bediger4000 / reverse-php-malware

De-obfuscate and reverse engineer PHP malware
MIT License
77 stars 32 forks source link

Variable renaming #1

Closed bediger4000 closed 5 years ago

bediger4000 commented 5 years ago

When run with "-R" flag, does its best to rename any indirect variables it can. That is, when it encounters a variable that gets assigned to, it tries to unravel the "true name" of the variable through indirects, array dim fetches, etc, and replace the indirect-naming-code with the variable's true name.