Carbylamine – A PHP Script Encoder to ‘Obfuscate/Encode’ PHP Files


Carbylamine is a PHP Encoder project, which can bypass all leading anti-virus detection against PHP Shells (C99, R57 etc) easily. It can be a very efficient tool for pen-testers when carrying out a black box test which involves inserting malicious code via PHP.

Carbylamine - A PHP Script Encoder to Obfuscate Encode PHP Files


Usage

You can download Carbylamine here:

carbylamine.php

Or read more here.

Posted in: Cryptography, Hacking Tools, Secure Coding


Latest Posts:


Axiom - Pen-Testing Server For Collecting Bug Bounties Axiom – Pen-Testing Server For Collecting Bug Bounties
Project Axiom is a set of utilities for managing a small dynamic infrastructure setup for bug bounty, basically a pen-testing server out of the box with 1-line.
Quasar RAT - Windows Remote Administration Tool Quasar RAT – Windows Remote Administration Tool
Quasar is a fast and light-weight Windows remote administration tool coded in C#. Used for user support through day-to-day administrative work to monitoring.
Pingcastle - Active Directory Security Assessment Tool Pingcastle – Active Directory Security Assessment Tool
PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level based on a risk and maturity framework.
Second Order - Subdomain Takeover Scanner Tool Second Order – Subdomain Takeover Scanner Tool
Second Order Subdomain Takeover Scanner Tool scans web apps for second-order subdomain takeover by crawling the application and collecting URLs (and other data)
Binwalk - Firmware Security Analysis & Extraction Tool Binwalk – Firmware Security Analysis & Extraction Tool
Binwalk is a fast and easy to use Python-based firmware security analysis tool that allows for firmware analysis, reverse engineering & extracting of firmware.
zBang - Privileged Account Threat Detection Tool zBang – Privileged Account Threat Detection Tool
zBang is a risk assessment tool for Privileged Account Threat Detection on a scanned network, organizations & red teams can use it to identify attack vectors


6 Responses to Carbylamine – A PHP Script Encoder to ‘Obfuscate/Encode’ PHP Files

  1. Sjon April 10, 2012 at 11:50 am #

    Really? All this script does is:

    $code = base64_encode(gzdeflate($code)); eval(gzinflate(base64_decode($code));

    I don’t understand this gets posted here.

    • JonS April 10, 2012 at 2:25 pm #

      Other things are also there, mate ! Look carefully !

    • Darknet April 10, 2012 at 4:22 pm #

      Submit something awesome that you’ve written, it’ll probably get posted too :)

  2. Sro April 23, 2012 at 6:09 pm #

    For PT, i use basic file