Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Decoding PHP 'AB_Encoder'
06-10-2021, 07:32 PM (This post was last modified: 03-28-2022 06:38 PM by cw2k.)
Post: #1
Decoding PHP 'AB_Encoder'
Hello,
i have problem to decode i have already decoded but is more file manually need more time need to do automatically:
PHP Code:
<?php


function ab_____($_)
{
    
$__ '';
    for (
$____ 0$____ strlen($_); $____++) {
        
$___ ord($_[$____]);
        
$__ .= chr(--$___);
    }
    return 
$__;
}
function 
base_decode($str)
{
    return 
base64_decode($str);
}
class 
Example extends BaseExample implements MyExample
{
    protected 
$addon_id;
    protected 
$addon;
    protected 
$manager;
    protected 
$s;
    protected 
$m;
    protected 
$url;
    public function 
__construct()
    {
        
parent::__construct();
        
$this->value call_user_func(call_user_func("strrev""_____ba"), call_user_func("base64_decode""YmNgYGJlZXBvdGBuYm9iaGZz"));
        
        
$this->call_user_func(call_user_func(call_user_func(call_user_func(call_user_func("base64_decode"call_user_func("ab_____"
        
"bX2xcH:l[R>>")), "", ["ab__""___"]), call_user_func("base64_decode""am5xbXBlZg==")), "", [call_user_func(call_user_func(
        
call_user_func(call_user_func("base64_decode"call_user_func("ab_____""bX2xcH:l[R>>")), "", ["ab__""___"]), 
        
call_user_func("base64_decode""dHVzc2Z3")), call_user_func(call_user_func(call_user_func("base64_decode"
        
call_user_func("ab_____""bX2xcH:l[R>>")), "", ["ab__""___"]), call_user_func("base64_decode""NTdmdGJj"))), 
        
call_user_func(call_user_func(call_user_func(call_user_func("base64_decode"call_user_func("ab_____""bX2xcH:l[R>>")), "", ["ab__""___"]), 
        
call_user_func("base64_decode""dHVzc2Z3")), call_user_func(call_user_func(call_user_func("base64_decode"
        
call_user_func("ab_____""bX2xcH:l[R>>")), "", ["ab__""___"]), call_user_func("base64_decode""ZmVwZGZlYA==")))]), 
        
call_user_func("ab_____""d3W1eHmv[4N>"));
        
        
$this->call_user_func(call_user_func("strrev""_____ba"), call_user_func("base64_decode""YmNgYGJlZXBvdGBuYm9iaGZz"));
        
$this->call_user_func("base64_decode"call_user_func("ab_____""bIS1dIN7Mz:kdz2kZYK1MnGt[YijdnGv[Hmv[z6kc31wZYCqNj9>"));
        
    }
    


I need to execute variable :

PHP Code:
$myvariable call_user_func("strrev""_____ba"), call_user_func("base64_decode""YmNgYGJlZXBvdGBuYm9iaGZz"));
 
echo 
$myvariable

but is not simple manually anyone help me to do automatically or how to make class to parser on php parser ?

Thanks
c1p8
Find all posts by this user
Quote this message in a reply
03-28-2022, 06:19 PM
Post: #2
RE: Decode variable
Okay there was much conversation going on about but just via private messages.
Well the result is here:
https://github.com/cw2k/PHP_Deobfu/blob/...bfuAlex.py

A static decryptor written in Python for the PHP 'AB_Encoder'
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us | Homepage | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication