<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Push cx &#187; obfuscation</title>
	<atom:link href="http://push.cx/tag/obfuscation/feed" rel="self" type="application/rss+xml" />
	<link>http://push.cx</link>
	<description>A traveling geek&#039;s blog on development, games, and the web</description>
	<lastBuildDate>Fri, 14 Oct 2011 10:24:13 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Investigating Theme Spam</title>
		<link>http://push.cx/2009/investigating-theme-spam</link>
		<comments>http://push.cx/2009/investigating-theme-spam#comments</comments>
		<pubDate>Fri, 05 Jun 2009 12:45:23 +0000</pubDate>
		<dc:creator>Peter Harkins</dc:creator>
				<category><![CDATA[Code]]></category>
		<category><![CDATA[decoding]]></category>
		<category><![CDATA[obfuscation]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[reverse engineering]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://push.cx/?p=1115</guid>
		<description><![CDATA[If you&#8217;re interested in what spammers are up to these days, check out Snarky&#8217;s blog post Evil Eval() investigating the obfuscated spam code hidden in the new WordPress theme he downloaded. I&#8217;d be really interested to see how many of the themes on various WordPress sites include function calls like eval, call_user_func, base64_decode, unpack, ord, [...]]]></description>
			<content:encoded><![CDATA[<p>
If you&#8217;re interested in what spammers are up to these days, check out Snarky&#8217;s blog post <a href="http://push.cx/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?url=aHR0cDovL3RoZXNuYXJreS5jb20vMjAwOS8wNi8wNC9ldmlsLWV2YWwv">Evil Eval()</a> investigating the obfuscated spam code hidden in the new WordPress theme he downloaded.
</p>

<p>
I&#8217;d be really interested to see how many of the themes on various WordPress sites include function calls like eval, call_user_func, base64_decode, unpack, ord, chr, etc. as an indicator of hidden spam.
</p> <img src="http://push.cx/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?view=1&post_id=1115" width="1" height="1" style="display: none;" />]]></content:encoded>
			<wfw:commentRss>http://push.cx/2009/investigating-theme-spam/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

