Jump to content

Understanding what a EVAL and base_decoder is doing


blmg2009

Recommended Posts

Hi, 

 

I have the following code on one of my stores and I have been supplied a code which is below with base 64 code; However before running the code I would like to understand what is it doing. 

 

What changes will it make. 

 

Is there any way of outputting the actual PHP it is eval() -ing 

$GBAY = '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';$xm = '$BPk = base64_decode($GBAY); eval($BPk);'; eval($xm);

I'm also wishing to learn more about this type of code and how I could use it myself, I believe it's like inception or something it has amazed me. :) 

 

 

Link to comment
Share on other sites

When someone has gone to that much trouble to hide code it is pretty much always a backdoor hacker script.

Either an exploit, or legitimate code that a seller wants to "protect" from prying eyes.

 

blmg2009, there's good news and bad news. The bad news is that we can't help you decode something that's under license, which the stuff you posted is. (Normally I would remove licensed code, but what you posted isn't... well, it's harmless to have exposed.) The good news is that you want to understand how it works, not to break it apart. A fine line indeed.

 

It's a horrible practice and wastes system resources doing a lot of stupid work, but some people think it's what they have to do to protect their code. Maybe they don't know much about licensing, or maybe they think it's truly effective, or what else I don't know. But the basic idea is to be able to give someone some code that works without being readable by a human.

With PHP that's typically some combination of base64_decode() and gzinflate() that ultimately produces some code which can be eval()ed. Do that over and over again and eventually you get actual code that does actual stuff. It's like layers of an onion, except peeling onions isn't as painful.

  • Like 1
Link to comment
Share on other sites

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.