├── LICENSE
├── README.md
└── deobfuscate.php


/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2015 Helios
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 
23 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # FOPO Deobfuscator
 2 | 
 3 | A simple php deobfuscator for php scripts that have been obfuscated with http://fopo.com.ar
 4 | 
 5 | # LICENSE
 6 | 
 7 | The MIT License (MIT)
 8 | 
 9 | Copyright (c) 2015 Helios
10 | 
11 | Permission is hereby granted, free of charge, to any person obtaining a copy
12 | of this software and associated documentation files (the "Software"), to deal
13 | in the Software without restriction, including without limitation the rights
14 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
15 | copies of the Software, and to permit persons to whom the Software is
16 | furnished to do so, subject to the following conditions:
17 | 
18 | The above copyright notice and this permission notice shall be included in all
19 | copies or substantial portions of the Software.
20 | 
21 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
22 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
23 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
24 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
25 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
26 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
27 | SOFTWARE.
28 | 


--------------------------------------------------------------------------------
/deobfuscate.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 | * FOPO PHP Deobfuscator
 4 | * 
 5 | * Date: 10-June-2015
 6 | * Version: 0.2
 7 | * Author: Helios
 8 | * Github: https://github.com/Helioscx
 9 | * Website: http://helioscx.com
10 | *
11 | * Live Example: http://helioscx.com/fopo/
12 | * Give credits where it's due.
13 | **/
14 | 
15 | if(!empty($_POST['php_code'])){
16 | 
17 | 	// Submitted Code
18 | 	$php = $_POST['php_code'];
19 | 	
20 | 	// Deobfuscate
21 | 	$deobfCode = htmlspecialchars(deobf($php));
22 | 
23 | }
24 | 
25 | 
26 | function deobf($phpcode){
27 | 
28 | 	$phpcode = formatPHP($phpcode);
29 | 
30 | 	$phpcode = base64_decode(getTextInsideQuotes(getEvalCode($phpcode)));
31 | 
32 | 	@$phpcode = gzinflate(base64_decode(str_rot13(getTextInsideQuotes(end(explode(':', $phpcode))))));
33 | 
34 | 	while(strlen(strstr($phpcode, '@eval($')) > 0)
35 | 		$phpcode = gzinflate(base64_decode(str_rot13(getTextInsideQuotes(getEvalCode($phpcode)))));
36 | 	
37 | 
38 | 	return substr($phpcode, 2);
39 | }
40 | 
41 | 
42 | function getEvalCode($string){
43 | 	preg_match("/eval\((.*?)\);/", $string, $matches);
44 | 
45 | 	return (empty($matches)) ? '' : end($matches);
46 | }
47 | 
48 | 
49 | function getTextInsideQuotes($string){
50 | 	preg_match('/("(.*?)")/', $string, $matches);
51 | 
52 | 	return (empty($matches)) ? '' : end($matches);
53 | 
54 | }
55 | 
56 | function formatPHP($string){
57 | 	$string = str_replace('<?php', '', $string);
58 | 	$string = str_replace('?>', '', $string);
59 | 	$string = str_replace(PHP_EOL, "", $string);
60 | 	$string = str_replace(";", ";\n", $string);
61 | 	return $string;
62 | }
63 | 
64 | ?>
65 | 
66 | 
67 | <!DOCTYPE html>
68 | <html>
69 | <head>
70 | 	<title>fopo.com.ar Deobfuscator</title>
71 | </head>
72 | <body>
73 | 
74 | 	Paste http://fopo.com.ar/ obfuscated code: <br>
75 | 
76 | <form action="" method="POST">
77 | 	<textarea name="php_code" style="width: 430px;height: 300px;"><?=isset($deobfCode) ? $deobfCode : ''?></textarea><br><br>
78 | 	<input type="submit" value="Deobfuscate">
79 | </form>
80 | 
81 | </body>
82 | </html>
83 | 


--------------------------------------------------------------------------------