yireo · June 24, 2014 15:23 · erwfgwef · Aug 17, 2017 · spout · Oct 18, 2020
diff --git a/evaldecode.php b/evaldecode.php
 <?php
 /*
 * Basic script to decrypt files encoded with eval(gzinflate(base64_decode($data)));
 */

 $file = 'encrypted.php';
 $content = file_get_contents($file);

 function evaldecode($content, $step = 0) {
    //echo "STEP $step\n";
    $step++;
    if(preg_match('/^eval\(/', $content)) {
        $content = str_replace('eval(', 'print(', $content);

        ob_start();
        eval($content);
        $content = ob_get_contents();
        ob_end_clean();
    }

    $content = trim($content);
    if(preg_match('/^eval\(/', $content)) {
        $content = evaldecode($content, $step);
    }

    return $content;
 }

 echo evaldecode($content)."\n";
	<?php
	/*
	* Basic script to decrypt files encoded with eval(gzinflate(base64_decode($data)));
	*/

	$file = 'encrypted.php';
	$content = file_get_contents($file);

	function evaldecode($content, $step = 0) {
	//echo "STEP $step\n";
	$step++;
	if(preg_match('/^eval\(/', $content)) {
	$content = str_replace('eval(', 'print(', $content);

	ob_start();
	eval($content);
	$content = ob_get_contents();
	ob_end_clean();
	}

	$content = trim($content);
	if(preg_match('/^eval\(/', $content)) {
	$content = evaldecode($content, $step);
	}

	return $content;
	}

	echo evaldecode($content)."\n";