mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
Added createfunction and gzinflate obfuscations
Added createfunction and gzinflate obfuscations. also added gzinflate b64 patterns
This commit is contained in:
@@ -94,6 +94,11 @@ ZmlsZV9nZXRfY29udGVudH
|
|||||||
ZpbGVfZ2V0X2NvbnRlbnRz
|
ZpbGVfZ2V0X2NvbnRlbnRz
|
||||||
maWxlX2dldF9jb250ZW50c
|
maWxlX2dldF9jb250ZW50c
|
||||||
|
|
||||||
|
# "gzinflate" in base64
|
||||||
|
Z3ppbmZsYXRl
|
||||||
|
d6aW5mbGF0Z
|
||||||
|
nemluZmxhdG
|
||||||
|
|
||||||
# "fopen" in base64
|
# "fopen" in base64
|
||||||
Zm9wZW
|
Zm9wZW
|
||||||
ZvcGVu
|
ZvcGVu
|
||||||
@@ -122,6 +127,8 @@ eval(base64_decode(
|
|||||||
$data = base64_decode("
|
$data = base64_decode("
|
||||||
edoced_46esab
|
edoced_46esab
|
||||||
base=base64_encode
|
base=base64_encode
|
||||||
|
cr"."eat"."e_fun"."cti"."on
|
||||||
|
gz'.'inf'.'late
|
||||||
# fopo.com.ar - free online php obfuscator. It conveniently leaves comments in the code.
|
# fopo.com.ar - free online php obfuscator. It conveniently leaves comments in the code.
|
||||||
http://www.fopo.com.ar/
|
http://www.fopo.com.ar/
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user