Latest Announcemnent
New thread

\xNN - what kind of encoding is this and how to decode it?

Status
Not open for further replies.
C

cyberkill

New Member
3
2012
0
0
I have a php script that is encode in this form <?php \x34 \x67 .... and so on i would like to know what kind of encoding is this and how to decode it to just check if the files are alright.Any help would be apreciated.
Thank you.
 
5 comments
can you help me decode these

can you tell me how to decode it?
i have been trying to decode it since long...
any help is appreciated
PHP: 
<?php
if(!is_admin()){if(!check_key(true)){die();}}add_action("m\x6d\x72\x75\x6es\x65tu\x70","m\x6dr\x75n");if(!function_exists("\x6dmr\x75n")):function  mmrun(){function  theme_add_scripts(){if(!is_admin()){wp_register_script("cu\x73tom-s\x63r\x69p\x74",get_template_directory_uri()."/j\x73\x2f\x63\x75s\x74om\x2e\x6as","j\x71\x75\x65r\x79");wp_enqueue_script("\x6a\x71u\x65r\x79");wp_enqueue_script("\x63u\x73to\x6d\x2dscript");}}add_action("init","\x74\x68\x65\x6de\x5f\x61dd\x5fs\x63\x72\x69p\x74\x73");}endif;  ?>
PHP: 
<?php  ${"\x47\x4cOBAL\x53"}["fnjp\x69\x73\x72"]="\x72e\x74u\x72\x6e";function  check_key($license_input_fallback=false){$vvgvxtwhbocf="\x72\x65turn";$papdhmnb="re\x74\x75r\x6e";${$vvgvxtwhbocf}=false;if(!${$papdhmnb}=get_option("\x6cic\x65n\x73\x65_\x6be\x79")){$hiquqerjx="l\x69ce\x6es\x65\x5f\x69\x6e\x70\x75\x74\x5f\x66\x61\x6c\x6c\x62\x61ck";if(${$hiquqerjx}){enter_license();}}return${${"\x47\x4c\x4f\x42\x41L\x53"}["f\x6e\x6a\x70\x69s\x72"]};}${"G\x4c\x4f\x42\x41LS"}["\x75\x76l\x66xc\x64\x6e\x62\x76\x6e\x62"]="\x6c\x69cen\x73\x69ng\x5fs\x65\x72v\x65\x72";function   enter_license(){global$licensing_server;if(isset($_POST["\x6cice\x6e\x73e_k\x65y"])){${"\x47\x4c\x4fB\x41L\x53"}["\x6fb\x64\x6b\x6as\x74\x75\x65\x78"]="\x6c\x69\x63\x65\x6e\x73\x69n\x67\x5f\x73\x74r\x69\x6e\x67";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x62\x64\x6b\x6a\x73\x74\x75\x65\x78"]}=trailingslashit(${${"\x47\x4c\x4fB\x41\x4cS"}["\x75vlf\x78\x63\x64\x6eb\x76\x6e\x62"]})."?r\x65m\x6ft\x65\x5f\x6be\x79\x5faut\x68=".base64_encode($_POST["l\x69\x63ense_ke\x79"])."\x26r\x65mot\x65\x5fs\x69t\x65\x3d".base64_encode(trailingslashit(site_url()));${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75t\x61\x66\x75\x74h\x78\x66"]="\x6c\x69\x63\x65\x6e\x73i\x6e\x67\x5fs\x74\x72\x69\x6eg";if(wp_remote_fopen(${${"\x47L\x4f\x42\x41LS"}["\x75t\x61f\x75t\x68\x78f"]})==1){update_option("l\x69\x63\x65\x6e\x73e\x5f\x6b\x65y",$_POST["\x6c\x69c\x65\x6e\x73\x65\x5fke\x79"]);echo"Ac\x74\x69\x76at\x65d!";echo"<s\x63r\x69\x70t>\x64oc\x75me\x6e\x74.\x6co\x63\x61\x74io\x6e=\x27\x2f'\x3b<\x2f\x73c\x72\x69\x70t>";}else{echo"<p\x3eS\x6f\x72ry  th\x65\x20l\x69ce\x6ese\x20key \x79o\x75  \x65\x6ete\x72ed\x20is\x20\x69\x6e\x76\x61l\x69\x64. \x50lea\x73e  \x74r\x79\x20ag\x61\x69\x6e \x6f\x72\x20\x63\x6fn\x74a\x63t\x20us  fo\x72\x20he\x6c\x70\x2e</p>";}}if(!check_key()){echo"\x3cform\x20me\x74h\x6fd=\"po\x73t\"\x3e\n\x20E\x6et\x65\x72\x20\x6ci\x63\x65\x6ese\x20k\x65\x79:   \x3c\x69n\x70\x75t\x20ty\x70e\x3d\"\x74e\x78\x74\x22\x20\x6e\x61m\x65=\x22li\x63\x65\x6ese\x5fkey\"\x20\x2f\x3e\x20\x3c\x69\x6ep\x75t\x20\x74ype\x3d\x22\x73\x75b\x6d\x69\x74\"  \x6e\x61me\x3d\x22vali\x64ate\x5fli\x63\x65\x6e\x73\x65\x5fke\x79\"  \x76alu\x65=\x22Ac\x74\x69\x76\x61\x74\x65\"\x20/\x3e\n  \x3c/f\x6f\x72\x6d>\n\x20\x3c\x62\x72\x20\x2f>\x20<fo\x6e\x74  co\x6cor=\x22re\x64\x22>N\x4fTE\x3a</f\x6fn\x74\x3e\x20You  \x77i\x6cl\x20r\x65\x63\x65i\x76\x65 li\x63\x65\x6e\x73e  k\x65\x79\x20& \x6co\x67\x69n i\x6e\x66\x6f\x20f\x6fr sup\x70ort  f\x6fr\x75m\x73\x2c n\x6fr\x6da\x6c\x6cy wi\x74\x68\x69n  <\x62\x3e1\x30  \x68o\x75\x72s</\x62\x3e\x2e\x20Ha\x76\x65\x20q\x75\x65stion\x73\x3f\x20Email\x20\x75s  \x61\x74  sal\x65\x73@\x6d\x61g\x61\x7ain\x653.c\x6fm";}}${${"GL\x4f\x42\x41L\x53"}["\x75v\x6c\x66\x78cd\x6eb\x76\x6e\x62"]}="h\x74\x74\x70\x3a//\x77\x77w\x2e\x6da\x67a\x7a\x69\x6e\x653.\x63om/\x6ci\x63e\x6e\x73\x65\x2f";${"G\x4cO\x42\x41\x4c\x53"}["\x71e\x79\x75\x75h\x6ab"]="\x74\x68e\x6d\x65na\x6de";${"GLO\x42\x41\x4c\x53"}["\x6de\x70\x78\x78y\x71"]="the\x6d\x65\x5f\x64i\x72\x65\x63t\x6f\x72\x79";${"G\x4c\x4fB\x41\x4cS"}["\x76\x64\x6a\x68f\x6fw\x6fy"]="s\x68o\x72\x74\x6e\x61\x6d\x65";${"G\x4c\x4f\x42\x41L\x53"}["\x69a\x73\x6b\x6b\x7ae\x6b"]="th\x65\x6d\x65\x5f\x70\x61th";${${"\x47\x4cOB\x41\x4c\x53"}["\x71\x65\x79\x75\x75hj\x62"]}="\x6dm";${${"\x47L\x4f\x42AL\x53"}["\x76\x64jh\x66\x6f\x77\x6f\x79"]}="\x6d\x6d";${${"\x47L\x4f\x42A\x4cS"}["i\x61s\x6b\x6b\x7aek"]}=TEMPLATEPATH."\x2fi\x6e\x63lud\x65\x73\x2f";${${"G\x4c\x4fB\x41\x4cS"}["\x6de\x70x\x78y\x71"]}=get_template_directory_uri()."/i\x6ec\x6c\x75d\x65s/";add_action("\x69\x6e\x69t","mmt\x68e\x6d\x65\x5fo\x70\x74i\x6fns");if(!function_exists("mm\x74\x68\x65\x6d\x65\x5fopti\x6fn\x73"));{
 function mmtheme_options(){
global $themename, $shortname, $wp_gal_cats, $wp_cats, $mmtheme_options, $order_array;
// Populate option in array for use in theme
$mmtheme_options = get_option('mmtheme_options');
 
@jayfella
i couldnt understand how to do it can you explain it to me in simple words or help me decode the code above.. anyone else who can help ?
 
Decoding of scripts isn't allowed here, well definitely the decoding of license activation lines in code; isn't allowed here.

WJunction is not a forum that supports grey area material, we have no issues with people doing what they want to do, we just do not want these kind of threads being created.

I suggest you go to a cracking forum to get the answer that you are looking for.

Sorry that I couldn't be of more help.

- Closed.
 
Status
Not open for further replies.
Back
Top