php混淆加密文件 并解密

1. 通过混消方式加密php文件  

一个加密网站 http://dezend.qiling.org/encrypt.html 上传原文件, 加密完成后会自动下载  

加密php原文件 1.php源代码为:

加密后的文件 encrypt.php 源代码为:

 执行一下此文件 输出结果==1.php的输出结果

那么加密原理是什么呢?能解密吗?

建议在命令行中打印调试

首先打印出defind 到 eval 中间的 那几个变量

现在可以知道这几个变量表示的是什么含义了。

在这串代码中,我们发现了最后有段代码为:eval();

很明显,该代码最后通过这串代码执行,通过echo把eval需要执行的代码输出 这个 " '?>' "结束标签就没必要echo了:

为了方便查看输出结果先把eva()这段代码注释掉;

得到以下结果::

$XYMiczUTNLnkKeJhRPSxyFQwmdCqBobWVGOZaEtpgvArIsfDjluH="rNCYiZPqztluFQsdBSwhOUnyoJjReMTKDgVIWkGcHAExbaXpvmLfgcSdFxhJnPWDIlZuCrOXaksTeVyHUqRzEboKABivwfNLGQMpjYmthE9OQwfbxioYQA5WzSuBuIVcxoWiG0HCu21qkoHQxBPhuk5Odkp2d3X6GsWloYVTrIcMv2uLQYWdlBoZoAPwl2XVqEdOcTvZH3pikMCyuBVnGMIkx01MdMXRkWXlHIpCRY5xl2W5QIo1uwVJr1xFR0XZxixjrBL3rAoIQnf2qEvpaTHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNhMoTGiHWd29BxrbFVRxIqrk3lrk2qFkTHFk2HSk2qRkWckqWcndWcnlOVRd5qybWqBlWcnfWcnbWcnkWcnNWcnBWqBN2VRxEVRvTVRxSVRd0VRd3ark1HFk2crk2aSk2qTk3qTk3cTk2HylWqBKWcydncTk2lrKpaTHhHIW5Q1HId21WlMoql1pHRkVox2IzxsI3rIuprMpmAIxTk1V2v3HZHYVjGYp4xN5lH2XOhrHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnc9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnx9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnqntr4BxwXLkBLdQ01wo0X2xY5EroWTkk9PuA90d3usHAIiUAWklAVerWCJoopSRYo6r1cAGwCnHwZnqw07VNLnrApdUkpKG2XDdMV3o3x4l1ciGAVHQkIcHiPWvk5oAWVhxspmH1HOuIWsHAcSGwoBkId9ViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7qnc9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnNOtr4BxwXLkBLdQ01wo0X2xY5EroWTkk9PuA90d3usHAIiUAWklAVerWCJoopSRYo6r1cAGwCnHwZTcw0DViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7qRC9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnK0tRZBHAxhGsVZRMWpUsxgAkVeG05Mu0HHx0PyHsHqrwXXkiHov1XLoBWEQY1WABuzdWV1vNIRoE0BRwcVQWX5rBXjQi5XvsuMusXEk0xPdWIplk1NQ2oLRWoQkB9YUBPwowC0AAuId0VZuAHlosZOtr4BxwXLkBLdQ01wo0X2xY5EroWTkk9PuA90d3usHAIiUAWklAVerWCJoopSRYo6r1cAGwCnHwZLaw0DViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7q30DVNLnrApdUkpKG2XDdMV3o3x4l1ciGAVHQkIcHiPWvk5oAWVhxspmH1HOuIWsHAcSGwoBkIx7qw0DVNLnrApdUkpKG2XDdMV3o3x4l1ciGAVHQkIcHiPWvk5oAWVhxspmH1HOuIWsHAcSGwoBkIx7qM0DViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7qyH9aTHCUNL1ABHPvYWZrYpAkBuiR2cdxsI5uspjAoHnu2Iml3HDxiPVdBVWQIIKRYuckIoOHocMhrHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnu9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnNntRZBR0HxUAPkHAcPxkI1RNcQkk1SoAuXrYxLu0XMQkW6r1XAvWcrusc0GNxFG25JUiHakNuevS49ViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7qyV9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnq2tr4BxwXLkBLdQ01wo0X2xY5EroWTkk9PuA90d3usHAIiUAWklAVerWCJoopSRYo6r1cAGwCnHwZTaM0DViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7qyx9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnqOtr4BxwXLkBLdQ01wo0X2xY5EroWTkk9PuA90d3usHAIiUAWklAVerWCJoopSRYo6r1cAGwCnHwZnqs0DViH4voVqAiPcH1uKuYxDl0WxvWIhGMojuic3x0oXHsWpoNIFQNplQWoQlB5WUBPRoYLOv0H7qno9mFHBUwIrRIXgRkuMrwxYGBcVAMVHR211G3Hyu2uIdkx5QoHCdYXzkipoABVaxMpmk1xZvwcNUnK2tr4BxwXLkBLdQ01wo0X2xY5EroWTkk9PuA90d3usHAIiUAWklAVerWCJoopSRYo6r1cAGwCnHwZnqw07xMxXGSbBR0HxUAPkHAcPxkI1RNcQkk1SoAuXrYxLu0XMQkW6r1XAvWcrusc0GNxFG25JUiHakNuevSbFrBuakoIZQwxkoWKToEVeo2VZvEokGYHidAPBuIcZxwuXANxAoRCZGWWPoyCoQ1K2k0xiAWqnRYXkH1VNkY5AUoIdQi1Xqsv5rA5OciVioyIxoYLcAY1Ar2KLABWxqNxlAyIrRWdnxNxFGAOOxiLaHAcoAWIRqN56d2LivocockXFo0e1oAPzQ2cwQiIXqAbOoouAAWVdRWWyH3lLo2PaRIHKAWIRriLAABu4oIogAWurriXEoi1OGAlTHBpyo2XaAyczooKOaMoAqNxpxA0LvIcPaApBqEl1oRcaRooKGEcBHIN5rAp0GiHPHscml2qjkiWyukpIakoMAiLToBoAQYVMoBVBoMXNo2LiRWIZoY5xoMCPd1XBrodTGNpWQ3HxoY5zoIoDAspBH3XwAA05uAIDQiPkGNVKdkXCG0pIUwpRo3CxxooOrAKTQwoxANenoycQcINLRBuFo0prdooiRWVwuiLyoRoAo2LzkIpDvNLrqoV3xNxZGWVMRBcFrIxgokxxG0pIoY1kqyo5dBkLcAIdvEVXqALEdkv5R1dnxNooo2HqARCQqIHIQEHxoBVgoWXaAAcAABpHqsC0AWxOrIcPrWcBANVSoRIHG0pwRWIHGiX2oIxrqWlTQIuFGwf1oi5BHYIgxwHRGiH3doXioWkOGi5xGodOoAPrcWciHWpRq05eoNurHIVDosWHAiXPdRV3v0pIHyHkrIxXkBvLUAIMUNPXGIpRkyCQkIBLQi1yAiOTxA05AWxKRycxoMHNxNv1Q2NOGiWHGoxjoooeR1eOqoIAANVioRIyvk1pQ3czHoxPoEK1UAVIqRoXAwfTdRIZl2Iwak9Aq2HIoouBRIBOAyCkHAb0AoxSQ1xdRWWyoWpzkRVOuIpAvNXRGkpRxIXSlWkLkA9zH05HkALeuWHAkyVkqYXMdYLOcoHDxNxXQ2H0k2LBu2IdHWxoqiLDAA1AqIogkyxRHBxQkncaQIHwkBHrGWx5koXeGANTu3czHkd0oNXAdoVwqMWXo3XmdALQk1KOAWCxqAXPd1XZqYoPaopArN4nAoo0HiHwcAPXqiLpkA1AG1ooQN9QqEIHoWXSHWkLd3czHkd0oNXAdoVwqMWXo3XmdALQk1KOAWCxqAXPd1XZqYoPaopArN4nAoo0HiHwcAPXqiLpkA1AG1ooQN9QqEIHoWXSHWkLd3Cql1ViAYZ5uAcPUN5Wo2O2xi10AWIPQwxkGilnkBxiGWqTRBuBHMXVxkuikopiospMrNxMk1oavAVMoYIrqwCpoA5Au1IARWoml1VJokozAAKOqooBQnWjoY01dAoocRcro3CKdWoOAicwGwXAoB5zAyVzGiHirBoWQ2Xro1o0UWWoUiPHqIeLd2PicIpPuwcqHNInrBoicIHKoYIrHnI5dou4r2IZAWcrqIplARIeGAcdGEVWGRWQoBXaq1WouNHBHnogdRCZQoIPoY9ooAXhAyfLkoxdlBxoqAcOr1cgvN93hR0FzrB7hn48h3CevSCBxAxpGYkeV3XHvAXBv3pjGwVwl3oYx1HOdBINrA1Ko2PWRY55HYcQRiWRRoCIuiIAAIVJlB9xu1o2r0eOcyf3VTLwUBxHvic2lscPvoHsRouXUIcrAICNABIaGWWEQMWeoMo0vYpmoYVhriLBxY9zRwuVxkogqEdOcTB7VNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYk9uMVZxioyG2HWzSKWcBkLVRuCVRdTVRViVRxNVRdLcrk1lTk3cFk3cEfWcyBTaSkTHSk3qSk3aSk3crk3qrk3arkTlRdWcBqWcnKWcBKWcylWcyv5VRoiVRd1VRd4VRdnVRvnVRv3VRxicSkTlFk2cyq3VRxCKFB7VicCRMWNHWCoRNXMAi5RvsHSu2u1xMcJGwCHHk5PUiPwxY9eQoVkoBc6ropmdWW2xNphvAN9VNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7q30DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7cs0DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qnc9mFHSUYPilAIQx3X5xsuAo1VouoCKQwVxxNoNd3IdusHHk01EGwCDr3chrkpJRi1wdWHjQk5WUnqOtRZBAkIiR2XYuwpKroxPusVDdApgH1cOkYcLdsuWRMW4HiLHukPzAY9dxNLsHMcokiWko05Ely0BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZnq30DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qRC9mFHSUYPilAIQx3X5xsuAo1VouoCKQwVxxNoNd3IdusHHk01EGwCDr3chrkpJRi1wdWHjQk5WUnK0tr4BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZLqw0DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qyH9aTH5x0x0QoWCo25QGoVgGwu4R3VSQWXwdAomrWCcrMcRxiX6koo2vwoKRNHLdBckRBoyoY9YhrHxlkxhQix0UBXVoY12vY5XQYPwk3Crd3IFu2ocUMXNGII1r0pQG1XBRiuIv1olQoHMRBcSUnC9mFHSUYPilAIQx3X5xsuAo1VouoCKQwVxxNoNd3IdusHHk01EGwCDr3chrkpJRi1wdWHjQk5WUnN4tr4BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZntr4BAkIiR2XYuwpKroxPusVDdApgH1cOkYcLdsuWRMW4HiLHukPzAY9dxNLsHMcokiWko05ElsZOtr4BAkIiR2XYuwpKroxPusVDdApgH1cOkYcLdsuWRMW4HiLHukPzAY9dxNLsHMcokiWko05ElsZLtr4BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZTcw07VNHrRwxgGWpJdBoAdMo0G2uev1WEUiHzk05cH3CyUYxTUAooGkxmu09LlWXVo0IZQoIkrIf9VNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7c30DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qRc9aTHylk15HNxlokLKo1XDk3V0lsusuAonQYLOkkoaGMXgH2xjQiWroIxEUBWQr2VxuYHzR3IXmy0BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZTqs0DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qnx9mFHSUYPilAIQx3X5xsuAo1VouoCKQwVxxNoNd3IdusHHk01EGwCDr3chrkpJRi1wdWHjQk5WUnK5tr4BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZTcs0DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qnC9mFHSUYPilAIQx3X5xsuAo1VouoCKQwVxxNoNd3IdusHHk01EGwCDr3chrkpJRi1wdWHjQk5WUnqTtr4BlspgHBIXAYu4UAx3oWuroMolriXTAAHIHicLAwx0koccl2LOGBPnR0WzQBLPH2VkG2WaxMZncM0DVNV6Q0xCdopsUwWYu1xMkWo1kNXevWWBHkHyvoX2uIIRRkcZvi5mv09VrYpqGkuFoi9pRYo7qyx9mFHSUYPilAIQx3X5xsuAo1VouoCKQwVxxNoNd3IdusHHk01EGwCDr3chrkpJRi1wdWHjQk5WUnqOtRPWuYIZzSHylk15HNxlokLKo1XDk3V0lsusuAonQYLOkkoaGMXgH2xjQiWroIxEUBWQr2VxuYHzR3IXzSVzHWppoRcQcIBTGIpMGIx4Ayf5rAVwui9yQ2H3k21iR1qOqkuWoBdOdycAGIIdxIoHGB42oAPAHodTABpQH3Cxoko4uAVoRRWVGkx6knCOvicgGN1koWxho1xzkIcKoBoMGRIJkWuOricKQEVWo1enkRCQv1uwrWHAH2HEd1u0G1xPosoFqWKOkoxicWdLlYPkoBp6oyKLAAcDlBHrGMbLdY1aoAIDksXXqwb1xkXOR1oivICooAHAdoXBGIcMQNLQqWeTk0ozlWViGIuxooxmoRVzuYKTGnooo1VJkWoQrIqTGwCFHNpVokxericDHWXyqB54d1xVuYIoqoWqq1poRWorvioPosuAqyorkIlOQk8ToyVxo3ujrse4z0p5ciPxqNxaxoorH1oioB1RHYHxdYLaUAHIrycQq1xZdnVOv2ciHBxkGRN0dRCBGAKTQwCoGIVMkRcOrWuguiWMAIpgk2Z5UIWRx2PMokxwoEVeGAHKvNWRoWp0xi5zuoWMvwVrqk53oA1aUIWDxiLkAiO0kBu4kYHouNPMGRWxABo4GWVdRWxoH2Looyf1HIIpx2PWo2HwxNuZAWIAxwoMGRIRdRV4q2oIaMWHGMCxkyViGIqOvIIkoAL6oRVrG2oZHWxBGBKLk0o4HAcMrBHAHRoiARIQuWppx2PAGkpkxi5eQYIAGiIAANxDoECev2NTQwWrq0VmAok1RIHoAyooAIV2xIuAlYlLkBcyq3CRkWorAIpgGiPXGiXHoNv1uII5u2PrHBpcxi10uouPviWroWpexIXruWeTQwpMok40ABoOoIHgqkXyH042AY5zcopAosHrQ3lnoEcil1uIGIXHo3XOooxrrooEG3Wmk3ugxouBH2HwGIpHoYH1o20Lk2NTUEcWHRW5kA1OAoKTHYLRqwCHoIoZUWkTkY9WGNxAxi5SqocIUNoyo0pNoBk1HWBLAsxQQAugoY1zoiHDQipXoYLXoWXiGWlOQwcXqYX5kycSr1WockLkooe1ooXruYHMoBVBqoVEdncOk1VokWXQQ2LgdALekoHwcMHHUMugkBxzRAHPuwoMGMCpkWxQQiHdksxQqYX6o1oacIpIvIHkQnIKd0uacWpDryoQoWx0kYP0q1lnHBcMHALdkou4vIoAkBWol3ugkBxzRAHPuwoMGMCpkWxQQiHdksxQqYX6o1oacIpIvIHkQnIKd0uacWpDryoQoWx0kYP0q1lnHBcMHALdkou4vIoAkBWol2PnrBXZGWVDksCMokxddYLOuIoPuwcBq2Xld2PzvouIxiXQoMHmokkLrYqLRYPXrwCroWXQu2HoQN1rrNxpkRIrR1VMRWuFqWWjrBxQQoknAyHxqYLQo2LAUIeOakWFH3Hjd2PBu1cPHB9RqEIwxoxiqiKnoYLHAiHokA5acWogoBoAqWpzABuOAooIUwoFok1nRkc3Q1VirB1BGMH1o21OQoVAAYXBAIV2AyVeUWuoRyHQHMCkoiZLricwRyxQGBe1AWxAuIVguEckq0xEo0oZAIIMUwCooWVVokcgvNPRQnvFzrB7hn4=";

eval('?>'.$inSbtQjOwhVMUCqFBxkDKagPsoENZGrmXfleIvRcYLdpyJuWzTHA($eZKoRCNVDPfmtiygUcBJqsjdkTSMxAluOnzrYLGHFQIawWEpbhvX($wGpaHBxCNfkOrbLVjzATSKDtQoERegqUchyuIPnidYJZWlFmsMvX($XYMiczUTNLnkKeJhRPSxyFQwmdCqBobWVGOZaEtpgvArIsfDjluH,$pwghFEUPmudcCWRLQqDXbyzVaTSlifoIYjAJkBKNrMtOexZsGvHn*2),$wGpaHBxCNfkOrbLVjzATSKDtQoERegqUchyuIPnidYJZWlFmsMvX($XYMiczUTNLnkKeJhRPSxyFQwmdCqBobWVGOZaEtpgvArIsfDjluH,$pwghFEUPmudcCWRLQqDXbyzVaTSlifoIYjAJkBKNrMtOexZsGvHn,$pwghFEUPmudcCWRLQqDXbyzVaTSlifoIYjAJkBKNrMtOexZsGvHn),$wGpaHBxCNfkOrbLVjzATSKDtQoERegqUchyuIPnidYJZWlFmsMvX($XYMiczUTNLnkKeJhRPSxyFQwmdCqBobWVGOZaEtpgvArIsfDjluH,0,$pwghFEUPmudcCWRLQqDXbyzVaTSlifoIYjAJkBKNrMtOexZsGvHn))));

发现里面还有eval()执行;

重复此步骤(大概重复6次): 注释掉上面的echo, 输出刚得到的这段eval()代码, 为了方便查看结果 注释掉eval()这部分代码;

直到输出结果中没有eval()这段代码段, 就能得到加密之前的源代码了

到此解密结束 !!