base64_decode

kesoh · Feb 13, 2009

Hey can anyone here help me out I need my footer decode its in base64_decode ...I have looked all over the code for the adsence code that keeps popin up on my front page anywhere and where ever it wants, dont know if its in the footer but it would still be nice to know whats in the code you can see the adsence banner on my front page e4l-biz.c0m ...are if you have any info on where it could be would be nice....does not show up sofar in firefox but it does in IE and avant browers.....thanks for any help

markiid · Feb 13, 2009

Try this link to decode it

Code:

http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/

kesoh · Feb 13, 2009

markiid said:
Try this link to decode it

Code:

http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/

Bad input?
Sorry, it just wasn?t possible to decode that string. Please let us know if you think this is a bug in our code.

The particular error here was:

Invalid character in a Base-64 string.

kesoh · Feb 13, 2009

here is the code if anyone can help

<?php

$_F=__FILE__;$_X='Pz4JPGQ0diA0ZD0iZjIydDVyIj4NCgkJDQoJCUQ1czRnbiBieSA8MSBocjVmPSJodHRwOi8vd3d3LmY0cjVjMXM0bjJzLmMybSI+T25sNG41IEMxczRuMnM8LzE+IDo6IEluIEMybGwxYjJyMXQ0Mm4gdzR0aCA8MSBocjVmPSJodHRwOi8vd3d3LmI0emYxcS5uNXQiPkIzczRuNXNzIFN0MXJ0IFVwczwvMT4sIDwxIGhyNWY9Imh0dHA6Ly93d3cuaGRsY2R0di4ycmciPkxDRCBIRFRWPC8xPiwgPDEgaHI1Zj0iaHR0cDovL3d3dy5nNGZ0MnY1cmwyMWQuYzJtIj5GM24gZzRmdHM8LzE+DQoJCTxiciAvPg0KCQlWMWw0ZCBYSFRNTCAxbmQgQ1NTDQoJPC9kNHY+DQo8L2Q0dj48L2Q0dj48L2Q0dj4NCjwvYjJkeT4NCjwvaHRtbD4=';eval(base64_decode ('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

markiid · Feb 13, 2009

Are you sure its base64? What I suggest is request it to be decoded at this place

Code:

http://www.waraxe.us/forum-41.html

Somebody should be able to sort you there.

kesoh · Feb 13, 2009

markiid said:
Are you sure its base64? What I suggest is request it to be decoded at this place

Code:

http://www.waraxe.us/forum-41.html

Somebody should be able to sort you there.

no not sure I just seen the base64_decode in the code not really sure what it is but thanks for all your help

BlackMelvyn · Feb 13, 2009

Here is your code

Code:

$_X=base64_decode($_X);
$_X=strtr($_X,'123456aouie','aouie123456');
$_R=ereg_replace('__FILE__',"'".$_F."'",$_X);
eval($_R);
$_R=0;
$_X=0;

Generally, to decode such stuff, you can replace eval() by echo and it does most of the job

kesoh · Feb 14, 2009

That dont look like much code to be in my footer that still looks decoded to me lol thanks though

WickednDivine · Feb 14, 2009

Code:

<d4v 4d="f22t5r">
		
		D5s4gn by <1 hr5f="http://www.f4r5c1s4n2s.c2m">Onl4n5 C1s4n2s</1> :: In C2ll1b2r1t42n w4th <1 hr5f="http://www.b4zf1q.n5t">B3s4n5ss St1rt Ups</1>, <1 hr5f="http://www.hdlcdtv.2rg">LCD HDTV</1>, <1 hr5f="http://www.g4ft2v5rl21d.c2m">F3n g4fts</1>
		<br />
		V1l4d XHTML 1nd CSS
	</d4v>
</d4v></d4v></d4v>
</b2dy>
</html>

and

Code:

$_X=base64_decode($_X);
$_X=strtr($_X,'123456aouie','aouie123456');
$_R=ereg_replace('__FILE__',"'".$_F."'",$_X);
eval($_R);$_R=0;$_X=0;

coolguy · Feb 14, 2009

This would help in encoding and decoding

motobit.com/util/base64-decoder-encoder.asp

kesoh · Feb 14, 2009

Hey thanks alot LostShootingStar and coolguy

silentHQ · Feb 15, 2009

i'm learning a lot here. thanks for the thread.

kesoh · Feb 15, 2009

chart3 said:
i'm learning a lot here. thanks for the thread.

yea me to this is a real cool forum its one of the best forums I have seen

Sweetfunny · Feb 15, 2009

Shootingstars one didn't turn out quite right it's:

Code:

?><div id="footer">
		
Design by <a href="http://www.firecasinos.com">Online Casinos</a> :: In Collaboration with <a href="http://www.bizfaq.net">Business Start Ups</a>, <a href="http://www.hdlcdtv.org">LCD HDTV</a>, <a href="http://www.giftoverload.com">Fun gifts</a>
		<br />
		Valid XHTML and CSS
	</div>
</div></div></div>
</body>
</html>

The encoding is Byterun, here's a tool i done about a year ago to decode it:

http://www.tareeinternet.com/scripts/byterun.php

WickednDivine · Feb 15, 2009

Sweetfunny said:
Shootingstars one didn't turn out quite right it's:

Code:

?><div id="footer"> Design by <a href="http://www.firecasinos.com">Online Casinos</a> :: In Collaboration with <a href="http://www.bizfaq.net">Business Start Ups</a>, <a href="http://www.hdlcdtv.org">LCD HDTV</a>, <a href="http://www.giftoverload.com">Fun gifts</a> <br /> Valid XHTML and CSS </div> </div></div></div> </body> </html>

The encoding is Byterun, here's a tool i done about a year ago to decode it:

http://www.tareeinternet.com/scripts/byterun.php

i only did the base64 decoding. I figured if you couldn't tell what that code was doing after being decoded you should probably hire someone to do it for you.

kesoh · Feb 15, 2009

LostShootingStar said:
i only did the base64 decoding. I figured if you couldn't tell what that code was doing after being decoded you should probably hire someone to do it for you.

I know a lil bit about how to read and write code like I said a little but after LostShootingStar gave me the code I did notice it was lacking so I played around with it and fixed it it took me like 40 min where it would have taken someone eles 2 mins But he got me close enough ...and I thank you for the link that will help me out alot thanks.............WHAT AN AWSOME FORUM..

..

Thanks to everyone Yall ROCK

base64_decode

kesoh

Registered Member

markiid

Registered Member

kesoh

Registered Member

kesoh

Registered Member

markiid

Registered Member

kesoh

Registered Member

BlackMelvyn

Regular Member

kesoh

Registered Member

WickednDivine

Elite Member

coolguy

Junior Member

kesoh

Registered Member

silentHQ

Regular Member

kesoh

Registered Member

Sweetfunny

Elite Member

WickednDivine

Elite Member

kesoh

Registered Member

Main Menu

Marketplace

Making Money

BlackHat World