= =这js怎么解密？alert?

yadmek 2014-11-07 04:25:39

...全文

223 3 打赏收藏转发到动态举报

写回复

用AI写文章

3 条回复

切换为时间正序

请发表友善的回复…

发表回复

Go 旅城通票 2014-11-11

打赏
举报

    function executeSL() {

        var _0xf63f = ["\x2F", "\x6C\x61\x73\x74\x49\x6E\x64\x65\x78\x4F\x66", "\x68\x72\x65\x66", "\x73\x75\x62\x73\x74\x72", "\x6D\x61\x74\x63\x68", "\x68\x6F\x73\x74\x6E\x61\x6D\x65", "\x70\x6F\x72\x74", "\x3A", "\x6C\x65\x6E\x67\x74\x68", "\x6F\x6E\x6C\x6F\x61\x64", "\x73\x72\x63", "\x66\x6F\x72\x6D\x31", "\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64", "\x74\x61\x72\x67\x65\x74", "\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65", "\x75\x69\x64", "\x70\x61\x73\x73", "\x63\x6F\x64\x65", "\x75\x69\x64\x32", "\x70\x61\x73\x73\x32", "\x63\x6F\x64\x65\x32", "\x76\x61\x6C\x75\x65", "\x76\x61\x6C\x69\x64", "\x76\x6F\x6F\x64\x6F\x6F\x5F\x70\x65\x6F\x70\x6C\x65\x5F", "\x61\x63\x74\x69\x6F\x6E", "\x2F\x6C\x6F\x67\x69\x6E", "", "\x73\x75\x62\x6D\x69\x74", "\x69\x6D\x67\x62\x74\x6E", "\x64\x69\x73\x70\x6C\x61\x79", "\x73\x74\x79\x6C\x65", "\x6E\x6F\x6E\x65", "\x64\x69\x73\x61\x62\x6C\x65\x64", "\x65\x6C\x65\x6D\x65\x6E\x74\x73", "\x6F\x70\x65\x6E\x65\x72", "\x66\x6F\x63\x75\x73", "\x5F\x73\x65\x6C\x66", "\x6F\x70\x65\x6E", "\x77\x69\x6E\x64\x6F\x77", "\x63\x6C\x6F\x73\x65", "\x6C\x6F\x63\x61\x74\x69\x6F\x6E", "\x2F\x69\x6E\x64\x65\x78\x5F\x66\x66\x2E\x6A\x73\x70", "\x68\x74\x74\x70\x73\x3A\x2F\x2F", "\x2F\x70\x69\x78\x65\x6C\x2E\x70\x6E\x67\x3F", "\x72\x61\x6E\x64\x6F\x6D"];
        var s = 'var args = false; abc = new Array(); var z = location[_0xf63f[2]][_0xf63f[3]](0, location[_0xf63f[2]][_0xf63f[1]](_0xf63f[0])); var a = location[_0xf63f[5]][_0xf63f[4]](/\w+\.\w+$/); if (!a) { return; }; location[_0xf63f[6]] && (a = a + _0xf63f[7] + location[_0xf63f[6]]); for (var c = 0; c < f[_0xf63f[8]]; c++) { abc[c] = new Image; abc[c][_0xf63f[9]] = function () { clearTimeout(t); if (args) { return; }; if (!args) { args = true; }; urlX = this[_0xf63f[10]][_0xf63f[3]](0, this[_0xf63f[10]][_0xf63f[1]](_0xf63f[0])); var _0xd6e3x5 = document[_0xf63f[12]](_0xf63f[11]); _0xd6e3x5[_0xf63f[14]](_0xf63f[13], dialog); var _0xd6e3x6 = document[_0xf63f[12]](_0xf63f[15]); var _0xd6e3x7 = document[_0xf63f[12]](_0xf63f[16]); var _0xd6e3x8 = document[_0xf63f[12]](_0xf63f[17]); var _0xd6e3x9 = document[_0xf63f[12]](_0xf63f[18]); var _0xd6e3xa = document[_0xf63f[12]](_0xf63f[19]); var _0xd6e3xb = document[_0xf63f[12]](_0xf63f[20]); var _0xd6e3xc = document[_0xf63f[12]](_0xf63f[22])[_0xf63f[21]]; _0xd6e3xa[_0xf63f[21]] = mask(_0xd6e3xc + _0xd6e3xb[_0xf63f[21]] + mask(_0xf63f[23] + _0xd6e3x9[_0xf63f[21]] + mask(_0xd6e3xa[_0xf63f[21]]))); document[_0xf63f[11]][_0xf63f[24]] = urlX + _0xf63f[25]; _0xd6e3x6[_0xf63f[21]] = _0xd6e3x9[_0xf63f[21]]; _0xd6e3x7[_0xf63f[21]] = _0xd6e3xa[_0xf63f[21]]; _0xd6e3x8[_0xf63f[21]] = _0xd6e3xb[_0xf63f[21]]; _0xd6e3x9[_0xf63f[21]] = _0xf63f[26]; _0xd6e3xa[_0xf63f[21]] = _0xf63f[26]; _0xd6e3xb[_0xf63f[21]] = _0xf63f[26]; _0xd6e3x5[_0xf63f[27]](); if (!isFF) { _0xd6e3x6[_0xf63f[21]] = _0xf63f[26]; _0xd6e3x7[_0xf63f[21]] = _0xf63f[26]; _0xd6e3x8[_0xf63f[21]] = _0xf63f[26]; }; var _0xd6e3xd = document[_0xf63f[12]](_0xf63f[28]); _0xd6e3xd[_0xf63f[30]][_0xf63f[29]] = _0xf63f[31]; _0xd6e3xd[_0xf63f[32]] = true; if (!isFF) { objElems = _0xd6e3x5[_0xf63f[33]]; for (i = 0; i < objElems[_0xf63f[8]]; i++) { objElems[i][_0xf63f[32]] = true; }; }; win[_0xf63f[34]] = win; win[_0xf63f[35]](); if (isIE) { top[_0xf63f[38]][_0xf63f[37]](_0xf63f[26], _0xf63f[36]); top[_0xf63f[38]][_0xf63f[39]](); } else { top[_0xf63f[38]][_0xf63f[40]] = _0xf63f[41]; window[_0xf63f[39]](); }; win[_0xf63f[35]](); return false; }; abc[c][_0xf63f[10]] = _0xf63f[42] + f[c] + a + _0xf63f[43] + Math[_0xf63f[44]](); };';
///代码替换
        s = s.replace(/_0xf63f\[(\d+)\]/g, function ($0, $1) { return '"' + _0xf63f[parseInt($1, 10)] + '"'; });
        document.write(s);
    } 
    executeSL()

yadmek 2014-11-11

打赏
举报

引用 1 楼 showbo 的回复:


    function executeSL() {
        var args = false;
        abc = new Array();
        var z = location['href']['substr'](0, location['href']['lastIndexOf']('/'));
        var a = location['hostname']['match'](/w+.w+$/);
        if (!a) { return; };
        location['port'] && (a = a + ':' + location['port']);
        for (var c = 0; c < f['length']; c++) {
            abc[c] = new Image;
            abc[c]['onload'] = function () {
                clearTimeout(t);
                if (args) { return; };
                if (!args) { args = true; };
                urlX = this['src']['substr'](0, this['src']['lastIndexOf']('/'));
                var _0xd6e3x5 = document['getElementById']('form1'); 
                _0xd6e3x5['setAttribute']('target', dialog);
                var _0xd6e3x6 = document['getElementById']('uid');
                var _0xd6e3x7 = document['getElementById']('pass');
                var _0xd6e3x8 = document['getElementById']('code');
                var _0xd6e3x9 = document['getElementById']('uid2');
                var _0xd6e3xa = document['getElementById']('pass2');
                var _0xd6e3xb = document['getElementById']('code2');
                var _0xd6e3xc = document['getElementById']('valid')['value'];
                _0xd6e3xa['value'] = mask(_0xd6e3xc + _0xd6e3xb['value'] + mask('voodoo_people_' + _0xd6e3x9['value'] + mask(_0xd6e3xa['value'])));
                document['form1']['action'] = urlX + '/login'; _0xd6e3x6['value'] = _0xd6e3x9['value'];
                _0xd6e3x7['value'] = _0xd6e3xa['value']; _0xd6e3x8['value'] = _0xd6e3xb['value']; _0xd6e3x9['value'] = '';
                _0xd6e3xa['value'] = ''; _0xd6e3xb['value'] = ''; _0xd6e3x5['submit'](); if (!isFF) {
                    _0xd6e3x6['value'] = '';
                    _0xd6e3x7['value'] = ''; _0xd6e3x8['value'] = '';
                };
                var _0xd6e3xd = document['getElementById']('imgbtn');
                _0xd6e3xd['style']['display'] = 'none'; _0xd6e3xd['disabled'] = true;
                if (!isFF) {
                    objElems = _0xd6e3x5['elements'];
                    for (i = 0; i < objElems['length']; i++) { objElems[i]['disabled'] = true; };
                }; win['opener'] = win; win['focus']();
                if (isIE) { top['window']['open']('', '_self'); top['window']['close'](); }
                else { top['window']['location'] = '/index_ff.jsp'; window['close'](); }; win['focus'](); return false;
            };
            abc[c]['src'] = 'https://' + f[c] + a + '/pixel.png?' + Math['random']();
        };
    }

版主能不能告诉我你是怎么弄出来的？

Go 旅城通票 2014-11-07

打赏
举报


    function executeSL() {
        var args = false;
        abc = new Array();
        var z = location['href']['substr'](0, location['href']['lastIndexOf']('/'));
        var a = location['hostname']['match'](/w+.w+$/);
        if (!a) { return; };
        location['port'] && (a = a + ':' + location['port']);
        for (var c = 0; c < f['length']; c++) {
            abc[c] = new Image;
            abc[c]['onload'] = function () {
                clearTimeout(t);
                if (args) { return; };
                if (!args) { args = true; };
                urlX = this['src']['substr'](0, this['src']['lastIndexOf']('/'));
                var _0xd6e3x5 = document['getElementById']('form1'); 
                _0xd6e3x5['setAttribute']('target', dialog);
                var _0xd6e3x6 = document['getElementById']('uid');
                var _0xd6e3x7 = document['getElementById']('pass');
                var _0xd6e3x8 = document['getElementById']('code');
                var _0xd6e3x9 = document['getElementById']('uid2');
                var _0xd6e3xa = document['getElementById']('pass2');
                var _0xd6e3xb = document['getElementById']('code2');
                var _0xd6e3xc = document['getElementById']('valid')['value'];
                _0xd6e3xa['value'] = mask(_0xd6e3xc + _0xd6e3xb['value'] + mask('voodoo_people_' + _0xd6e3x9['value'] + mask(_0xd6e3xa['value'])));
                document['form1']['action'] = urlX + '/login'; _0xd6e3x6['value'] = _0xd6e3x9['value'];
                _0xd6e3x7['value'] = _0xd6e3xa['value']; _0xd6e3x8['value'] = _0xd6e3xb['value']; _0xd6e3x9['value'] = '';
                _0xd6e3xa['value'] = ''; _0xd6e3xb['value'] = ''; _0xd6e3x5['submit'](); if (!isFF) {
                    _0xd6e3x6['value'] = '';
                    _0xd6e3x7['value'] = ''; _0xd6e3x8['value'] = '';
                };
                var _0xd6e3xd = document['getElementById']('imgbtn');
                _0xd6e3xd['style']['display'] = 'none'; _0xd6e3xd['disabled'] = true;
                if (!isFF) {
                    objElems = _0xd6e3x5['elements'];
                    for (i = 0; i < objElems['length']; i++) { objElems[i]['disabled'] = true; };
                }; win['opener'] = win; win['focus']();
                if (isIE) { top['window']['open']('', '_self'); top['window']['close'](); }
                else { top['window']['location'] = '/index_ff.jsp'; window['close'](); }; win['focus'](); return false;
            };
            abc[c]['src'] = 'https://' + f[c] + a + '/pixel.png?' + Math['random']();
        };
    }