Theme decoding thread

  • First read this information.

    Seriously, READ THAT THREAD BEFORE POSTING HERE. That thread will give you details on how to decrypt these sort of things yourself. Almost everything posted here has been something that could have been easily decrypted by simply reading that post.

    We recommend that you do not use encrypted themes. Encryption is often used to insert malicious code. Decoding part of an encrypted theme does not mean that it is all clean. If you choose to use an encrypted theme, it is at your own risk.

    If your theme has been posted under a non-GPL license, it may be against the terms of the theme to attempt to decode it or to have someone else decode it for you.

    If you can’t decode your own encrypted themes using this information and still want to use one rather than pick from the thousands of themes that don’t have obfuscated code in them, post your request for decryption in here, and maybe someone will help you out.

    Note

    • Code should be place into a pastebin, not into this thread.
    • Decoding the theme does not guarantee safety from malicious code.
    • Seperate decoding threads will be closed.
    • Best practice is to avoid such websites that distribute malicious code in themes (most of them just provide ripped knockoff themes, why trust these people?)
Viewing 15 replies - 16 through 30 (of 448 total)

  • @sach6606: https://wordpress.pastebin.com/US9zcXjd

    I had update my deobfuscator to support phplockit:
    $OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=..

    https://www.zongeek.net/decoder/

    luv u john… you are just @mazing

    Hi johnburn. Can you help me with this?

    https://wordpress.pastebin.com/LDZ9taQs

    Can you help me as well on whether I need to tweak other files as well to make it work? That’s my site’s footer, by the way. Thanks!

    Your footer.php can be decoded by my decoder so just go and give it a try:
    https://www.zongeek.net/decoder/

    I’m not sure what you mean by to make the theme works, so I can’t really answer that. Is there any problem with the theme or what?

    melovesflying
    https://wordpress.pastebin.com/7Wig4ZQp

    Hi guys, I have a theme with some strange footer protection. Its not encrypted, but when I’m changing something inside – footer disappear and background too. Can you help, i did not found a source of the problem :(.
    Link to theme: https://rapidshare.com/files/410624443/wooden-fence.7z

    Thanks!

    eminkoff
    likely it will be in the theme’s functions.php file
    many crappy theme authors put a bit of code there to do just what happens to you
    look for an encrypted section in the file – or some just have out right code

    i’ve checked functions.php, but didn’t found any encrypted code or “looked like a code I need”.
    I’ve posted it here.
    Look pretty simple for me, so seems protection somewhere else. Could you help me?

    Oh, seems I found it – https://wordpress.pastebin.com/GUDjXvaS.

    I’ve tried to decrypt it, but got another mess :(.

    eminkoff
    https://wordpress.pastebin.com/96f0bvGK

    I might add that type of obfuscation to my deobfuscator soon ??

    Wow, thanks, it helps!! You are cool!

    Click on below link . it is good for see video in good quality

    https://www.downloadvlcplayer.org

    Please decode this…

    <?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
    $o=”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”;eval(base64_decode(“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”));return;?>

    Thanks ..!

    You can decode that here:
    https://www.zongeek.net/decoder/

    here the code:
    https://wordpress.pastebin.com/NRxwzfg5

Viewing 15 replies - 16 through 30 (of 448 total)
  • The topic ‘Theme decoding thread’ is closed to new replies.