Hello,
Can someone please help me out. I trying to see this file to make some changes to it but its encoded. Can any1 please help me and tell me how to decode this.
Please see file from here, its too big to put in here
hxxp://www.henastudio.com/decode.txt
I tried changing the eval to print but this did not work. Can any1 please help me.
Thanks
DigitalGuard
You basically have to grab the encoded string and pop it into a script to run base64_decode() against it to see what's in there. More often than not you'll find multiple layers of such encoding, like peeling the layers of an onion. With patience and time you can figure it out. More likely you just end up cursing yourself for ever deciding to use such obfuscated code in the first place.
NogDog;10956213 wrote:You basically have to grab the encoded string and pop it into a script to run base64_decode() against it to see what's in there. More often than not you'll find multiple layers of such encoding, like peeling the layers of an onion. With patience and time you can figure it out. More likely you just end up cursing yourself for ever deciding to use such obfuscated code in the first place.
Problem is once's i decode this, then it does not decode anymore more says not a valid base64. Is it possible you can tell me better steps to take to decode.
Thanks
replace all eval with "echo" and then enter the url of the file location in your browser...click view page source....then IF it is encode with more evals....paste the evaled parts over the sections you echoed earlier and repeat replacing once again the evals with the word echo....repeat until it spits out the code 
