PHP Modification for Code Encryption -- 2
Budget: $105 – $300 USD
A freelancer is needed who knows C/C++ to modify the PHP binary for platforms (Ubuntu 18, 20, 22) and develop a tool to encrypt the .php source code, making it executable only with the modified binary.
It would be best to modify the binary so it can interpret the encrypted code, rather than creating a plugin for the PHP binary, as this would give clear hints to those attempting reverse engineering about where to start. Therefore, modifying the binary internally leaves fewer clues about the steps of interpreting the encrypted code.
Additionally, it is required that:
1. The encrypted code generated by the encryption tool validates if it is running with the modified binary.
2. Disable these functions within the core and not within php.ini: debug_print_backtrace; debug_backtrace; auto_prepend_file and extensions like xdebug.
3. Rename internal PHP functions (file_get_contents, count(), intval, json_decode, json_encode, etc.) with obfuscated names so that if someone manages to decrypt it, they won't understand the functionality.
4. Implement a mechanism that allows defining specific execution paths (whitelisting) to ensure that only PHP scripts located in authorized directories are executed.
5. Include hashes or checksums of the encrypted PHP files and validate them at runtime to ensure they haven't been altered.
6. Integrate a monitoring and alert system to inform about anomalous behaviors or attempts to access the modified binary.
Payment will be at the maximum value only if all the above requirements are met and if the results are truly difficult to do reverse engineer. Additionally, progress will be monitored using Git within GitHub.
It would be best to modify the binary so it can interpret the encrypted code, rather than creating a plugin for the PHP binary, as this would give clear hints to those attempting reverse engineering about where to start. Therefore, modifying the binary internally leaves fewer clues about the steps of interpreting the encrypted code.
Additionally, it is required that:
1. The encrypted code generated by the encryption tool validates if it is running with the modified binary.
2. Disable these functions within the core and not within php.ini: debug_print_backtrace; debug_backtrace; auto_prepend_file and extensions like xdebug.
3. Rename internal PHP functions (file_get_contents, count(), intval, json_decode, json_encode, etc.) with obfuscated names so that if someone manages to decrypt it, they won't understand the functionality.
4. Implement a mechanism that allows defining specific execution paths (whitelisting) to ensure that only PHP scripts located in authorized directories are executed.
5. Include hashes or checksums of the encrypted PHP files and validate them at runtime to ensure they haven't been altered.
6. Integrate a monitoring and alert system to inform about anomalous behaviors or attempts to access the modified binary.
Payment will be at the maximum value only if all the above requirements are met and if the results are truly difficult to do reverse engineer. Additionally, progress will be monitored using Git within GitHub.