Theme decoding thread

  • First read this information.

    Seriously, READ THAT THREAD BEFORE POSTING HERE. That thread will give you details on how to decrypt these sort of things yourself. Almost everything posted here has been something that could have been easily decrypted by simply reading that post.

    We recommend that you do not use encrypted themes. Encryption is often used to insert malicious code. Decoding part of an encrypted theme does not mean that it is all clean. If you choose to use an encrypted theme, it is at your own risk.

    If your theme has been posted under a non-GPL license, it may be against the terms of the theme to attempt to decode it or to have someone else decode it for you.

    If you can’t decode your own encrypted themes using this information and still want to use one rather than pick from the thousands of themes that don’t have obfuscated code in them, post your request for decryption in here, and maybe someone will help you out.

    Note

    • Code should be place into a pastebin, not into this thread.
    • Decoding the theme does not guarantee safety from malicious code.
    • Seperate decoding threads will be closed.
    • Best practice is to avoid such websites that distribute malicious code in themes (most of them just provide ripped knockoff themes, why trust these people?)
Viewing 15 replies - 76 through 90 (of 448 total)

  • does this mean we shouldn’t encrypt our own themes we create and use for ourselves?

    Thread Starter mrmist

    (@mrmist)

    does this mean we shouldn’t encrypt our own themes we create and use for ourselves?

    In that case, who are you encrypting it from?

    Decode this please.!

    <?php
    echo gzinflate(str_rot13(base64_decode(‘aEXBd8MwDL0P9g+aD3CDJb5iiQs9erdOCz0Ox0RvE8c2ttpD2MfPVrsWU2qTnp70noQq3pqDqB6KglTTeFemxVPGohD3atW1prwjZ7TAuZAh2JCMBJ33hBFB/Bn+tCgTT+vBbIKIoz8gkFOwxg0JjFuSRlsJWy3dAFS/L88jsiIoK0aqmcqTIhN0F2bBtDU7aLKZuwo65IHK7luEJ9ZMo4ZLc5A9v61zTxBbjXA2g8n0Dlt1jkNW0BG7mnai8Mr5NFql9okiHgxBPeKQV+VUBmy9HqlzX43NHmZhyG/NadgkUAjvuce4nok/QMWlgGKADwfKWysbHyUZ72AypGKqKxldEyXqvJjN2uV+4Be5tZV3CN5bS3T/j7COKIdBJm/i39J54eWmR9oHjJOPeoiYEs3HTLa96npzBux+KbAcMDFkG5+VyoqHy7Ms32SOKt749rgEmlObgx8=’)));
    ?>

    @jorditan24:
    https://pastebin.com/vLfRHr3c

    Tried many decoders but still couldn’t decode this one. Please help. Thanks. https://wordpress.pastebin.com/TDYYj3eV

    @kim:
    https://pastebin.com/2vV9Rtg9

    @johnburn thank you! btw just curious how do u do it?

    @kim:
    It’s pretty much the same as my previous reply to ClwnMan76 (see above). You just need to understand the flow of the code

    Hey John I am im Major Need to get this decoded. Been up for Hours trying to figure this Thing out.

    <?php // /* */
    $OOO0O0O00=__FILE__;$OOO000000=urldecode(‘%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72′);$OO00O0000=50560;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0=’OOO0000O0’;eval(($$O0O0000O0(‘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’)));return;?>

    @millerspcrepair:
    Are you sure thats the whole script? Seems like its not a valid script obfuscate with phplockit. There should be some base64 encoded string after return;?>

    I am Not sure what typ Of Code it is But Yes thats the whole code.

    There is a Long Piece of code Directly after.

    [paste large blocks of code at pastebin.com]

    Then This Code Directly After sorry wouldnt let me post the whole this at once

    [paste large blocks of code at pastebin.com]

    [paste large blocks of code at pastebin.com]

    @millerspcrepair:
    Please paste the whole code into pastebin. Its easier for me to copy it that way:
    https://pastebin.com/

Viewing 15 replies - 76 through 90 (of 448 total)
  • The topic ‘Theme decoding thread’ is closed to new replies.