Theme decoding thread

  • First read this information.

    Seriously, READ THAT THREAD BEFORE POSTING HERE. That thread will give you details on how to decrypt these sort of things yourself. Almost everything posted here has been something that could have been easily decrypted by simply reading that post.

    We recommend that you do not use encrypted themes. Encryption is often used to insert malicious code. Decoding part of an encrypted theme does not mean that it is all clean. If you choose to use an encrypted theme, it is at your own risk.

    If your theme has been posted under a non-GPL license, it may be against the terms of the theme to attempt to decode it or to have someone else decode it for you.

    If you can’t decode your own encrypted themes using this information and still want to use one rather than pick from the thousands of themes that don’t have obfuscated code in them, post your request for decryption in here, and maybe someone will help you out.

    Note

    • Code should be place into a pastebin, not into this thread.
    • Decoding the theme does not guarantee safety from malicious code.
    • Seperate decoding threads will be closed.
    • Best practice is to avoid such websites that distribute malicious code in themes (most of them just provide ripped knockoff themes, why trust these people?)
Viewing 15 replies - 31 through 45 (of 448 total)

  • @Jorditan 24:

    <?php include(TEMPLATEPATH.'/bottom.php');?>    

<div id="footer" class="rounded">

<div class="fleft">

Design by: <a href="https://mmohut.com/">MMORPG</a>  <br/>
Copyright &copy; <?php echo date('Y');?> <?php bloginfo('name');?> &ndash; <?php bloginfo('description');?>
<br/>
<?php $foot=get_option('flcn_foot');
echo stripslashes($foot);?>
</div>

<div class="fright">
<a href="https://mmohut.com/browser-games">Browser MMO Games</a>  | <a href="https://www.hostv.com/">VPS</a>  | <a href="https://www.cirtexhosting.com/">Website Hosting</a> <br/>
<a href="<?php bloginfo('rss2_url');?>">Subscribe to Posts</a> | <a href="<?php bloginfo('comments_rss2_url');?>">Subscribe to Comments</a>
    </div>
<div class='clear'></div>
</div>

<?php wp_footer();?>

</body>
</html>

    johnburn: I tried some online decoders recommended in one of the threads here but I ended up getting errors so I assumed that there’s something else I have to change to make it work. But Samuel B’s code made it work. Thanks! I love that there are a lot of helpful people here. ??

    Please help with this one

    https://wordpress.pastebin.com/uiZwzwyj

    misterjester
    https://wordpress.pastebin.com/bE4Xyq4i

    Samuel .. really appreciate the help ??

    Latincrib >> https://www.latincrib.net

    Meeting online Latinos is now more fun than ever. We offer online chat with live music, communities, games, applications, and great contests!

    ________________________________________________________________________

    I need a profesional web developer to redesign my new social network reigistration and login splash page please PM or Contacts Us

    Thank’s >> https://www.latincrib.net

    Any help on this code? It is similar to a previous one decoded but when It doesn’t completely work on my site. I’m missing something here. Thanks!

    https://wordpress.pastebin.ca/1915714

    Finx0775
    https://wordpress.pastebin.ca/1915989

    2 days…2 days I’ve been beating my head on this one. I owe you a beer or a hug or a cuddle even. Thanks SAM! Your’re awesome.

    I’ve decoded the footer, and there appears to be no other encrypted code in other files, but I still can’t edit the footer without the theme blocking the site off with a big ‘don’t edit the footer’ sign.

    I don’t really want bingo adverts in my footer, but the theme is everything I need for the site.

    Taking in mind that I’m no expert at php: what steps should I take to get rid of the footer?

    what theme did you use?

    Obscure by wpcrunchy:

    https://wpcrunchy.com/our-themes/obscure/

    look in the theme’s functions.php file for more obfuscated code. Really crappy theme authors do this to keep you from messing with footer links, etc.

    As a complete rookie, the obfuscated code would work a charm on me:
    https://wordpress.pastebin.ca/1916581

    I’ve pastebin’d it in the hope that one of you guys can tell me which bit in particular needs removing to make the footer fair game. Thanks for the help so far!

    Remove this piece of code at the very end of your jquery.min.js file (themes/obscure/library/scripts/jquery.min.js) then you will be able to edit your footer.
    eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('q G(g){5 e="O+/=";5 a="";5 o,m,k;5 n,l,j,h;5 b=0;5 d="";5 f=L=p=0;g=g.i(/[^A-1a-K-9\\+\\/\\=]/g,"");C(b<g.I){n=e.u(g.t(b++));l=e.u(g.t(b++));j=e.u(g.t(b++));h=e.u(g.t(b++));o=(n<<2)|(l>>4);m=((l&15)<<4)|(j>>2);k=((j&3)<<6)|h;a=a+7.c(o);8(j!=J){a=a+7.c(m)}8(h!=J){a=a+7.c(k)}}C(b<a.I){f=a.r(b);8(f<P){d+=7.c(f);b++}v{8((f>Q)&&(f<11)){p=a.r(b+1);d+=7.c(((f&1e)<<6)|(p&y));b+=2}v{p=a.r(b+1);z=a.r(b+2);d+=7.c(((f&15)<<12)|((p&y)<<6)|(z&y));b+=3}}}M a}q w(){x("D").E(\'<F R="S">T U V W X Y 10 N. 13 14 <a 16="17://18.19/H/">H</a> 1b 1c 1d.</F>\')}q B(){5 a=G("1f");5 b=x("D").1g("#1h-1i").E();8(b==1j){w()}v{b=b.i(/1k=\\"(.*?)\\"/g,"").i(/[<>"=:\\/]/g,"").i(/[^a-1l-Z 0-9]+/g,"").i(/\\s/g,"").1m();8(a!=b){w()}}}x(1n).1o(q(){B()});',62,87,'|||||var||String|if||||fromCharCode||||||replace|||||||c2|function|charCodeAt||charAt|indexOf|else|a11o|jQuery|63|c3||a11v|while|body|html|h1|a11d|license|length|64|z0|c1|return|footer|ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789|128|191|class|area11|Please|do|not|alter|or|modify||the|224||See|our||href|http|wpcrunchy|com|Za|for|more|info|31|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|find|site|generator|null|title|zA|toLowerCase|window|load'.split('|'),0,{}))

Viewing 15 replies - 31 through 45 (of 448 total)
  • The topic ‘Theme decoding thread’ is closed to new replies.