reverse-php-malware
reverse-php-malware copied to clipboard
bediger4000
De-obfuscate and reverse engineer PHP malware
Add Dockerfile for the convenience. I think using Docker is the most clean & easy way to use the tool without a manual setup. ## Usage ``` $ docker build...
Hi, getting this error 5 times before it ends: `PHP Warning: addcslashes() expects parameter 1 to be string, object given in /.../reverse-php-malware/vendor/nikic/php-parser/lib/PhpParser/PrettyPrinter/Standard.php on line 101` Using: ``` $ php -v...
Hi i need help aboud merged and obfuscated codes, I have both file for decode, one of if variable definations called name is eg: code like this ` public $x673...
TODO: handle goto statement and clean-up the order of statements, and variable assigments. That would allow further deobfuscation, that fails otherwise. @bediger4000 this pull request solves a small part of...
Sample source code: https://malwaredecoder.com/result/0a2a7c5bb813d755f72823f2a5895ac8 this is the cleanup module of ai-bolit scanner and it is a great sample of obfuscation techniques. Until the third run of deobfuscation, I was missing...