JavaScript Разкодирване

Marik

Registered
Знам , че имаше някаква програма която може да разкодира тоя код.
Ако някой може да го разкодира ще съм му много благодарен.
Код:
eval(unescape("%66%75%6E%63%74%69%6F%6E%20%68%70%5F%64%31%31%28%73%29%7B%76%61%72%20%6F%3D%22%22%2C%61%72%3D%6E%65%77%20%41%72%72%61%79%28%29%2C%6F%73%3D%22%22%2C%69%63%3D%30%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%7B%63%3D%73%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%3B%69%66%28%63%3C%31%32%38%29%63%3D%63%5E%32%3B%6F%73%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%63%29%3B%69%66%28%6F%73%2E%6C%65%6E%67%74%68%3E%38%30%29%7B%61%72%5B%69%63%2B%2B%5D%3D%6F%73%3B%6F%73%3D%22%22%7D%7D%6F%3D%61%72%2E%6A%6F%69%6E%28%22%22%29%2B%6F%73%3B%72%65%74%75%72%6E%20%6F%7D"));eval(hp_d11(unescape("gtcn*dwlavkml*r.c.a.i.g.p+yg?dwlavkml*a+ypgvwpl*a>c=%25%258g*rcpqgKlv*a-c+++)**a?a'c+%3C17=Qvpkle,dpmoAjcpAmfg*a)0;+8a,vmQvpkle*14++%7F9kd*#%25%25,pgrncag*-%5C-.Qvpkle++yujkng*a//+pYg*a+_?iYa_~~g*a+9i?Ydwlavkml*g+ypgvwpl%22pYg_%7F_9g?dwlavkml*+ypgvwpl%25^^u)%25%7F9a?3%7F9ujkng*a//+kd*iYa_+r?r,pgrncag*lgu%22PgeGzr*%25^^`%25)g*a+)%25^^`%25.%25e%25+.iYa_+9pgvwpl%22r%7F*%25J%2247? 3E?3.( 9J%226[? 3E.( 9J%224p? 6j 9J%221u?29J%221o?P9J%223w9J%22aQ9J%22aa9J%221d?
 
За програма не се сещам, но в кода който си дал се използва JScript функцията unescape(). Можеш да ползваш нея за да си енкоднеш кода. Например в първата част на скрипта, който си дал пише:
unescape("%66%75%6E%63%74%69%6F%6E%20%68%70%5F%64%31%31%28%73%29%7B%76%61%72%20%6F%3D%22%22%2C%61%72%3D%6E%65%77%20%41%72%72%61%79%28%29%2C%6F%73%3D%22%22%2C%69%63%3D%30%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%7B%63%3D%73%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%3B%69%66%28%63%3C%31%32%38%29%63%3D%63%5E%32%3B%6F%73%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%63%29%3B%69%66%28%6F%73%2E%6C%65%6E%67%74%68%3E%38%30%29%7B%61%72%5B%69%63%2B%2B%5D%3D%6F%73%3B%6F%73%3D%22%22%7D%7D%6F%3D%61%72%2E%6A%6F%69%6E%28%22%22%29%2B%6F%73%3B%72%65%74%75%72%6E%20%6F%7D");
Като му дадеш document.write и ще ти покаже истинския код:
function hp_d11(s){var o="",ar=new Array(),os="",ic=0;for(i=0;i80){ar[ic++]=os;os=""}}o=ar.join("")+os;return o}
А функцията eval в комбинация с unescape в момента се използва много успешно за инжектиране на троянци в Activex-ите на Internet Explorer 7.
Разбира се понякога девелоперите се опитват така да си скриват кода, но това не е особено качествен метод за енкодване.
 

Back
Горе