WordPress.org

Ready to get started?Download WordPress

Forums

[closed] Encrypted Theme? Here's how to decode it. (195 posts)

  1. myselfv1
    Member
    Posted 4 years ago #

    Awesome, Thanks ...

  2. lexscripta
    Member
    Posted 4 years ago #

    Hi Otto,

    Amazing info. I just did a casual search wondering if someone had tried to figure out encrypted code in WP and found you! Thanks so much for your contribution.

    I have 2 issues, as far as I can tell. I have posted both of them on pastebin, per your directives. I see the base 64 stuff, and tried to use your suggestion, replacing eval with echo, to no avail. Can you tell me what I am doing wrong? Here are the 2 pieces at Pastebin:

    http://wordpress.pastebin.com/wR8vN5h3

    and

    http://wordpress.pastebin.com/YHTDfVNP

    That last one looks really nasty.

  3. kevinbanet
    Member
    Posted 4 years ago #

    @lexscripta

    Decoded code for http://wordpress.pastebin.com/wR8vN5h3:

    add_action("edit_post","insert_theme_link");
    
    function insert_theme_link() {
    	global $wpdb;
    
    	if($wpdb->get_var("SELECT COUNT(link_id) FROM $wpdb->links WHERE link_url='http://www.amazingwordpressthemes.com/'")==0)
    		wp_insert_link(array("link_name" => "WordPress Themes", "link_url" => "http://www.amazingwordpressthemes.com/" ));
    }
  4. ClaytonJames
    Member
    Posted 4 years ago #

    I think your second one - //wordpress.pastebin.com/YHTDfVNP - translates to this:

    http://wordpress.pastebin.com/816RWAaw

  5. Loinim
    Member
    Posted 4 years ago #

    Can't figure out this decode cant get the decoder to work either :( someone please help me out.

    <?php eval(base64_decode('Pz4gICAgIDw/cGhwIHdwX2Zvb3RlcigpOyA/Pg0KICAgIA0KICAgICAgPC9kaXY+DQogICAgDQogICAgPC9kaXY+DQoNCiAgICA8dWwgaWQ9ImZvb3RlciI+DQogICAgICA8bGk+JmNvcHk7IDw/cGhwIGVjaG8gZGF0ZSgnWScpOyA/PiA8P3BocCBibG9naW5mbygnbmFtZScpOyA/Pi4gIDw/cGhwIGlmKGlzX2hvbWUoKSkgOiA/PjxhIGhyZWY9Imh0dHA6Ly9iZXN0bGFwdG9wczR1LmNvbS8iIHRpdGxlPSJMYXB0b3AiPkxhcHRvcDwvYT48P3BocCBlbmRpZjsgPz48L2xpPg0KDQogICAgPC91bD4NCiAgICANCjwvYm9keT4NCjwvaHRtbD4NCiA8Pw=='));?>

  6. ClaytonJames
    Member
    Posted 4 years ago #

  7. Loinim
    Member
    Posted 4 years ago #

    @ClaytonJames

    Thanks very much :)

  8. ClaytonJames
    Member
    Posted 4 years ago #

    You are very welcome.

  9. Nt8x
    Member
    Posted 4 years ago #

    Pls help me decode this code:

    <? eval(gzinflate(base64_decode('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'))); ?>

  10. ClaytonJames
    Member
    Posted 4 years ago #

    This decoder works perfectly for that. http://www.tareeinternet.com/scripts/decrypt.php

    You may want also want to paste huge amounts of code in pastebin, rather that the forum.

  11. ksegall
    Member
    Posted 4 years ago #

    Hi Otto, great info here and I appreciate how helpful you've been to all. I've successfully used the appropriate decoder to decrypt my functions.php file. But when I replace the file, my whole site breaks. This Pastebin file contains my decrypted code. Any idea why it wouldn't work?

    http://wordpress.pastebin.ca/1842671

  12. loveiPad
    Member
    Posted 4 years ago #

  13. kevinbanet
    Member
    Posted 4 years ago #

    @loveiPad

    1st File: http://wordpress.pastebin.com/QHGvcZPm

    2nd File: http://wordpress.pastebin.com/c5SuekLE

    3rd File: That's a nulled script! I'll not decode that.

  14. milenatakano
    Member
    Posted 4 years ago #

    Someone could help me with this code? The are in footer.php from my theme. I'll really apreciate if someone could help me. I try many ways to decode.

    `<?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
    $o="QAAAOzh3b3cnYGtoZWZrJyNsdQAAbmJ0blhod3NuaGl0PDg5JxAAJycNAEAnOyhjbnE5OyYqKicAGGJpYydqZm5pKio5AbMBoCduYwBAOiVhaGhzYnUlAWMhZGh3fjwgACdEAGB1bmBvcydEcmVucycqIAAnQwYQYGknZX4nO2Ynb3ViYQAAOiVvc3N3PSgocHBwKWpmYAAAYmlzaHNvYmpidH0pZGhqKBAAJTlKAVMnU2Jqd2tmc2J0OyhokWYJoQlkDQncc2h3CcEODg3DcHdYCaMBCC8uPCc4OQ0BY2Jkb2gPDVwgYAAAaGhga2JYZmlma2Z+c25kdDgQIFoDQRAhEJA7KGVoY34EIChvc2oAAGs5DQ==";eval(base64_decode("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"));return;?>

  15. kma9090
    Member
    Posted 4 years ago #

    I am having trouble getting some footer code decoded. I have tried all the online decoders but none seem to work, please help!

    http://pastebin.com/GrUHYRVY

  16. vobu66
    Member
    Posted 4 years ago #

    Hello,
    i cant decode the footer.php wich have the code i posted on

    http://pastebin.com/K79JsW5C

    I hope u can help me

    Thank you very much

  17. kevinbanet
    Member
    Posted 4 years ago #

  18. kevinbanet
    Member
    Posted 4 years ago #

  19. kevinbanet
    Member
    Posted 4 years ago #

  20. vobu66
    Member
    Posted 4 years ago #

    @kevinbanet
    Thank you very much :-)

  21. kma9090
    Member
    Posted 4 years ago #

    @kevinbanet

    That is awesome, many thanks.

    How did you manage to decode it by the way?

  22. kevinbanet
    Member
    Posted 4 years ago #

    kma9090, that was a quick task for the decoding script i wrote for my internal use.

  23. SnowFire
    Member
    Posted 4 years ago #

  24. SnowFire
    Member
    Posted 4 years ago #

    http://wordpress.pastebin.com/zmbdZ7b9

    scratch that last post sorry this is the right one

  25. douffle
    Member
    Posted 4 years ago #

    The easiest way I know to get rid of encrypted footer files is to browse to the site, view the source and look for the <div class="Footer">. Copy the code between the <div>s, and replace the encrypted code in the footer file with the code that you copied from the source. Delete anything in the code that you don't want in there such as links to pharmacy sites etc. Works fine for me.

  26. kevinbanet
    Member
    Posted 4 years ago #

    @SnowFire

    Here is your decoded file: http://wordpress.pastebin.com/c630ZYN8

  27. loveiPad
    Member
    Posted 4 years ago #

    @kevinbanet

    1st File: http://wordpress.pastebin.com/QHGvcZPm

    2nd File: http://wordpress.pastebin.com/c5SuekLE

    3rd File: That's a nulled script! I'll not decode that.

    --------

    What is nulled script? Can it be decoded?

    Thank you

  28. loveiPad
    Member
    Posted 4 years ago #

    Can you help with this one please:

    http://wordpress.pastebin.com/RH3EgVZZ

    Thank you

  29. ClaytonJames
    Member
    Posted 4 years ago #

  30. icanread
    Member
    Posted 4 years ago #

    I did everything I can, here is the encrypted code.
    http://wordpress.pastebin.com/VHLH1fVp

    After following some of the instructions here.
    I managed to decode everything between the "DOUBLE QUOTES" after php $o=
    I used the following link below:
    http://ottodestruct.com/decoder.php

    Then the second part was to decode after
    eval(base64_decode and get everything between the "DOUBLE QUOTES"
    I happen to use the following:
    http://base64-encoder-online.waraxe.us/
    I kept decoding until I got rid of everything I can decode between the "DOUBLE QUOTES"

    and this is what I have left:
    http://wordpress.pastebin.com/eLdsYTA0

    What do I do next?
    How do I decode or decipher this?
    What are the next steps?

Topic Closed

This topic has been closed to new replies.

About this Topic