Can any one tell how to decode this file???

Discussion in 'General Programming Chat' started by iluvbob, Apr 5, 2009.

  1. iluvbob

    iluvbob Registered Member

    Joined:
    Jul 12, 2008
    Messages:
    81
    Likes Received:
    5
    Occupation:
    Web Entrepreneur and Digital marketer
    Location:
    Malaysia
    I'll be very thankful if any one can tell me how to decode this file......
    Thx in advanced......

    Code:
    <? eval(gzinflate(base64_decode('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
     
  2. sliver

    sliver Newbie

    Joined:
    Apr 1, 2009
    Messages:
    3
    Likes Received:
    0
    Are you sure the code you posted is complete?
     
  3. iluvbob

    iluvbob Registered Member

    Joined:
    Jul 12, 2008
    Messages:
    81
    Likes Received:
    5
    Occupation:
    Web Entrepreneur and Digital marketer
    Location:
    Malaysia
    Yes,Sliver code is complete, please tell how to decode it.... I know there are many tools to decode but I don't know any...

    Thx
     
  4. olivier

    olivier Newbie

    Joined:
    Apr 3, 2009
    Messages:
    18
    Likes Received:
    5
    iluvbob, it can't be complete, it should have ))); ?> at the end
    Something like that.
    If it's incomplete or broken, then i don't think that it can be decoded.
    But of course you can add these missing tags to end of it and try.

    I can't post links yet, so if you search Goo*gle for
    Code:
    <? eval(gzinflate(base64_decode('
    You should get help. But as i said, if data is broken or incomplete, then im not sure if you can decode it properly.
     
  5. WickednDivine

    WickednDivine Regular Member

    Joined:
    Jul 29, 2008
    Messages:
    471
    Likes Received:
    345
    This code isn't complete. it's base64 encoded (and then gzipped). I think all base64 strings end with "==".
     
  6. sliver

    sliver Newbie

    Joined:
    Apr 1, 2009
    Messages:
    3
    Likes Received:
    0
    The string is incomplete, as someone told you...If you still need help you can upload somewhere this (footer.php i think) file.
     
  7. Barbacamanitu

    Barbacamanitu Power Member

    Joined:
    May 8, 2008
    Messages:
    500
    Likes Received:
    91
    just base64 decode the string, then gzip inflate it. Thats how it looks to me.
     
  8. dacash

    dacash Registered Member

    Joined:
    Jan 28, 2008
    Messages:
    52
    Likes Received:
    16
    Location:
    on the dark side.
    Yeah your missing some stuff.
     
  9. iluvbob

    iluvbob Registered Member

    Joined:
    Jul 12, 2008
    Messages:
    81
    Likes Received:
    5
    Occupation:
    Web Entrepreneur and Digital marketer
    Location:
    Malaysia
    Yes, I forgot to put complete code...You can see complete code below

    <?php $_F=__FILE__;$_X='Pz4JCQ0KCQk8ZDR2IGNsMXNzPSJjbDUxciI+PC9kNHY+DQoJDQoJPC9kNHY+DQoJPCEtLSAvTTE0biAtLT4NCgkNCjwvZDR2Pg0KPCEtLSAvUDFnNSAtLT4NCjwhLS0gRjIydDVyIC0tPg0KPGQ0diA0ZD0iZjIydDVyIj4NCjwxIGhyNWY9Imh0dHA6Ly93cGozbmN0NDJuLmMybSI+VzJyZHByNXNzIFRoNW01PC8xPiBkNXM0Z241ZCBieSA8MSBocjVmPSJodHRwOi8vd3d3LmY0cjVjMXM0bjJzLmMybS8iPk9ubDRuNSBDMXM0bjJzPC8xPiBmMnIgPDEgaHI1Zj0id3d3LndoNHNrNXktc2gycC5kNSI+V2g0c2s1eTwvMT4sIDwxIGhyNWY9Imh0dHA6Ly93cGozbmN0NDJuLmMybS8iPkMzc3QybSBXMnJkcHI1c3MgVGg1bTVzPC8xPiAxbmQgPDEgaHI1Zj0iaHR0cDovL3dwajNuY3Q0Mm4uYzJtLyI+VzViczR0NSBENXM0Z25zPC8xPi48L2Q0dj4NCjwhLS0gRjIydDVyIC0tPg0KDQo8P3BocCB3cF9mMjJ0NXIoKTsgPz4NCg0KPC9iMmR5Pg0KDQo8L2h0bWw+';
    eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>
     
  10. Fudnut

    Fudnut Registered Member

    Joined:
    Dec 22, 2007
    Messages:
    84
    Likes Received:
    27
    Location:
    Australia
    Code:
    <div class="clear"></div>
    	
    	</div>
    	<!-- /Main -->
    	
    </div>
    <!-- /Page -->
    <!-- Footer -->
    <div id="footer">
    <a href="hxxp://wpjunction(.)com">Wordpress Theme</a> designed by <a href="hxxp://www(.)firecasinos(.)com/">Online Casinos</a> for <a href="www(.)whiskey-shop.de">Whiskey</a>, <a href="hxxp://wpjunction(.)com/">Custom Wordpress Themes</a> and <a href="hxxp://wpjunction(.)com/">Website Designs</a>.</div>
    
    <!-- Footer -->
    
    <?php wp_footer(); ?>
    
    </body>
    
    </html> 
    brackets added by me - haven't enough posts to post links
     
    • Thanks Thanks x 1
  11. iluvbob

    iluvbob Registered Member

    Joined:
    Jul 12, 2008
    Messages:
    81
    Likes Received:
    5
    Occupation:
    Web Entrepreneur and Digital marketer
    Location:
    Malaysia
    dude thank you very much!!!
     
  12. zappak

    zappak Junior Member

    Joined:
    Mar 8, 2007
    Messages:
    101
    Likes Received:
    9
    Next time, Just replace echo with eval and you will get decoded text :)