Decrypt nested eval gzinflate str_rot13 base64_decode
So I went ahead and wrote a script to undo massively nested eval(gzinflate(str_rot13(base64_decode(‘STRING’)))); and eval(gzinflate(base64_decode(‘STRING’))); “encryptions” with a multitude of both of them inside it. The string from the original footer here had to go through 67 different iterations before it got to the real source code (talk about overkill).
If you have strings that aren’t nested, you can probably just do this:
$string = gzinflate(str_rot13(base64_decode('YOURÂ STRING')));
$string = htmlentities($string,ENT_NOQUOTES);
echo $string;
If you have a string from that fits that description you can decrypt it here
Or if you just want to test it here’s the original string from the footer of this theme:
Did the job, thank you!
Is it normal to take a ~20,000 byte string (in a file) down to source code of only ~640 bytes?
Also, should I be able to drop the “source” in place of the “encrypted” file and all work as normal (as I can’t…)?
Very good work, btw. I just am trying to learn and have those and possibly a few more questions.
it really just depends on how they did it and how many times. the one that was in this footer was originally 11,139 bytes and the actual source was only 6,842 bytes. although that’s not quite as drastic of a difference as 20kb — > .6kb it is possible.
and yes, you should be able to just replace the eval(‘blah blah blah’); with the actual source code.
if it’s not working feel free to send me what you’re trying to decode and i can try and help out.
josh (at) thespiffylife (dot) com
By the way, I just fixed the decrypting page to allow for either
eval(gzinflate(str_rot13(base64_decode('STRING'))));oreval(gzinflate(base64_decode('STRING')));(and others nested up inside them). So that should help most everyone.thanks, your scripts helpfull me
thanks for sharing…without a doubt easiest and most efficient solution I found on the web…
It’s awsome man!
Realy thanks… that did my job.
this is so great! thanks a lot for saving my time to search on the decoding. fantastic!!!!
thanks so much, i have been dying to unencrypt one part of a template that i found but had some junk links plugged into it. i had found others that promised and others that had some ethical problems with unencrypting code.