rukov Posted February 24, 2016 Report Posted February 24, 2016 PCL's PHPiD - a program to determine what is encrypted or processed by a PHP-script, only accounts for about 80 different treads and obfuscators. PCL's PHPiD is one of the modules of the project closed Massacre, equipped with a graphical user interface (file phpid.exe), as well as the console version of the program (file phpid_ce.exe). Search mostly performed on signatures, so it is theoretically possible error in identification, but I still did not come across such scripts. Also some Obfuscators use similar algorithms (eg, PHP LockIt! And PHP Defender) and outlet give practically the same result. In this case, to determine exactly what the script is processed, it does not, and the closest option is selected. Scripts can also be transferred via the command line and drag'n'drop. Defined protectors: AROHA PHPencoder BCompiler ByteRun Protector for PHP ByteScrambler CNCrypto CodeCanyon PHP Encoder CodeLock (incl. Protection module) CodeLock Tracker CodeTangler Pro DWebEncoder Easy PHP Encrypt Encode PHP Encript PHP Encoder EziScript Encoder FDE PHP Encoder Frecosse PHP Encoder FREE Encrypted PHP Free Online PHP Obfuscator Free PHP Encoder G-Encoder gencoder GPE PHP Encoder HidePHP IcePHP ionCube PHP Encoder Illumination Encoder PHP MavorsGuard Monas NET-TEC PHP-ENCODER NuSphere Nu-Coder 1.4, 2.0, 3.0 Obfusc (Basic / Normal, ShowObfuscate) Ocjoy PHP Encoder Online PHP Script Encoder (1) Online PHP Script Encoder (2) PHP Compact PHP Encoder PHP Locker PHP LockIt! 1.8, 2.0, 2.1, 2.2 (incl. GZIP) PHP Source Protector PHP kriptor PHPCipher PHPCodeLock (Hacked PHP LockIt! 2.0.4.0) PHPCoder / eAccelerator PHPshadow phpSHIELD PHTML Encoder (binary mode, self-decodeable) Remiya PHP Compress / Obfuscate Rucros PHP Obfuscator SourceCop (incl. Protection module) SourceGuardian for PHP TrueBug PHP Encoder 1.0.2 (incl. GZIP), 1.0.3 / 1.0.4 TrueBug PHP Obfuscator & Encoder 1.1, 1.2 TrueBug PHP Obfuscator 2.0 Turck MMCache Encoder Xhanch Studio PHP Encoder Xmofo Encoder ZenCrypt Zend Encoder / Zend SafeGuard Suite ZoneCoders Encoder (incl. Protection module) Zorex PHP CryptZ (incl. Protection module) Unknown PHP Encoder (type 1) Defined Obfuscators: Amiro CMS Obfuscator Best PHP Obfuscator JDV PHP Obfuscator PHP Defender PHP LockIt! (Obfuscation mode) PHP Obfuscator PHP Obfuscator by DX PHP Unreader PHP protect POBS - PHP Obfuscator Processed by De-Zender Raizlabs PHP Obfuscator Semantic Designs Obfuscator SWIFT Panel Obfuscator srcProtector TrueBug PHP Obfuscator & Encoder (Obfuscation mode) UMI.CMS Obfuscator Very Simple PHP Obfuscator Webfuscator Learn more about some of the protectors of this list, you can read my article about protection scripts. If you still have any stuff that is not in the list or is not defined PCL's PHPiD, please send me a link to it and / or samples of the protected scripts via the feedback form. "112 244" to send code. I will be very grateful. Return codes for the console versions of the program (ERRORLEVEL): 0 = No error 1 = command-line parameters are not set 2 = file not found or system error occurred 3 = very large file Example use phpid_ce.bat file. The output from the console version goes to stdout,, so that it can forward as you wish, for example, write to the file or transfer to another treatment program. PCL's PHPiD supports custom plug-ins (for example, the analyzer module from JSiD), so theoretically it can be used to analyze the files of any format. Plugin files are DLL-library format and must be placed in the folder \ plugins. An example of the plugin on FASM is there. If you write something your plugins, most please send them to me and I'll include them in the distribution. Download http://www.manhunter.ru/download/484/PHPiD.2.1.Public.Release-PCL.zip Quote
