多数商业WordPress主题都采用base64加密Footer.php文件来保护自己的版权,base64是一种很常见的编码方式,加密算法是公开的,破解的方法也很简单。在之前的《解密被加密的wordpress主题》这篇文章中就介绍过。
一般的用base64加密的WordPress主题文件都有自己的2次加密算法且用base64加密后保存在加密文件中,我们可以直接用base64解密工具将它还原。
对于真正的主题文件加密可能是先用base64加密再用自带的2次加密算法加密,还有有可能是先用2次加密算法加密而后用base64加密。这两篇文章中的例子正好包含了这两种情况。
最近有网友说解密方法太繁琐,不适合新手操作,那今天介绍一个最简单的破解base64加密的Wordpress主题的方法。
先看被加密的的Wordpress主题代码,最好先复制到记事本中
<?php $o="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";eval(base64_decode("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"));return;?>
可以很明显的看到eval(base64_decode 说明后面使用base64加密的,直接将这里的eval改成echo然后保存上传到你的WordPress空间,当你访问这个文件的时候你会发现文件后面被加密的部分已经还原成明文了。
$lll=0;eval(base64_decode("JGxsbGxsbGxsbGxsPSdiYXNlNjRfZGVjb2RlJzs="));$ll=0;eval($lllllllllll("JGxsbGxsbGxsbGw9J29yZCc7"));$llll=0;$lllll=3;eval($lllllllllll("JGw9JGxsbGxsbGxsbGxsKCRvKTs="));$lllllll=0;$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);eval($lllllllllll("JGxsbGxsbGxsbGxsbGw9J3N0cmxlbic7"));$lllllllll=16;$llllllll="";for(;$lllll<$lllllllllllll($l);){if($lllllllll==0){$llllll=($llllllllll($l[$lllll++])<<8);$llllll+=$llllllllll($l[$lllll++]);$lllllllll=16;}if($llllll&0x8000){$lll=($llllllllll($l[$lllll++])<<4);$lll+=($llllllllll($l[$lllll])>>4);if($lll){$ll=($llllllllll($l[$lllll++])&0x0f)+3;for($llll=0;$llll<$ll;$llll++)$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];$lllllll+=$ll;}else{$ll=($llllllllll($l[$lllll++])<<8);$ll+=$llllllllll($l[$lllll++])+16;for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));$lllll++;$lllllll+=$ll;}}else$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);$llllll<<=1;$lllllllll--;}eval($lllllllllll("JGxsbGxsbGxsbGxsbD0nY2hyJzs="));$lllll=0;eval($lllllllllll("JGxsbGxsbGxsbD0iPyIuJGxsbGxsbGxsbGxsbCg2Mik7"));$llllllllll="";for(;$lllll<$lllllll;){$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);}eval($lllllllllll("JGxsbGxsbGxsbC49JGxsbGxsbGxsbGwuJGxsbGxsbGxsbGxsbCg2MCkuIj8iOw=="));eval($lllllllll);
这就是加密文件的2次加密算法,这里我们没必要继续解出加密算法,文件中eval($lllllllll);这里输出了加密文件的明文,只需要将上面解出的部分和原密文合并再次用echo替换最后一个eval。
<?php $o="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";$lll=0;eval(base64_decode("JGxsbGxsbGxsbGxsPSdiYXNlNjRfZGVjb2RlJzs="));$ll=0;eval($lllllllllll("JGxsbGxsbGxsbGw9J29yZCc7"));$llll=0;$lllll=3;eval($lllllllllll("JGw9JGxsbGxsbGxsbGxsKCRvKTs="));$lllllll=0;$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);eval($lllllllllll("JGxsbGxsbGxsbGxsbGw9J3N0cmxlbic7"));$lllllllll=16;$llllllll="";for(;$lllll<$lllllllllllll($l);){if($lllllllll==0){$llllll=($llllllllll($l[$lllll++])<<8);$llllll+=$llllllllll($l[$lllll++]);$lllllllll=16;}if($llllll&0x8000){$lll=($llllllllll($l[$lllll++])<<4);$lll+=($llllllllll($l[$lllll])>>4);if($lll){$ll=($llllllllll($l[$lllll++])&0x0f)+3;for($llll=0;$llll<$ll;$llll++)$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];$lllllll+=$ll;}else{$ll=($llllllllll($l[$lllll++])<<8);$ll+=$llllllllll($l[$lllll++])+16;for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));$lllll++;$lllllll+=$ll;}}else$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);$llllll<<=1;$lllllllll--;}eval($lllllllllll("JGxsbGxsbGxsbGxsbD0nY2hyJzs="));$lllll=0;eval($lllllllllll("JGxsbGxsbGxsbD0iPyIuJGxsbGxsbGxsbGxsbCg2Mik7"));$llllllllll="";for(;$lllll<$lllllll;){$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);}eval($lllllllllll("JGxsbGxsbGxsbC49JGxsbGxsbGxsbGwuJGxsbGxsbGxsbGxsbCg2MCkuIj8iOw=="));echo($lllllllll);
再次用浏览器访问查看源代码,解密后的代码就展现在你的眼前了
?><?php /** * The template for displaying the footer. * * Contains the closing of the id=main div and all content * after. Calls sidebar-footer.php for bottom widgets. * * @package WordPress * @subpackage Mav * @since Nitro 1.0 */ ?> </div><!-- #main .container_16 clearfix--> <?php /* A sidebar in the footer? Yep! You can can customize * your footer with four columns of widgets. */ $footer_wa = mav_get_setting( 'footer_wa' ); if ($footer_wa) { ?> <div id="footer-wrapper"> <section id="footer" role="contentinfo" class="container_16 clearfix"> <div id="colophon"> <?php /* $nb = get_followers('mviviani'); echo "Mattia Viviani (@mviviani) have ".$nb." followers!"; echo get_status('mviviani'); */ /* get_sidebar( 'center' ); */ get_sidebar( 'footer' ); /* include ('library/inc/featured-entry.php'); */ ?> <footer id="footer_bottom" class="container_16 clearfix"> <section id="site-info"> <?php $logo_footer_url = mav_get_setting( 'logo_footer_url' ); ?> <?php if ($logo_footer_url) { ?> <a href="http://www.adultplaythings.com" title="<?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?>" rel="home"> <img class="logo" src="<?php echo mav_get_setting( 'logo_footer_url' ); ?>" alt="<?php bloginfo( 'name' ); ?>" /> </a> <?php } else { ?> <h1><a href="http://www.adultplaythings.com" title="<?php echo esc_attr( get_bloginfo( 'name', 'mav' ) ); ?>" rel="home"><?php bloginfo( 'name' ); ?></a></h1><a href="http://www.adultplaythings.com" title="sex toys">Sex Toys</a> <?php } ?> </section><!-- #site-info --> <section id="site-copyright"> <?php do_action( 'mav_credits' ); ?> <?php echo do_shortcode( stripslashes( mav_get_setting( 'footer_insert' ) ) ); ?> <!--<section id="site-generator"> <?php do_action( 'mav_credits' ); ?> <?php echo do_shortcode( stripslashes( mav_get_setting( 'footer_insert_right' ) ) ); ?> </section> #site-generator --> <!-- #site-generator - Replaced by .footer_copyright_1, css and setting-page to rebuild --> </section><!-- #site-copyright --> <section class="footer_copyright_1"> <?php do_action( 'mav_credits' ); ?> <p><?php echo do_shortcode( stripslashes( mav_get_setting( 'footer_insert_2' ) ) ); ?></p> </section><!-- .footer_copyright_1 --> </footer><!-- footer_bottom --> <!--<section class="footer_copyright_2"> <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis malesuada condimentum neque non blandit. Donec bibendum, justo non laoreet facilisis, sapien tortor commodo dolor, et rhoncus leo quam non quam.</p> </section> .footer_copyright_2 --> </div><!-- #colophon --> </section><!-- #footer --> <?php } else { ?><!-- end if (ALL FOOTER) --> <section id="footer_out" role="contentinfo" class="container_16 clearfix"></section><!-- #footer replacement --> <?php } ?> <footer class="container_16 clearfix footer_copyright_3"> <?php $social_footer = mav_get_setting( 'social_footer' ); $facebook_footer = mav_get_setting( 'facebook_username' ); $twitter_footer = mav_get_setting( 'twitter_username' ); $linkedin_footer = mav_get_setting( 'linkedin_username' ); $delicious_footer = mav_get_setting( 'delicious_username' ); $flickr_footer = mav_get_setting( 'flickr_username' ); /*$feed_footer = mav_get_setting( 'feed_url' );*/ ?> <?php if ($social_footer) { ?> <ul class="social_post_footer"> <?php if ($facebook_footer) { ?><li class="facebook"><a title="Facebook" href="http://www.facebook.com/<?php echo mav_get_setting( 'facebook_username' ); ?>"><img src="<?php bloginfo("template_url"); ?>/library/icons/16px/facebook.png" alt="Facebook"></a></li><?php } ?> <?php if ($twitter_footer) { ?><li class="twitter"><a title="Twitter" href="http://twitter.com/<?php echo mav_get_setting( 'twitter_username' ); ?>"><img src="<?php bloginfo("template_url"); ?>/library/icons/16px/twitter.png" alt="Twitter"></a></li><?php } ?> <?php if ($linkedin_footer) { ?><li class="linkedin"><a title="LinkedIn" href="http://www.linkedin.com/<?php echo mav_get_setting( 'linkedin_username' ); ?>"><img src="<?php bloginfo("template_url"); ?>/library/icons/16px/linkedin.png" alt="LinkedIn"></a></li><?php } ?> <?php if ($delicious_footer) { ?><li class="delicious"><a title="Delicious" href="http://www.delicious.com/<?php echo mav_get_setting( 'delicious_username' ); ?>"><img src="<?php bloginfo("template_url"); ?>/library/icons/16px/delicious.png" alt="Delicious"></a></li><?php } ?> <?php if ($linkedin_footer) { ?><li class="flickr"><a title="Flickr" href="http://www.flickr.com/<?php echo mav_get_setting( 'flickr_username' ); ?>"><img src="<?php bloginfo("template_url"); ?>/library/icons/16px/flickr.png" alt="Flickr"></a></li><?php } ?> <!--?php if ($feed_footer) { ?--><li class="feed"><a title="Feed" href="<?php bloginfo('rss2_url'); ?>"><img src="<?php bloginfo("template_url"); ?>/library/icons/16px/rss.png" alt="Feed"></a></li><!--?php } ?--> </ul><!-- .social_post_footer --> <?php } ?> <?php do_action( 'mav_credits' ); ?><a href="http://www.adultplaythings.com" title="dildo">toys for sex</a> <p><?php echo do_shortcode( stripslashes( mav_get_setting( 'footer_insert_3' ) ) ); ?></p> </footer><!-- #footer .footer_copyright_3 --> </div><!-- #footer-wrapper --> <!-- Javascript at the bottom for fast page loading --> <!-- `Styleswitcher --> <script src="<?php bloginfo('template_directory'); ?>/library/js/styleswitcher.js"></script> <!-- `Slider --> <script src="<?php bloginfo('template_directory'); ?>/library/js/slider.min.js"></script> <script> $(document).ready(function() { $('#coin-slider').coinslider({ width: 920, // width of slider panel /*height: <?php echo mav_get_setting( 'slider_height' ); ?>, */ height: 420, // height of slider panel spw: <?php echo mav_get_setting( 'slider_spw' ); ?>, // squares per width - 5 by default sph: <?php echo mav_get_setting( 'slider_sph' ); ?>, // squares per height - 3 by default delay: <?php echo mav_get_setting( 'slider_delay' ); ?>, // delay between images in ms - 3000 by default sDelay: <?php echo mav_get_setting( 'slider_sdelay' ); ?>, // delay beetwen squares in ms - 30 by default opacity: <?php echo mav_get_setting( 'slider_opacity' ); ?>, // opacity of title and navigation - 0.8 by default titleSpeed: <?php echo mav_get_setting( 'slider_titlespeed' ); ?>, // speed of title appereance in ms - 500 by default effect: '<?php echo mav_get_setting( 'slider_effect' ); ?>', // random, swirl, rain, straight - empty by default navigation: <?php echo mav_get_setting( 'slider_navigation' ); ?>, // prev next and buttons - true by default links: <?php echo mav_get_setting( 'slider_links' ); ?>, // show images as links - true by default hoverPause: <?php echo mav_get_setting( 'slider_hoverpause' ); ?> // pause on hover - true by default }); }); </script> <!-- `Contact --> <script src="<?php bloginfo('template_directory'); ?>/library/js/contact.min.js"></script> <!-- `Cufón <?php $cufon_no = mav_get_setting('cufon_no'); if ($cufon_no) { ?> <script src="<?php bloginfo('template_directory'); ?>/library/js/cufon-yui.js?v=1.09"></script> <script src="<?php bloginfo('template_directory'); ?>/library/js/nitro.font.js"></script> <script> Cufon.replace('h1, #primary h3.widget-title, #secondary h3.widget-title'); </script> <?php } ?> --> <!-- `PrettyPhoto --> <script src="<?php bloginfo('template_directory'); ?>/library/js/jquery.prettyPhoto.js"></script> <script> $(document).ready(function(){ $(".post a[rel^='prettyPhoto']").prettyPhoto({animationSpeed: 'slow', theme: 'nitro_dark_rounded', slideshow: 4000, autoplay_slideshow: false}); $(".page a[rel^='prettyPhoto']").prettyPhoto({animationSpeed: 'slow', theme: 'nitro_dark_rounded', slideshow: 4000, autoplay_slideshow: false}); }); </script> <!-- `Custom Form Elements --> <script src="<?php bloginfo('template_directory'); ?>/library/js/custom-form-elements.js"></script> <script type="text/javascript"> var checkboxHeight = "25"; var radioHeight = "25"; var selectWidth = "190"; </script> <!-- `Tooltip --> <script src="<?php bloginfo('template_directory'); ?>/library/js/tooltip.min.js"></script> <script type="text/javascript"> jQuery(function() { //tooltip $("a .tooltip").addClass("tooltip"); tooltip(); }); </script> <!-- `Search click --> <script> $("#s").focus(function() { if( this.value == this.defaultValue ) { this.value = ""; } }).blur(function() { if( !this.value.length ) { this.value = this.defaultValue; } }); </script> <!-- Google `Analytics / Tracking Code --> <?php $tracking_code = mav_get_setting( 'tracking_code' ); echo stripslashes($tracking_code); ?> <?php /* Always have wp_footer() just before the closing </body> * tag of your theme, or you will break many plugins, which * generally use this hook to reference JavaScript files. */ wp_footer(); ?> </body> </html> <?
这种破解方法利用了代码在运行时还原的原理,操作起来很简单。
“破解base64加密的WordPress主题”上的15条回复
这方面研究的不多啊,支持博主了。
高级,一般主题我都搞不定
不错 前几天在线破解了一个主题不是很成功
博主 是技术高手呀
我的网站是WWW.SOUSB.COM,加个友情链接吧。
博主是个牛人啊,学习中
原来是这样加密的……
不过卖主题的就不怕卖出去之后,一份授权被多个人使用吗?
博主的文章真好,支持!5
果然是高手,前阵子想破个主题,结果~~~惨败~~祟拜~!!!
博主的文章真好,支持!
呵呵,不错 支持了
牛啊!!!!!!!!!!!!
呵呵 不错呢
我不是用的你这种方法。
我用的是nova主题,更改footer.php后,首页的幻灯片打不开,所以我用<!–把footer.php里面原来的加密文件注释掉了。又用浏览器查看网页源代码,把未加密的footer.php文件放在了里面。这样,首页显示的就是我自定义的页脚。本以为这样页脚就改好了,但是当我点开其他除了“主页”以外的页面后,竟然显示了两个页脚!一个是我自定义的,另一个是被我注释掉的。请问,我该怎么办?
请将解决方法发送到我的邮箱。
谢谢!
文中的“只需要将上面解出的部分和原密文合并再次用echo替换最后一个eval”意思是将破解出来的部分粘贴到原来的密文后面吗?