Can Someone Help Me to Decode This???

Discussion in 'Black Hat SEO' started by euroman, Jun 21, 2011.

  1. euroman

    euroman Junior Member

    Joined:
    Dec 19, 2007
    Messages:
    188
    Likes Received:
    22
    Occupation:
    Self Employed
    Location:
    Never Land
    If this is in a wrong section, please move this. I really dont know where to post something like this...

    I have been trying to decode a WP footer of a template that I found for about 3 hours now and still cannot figure this out, usually its pretty easy to decode, but this one is a total pain in the ass.

    Please if anyone can help me?

    Here is the code:

    Code:
    <?php // DO NOT DELETE THIS PART! 
    $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCdmeG1ydXRocWMzOTEwNTg2MjQnLCc0MjY4NTAxOTNjcWh0dXJteGYnKTskX1I9ZXJlZ19yZXBsYWNlKF9fRklMRV9fLCRfRiwkX1gpO2V2YWwoJF9SKTskX1I9MDskX1g9MDs='));?>
    
    Or if anyone can point me to what to do with it.

    I have searched big G for all of the methods, but it still gives me gibberish instead of a normal php file.

    Thanks in advance.
     
  2. bzy39

    bzy39 Regular Member

    Joined:
    Jan 15, 2009
    Messages:
    439
    Likes Received:
    241
    Code:
    <?php // DO NOT DELETE THIS PART! 
    ?><div class="art-footer">
        <div class="art-footer-inner">
            <div class="art-footer-text">
    <p>
    <?php
     global $default_footer_content;
     $footer_content = get_option('art_footer_content'); 
     if ($footer_content === false) $footer_content = $default_footer_content;
     echo stripslashes($footer_content);
    ?>
    </p>
    </div>
        </div>
        <div class="art-footer-background">
        </div>
    </div>
    
            <div class="cleared"></div>
        </div>
    </div>
    <div class="cleared"></div>
    <p class="art-page-footer">Designed by 
    <a href="http://www.logodesigneksperten.no/">Logo design</a> - Coded by 
    <a href="http://www.webhostingmasters.com">Cheap Web Hosting</a> - 
    <a href="http://www.vpshostreviews.com/">VPS Hosting</a> - <a href="http://www.businesshostreviews.com/">Business Hosting</a>.</p>
    
    </div>
    
    <!-- <?php printf(__('%d queries. %s seconds.', 'kubrick'), get_num_queries(), timer_stop(0, 3)); ?> -->
    <?php ob_start(); wp_footer(); $content = ob_get_clean(); if (strlen($content)) echo '<div>' . $content . '</div>'; ?>
    </body>
    </html>
     
    • Thanks Thanks x 1
  3. llewopsnimajneb

    llewopsnimajneb Regular Member

    Joined:
    Jan 10, 2011
    Messages:
    242
    Likes Received:
    139
    Occupation:
    SEO, Affiliate marketer, Online marketing lecturer
    Location:
    Backwardstown
    its base 64

    Code:
    ?><div 3lass="a80-4oo0e8">
        <div 3lass="a80-4oo0e8-inne8">
            <div 3lass="a80-4oo0e8-0e20">
    <p>
    <?p1p
     global $de4a5l0_4oo0e8_3on0en0;
     $4oo0e8_3on0en0 = ge0_op0ion('a80_4oo0e8_3on0en0'); 
     i4 ($4oo0e8_3on0en0 === 4alse) $4oo0e8_3on0en0 = $de4a5l0_4oo0e8_3on0en0;
     e31o s08ipslas1es($4oo0e8_3on0en0);
    ?>
    </p>
    </div>
        </div>
        <div 3lass="a80-4oo0e8-ba3kg8o5nd">
        </div>
    </div>
    
    		<div 3lass="3lea8ed"></div>
        </div>
    </div>
    <div 3lass="3lea8ed"></div>
    <p 3lass="a80-page-4oo0e8">Designed by 
    <a 18e4="100p://www.logodesignekspe80en.no/">Logo design</a> - Coded by 
    <a 18e4="100p://www.web1os0ing6as0e8s.3o6">C1eap Web Hos0ing</a> - 
    <a 18e4="100p://www.vps1os08eviews.3o6/">VPS Hos0ing</a> - <a 18e4="100p://www.b5siness1os08eviews.3o6/">B5siness Hos0ing</a>.</p>
    
    </div>
    
    <!-- <?p1p p8in04(__('%d 95e8ies. %s se3onds.', 'k5b8i3k'), ge0_n56_95e8ies(), 0i6e8_s0op(t, c)); ?> -->
    <?p1p ob_s0a80(); wp_4oo0e8(); $3on0en0 = ob_ge0_3lean(); i4 (s08len($3on0en0)) e31o '<div>' . $3on0en0 . '</div>'; ?>
    </body>
    </106l><?
     
    • Thanks Thanks x 1
  4. llewopsnimajneb

    llewopsnimajneb Regular Member

    Joined:
    Jan 10, 2011
    Messages:
    242
    Likes Received:
    139
    Occupation:
    SEO, Affiliate marketer, Online marketing lecturer
    Location:
    Backwardstown
    dang... beat me to it.
     
  5. euroman

    euroman Junior Member

    Joined:
    Dec 19, 2007
    Messages:
    188
    Likes Received:
    22
    Occupation:
    Self Employed
    Location:
    Never Land
    @ llewopsnimajneb

    Thats exactly what I was getting when trying to decode this thing. :)

    @ bzy39

    Thank you soo much, how did you do this?


    Thanks guys for helping me out.