Comments on: Article: Decoding a User Space Encoded PHP Script

By: Jesse

Jesse — Mon, 17 May 2010 12:29:37 +0000

hehe, I want to know the answer too.
However, when I put the encrypted php into windows, it works well and output “hello world”.
It just doesn't work at my linux box. IMO, this might be caused by locale environment.
Sorry to bother you.

By: stefanesser

stefanesser — Mon, 17 May 2010 12:16:53 +0000

I am not sure how you download the files and how you execute them. However the error you describe always happens when the unprintable characters in the PHP script gets destroyed.

By: Jesse

Jesse — Mon, 17 May 2010 12:13:58 +0000

Well, I came to php-crypt.com, and downloadd the encrypted "hello world" like below
echo "hello world";
?>
But the error still occurs, here is the screenshot i39.tinypic.com/1pc7yq.jpg
Regards,
Jesse

By: stefanesser

stefanesser — Mon, 17 May 2010 11:46:53 +0000

This does not work for you because the encoded PHP contains a bunch of non printable characters that cannot be displayed in the HTML. Therefore your copy of the script is incomplete. If you want to reproduce this test you have to go to php-crypt.com and encode your own demo script.

By: Jesse

Jesse — Mon, 17 May 2010 10:03:14 +0000

The “hello world” doesn't work at my box.
Fatal error: Call to undefined function a#c++*91+() in /usr/local/webserver/php/bin/temp.php on line 9
a#c++*91+ is the value of $OO000OO000OO.
Can you help me? My php compiling params ./configure –enable-shared –without-pear –without-sqlite –with-zlib
yeah, I compile the php from scratch in order to test this.
Regards,
Jesse

By: Jon Daley

Jon Daley — Sun, 16 May 2010 02:12:50 +0000

Nifty script. I've done a couple by hand like that, but it was pretty painful.