.md)