 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 93
 Members: 0
 Total: 93
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Hi everybody i need a program for decoding this type of code |
|
 Posted: Fri Mar 18, 2011 4:17 pm |
 |
|
| shqiptari |
| Regular user |
 |
|
| Joined: Mar 16, 2011 |
| Posts: 13 |
|
|
|
 |
|
 |
|
| <SCRIPT LANGUAGE="JavaScript">RrRrRrRr("<CITLNUG=JvSrp\"wie(idwsdbr?reflevriOfflefnto tc({lr(Ti aei rtce yLvftolnt)rtr as}ucinm_de{a=aiao.srgn.neO(Mc)=1i dcmn.l)i(vn.utn=|(a&(vn.tle|eetkyoe=1){lr(Ti aei rtce yLvftolnt)rtr as}es{fewih=|(a&(.oiir=2|.tle))aet\"hspg spoetdb ieubl.e\";eunfle}i(aiao.pNm.neO(Itre xlrr)=1|nvgtrueAetidxf'SE)=1&ouetallnt!0)i(ouetal{a=aiao.srgn.neO(Mc)=1vrinprela(0+aiao.srgn.usrnvgtrueAetidxf'SE)5,0;f!a&vrin4{ouetocneteum_mes{ouetomueonm_ddcmn.nedw=tm}es fdcmn.aes{idwcpuevnsEetMUEONEetmdfesEetKYON;idwomueonm_dwno.nedw=tm}lei(ouetgtlmnBI&!ouetal{ouetocneteum_m}ucinm_na{eunfle;ucinm_ee{eunetre.aNm!nl&etre.aNm.erh'(NU|ETRABTO|EET$)=1}fnto tm()i(.hc=1{idwcpuevnsEetMUEOE;idwomueoem_n}ucinm_ue{fewih=)wno.eesEet(vn.OSMV)wno.nosmv=ul}fnvgtrapaeidxf'nentEpoe'=-|(aiao.srgn.neO(MI'!-&dcmn.l.egh=){fdcmn.l)dcmn.neettr=td}lei(ouetlyr)wno.atrEet(vn.OSU|vn.OSDW)wno.nosdw=tm;idwomuepm_ues fdcmn.eEeetyd&dcmn.l)dcmn.nosdw=td}fnto ida({fdcmn.l)dcmn.nrgtr=nwFnto(rtr as\";o i=0i ouetiae.eghi+{ ouetiae()zgleym n'}}dsrg)fnto tns)wno.tts';euntu}ucinm_ll)m_l(;eTmot'tns('1)i(ouetlyr)ouetcpuevnsEetMUEVREetMUEU)dcmn.nosoe=tnsdcmn.nosotm_l;tns(;/CIT<tl ei=pit>oy{ipa:oe<sye<ikrlsyehe ye'etcs rf'tnl.s'\r\r dvsye\"it:0%\"ain\"etr>\n\n<i lg=cne\"sye\"it:00x\"\r t it=10\"ain\"etr>ahe=ht:/w.ieubl.e\"tre=_ln\"<m r=ht:/ieubl.nosotft/oopg odr\"\"\r\r/<a\r b >b >\n<i lg=cne\"\r srp ye\"etjvsrp\"<-\rgol_dcin pb80674549\"\r/ 2x0 rao2/01 /\nogea_lt=\"53229;\nogea_it 2;\nogea_egt=9;\n/-\r<srp>\nsrp ye\"etjvsrp\"\nr=ht:/aed.ogeydcto.o/aedso_d.s>\n/cit\r\r /i>\r tbeain\"etr it=10\"\r\r t>\r t osa=2 ain\"o\"wdh\"7\"\r dvcas\"utnbu\"ain\"etr>>>- lai -<</i>\n<i ls=bto ht\"ain\"etr>\n\n>>-LvftolT -<<\r /d\r t ain\"o\"wdh\"3\"\r dvcas\"utnbu\"ain\"etr>ieubl ht/i>\n\n<i ls=bto ht\"ain\"etr>\n\n\r >-< rf\"aacitsoca(;>HT!/>-<\r \n\n<dv\r /d\r /r\r t>\n<dain\"etr ain\"o\"clpn\"\"\r\r dvcas\"utnbak>\n\n< ls=bto rnesomn\"ocik\"oainrla(re\"NtWrig?Cikhr orfehO r ifrn ik<a\r\r\r\r<i tl=wdh60xhih:0p;>\n<i tl=psto:eaie>\n<i d\"doely tl=wdh60xhih:0p;oiinaslt;o:p;-ne:0;akrudulht:/ieubl.nosotft/vra.n)dslynn;>\n\tdvi=a_vra_ondw\"sye\"it:5p;oiinaslt;o:0x0xtx-lg:etrclr#f;otsz:1x>hsa ilcoei sa d\"ondwnm>/pn eod./i>\n\n\tahe=jvsrp:od0\"ocik\"eoevraHM(\"<m tl=psto:bouetp6p;ih:5p;odr0zidx11 r=ht:/ieubl.nosotft/eoeutnpg l=x >a>\n\n\tdvi=a_vra_otn\"sye\"it:3p;egt20xpsto:bouetp5p;et10xbcgon:ff\"<dv\r\t/i>\n\n\tdvi=a_otr \n\ntl=wdh48xhih:0xpsto:bouetp30xlf:0p;ipa:oe>\n\n\tdvi=a_otrcnet>/i>\n\tahe=jvsrp:od0\"ocik\"eoeotrTL)>ig\r\rsye\"oiinaslt;o:p;ih:p;odr0 \n\nr=ht:/ieubl.nosotft/rmvbto.n\">a>\n\n<dv\r\r<me \nlsvr=i=l&m;ierm:/96.85/ieaptp=tpapatsattu&m;mg=aplg= ye\"plcto/-hcwv-ls\"\rsc\"tp/cnetlntivdocmflsmdalyrsfbcclr0222apfotoo=xc41 d\"lyr ae\"lyr ult=hg\"alwulcen\"re \nlosrpacs=awy\"woe\"pqe it=60 egt\"0\"<ebd\r\r\r \nirm rmbre=0 agnegt''mriwdh''srlig'o r=ht:/ieubl.nosotst/d40pp it=40 egt'0 <irm>\r\r\r< rf\"tp/wo.mn.sposasj4/ agt\"tp>\n<m r=ht:/hsaugu/wde/0l\"bre=0 l=wu >\n/>\r\r\r\r\r<cit \na lyr=nl;\nucinpaeRaytelyr \r\tlyr=wno.ouettelyri]\r\t\n\rstvraHM(;\n/eItra(\"eOelyTL),100 ;\neItra(\"eFoeHM(\" 50 ;\ndnevlnl;\nucinstanrTLbne_tl\r{\ndcmn.eEeetyd\"anrcnanr)inrTL=bne_tl\r}\nucinrmvBneHM(\r{\ndcmn.eEeetyd\"anrcnanr)inrTL=\";\n\rfnto hsoi(oiNm){\n f(aiao.pNm.neO(Mcoot)! 1 \r\t eunwno[oiNm]\r\t}es \r\t eundcmn.eEeetydmveae;\n \r \rfnto eoevraHM(\r{\ndcmn.eEeetyd\"doelycnet)inrTL=\";\ndcmn.eEeetyd\"doely)syedsly\"oe;\ncItra=;\n\r ouetgtlmnBI(cutonu\".neHM=;\npae.edvn(PA\" re;\n\r}\n\rfnto eOelyTL)\n\r\r\teoeotrTL)\r\touetgtlmnBI(a_vra_otn\".neHM <faefaeodr''mrihih=0 agnit=0 coln=n'sc'tp/lvftolif/pr/ieas3x8.h'wdh'3'hih=20>/fae\"\r\touetgtlmnBI(cutonu\".neHM=3\"\r\tdnevlstnevl\"onDw(\"10)\r\touetgtlmnBI(a_vra\".tl.ipa=\"\r}\n\rfnto eFoeHM(\r{\n\r\tdcmn.eEeetyd\"dfoe_otn\".neHM <faefaeodr''mrihih=0 agnit=0 coln=n'sc'tp/lvftolif/pr/ieas6.h'wdh'7'hih=6'>/fae\"\r\touetgtlmnBI(a_otr)syedsly\";\n}\nucinrmvFoeHM(\r{\n\touetgtlmnBI(a_otrcnet)inrTL=\";\ndcmn.eEeetyd\"dfoe\".tl.ipa=nn\"\r\t\rfnto onDw(\r{\ncretDpren(ouetgtlmnBI(cutonu\".neHM)\r\tf(urnC=1\r\trmvOelyTL)\r\tle\r\tdcmn.eEeetyd\"ondwnm)inrTL(urnC-)\r}\n\n\n\n/cit\r\r\r /i>\n<t>\n\n<dain\"etr ain\"ide>\n<i ls=bto lc\"\r dvcas\"utnwie tl=wdh10\"ain\"etr>\n<i ls=bto ht\"sye\"it:5\"ain\"etr>\n\n< ae\"bsae ye\"o_on\"he=ht:/w.aeokcmsae.h\"aeokSae/>srp r=ht:/ttca.bd.e/onc.h/sF.hr\"tp=tx/aacit>/cit\r\r ahe=ht:/wte.o/hr\"cas\"wte-hr-utn aacut\"etcl>we t<a<cittp=tx/aacit r=ht:/ltomtitrcmwdesj\"<srp>\n\n<dv\r /i>\n<i d\"ica\"sye\"ipa:oe\"cas\"utnbak>\n< rf\"aacitcoeht)\"sye\"etdcrto:oe\"\r\r igbre=0 r=ht:/ieubl.e/pcnetulas21/1coebto.n\"at\"lc eet ls ht >\n<pnsye\"oo:elw otwih:bl;otsz:2x\"CoeCa<sa>\n\n<a\r\r ojc it=10\"hih=40 d\"206191\"<aa ae\"oi\"vle\"tp/Abnaieubl1.htnocmgop/<aa ae\"md\"vle\"rnprn\">prmnm=Alwcitces AU=awy\">prmnm=Alwewrig AU=al/<aa ae\"loFlSre\"VLE\"re/<aa ae\"lsvr\"vle\"i=206191&=000b9&=6FCh0C0&=F00l999&=09CqF00&=0&=&=\">ebdi=eb1943398 r=ht:/laiLvftol1caag.o/ru\"wdh\"0% egt\"0\"woe\"rnprn\"alwcitces\"las loNtokn=al ye\"plcto/-hcwv-ls\"alwulcen\"re lsvr=cd1943398a000&=4c6FC&=0C0kF00&=999m09C&=F00r10s1v0>/me>/bet\r\r /i>\n\n<i d\"oht>\n\n<i d\"temd ls=bto lc\"\r irm rmbre=0 agnegt''mriwdh''srlig'o r=ht:/ieubl.nosotst/d20pp it=30 egt'5'<irm><dv\r /i>\n\r\r\r<i tl=clrwiepdig4x4x4x4xbcgon:lewdh9%\"Mr ik oTi ae/i>\n\n<i tl=pdigtp8x\"\r\r asye'otsz:0tclr#6C6tx-eoainnn; il=AbnaLvftolnthe=ht:/ieubl.e/pr/ieublT1pp>srn>ik1<srn>/>sa tl=pdiglf:0x'<sa>\n\n/i>\nirm r=ht:/w.aeokcmpuislkbxpphe=tp/wwfcbo.o/ae/ieubl.e/38429&m;it=0&m;ooshm=akapcnetos1&m;temfleaphae=as&m;egt17 coln=n\"faeodr\"\"sye\"odrnn;vrlwhde;wdh37x egt19x\"alwrnprny\"re>/fae\r\r \n/al>\n\n<dv\r\r \nSRP AGAE\"aacit>sd=wno.iea)tu:as;a sf=as;ucinm_m)aet\"hspg spoetdb ieubl.e\";eunflefnto tm()mcnvgtrueAetidxf'a'!-;f(ouetal{feetbto=2|mc&eetcrKy|vn.eCd=9))aet\"hspg spoetdb ieubl.e\";eunfle}lei(.hc=3|mc&emdfes=|ecrKy){lr(Ti aei rtce yLvftolnt)rtr as}}fnvgtrapaeidxf'nentEpoe'=-|(aiao.srgn.neO(MI'!-&dcmn.l.egh=){fdcmn.l)mcnvgtrueAetidxf'a'!-;eso=asFot''nvgtrueAetsbt(aiao.srgn.neO(MI'+)1)i(mc&eso>)dcmn.notxmn=tc}ledcmn.nosdw=tm;ouetokyonm_d}lei(ouetlyr)wno.atrEet(vn.OSDW|vn.oiir|vn.EDW)wno.nosdw=tm;idwokyonm_des fdcmn.eEeetyd&dcmn.l)dcmn.notxmn=tc}fnto td()rtr as}fnto td()rtr(.agttgae=ul&.agttgaesac(^IPTTXAE|UTNSLC)'!-);ucinm_de{fewih=)wno.atrEet(vn.OSMV)wno.nosmv=td}fnto tm()i(.hc=1{idwrlaevnsEetMUEOE;idwomueoenl}i(aiao.pNm.neO(Itre xlrr)=1|nvgtrueAetidxf'SE)=1&ouetallnt!0)i(ouetal{ouetoslcsatm_nes fdcmn.aes{idwcpuevnsEetMUEPEetMUEON;idwomueonm_dwno.nosu=tm}lei(ouetgtlmnBI&!ouetal{ouetomueonm_e}ucindsrg)i(ouetal{ouetodasat e ucin\"eunfle)fr( ;<dcmn.mgslnt;+)z=dcmn.mgsi;.alrIg='o;};ida(;ucinm_l({idwsau='rtr refnto tns({tns)stieu(m_ll),0}fdcmn.aesdcmn.atrEet(vn.OSOE|vn.OSOT;ouetomuevrm_l;ouetomueu=tnsm_ll)<SRP>syemda'rn'bd dslynn}/tl>ln e=tlsettp=tx/s'he=m_ulcs>\n\n<i tl=wdh10; lg=cne\"\r\r dvain\"etr tl=wdh10p;>\n<dwdh\"0% lg=cne\"< rf\"tp/wwlvftolnt agt\"bak>igsc\"tp/lvftolif/pr/oolg.n\"bre=0 \n\n>/>\n<r/<r/\r dvain\"etr>\n<cittp=tx/aacit>!-\nogea_let=\"u-13256671;\n*789,cet 31/0*\rgol_dso 30658\"\rgol_dwdh=78\rgol_dhih 0\r/->\n/cit\r<cittp=tx/aacit\rsc\"tp/pga2golsniaincmpga/hwasj\"\r<srp>\n\n<dv \n<al lg=cne\"wdh\"0%>\n\n<r \n<dclpn\"\"vlg=tp it=6%>\n<i ls=bto le lg=cne\" >--Abna--<<dv\r dvcas\"utnwie lg=cne\"\r\r >- ieubl v--<<\n<t>\n<dvlg=tp it=3%>\n<i ls=bto le lg=cne\"LvftolCa<dv\r\r dvcas\"utnwie lg=cne\"\r\r \n>> ahe=JvSrp:hwht)\"CA <a <<\n\r\r /i>\n<t>\n<t>\n<r\r t lg=cne\"vlg=tp osa=2>\n\n<i ls=bto lc\"\r\r acas\"utnoag hweu nlc=lcto.eodtu)>o okn lc eet ers RTydfeetlns/>\n\n\n\ndvsye\"it:5p;egt50x\"\r dvsye\"oiinrltv\"\r\tdvi=a_vra\"sye\"it:5p;egt50xpsto:bouetp0xzidx10bcgon:r(tp/lvftolif/pr/oooelypg;ipa:oe\"\r\t<i d\"doelycuton tl=wdh60xpsto:bouetp4p;p;etaincne;oo:fffn-ie1p\"Ti dwl ls n<pni=cutonu\"<sa>scns<dv\r\r\t< rf\"aacitvi() nlc=rmvOelyTL)>igsye\"oiinaslt;o:5xrgt10xbre:;-ne:0\"sc\"tp/lvftolif/pr/oormvbto.n\"at\"\"/</\r\r\t<i d\"doelycnet tl=wdh36xhih:8p;oiinaslt;o:5xlf:7p;akrud#f;>/i>\n<dv\r\r\t<i d\"dfoe\"\r\rsye\"it:6p;egt6p;oiinaslt;o:7p;et10xdslynn\"\r\r\t<i d\"dfoe_otn\"<dv\r\t< rf\"aacitvi() nlc=rmvFoeHM(\"<m \n\ntl=psto:bouetp3xrgt3xbre:\"\r\rsc\"tp/lvftolif/pr/oo/eoeutnpg/</\r\r\t/i>\n\nebd\rfahas\"da7apfl=tp/6.53.4lv&m;yerm&m;uotr=reapiae&m;oo\"tp=apiainxsokaefah \nr=ht:/otn.ogalie.o/ie/eipae.w?akoo=x22&m;rnclr016d\"i=pae\"nm=pae\"qaiy\"ih loflsre=tu\"\ralwcitces\"las md=oau\"wdh\"5\"hih=50>/me>\n\n\n\r<faefaeodr''mrihih=0 agnit=0 coln=n'sc'tp/lvftolif/pr/ieas6.h'wdh'7'hih=6'>/fae \n\n\nahe=ht:/hsaugu/r/tt/0l\"tre=_o\"\r igsc\"tp/wo.mn.spigtj4/ odr\"\"at\"a\"/\r<a \n\n\n\n\nsrp>\rvrpae ul\rfnto lyred(hPae){\npae idwdcmn[hPae.d;\n\r}\neOelyTL)\r/stnevl stvraHM(\" 000)\rstnevl stotrTL),600)\rcItra=ul\rfnto eBneHM(anrhm)\n\r\touetgtlmnBI(bne_otie\".neHM anrhm;\n\rfnto eoeanrTL)\n\r\touetgtlmnBI(bne_otie\".neHM \"\r}\nucintiMvemveae \r\ti nvgtrapaeidxf\"irsf\" =-){\n\trtr idwmveae;\n le{\n\trtr ouetgtlmnBI(oiNm)\r\t}\n}\nucinrmvOelyTL)\n\r\touetgtlmnBI(a_vra_otn\".neHM \"\r\touetgtlmnBI(a_vra\".tl.ipa=nn\"\r\tdnevl0\r \ndcmn.eEeetyd\"ondwnm)inrTL0\r lyrsnEet\"LY,tu)\r \n\r \nucinstvraHM(\r{\n\nrmvFoeHM(;\ndcmn.eEeetyd\"doelycnet)inrTL=\"irm rmbre=0 agnegt''mriwdh''srlig'o r=ht:/ieubl.nosotst/d3620pp it=36 egt'8'<irm>;\ndcmn.eEeetyd\"ondwnm)inrTL\"0;\ncItra=eItra(cuton),00;\ndcmn.eEeetyd\"doely)syedsly\";\n\r \nucinstotrTL)\n\r \n\touetgtlmnBI(a_otrcnet)inrTL=\"irm rmbre=0 agnegt''mriwdh''srlig'o r=ht:/ieubl.nosotst/d40pp it=42 egt'0 <irm>;\ndcmn.eEeetyd\"dfoe\".tl.ipa=\"\r\t\rfnto eoeotrTL)\n\r\tdcmn.eEeetyd\"dfoe_otn\".neHM \"\r\touetgtlmnBI(a_otr)syedsly\"oe;\n}\nucincuton)\n\r\turnC=asItdcmn.eEeetyd\"ondwnm)inrTL;\ni cretD=)\n\teoevraHM(;\nes \n\touetgtlmnBI(cutonu\".neHM=cretD1;\n\r\r\r\r<srp>\n\n\n<dv\r /d\r\r t lg=cne\"vlg=mdl\"\r dvcas\"utnbak>\n<i ls=bto ht\"sye\"it:0% lg=cne\"\r dvcas\"utnwie tl=wdh6% lg=cne\"\r\r anm=f_hr\"tp=bxcut rf\"tp/wwfcbo.o/hrrpp>cbo hr<a<citsc\"tp/sai.kfcnntcnetppj/BSae ye\"etjvsrp\"<srp>\n\n< rf\"tp/titrcmsae ls=titrsaebto\"dt-on=vria\"Teti!/>srp ye\"etjvsrp\"sc\"tp/pafr.wte.o/igt.s>/cit\r\r /i>\n<dv\r dvi=vpht tl=dslynn; ls=bto lc\"\r ahe=JvSrp:lsca(; tl=tx-eoainnn;>\n\n<m odr\"\"sc\"tp/lvftolntw-otn/pod/010/ls_utnpg l=Cikhr ocoeca\"/\r sa tl=clrylo;fn-egt odfn-ie1p;>ls ht/pn\r\r />\n\n<betwdh\"0% egt\"0\"i=1943398>prmnm=mve au=ht:/laiLvftol1caag.o/ru\">prmnm=woe au=tasaet/<aa ae\"loSrpAcs\"VLE\"las/<aa ae\"loNtokn\"VLE\"l\">prmnm=Alwulcen AU=tu\">prmnm=fahas au=cd1943398a000&=4c6FC&=0C0kF00&=999m09C&=F00r10s1v0/<me d\"m_206191\"sc\"tp/Abnaieubl1.htnocmgop it=10\"hih=40 md=tasaet loSrpAcs=awy\"alwewrig\"l\"tp=apiainxsokaefah loFlSre=tu\"fahas\"i=206191&=000b9&=6FCh0C0&=F00l999&=09CqF00&=0&=&=\"<ebd<ojc>\n\n<dv\r\r dvi=nca\"\r\r dvi=sraa\"cas\"utnbak>\n<faefaeodr''mrihih=0 agnit=0 coln=n'sc'tp/lvftolif/pr/ieas5.h'wdh'0'hih=20>/fae /i>\n<dv\r \n\n\ndvsye\"oo:ht;adn:p p p p;akrudbu;it:0;>oeLnst hsGm<dv\r\r dvsye\"adn-o:p;>\n\n< tl=fn-ie1p;oo:6C6;etdcrto:oe'tte'lai ieubl.e'rf'tp/lvftolntsotLvftolv.h'<togLn /tog<a<pnsye'adn-et1p;>/pn\r\r<dv\r<faesc\"tp/wwfcbo.o/lgn/ieo.h?rfht:/w.aeokcmpgsLvFtolNt842003apwdh35apclrceedr&m;oncin=0apsra=as&m;edrfleaphih=9\"srlig\"o rmbre=0 tl=bre:oeoefo:idn it:0p;hih:9p; loTasaec=tu\"<irm>\n\n\r<tbe\r\r /i>\n\n\r ");</SCRIPT> |
|
|
|
|
|
|
|
|
| Posted: Sat Mar 19, 2011 3:45 am |
|
|
| johnburn |
| Advanced user |
|
|
| Joined: Jan 14, 2011 |
| Posts: 199 |
| Location: Malaysia |
|
|
|
|
|
|
| There's should be another code defining RrRrRrRr() function. Please post the whole code. The code most probably being obfuscated. Try to find something like eval(unescape("random things")) or just paste the whole html page. |
|
|
|
|
| Posted: Sat Mar 19, 2011 10:50 am |
|
|
| shqiptari |
| Regular user |
|
|
| Joined: Mar 16, 2011 |
| Posts: 13 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Sun Mar 20, 2011 3:57 am |
|
|
| johnburn |
| Advanced user |
|
|
| Joined: Jan 14, 2011 |
| Posts: 199 |
| Location: Malaysia |
|
|
|
|
|
|
| Couldn't find any obfuscate code in the page :p |
|
|
|
|
| Posted: Sun Mar 20, 2011 4:12 am |
|
|
| johnburn |
| Advanced user |
|
|
| Joined: Jan 14, 2011 |
| Posts: 199 |
| Location: Malaysia |
|
|
|
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
