Tag Archives: php script

Deobfuscating PHP Scripts

Occasionally people send me PHP scripts to help them analyze it. Most of the time, it’s simply unescaping the script and finding the right variable to echo. I got two tricky ones within the past couple of months and finally … Continue reading

Posted in Malscript, Tools | Tagged , | Comments Off on Deobfuscating PHP Scripts

PHP Infector

A reader wanted me to analyze a PHP file that was found on his hacked WordPress site. The script is made up of three parts as you can see. The top two sections contain an array of Base64-encoded strings. The … Continue reading

Posted in Malscript | Tagged , , | Comments Off on PHP Infector