PHPackages                             cvar1984/yapo - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Utility & Helpers](/categories/utility)
4. /
5. cvar1984/yapo

ActiveApplication[Utility & Helpers](/categories/utility)

cvar1984/yapo
=============

Yet another php obfuscator

v1.0.0(2y ago)33148[1 PRs](https://github.com/Cvar1984/yapo/pulls)GPL-3.0-onlyPHPCI passing

Since Jun 30Pushed 3mo ago4 watchersCompare

[ Source](https://github.com/Cvar1984/yapo)[ Packagist](https://packagist.org/packages/cvar1984/yapo)[ GitHub Sponsors](https://github.com/Cvar1984)[ RSS](/packages/cvar1984-yapo/feed)WikiDiscussions master Synced 3d ago

READMEChangelog (5)Dependencies (2)Versions (8)Used By (0)

Yet another PHP Obfuscator
==========================

[](#yet-another-php-obfuscator)

[![CodeFactor](https://camo.githubusercontent.com/c6d815be958d8e44ddb67c90529ac7e56bc42398f35325874a10e2f744ddbf84/68747470733a2f2f7777772e636f6465666163746f722e696f2f7265706f7369746f72792f6769746875622f63766172313938342f7961706f2f6261646765)](https://www.codefactor.io/repository/github/cvar1984/yapo)

this tools able to (de)compress your php shellcode string and inject common file signature like jpeg to fuck webserver uploader or malware string scanner like what i made before. no need to install whole shit, just download the single phar executable file and fuck them all. you can download it from [Here](bin/yapo) or [here](https://github.com/Cvar1984/yapo/releases/).

and also your shellcode won't works if the server disable fopen, fseek, fwrite, fclose, and include.

> DISCLAIMER use eval to obfuscate is gay

### command

[](#command)

```
yapo make  ...
```

### single compress

[](#single-compress)

```
yapo make jpeg shell.php
```

### multiple file compress without signature injection

[](#multiple-file-compress-without-signature-injection)

```
yapo make whatever shell1.php shell2.php
```

### multiple file compress using find

[](#multiple-file-compress-using-find)

```
find ./myproject -type f -name \*.php -exec yapo make jpeg {} +\;
```

Demo
----

[](#demo)

[![asciicast](https://camo.githubusercontent.com/cfbc23fffa2050a142f0e3df589e66da720515bd746863069cd6f3d8928f4295/68747470733a2f2f61736369696e656d612e6f72672f612f3534353138352e737667)](https://asciinema.org/a/545185)

signature
---------

[](#signature)

- jpeg: FFD8FFE2
- jpg: FFD8FFE2
- mp4: 1A45DFA3
- mpeg: 1A45DFA3
- luac: 1B4C7561
- lua: 1B4C7561
- zip: 504B0304
- pdf: %PDF-0-1
- mp3: 494433
- nes: 4E45531A
- linux: #!/usr/bin/env php
- shebang: #!/usr/bin/env php
- random string: none

[Full definition](src/Yapo/Yapo.php)

[Compression method](http://www.faqs.org/rfcs/rfc1951.html)

[Contributing](CONTRIBUTING.md)

###  Health Score

39

—

LowBetter than 86% of packages

Maintenance54

Moderate activity, may be stable

Popularity18

Limited adoption so far

Community14

Small or concentrated contributor base

Maturity60

Established project with proven stability

 Bus Factor1

Top contributor holds 90.9% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~318 days

Total

5

Last Release

871d ago

Major Versions

0.0.4 → v1.0.02023-12-26

### Community

Maintainers

![](https://www.gravatar.com/avatar/a4aeee6986491786f84713a9f2f641e072423b289fd381e008525487509788cd?d=identicon)[Cvar1984](/maintainers/Cvar1984)

---

Top Contributors

[![Cvar1984](https://avatars.githubusercontent.com/u/32727560?v=4)](https://github.com/Cvar1984 "Cvar1984 (30 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (3 commits)")

---

Tags

backdoorscompilerencoderhackinghacktoberfestobfuscateobfuscationphpshellcodewebshell

### Embed Badge

![Health badge](/badges/cvar1984-yapo/health.svg)

```
[![Health](https://phpackages.com/badges/cvar1984-yapo/health.svg)](https://phpackages.com/packages/cvar1984-yapo)
```

###  Alternatives

[coenjacobs/mozart

Composes all dependencies as a package inside a WordPress plugin

4723.6M20](/packages/coenjacobs-mozart)[php-soap/wsdl

Deals with WSDLs

173.5M12](/packages/php-soap-wsdl)[phel-lang/phel-lang

Phel is a functional programming language that compiles to PHP

4743.5k10](/packages/phel-lang-phel-lang)[symfony/ai-bundle

Integration bundle for Symfony AI components

30282.3k6](/packages/symfony-ai-bundle)[aedart/athenaeum

Athenaeum is a mono repository; a collection of various PHP packages

245.2k](/packages/aedart-athenaeum)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)