1. PHP Obfuscator
Hanafi Ali Jan, ST, C|EH
Security Analyst #HaNJiaN

2. Obfuscate
• Kebingungan
• Kesulitan
• Di Mengerti Manusia Super
• Tidak di Mengerti Manusia
Biasa
• XOR, Base64, SHA, MD5.

3. How to Build Source Obfsucator ???
Understand Server Script (PHP, ASP, JSP)
Shell OS
Assembler & C Lenguage
C # for Control it

4. PHP Original
<?php
echo "Hello World!!";
?>

5. Encode in PHP
<?php $UIHq =
'ICRRV0lqID0gJ0lDUkZSM1ZtSUQwZ0owbERVbk5WTWxaT1NVUXdaMG93YkVSVmJGc
HNWMFphTkZOVlVYZGFNRzkzWWtWU1ZtSllVbFpXTUZwM1l6Rk9WbFZZWkdGTlJ6a3
pXV3RXYjFZeVNsbFJiVGxXWW01Q2RsbHRlRTlYUjFKSVQxZHNVMDFJUWtwWGJGWnZ
XVlpPYzFOdVVsWmhhM0JoVkZkd1JrMUdiRlZSYms1WFVtdHdXVmxyV2tOaVJscFdWbFJ
XVkdKdVFqWlpWRVozWkVVNVNGcEdSbFpOUlZveFZUSjBiMVV5VG5SVmJrSlNWa2Q0
UzFWcVFuZGlNV3cyVTJ4YVRtRjZWa2hVTVdRd1dWWlpkMDVVU2xoaE1sSlhXV3BDZDF
OR1ZuSk9WM1JwVm14YU0xWkVUbk5STWtwSVZXNVNVMkpyTlUxVlZFWktaREZzVlZS
c2NHcFNWR3N4VjFod2ExbFdaRWRqUnpsYVlUQTFkVmxVUm5ka1JUbEpVV3hDYTJWc
VFUVlRibkI2WVRGVmVHSXlaRkZWTUVaMVUydGtVMWRHU2xSUlZHeEtVakJ3YjFsNlNs
Wk5helZIVDFkMFlWWXdOVEpYYTJSV1lqQndSMVpxVm10WFJWWjNWRE5zUTJKSFVu
UlNiazVNVVRGS2NsWnFRbFpqUlRrMVdYcGtZVmRHY0c5WmEwNXVZVEZWZUdJelFsQ
mtlakE1U25wemEyUnNZMmRRVTBGdVNrWk9hVmxwUVRsSlIwcG9ZekpWTWs1R09X
dGFWMDUyV2tkVmIwcEhlRlJhVlRCd1QzbENiR1J0Um5OTFExSlVXVzFKY0U5NVl6ZGFX
RnBvWWtObmEyUnNZM0JQZHowOUp6c2tXV29nUFNBbkpIRlBheUE5SUdKaGMyVTJO
RjlrWldOdlpHVW9KRVZIZFdZcE95QmxkbUZzS0NSeFQyc3BPeWM3WlhaaGJDZ2tXV29
wT3c9PSc7JEZIID0gJyRQbVEgPSBiYXNlNjRfZGVjb2RlKCRRV0lqKTsgZXZhbCgkUG1RKTsn
O2V2YWwoJEZIKTs=';$Wt = '$puw = base64_decode($UIHq);
eval($puw);';eval($Wt);?>

6. Source & Reference
• http://www.raizlabs.com/software/phpobfuscator/
• http://en.wikipedia.org
• http://google.com