1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Can Someone Help Me to Decode This???

Discussion in 'Black Hat SEO' started by euroman, Jun 21, 2011.

  1. euroman

    euroman Junior Member

    Joined:
    Dec 19, 2007
    Messages:
    188
    Likes Received:
    22
    Occupation:
    Self Employed
    Location:
    Never Land
    If this is in a wrong section, please move this. I really dont know where to post something like this...

    I have been trying to decode a WP footer of a template that I found for about 3 hours now and still cannot figure this out, usually its pretty easy to decode, but this one is a total pain in the ass.

    Please if anyone can help me?

    Here is the code:

    Code:
    <?php // DO NOT DELETE THIS PART! 
    $_F=__FILE__;$_X='Pz48ZGl2IDNsYXNzPSJhODAtNG9vMGU4Ij4NCiAgICA8ZGl2IDNsYXNzPSJhODAtNG9vMGU4LWlubmU4Ij4NCiAgICAgICAgPGRpdiAzbGFzcz0iYTgwLTRvbzBlOC0wZTIwIj4NCjxwPg0KPD9wMXANCiBnbG9iYWwgJGRlNGE1bDBfNG9vMGU4XzNvbjBlbjA7DQogJDRvbzBlOF8zb24wZW4wID0gZ2UwX29wMGlvbignYTgwXzRvbzBlOF8zb24wZW4wJyk7IA0KIGk0ICgkNG9vMGU4XzNvbjBlbjAgPT09IDRhbHNlKSAkNG9vMGU4XzNvbjBlbjAgPSAkZGU0YTVsMF80b28wZThfM29uMGVuMDsNCiBlMzFvIHMwOGlwc2xhczFlcygkNG9vMGU4XzNvbjBlbjApOw0KPz4NCjwvcD4NCjwvZGl2Pg0KICAgIDwvZGl2Pg0KICAgIDxkaXYgM2xhc3M9ImE4MC00b28wZTgtYmEza2c4bzVuZCI+DQogICAgPC9kaXY+DQo8L2Rpdj4NCg0KCQk8ZGl2IDNsYXNzPSIzbGVhOGVkIj48L2Rpdj4NCiAgICA8L2Rpdj4NCjwvZGl2Pg0KPGRpdiAzbGFzcz0iM2xlYThlZCI+PC9kaXY+DQo8cCAzbGFzcz0iYTgwLXBhZ2UtNG9vMGU4Ij5EZXNpZ25lZCBieSANCjxhIDE4ZTQ9IjEwMHA6Ly93d3cubG9nb2Rlc2lnbmVrc3BlODBlbi5uby8iPkxvZ28gZGVzaWduPC9hPiAtIENvZGVkIGJ5IA0KPGEgMThlND0iMTAwcDovL3d3dy53ZWIxb3MwaW5nNmFzMGU4cy4zbzYiPkMxZWFwIFdlYiBIb3MwaW5nPC9hPiAtIA0KPGEgMThlND0iMTAwcDovL3d3dy52cHMxb3MwOGV2aWV3cy4zbzYvIj5WUFMgSG9zMGluZzwvYT4gLSA8YSAxOGU0PSIxMDBwOi8vd3d3LmI1c2luZXNzMW9zMDhldmlld3MuM282LyI+QjVzaW5lc3MgSG9zMGluZzwvYT4uPC9wPg0KDQo8L2Rpdj4NCg0KPCEtLSA8P3AxcCBwOGluMDQoX18oJyVkIDk1ZThpZXMuICVzIHNlM29uZHMuJywgJ2s1YjhpM2snKSwgZ2UwX241Nl85NWU4aWVzKCksIDBpNmU4X3Mwb3AodCwgYykpOyA/PiAtLT4NCjw/cDFwIG9iX3MwYTgwKCk7IHdwXzRvbzBlOCgpOyAkM29uMGVuMCA9IG9iX2dlMF8zbGVhbigpOyBpNCAoczA4bGVuKCQzb24wZW4wKSkgZTMxbyAnPGRpdj4nIC4gJDNvbjBlbjAgLiAnPC9kaXY+JzsgPz4NCjwvYm9keT4NCjwvMTA2bD48Pw==';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCdmeG1ydXRocWMzOTEwNTg2MjQnLCc0MjY4NTAxOTNjcWh0dXJteGYnKTskX1I9ZXJlZ19yZXBsYWNlKF9fRklMRV9fLCRfRiwkX1gpO2V2YWwoJF9SKTskX1I9MDskX1g9MDs='));?>
    
    Or if anyone can point me to what to do with it.

    I have searched big G for all of the methods, but it still gives me gibberish instead of a normal php file.

    Thanks in advance.
     
  2. bzy39

    bzy39 Regular Member

    Joined:
    Jan 15, 2009
    Messages:
    434
    Likes Received:
    239
    Code:
    <?php // DO NOT DELETE THIS PART! 
    ?><div class="art-footer">
        <div class="art-footer-inner">
            <div class="art-footer-text">
    <p>
    <?php
     global $default_footer_content;
     $footer_content = get_option('art_footer_content'); 
     if ($footer_content === false) $footer_content = $default_footer_content;
     echo stripslashes($footer_content);
    ?>
    </p>
    </div>
        </div>
        <div class="art-footer-background">
        </div>
    </div>
    
            <div class="cleared"></div>
        </div>
    </div>
    <div class="cleared"></div>
    <p class="art-page-footer">Designed by 
    <a href="http://www.logodesigneksperten.no/">Logo design</a> - Coded by 
    <a href="http://www.webhostingmasters.com">Cheap Web Hosting</a> - 
    <a href="http://www.vpshostreviews.com/">VPS Hosting</a> - <a href="http://www.businesshostreviews.com/">Business Hosting</a>.</p>
    
    </div>
    
    <!-- <?php printf(__('%d queries. %s seconds.', 'kubrick'), get_num_queries(), timer_stop(0, 3)); ?> -->
    <?php ob_start(); wp_footer(); $content = ob_get_clean(); if (strlen($content)) echo '<div>' . $content . '</div>'; ?>
    </body>
    </html>
     
    • Thanks Thanks x 1
  3. llewopsnimajneb

    llewopsnimajneb Regular Member

    Joined:
    Jan 10, 2011
    Messages:
    242
    Likes Received:
    139
    Occupation:
    SEO, Affiliate marketer, Online marketing lecturer
    Location:
    Backwardstown
    its base 64

    Code:
    ?><div 3lass="a80-4oo0e8">
        <div 3lass="a80-4oo0e8-inne8">
            <div 3lass="a80-4oo0e8-0e20">
    <p>
    <?p1p
     global $de4a5l0_4oo0e8_3on0en0;
     $4oo0e8_3on0en0 = ge0_op0ion('a80_4oo0e8_3on0en0'); 
     i4 ($4oo0e8_3on0en0 === 4alse) $4oo0e8_3on0en0 = $de4a5l0_4oo0e8_3on0en0;
     e31o s08ipslas1es($4oo0e8_3on0en0);
    ?>
    </p>
    </div>
        </div>
        <div 3lass="a80-4oo0e8-ba3kg8o5nd">
        </div>
    </div>
    
    		<div 3lass="3lea8ed"></div>
        </div>
    </div>
    <div 3lass="3lea8ed"></div>
    <p 3lass="a80-page-4oo0e8">Designed by 
    <a 18e4="100p://www.logodesignekspe80en.no/">Logo design</a> - Coded by 
    <a 18e4="100p://www.web1os0ing6as0e8s.3o6">C1eap Web Hos0ing</a> - 
    <a 18e4="100p://www.vps1os08eviews.3o6/">VPS Hos0ing</a> - <a 18e4="100p://www.b5siness1os08eviews.3o6/">B5siness Hos0ing</a>.</p>
    
    </div>
    
    <!-- <?p1p p8in04(__('%d 95e8ies. %s se3onds.', 'k5b8i3k'), ge0_n56_95e8ies(), 0i6e8_s0op(t, c)); ?> -->
    <?p1p ob_s0a80(); wp_4oo0e8(); $3on0en0 = ob_ge0_3lean(); i4 (s08len($3on0en0)) e31o '<div>' . $3on0en0 . '</div>'; ?>
    </body>
    </106l><?
     
    • Thanks Thanks x 1
  4. llewopsnimajneb

    llewopsnimajneb Regular Member

    Joined:
    Jan 10, 2011
    Messages:
    242
    Likes Received:
    139
    Occupation:
    SEO, Affiliate marketer, Online marketing lecturer
    Location:
    Backwardstown
    dang... beat me to it.
     
  5. euroman

    euroman Junior Member

    Joined:
    Dec 19, 2007
    Messages:
    188
    Likes Received:
    22
    Occupation:
    Self Employed
    Location:
    Never Land
    @ llewopsnimajneb

    Thats exactly what I was getting when trying to decode this thing. :)

    @ bzy39

    Thank you soo much, how did you do this?


    Thanks guys for helping me out.