Yet another PHP Obfuscator
this tools able to (de)compress your php shellcode string and inject common file signature like jpeg to fuck webserver uploader or malware string scanner like what i made before. no need to install whole shit, just download the single phar executable file and fuck them all. you can download it from Here or here.
and also your shellcode won't works if the server disable fopen, fseek, fwrite, fclose, and include.
DISCLAIMER use eval to obfuscate is gay
command
yapo make <compression> <signature> <file>...single compress
yapo make jpeg shell.phpmultiple file compress without signature injection
yapo make whatever shell1.php shell2.phpmultiple file compress using find
find ./myproject -type f -name \*.php -exec yapo make jpeg {} +\;Demo
signature
- jpeg: FFD8FFE2
- jpg: FFD8FFE2
- mp4: 1A45DFA3
- mpeg: 1A45DFA3
- luac: 1B4C7561
- lua: 1B4C7561
- zip: 504B0304
- pdf: %PDF-0-1
- mp3: 494433
- nes: 4E45531A
- linux: #!/usr/bin/env php
- shebang: #!/usr/bin/env php
- random string: none