Non-alpha PHP code

Re: Non-alpha PHP code

Gareth Heyes — Mon, 26 Sep 2011 12:41:41 -0500

And I decided to be lazy and make a better one:

[hackvertor.co.uk]

Quoteless, underscoreless, this calls assert and chr for every char and will allow you to generate anything.

Re: Non-alpha PHP code

Gareth Heyes — Thu, 22 Sep 2011 19:05:12 -0500

Stefen Esser (of course) found the shortest way to create an array:
@$§[]=$§;

So here we need to convert it to strings and get "_" for complete non-alpha without quotes or underscore. I wonder how small it can get? :D

Here's how to get underscore: $§[]=$§;$§=$§.$§;$§§=+$§;$§[+$§§++]|($§[$§§+$§§+$§§]^);

I started work on a basic generator, lots of chars still missing;


(function(){   

//externals
params = ['Ϩ'];
code = 'array0123456789';
//end externals

           var i,        
           output = '', lookup;
    output += '';
    output += '';
    return output;
})();

Re: Non-alpha PHP code

barbarianbob — Thu, 22 Sep 2011 18:26:38 -0500

Not part of the new minification effort, but that bitwise stuff is really good for obfuscation.

Ex:

$create_function = '`pd`td_dtl`thll'|'cbaa`a_babc`acb';
$register_shutdown_function = 'pddhptdp_phttdltl_dtl`thll'|'bacac`ab_c`a``ccb_babc`acb';

$shell = 'var_dump(123);';

$register_shutdown_function($create_function('', $shell));

Here all the var names can be changed, but you can still get the func names as strings without actually writing them. This would make it impossible to find just by grepping through the source.

Half-assed code to generate the strings:

$str='create_function';
$part1 = '';
$part2 = '';
for($a=0;$a 'z'){
    $part1.=$chr;
    $part2.=$chr;
    continue;
  }
  $num = ord($chr);
  $bin = substr(str_pad(base_convert($num, 10, 2), 8, '0', STR_PAD_LEFT), 0, 8);
  $part1.=chr(base_convert('011'.substr($bin,3,3).'00', 2, 10));
  $part2.=chr(base_convert('011000'.substr($bin,6,2), 2, 10));
}
var_dump(
  $part1,
  $part2,
  $part1 | $part2
);

Non-alpha PHP code

Gareth Heyes — Thu, 22 Sep 2011 11:59:47 -0500

I guess the fun can begin all over again :D

[www.thespanner.co.uk]