2

I'm trying to reverse engineer a PHP obfuscator. I know that it pre-compiles the PHP to bytecode, so the recovery of original PHP source is out of scope, but I would still like to get the bytecode out. The problem is that I don't know what it looks like. I can see stuff being decoded in memory (e.g. I encode echo "abcdefg"; and I can see the string in memory, but I'm not sure where does the bytecode start or what is the structure of it). Is there any documentation or examples of PHP byteccode online?

  • See this – 0xec Aug 15 '14 at 2:43
  • @ExtremeCoders, this is opcodes, I'm looking for bytecode, i.e. actual representation of opcodes in memory. – valentinas Aug 17 '14 at 7:00
3

I found out that there is no specification of what the PHP bytecode should look like, so vendors implement it differently. So technically there is no such thing as "php bytecode", it only exists when talking about a particular engine, e.g. "zend bytecode".

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.