WordPress.org

Ready to get started?Download WordPress

Forums

[closed] Theme decoding thread (449 posts)

  1. mrmist
    Forum Janitor
    Posted 4 years ago #

    First read this information.

    Seriously, READ THAT THREAD BEFORE POSTING HERE. That thread will give you details on how to decrypt these sort of things yourself. Almost everything posted here has been something that could have been easily decrypted by simply reading that post.

    We recommend that you do not use encrypted themes. Encryption is often used to insert malicious code. Decoding part of an encrypted theme does not mean that it is all clean. If you choose to use an encrypted theme, it is at your own risk.

    If your theme has been posted under a non-GPL license, it may be against the terms of the theme to attempt to decode it or to have someone else decode it for you.

    If you can't decode your own encrypted themes using this information and still want to use one rather than pick from the thousands of themes that don't have obfuscated code in them, post your request for decryption in here, and maybe someone will help you out.

    Note

    • Code should be place into a pastebin, not into this thread.
    • Decoding the theme does not guarantee safety from malicious code.
    • Seperate decoding threads will be closed.
    • Best practice is to avoid such websites that distribute malicious code in themes (most of them just provide ripped knockoff themes, why trust these people?)
  2. marksweb
    Member
    Posted 4 years ago #

    Hi, the encryption on this breaks the decryption tool but I'd appreciate it if somebody was able to help me.

    http://wordpress.pastebin.com/ZfvrfMtS

    thank you.

  3. jimaek
    Member
    Posted 4 years ago #

  4. marksweb
    Member
    Posted 4 years ago #

    hmm. Thats causing a lot of code to be displayed in the index. I'll have to have a play around.

    Thanks though :D

  5. zohner
    Member
    Posted 4 years ago #

    I've been trying every decoder I can find and nothing can seem to crack this. Any help would be greatly appreciated.

    http://wordpress.pastebin.ca/1894722

  6. johnomcg
    Member
    Posted 4 years ago #

  7. axokool
    Member
    Posted 4 years ago #

    can some 1 please help me decode this.. http://wordpress.pastebin.com/yQ6zS6vv

  8. sojib2bd
    Member
    Posted 3 years ago #

    Hi all Expert,
    I use this link for decode but i didn't get a a solution.
    http://ottodestruct.com/decoder.php

    Please help me for decode my code given below.
    Please give me the real code .....

    [Large code excerpt removed by moderator. Per forum rules, please use the pastebin for all large code excerpts. It works better anyway.]

  9. SparkGirl
    Member
    Posted 3 years ago #

    Can someone please decode? Pretty please with sugar on top?

    http://wordpress.pastebin.ca/1905923

  10. Icer
    Member
    Posted 3 years ago #

    <?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited.
    $OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=2092;eval((base64_decode('JE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO3doaWxlKC0tJE8wME8wME8wMClmZ2V0cygkTzAwME8wTzAwLDEwMjQpO2ZnZXRzKCRPMDAwTzBPMDAsNDA5Nik7JE9PMDBPMDBPMD0oYmFzZTY0X2RlY29kZShzdHJ0cihmcmVhZCgkTzAwME8wTzAwLDM3MiksJ0VudGVyeW91d2toUkhZS05XT1VUQWFCYkNjRGRGZkdnSWlKakxsTW1QcFFxU3NWdlh4WnowMTIzNDU2Nzg5Ky89JywnQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODkrLycpKSk7ZXZhbCgkT08wME8wME8wKTs=')));return;?>
    kr9NHenNHenNHe1lFMamb3klFoxiC2APk19gOLlHOa9gkZXJkZwVkr9NTznNHr8XHt4JkZwShokiF2A2Yy9LcBYvcoAPF3OZfuwPcmklCBWPkr8XHenNHr8XHtXLT08XHr8XHeEXhUXmOB50cbk5d3a3D2iUUylRTlfNaaOnCAkJW2YrcrcMO2fkDApQToxYdanXAbyTF1c2BuiDGjExHjH0YTC3KeLqRz0mRtfnWLYrOAcuUrlhU0xYTL9WAakTayaBa1icBMyJC2OlcMfPDBpqdo1Vd3nxFmY0fbc3Gul6HerZHzW1YjF4KUSvkZLphUL7cMYSd3YlhtONHeEXTznNHeEpK2a2CBXPkr9NHenNHenNHtL7cBYPdZEmNoOpfJnpce0JCM90fo9swj4YtjxLDbCIC2xiF3H9wmfZCbEJNI0htTxLDbCIDBW9wMkvfuOvdBxlcmWJNI0htWLmKZnpcJEPwBO5dMysDBYgF2lLcBkiFJImWM90fo9swrxlcmWmhULIKJE7cBYPdZEmtWL8col2woYSCbYzNUk3DBOmcbWJNI0htWL8DeA+kzSIb2APk1fpcoflftnnFMaikZL7weslC2ivwtF8R2I1NI0htWL8Fe5ADolzwuYlC3Opd24IDbHIf2lLc2a0Dbplct4IOMaldtnMFMalwuOvwoyLctn3DBOmcbOzwuOvwuOPDbHICbklCUn2DBrIfoilwyfpcoflfuHIWBOsDB5pF3OZCbOpd24IAoyVcBXVNt9XNI0htWL8R2Opfj4YtILkkzSIcB5LDBC7weslC2ivwtFkNt9LDbC+eWPkeWPkNoOpfJnpce0JCM90fo9sdBlLcoxlwj4YtILkkzSIDBCIhtyLGB5idBljb3YpcoaJCbwPk0kvfuOvdUnYDBOLdoAmhULIKJE7cBYPdZEmtWL8col2woYSCbYzNUk3DBOmcbWJNI0htWL8DeA+kzSIb2APk1fpcoflftnnFMaikZL7weslC2ivwtF8R2I1NI0htWL8Fe5ADolzwuYlC3Opd24IDbHIf2lLc2a0Dbplct4IOMaldtnMFMalwuOvwoyLctn3DBOmcbOzwuOvwuOPDbHICbklCUn2DBrIfoilwyfpcoflfuHIWBOsDB5pF3OZCbOpd24IAoyVcBXVNt9XNI0htWL8R2Opfj4YtILkkzSIcB5LDBC7weslC2ivwtFkNt9LDbC+eWPkeWPkNoOpfJnpce0JCM90fo9sFMlmDuWJNI0htWLmKZnpcJEPwBO5dMysDBYgF2lLcBkiFJImWM90fo9swykpc2i0kZLpwePIK2ajDo8IkXLkNoOpfJnjdoyzFz0Jf2lLc2a0wj4YtILkNoI1NJF7wy9lhtfbDBOmcbWIWbklCUFpKZE7cBYPdZEmNt9PYT4YtILkNuE+aoipFZnzcBY0DB9Vwolzwufpcoflfol6cBWVwrclcBXIcmklcUn0dZnicoWIf2lLc2a0FZn0dZn0DolzwoyZcBrIfMliwuOPcUnbDBOmcbOzwryLdBlVDbY0FMy0DB9VwynidMaSRjXvFe4YtILkNt9LDbC+eWPktUF7woaVcolMKZE7cBYPdZEmtWLYtILkkzSIf3ngcM9vfoaZhtL7wt8va2AIdMalctn0DolzwocvFJnXduamDB5zwEP7cBYPdZEmtTXvcol2NI0hNoOpfJnjdoyzFz0JC2xlCbkMDbIJNjXvcol2NI0hNt9LDbC+eWP8R2Opfj4YtI0hNoOpfJnpce0JcM9vfoaZwj4YtjxLDbCIC2xiF3H9wmfZCbEJNI0htW0htTxLDbCIC2xiF3H9wMySDBfVdoaMftw+W29XGbkpc2i0wtcjd3n5KZEmKZnlC2ivwoOifoAPwlLJhTSIK2ajDo8IkZEMdBlLco90KZE8CUnPFMaMNUwmKZnJdo9mDB5MdZImfbkSkZL7weslC2ivwtFJNJF7wokSd2fpdMcvhtfVCB1lkZL7weslC2ivwtF8R2r+RtnndoXIAMlmDuOzwyklF2aZfMaLNt9LDbC+eWPkNoOpfJnjdoyzFz0JCBxpc25ZDBfPftw+Ao93cbklctnJGUE8CUnPFMaMNUkPfuOXKJ8vf3f3RMcZcBAsFukldBl1dU13d3kLFuklF3HsfoildBazRMYvdUwIFMaSNUkLd2cvdoxvfZw+OmklcUnWFMasDbaswyfvFMOXFMazFZnADoascbH8R2r+wt0IcoazDBfVcBWICmLINorIDuklcj0JDuO0FePvR2l0DoascbHVC29swj5paoildBazNt9iNjXvcol2NI0htTxLDbCIC2xiF3H9wMYScByZcMl4wj48R2Opfj4YtjXvcol2NI0hNt9LDbC+eWPYtJF7woOvb2yjfolvdJImDbOPcB1lF19Md290cbwmhTSIK2ajDo8IkzXvCM9LGT4YtjXvDuOsde4YtJF7
  11. johnburn
    Member
    Posted 3 years ago #

  12. johnburn
    Member
    Posted 3 years ago #

  13. axokool
    Member
    Posted 3 years ago #

    Hi Johnburn,

    Could you decode mine as well?

    http://wordpress.pastebin.com/yQ6zS6vv

    thanks

  14. johnburn
    Member
    Posted 3 years ago #

    @axokool: Here you go
    http://wordpress.pastebin.com/z3EfSrfu

    I might add support for that type of obfuscation in my deobfuscator soon. Just check the link for update.
    http://www.zongeek.net/decoder/

  15. axokool
    Member
    Posted 3 years ago #

    @johnburn

    Thanks.. You really save my day.

  16. sach6606
    Member
    Posted 3 years ago #

    hi Johnburn, could you decode this ?

    http://wordpress.pastebin.com/ZushfviM

    thanks in advance

  17. johnburn
    Member
    Posted 3 years ago #

  18. johnburn
    Member
    Posted 3 years ago #

    I had update my deobfuscator to support phplockit:
    $OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=..

    http://www.zongeek.net/decoder/

  19. sach6606
    Member
    Posted 3 years ago #

    luv u john... you are just @mazing

  20. melovesflying
    Member
    Posted 3 years ago #

    Hi johnburn. Can you help me with this?

    http://wordpress.pastebin.com/LDZ9taQs

    Can you help me as well on whether I need to tweak other files as well to make it work? That's my site's footer, by the way. Thanks!

  21. johnburn
    Member
    Posted 3 years ago #

    Your footer.php can be decoded by my decoder so just go and give it a try:
    http://www.zongeek.net/decoder/

    I'm not sure what you mean by to make the theme works, so I can't really answer that. Is there any problem with the theme or what?

  22. Samuel B
    moderator
    Posted 3 years ago #

  23. eminkoff
    Member
    Posted 3 years ago #

    Hi guys, I have a theme with some strange footer protection. Its not encrypted, but when I'm changing something inside - footer disappear and background too. Can you help, i did not found a source of the problem :(.
    Link to theme: http://rapidshare.com/files/410624443/wooden-fence.7z

    Thanks!

  24. Samuel B
    moderator
    Posted 3 years ago #

    eminkoff
    likely it will be in the theme's functions.php file
    many crappy theme authors put a bit of code there to do just what happens to you
    look for an encrypted section in the file - or some just have out right code

  25. eminkoff
    Member
    Posted 3 years ago #

    i've checked functions.php, but didn't found any encrypted code or "looked like a code I need".
    I've posted it here.
    Look pretty simple for me, so seems protection somewhere else. Could you help me?

  26. eminkoff
    Member
    Posted 3 years ago #

    Oh, seems I found it - http://wordpress.pastebin.com/GUDjXvaS.

    I've tried to decrypt it, but got another mess :(.

  27. johnburn
    Member
    Posted 3 years ago #

    eminkoff
    http://wordpress.pastebin.com/96f0bvGK

    I might add that type of obfuscation to my deobfuscator soon :)

  28. eminkoff
    Member
    Posted 3 years ago #

    Wow, thanks, it helps!! You are cool!

  29. devangpmistry
    Member
    Posted 3 years ago #

    Click on below link . it is good for see video in good quality

    http://www.downloadvlcplayer.org

  30. Jorditan24
    Member
    Posted 3 years ago #

    Please decode this...

    <?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
    $o="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";eval(base64_decode("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"));return;?>

    Thanks ..!

Topic Closed

This topic has been closed to new replies.