Yet another PHP Obfuscator

this tools able to (de)compress your php shellcode string and inject common file signature like jpeg to fuck webserver uploader or malware string scanner like what i made before. no need to install whole shit, just download the single phar executable file and fuck them all. you can download it from Here or here.

and also your shellcode won't works if the server disable fopen, fseek, fwrite, fclose, and include.

DISCLAIMER use eval to obfuscate is gay

command

yapo make <signature> <file>...

single compress

yapo make jpeg shell.php

multiple file compress without signature injection

yapo make whatever shell1.php shell2.php

multiple file compress using find

find ./myproject -type f -name \*.php -exec yapo make jpeg {} +\;

Demo

signature

jpeg: FFD8FFE2
jpg: FFD8FFE2
mp4: 1A45DFA3
mpeg: 1A45DFA3
luac: 1B4C7561
lua: 1B4C7561
zip: 504B0304
pdf: %PDF-0-1
mp3: 494433
nes: 4E45531A
linux: #!/usr/bin/env php
shebang: #!/usr/bin/env php
random string: none

Full definition

Compression method

Contributing