Proxyutza blogAbout all sorth of things: PHP, Hacks, Scripts, Servers, Linux, Technology, News, Trends

Decoding with the script from earlier post failed on some code

Hacks, PHP, Wordpress

Today i tried to decode another pice of ugly code with “eval(gzinflate(base64_decode” and i was surprised to find that the script couldnt decode this piece. As usually the code is from a themes footer in which i dont want to keep theep the outgoing reffers.

Here is the code:

$_F=__FILE__;$_X='Pz48ZDR2IDRkPSJmMjJ0NXIiPg0KPGM1bnQ1cj48Zj
JudCBzNHo1PSAiNiI+RDRzdHI0YjN0NWQgYnkgMW4gPDEgaHI1Zj0iaHR0cD
ovL3d3dy5raDFsNGRzbDRmNS5jMm0iIHQxcmc1dD1uNXc+SW50NXJuNXQ
gRW50cjVwcjVuNTNyPC8xPiB8ICBTcDJuczJyNWQgYnkgMSA8MSBocjVmP
SJodHRwOi8vd3d3LjJmZmI1MXQ0bmsuYzJtIiB0MXJnNXQ9bjV3PlQxdHQyM
jwvMT4gczR0NTwvYzVudDVyPg0KCTwvZDR2Pg0KDQo8L2Q0dj4NCg0KDQ
o8P3BocCAvKiAiSjNzdCB3aDF0IGQyIHkyMyB0aDRuayB5MjMncjUgZDI0bm
cgRDF2NT8iICovID8+DQoNCgkJPD9waHAgd3BfZjIydDVyKCk7ID8+DQo8L2
IyZHk+DQo8L2h0bWw+DQo=';eval(base64_decode('JF9YPWJhc2U2NF9k
ZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdW
llMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0
YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));


For the moment i’m stuck with the code.. and trying to find a solution.. I will give an update if i succeed in decoding it.

Tags: base64_decode, decode, eval, gzinflate, theme, Wordpress

Related posts

• How to decode ugly eval(gzinflate(base64_decode (28)
• Wordpress v 2.5 has some issues (0)
• Wordpress RSS feed turned blank(empty) (0)
• Wordpress plugin list (0)
• Wordpress newsletter plugin - wp-ajax-newsletter (2)

Saturday, February 23rd, 2008 at 4:02 pm and is filed under Hacks, PHP, Wordpress. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.