 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 67
 Members: 0
 Total: 67
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Please tell me how to decode this type of encription |
|
 Posted: Tue Apr 05, 2011 5:32 pm |
 |
|
| shqiptari |
| Regular user |
 |
|
| Joined: Mar 16, 2011 |
| Posts: 13 |
|
|
|
 |
|
 |
|
| <SCRIPT type="text/javascript">ew_dc(unescape("9%24%28%28%60kfw%7Cuqg%60blk%28%28%3B%08%0F%25%25%25%25%25%259vfwluq%25idkbpdb%608%27OdsdVfwluq%27%25q%7Cu%608%27q%60%7Dq*OdsdVfwluq%27%3B%08%0F**9%24%5EFADQD%5E%08%0F9%24%28%28%08%0F**Fmdkk%60i%2557%08%0Fajfph%60kq+rwlq%60ik-%279lcwdh%60%25vq%7Ci%608Y%27GJWA@W%28GJQQJH%3F%25qwdkvudw%60kq%255u%7D%3E%25GJWA@W%28I@CQ%3F%25qwdkvudw%60kq%255u%7D%3E%25GJWA@W%28QJU%3F%25qwdkvudw%60kq%255u%7D%3E%25GJWA@W%28WLBMQ%3F%25qwdkvudw%60kq%255u%7DY%27%25m%60lbmq81%3D5%25vwf8Y%27mqqu%3F**cwd%60fm57+gijbvujq+fjh*Y%27%25cwdh%60gjwa%60w85%25rlaqm80%3C5%25kdh%608aw%60dhvqw%60dhqs+fjh%25vfwjiilkb8kj%3B9Y*lcwdh%60%3B%27%2C%3E%08%0F**%28%28%3B%08%0F**XX%3B%08%0F%25%25%25%25%25%259*vfwluq%3B%08%0F%25%25%25%25%25%259%24%28%28%60kfw%7Cuq%60ka%28%28%3B"));</SCRIPT> |
|
|
|
|
|
|
|
|
| Posted: Tue Apr 05, 2011 5:59 pm |
|
|
| johnburn |
| Advanced user |
|
|
| Joined: Jan 14, 2011 |
| Posts: 199 |
| Location: Malaysia |
|
|
|
|
|
|
There's should be another encoded code defining ew_dc() which is like this (before decode):
| Code: | | eval(unescape("function%20ew_dc%28s%29%7Bvar%20d%3D%27%27%2Ck%3D0%2Ca%3Dnew%20Array%28%29%2Cr%3Bfor%28i%3D0%3Bi%3Cs.length%3Bi++%29%7Bc%3Ds.charCodeAt%28i%29%3Bif%28c%3C128%29c%5E%3D5%3Bd+%3DString.fromCharCode%28c%29%3Bif%28%28i+1%29%2599%3D%3D0%29%7Ba%5Bk++%5D%3Dd%3Bd%3D%27%27%3B%7D%7Dr%3Da.join%28%27%27%29+d%3Bdocument.write%28r%29%3B%7D")); |
after decode:
| Code: | function ew_dc(s) {
var d = '',
k = 0,
a = new Array(),
r;
for (i = 0; i < s.length; i++) {
c = s.charCodeAt(i);
if (c < 128) c ^= 5;
d += String.fromCharCode(c);
if ((i + 1) % 99 == 0) {
a[k++] = d;
d = '';
}
}
r = a.join('') + d;
document.write(r);
} |
By using this function, you can decode your code:
| Code: |
<!--encryptbegin-->
<script language="JavaScript" type="text/JavaScript">
//<![CDATA[
<!--
//Channel 02
document.writeln("<iframe style=\"BORDER-BOTTOM: transparent 0px; BORDER-LEFT: transparent 0px; BORDER-TOP: transparent 0px; BORDER-RIGHT: transparent 0px\" height=480 src=\"http://fraech02.blogspot.com/\" frameborder=0 width=590 name=dreamstreamtv.com scrolling=no><\/iframe>");
//-->
//]]>
</script>
<!--encryptend--> |
|
|
|
|
|
|
|
|
|
| Posted: Thu Apr 14, 2011 5:45 pm |
|
|
| shqiptari |
| Regular user |
|
|
| Joined: Mar 16, 2011 |
| Posts: 13 |
|
|
|
|
|
|
|
| thank you johnburn but i still don't undderstand the mechanism for doecoding this type of code. can you explain me step by step and more detailed. thank you |
|
|
|
|
| Posted: Thu Apr 14, 2011 5:51 pm |
|
|
| johnburn |
| Advanced user |
|
|
| Joined: Jan 14, 2011 |
| Posts: 199 |
| Location: Malaysia |
|
|
|
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
