WordPress.org

Ready to get started?Download WordPress

Forums

[closed] Theme decoding thread (449 posts)

  1. elfin
    Moderator
    Posted 3 years ago #

    Oh it can be done, but I don't think it is a simple job looking at just that portion of code.

  2. johnburn
    Member
    Posted 3 years ago #

    @Caloz:
    I already tried it before suggesting it and it works so I guess you miss something. Anyway, here is the cleaner version of the theme with all of those nonsense check removed if you interested:
    http://zongeek.net/Quality_Time.zip

  3. elfin
    Moderator
    Posted 3 years ago #

    @johnburn - I'll bow to your greater knowledge ;)

  4. ClwnMan76
    Member
    Posted 3 years ago #

    First off, let me apologize for posting this here. I am one of those people that will search the whole internet trying to find the answer instead of taking the easy way out and just asking in a forum. However... I don't know if I've done it correctly or not. Thanks in advance for your help!!! http://pastebin.com/EpRdi5PW

    P.S. After spending about 1.5 hours on this I'll bet it takes one of you 30 seconds. LOL

    ~Todd~

  5. johnburn
    Member
    Posted 3 years ago #

    @ClwnMan76:
    http://pastebin.com/ALFkGQXL

    Just replace:
    eval(gzinflate(base64_decode(

    with:
    echo htmlentities(gzinflate(base64_decode(

    so yes, its not that hard to deobfuscate this LOL

  6. Caloz
    Member
    Posted 3 years ago #

    @johnburn

    :-)))) it works! Thank you again! I really appreciated your help!!!

  7. thejudge
    Member
    Posted 3 years ago #

    guys i have a litle problem with this cripted footer can you decript for me ? thx in advance

    http://pastebin.com/0iJJcx9y

  8. Samuel B
    moderator
    Posted 3 years ago #

  9. thejudge
    Member
    Posted 3 years ago #

    thx samuel\
    Untyl some weeks ago i thought joomla is best... but when i discover wordpress heh... no words to describe`it :P

    thx again

  10. back1
    Member
    Posted 3 years ago #

    http://pastebin.com/LDa9WKqw

    help me please, thx.

  11. Samuel B
    moderator
    Posted 3 years ago #

  12. back1
    Member
    Posted 3 years ago #

    Thank you Samuel B

  13. amanonline
    Member
    Posted 3 years ago #

    Please decode this...

    <?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
    $o="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";eval(base64_decode("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"));return;?>

    With thanks..

  14. johnburn
    Member
    Posted 3 years ago #

  15. amanonline
    Member
    Posted 3 years ago #

    @johnburn
    Thanks a lot friend.
    Its working. Great work..

    Thanks again.

  16. kingzer
    Member
    Posted 3 years ago #

    Wow thank you :)

  17. OMGIrene
    Member
    Posted 3 years ago #

    does this mean we shouldn't encrypt our own themes we create and use for ourselves?

  18. mrmist
    Forum Janitor
    Posted 3 years ago #

    does this mean we shouldn't encrypt our own themes we create and use for ourselves?

    In that case, who are you encrypting it from?

  19. Jorditan24
    Member
    Posted 3 years ago #

    Decode this please.!

    <?php
    echo gzinflate(str_rot13(base64_decode('aEXBd8MwDL0P9g+aD3CDJb5iiQs9erdOCz0Ox0RvE8c2ttpD2MfPVrsWU2qTnp70noQq3pqDqB6KglTTeFemxVPGohD3atW1prwjZ7TAuZAh2JCMBJ33hBFB/Bn+tCgTT+vBbIKIoz8gkFOwxg0JjFuSRlsJWy3dAFS/L88jsiIoK0aqmcqTIhN0F2bBtDU7aLKZuwo65IHK7luEJ9ZMo4ZLc5A9v61zTxBbjXA2g8n0Dlt1jkNW0BG7mnai8Mr5NFql9okiHgxBPeKQV+VUBmy9HqlzX43NHmZhyG/NadgkUAjvuce4nok/QMWlgGKADwfKWysbHyUZ72AypGKqKxldEyXqvJjN2uV+4Be5tZV3CN5bS3T/j7COKIdBJm/i39J54eWmR9oHjJOPeoiYEs3HTLa96npzBux+KbAcMDFkG5+VyoqHy7Ms32SOKt749rgEmlObgx8=')));
    ?>

  20. johnburn
    Member
    Posted 3 years ago #

  21. ninja
    Member
    Posted 3 years ago #

    Tried many decoders but still couldn't decode this one. Please help. Thanks. http://wordpress.pastebin.com/TDYYj3eV

  22. johnburn
    Member
    Posted 3 years ago #

  23. ninja
    Member
    Posted 3 years ago #

    @johnburn thank you! btw just curious how do u do it?

  24. johnburn
    Member
    Posted 3 years ago #

    @kim:
    It's pretty much the same as my previous reply to ClwnMan76 (see above). You just need to understand the flow of the code

  25. Millerspcrepair
    Member
    Posted 3 years ago #

    Hey John I am im Major Need to get this decoded. Been up for Hours trying to figure this Thing out.

    <?php // /* */
    $OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=50560;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';eval(($$O0O0000O0('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')));return;?>

  26. johnburn
    Member
    Posted 3 years ago #

    @Millerspcrepair:
    Are you sure thats the whole script? Seems like its not a valid script obfuscate with phplockit. There should be some base64 encoded string after return;?>

  27. Millerspcrepair
    Member
    Posted 3 years ago #

    I am Not sure what typ Of Code it is But Yes thats the whole code.

  28. Millerspcrepair
    Member
    Posted 3 years ago #

    There is a Long Piece of code Directly after.

    [paste large blocks of code at pastebin.com]

  29. Millerspcrepair
    Member
    Posted 3 years ago #

    Then This Code Directly After sorry wouldnt let me post the whole this at once

    [paste large blocks of code at pastebin.com]

  30. Millerspcrepair
    Member
    Posted 3 years ago #

    [paste large blocks of code at pastebin.com]

Topic Closed

This topic has been closed to new replies.