JavaScript 高分求大神反混淆方法

2018-09-14 06:31:51 764 阅读 AI 写同款 · GEO 优化AI 选题数据监测一键分发 ›

企业级小程序逆向分析：从原理到合规实践的完整指南在移动开发领域，逆向工程是一项用于分析软件内部结构和实现原理的重要技术。其核心原理是通过解析程序的编译后文件，还原出可读的源代码和资源，从而理解其架构设计、业务逻辑和实现细节。这项技术的价值在于为竞品研究、安全审计和技术学习提供了深度视角，尤其在微信小程序生态中，企业常需通过逆向分析来研究竞品的技术方案和交互设计。应用场景包括架构评估、性能优化参考和安全漏洞检测。本文聚焦于企业级小程序逆向分析，系统介绍了以 `unpackminiapp` 工具链为核心的完整工作流，涵盖 `.wxapkg` 包获取、解包还原阅读详情

请教各位大神以下 js 怎么反混淆呢 ? 看着头晕晕
试过当前网上各种反混淆工具都无效,比如 jsbeautifier.org \.jsnice.org/
不多说了,上代码请各位大神各显神通不胜感激!

var _0x474a=['row','loginIp','<a\x20href=\x22javascript:;\x22\x20class=\x22ip-msg\x22\x20data-url=\x22/query/ip?','</a>','createTime','comment','<a\x20class=\x22btn\x20btn-pure\x20btn-xs\x20btn-default\x20icon\x20wb-close\x20delete-tr\x22\x20href=\x22#\x22></a>','api','column','nodes','innerHTML','queryIp','one','shown.bs.modal','validate','.ignore','[name=\x22ip\x22]','ajax','ctx','/blacklist/save','POST','serialize','blId','blacklist','draw','modal','hide','error',' err！','hide.bs.modal','find','val','resetForm','.delete-tr','closest','prev','hasClass','child','parent','layer','confirm','del?','/blacklist/delete?blId=','JSON','remove','delsuc！','close','preventDefault','run','#add','extend','webuiPopover','.ip-msg','data','click','detail','async','error！','success','message','.dataTable','DataTable','dataTable'];(function(_0x2442f2,_0x1ec373){var _0x4d2ef3=function(_0x7c9c02){while(--_0x7c9c02){_0x2442f2['push'](_0x2442f2['shift']());}};_0x4d2ef3(++_0x1ec373);}(_0x474a,0xaf));var _0xa474=function(_0x22bd4e,_0x17c050){_0x22bd4e=_0x22bd4e-0x0;var _0x4e67d4=_0x474a[_0x22bd4e];return _0x4e67d4;};(function(_0x59fff4,_0x5bcdd0,_0x258e33){'use strict';var _0x11b427=_0x258e33(_0xa474('0x0'));var _0xb32962={'queryIp':function(){var _0x548c78=_0x258e33[_0xa474('0x1')](!![],{},_0x258e33['po'](_0xa474('0x2')),_0x258e33(_0xa474('0x3'))[_0xa474('0x4')](),{'trigger':_0xa474('0x5'),'title':_0xa474('0x6'),'type':_0xa474('0x7'),'content':function(_0x489836){var _0x503ab4=_0xa474('0x8');if(_0x489836[_0xa474('0x9')]){_0x503ab4=_0x489836[_0xa474('0xa')];}return _0x503ab4;}});_0x258e33(_0xa474('0x3'))[_0xa474('0x2')](_0x548c78);},'run':function(){var _0x238a04,_0x2749a4=this,_0x1c7b66=_0x258e33('#blackList');var _0x5eab80=null;_0x238a04=_0x258e33(_0xa474('0xb'))[_0xa474('0xc')](_0x258e33['po'](_0xa474('0xd'),{'rowId':'blId','autoWidth':![],'columns':[{'render':function(_0x2f0cc8,_0x4c32a3,_0x149767,_0x14cd66){return _0x14cd66[_0xa474('0xe')]+0x1;}},{'render':function(_0x3864dd,_0x2c34b0,_0x1b6806){var _0x371e38,_0x41f28d=_0x1b6806[_0xa474('0xf')];if(_0x41f28d===undefined){_0x371e38=_0x1b6806[0x1];}else{_0x371e38=_0xa474('0x10')+_0x41f28d+'\x22>'+_0x41f28d+_0xa474('0x11');}return _0x371e38;}},{'data':_0xa474('0x12')},{'data':_0xa474('0x13')},{'render':function(){return _0xa474('0x14');}}],'drawCallback':function(){this[_0xa474('0x15')]()[_0xa474('0x16')](0x0)[_0xa474('0x17')]()['each'](function(_0x3536d8,_0x3e950c){_0x3536d8[_0xa474('0x18')]=_0x3e950c+0x1;});_0x2749a4[_0xa474('0x19')]();}}));_0x11b427[_0xa474('0x1a')](_0xa474('0x1b'),function(){_0x5eab80=_0x1c7b66[_0xa474('0x1c')]({'ignore':_0xa474('0x1d'),'rules':{'ip':{'required':!![],'ipv4':!![]}},'submitHandler':function(_0x5c281c){var _0x1b8a53=_0x258e33(_0x5c281c);var _0x10a056={'loginIp':_0x1b8a53['find'](_0xa474('0x1e'))['val'](),'comment':_0x1b8a53['find']('[name=\x22comment\x22]')['val']()};_0x258e33[_0xa474('0x1f')]({'url':_0x258e33[_0xa474('0x20')]+_0xa474('0x21'),'type':_0xa474('0x22'),'data':_0x1b8a53[_0xa474('0x23')](),'dataType':'JSON','success':function(_0x2e1cff){if(_0x2e1cff['success']){_0x10a056[_0xa474('0x24')]=_0x2e1cff['blacklist'][_0xa474('0x24')];_0x10a056[_0xa474('0x12')]=_0x2e1cff[_0xa474('0x25')][_0xa474('0x12')];_0x11b427[_0xa474('0x1a')]('hidden.bs.modal',function(){_0x238a04[_0xa474('0xe')]['add'](_0x10a056)[_0xa474('0x26')](![]);toastr['success']('添加成功！');})[_0xa474('0x27')](_0xa474('0x28'));}else{toastr[_0xa474('0x29')](_0x2e1cff['msg']);}},'error':function(){toastr[_0xa474('0x29')](_0xa474('0x2a'));}});}});})['on'](_0xa474('0x2b'),function(){_0x1c7b66[_0xa474('0x2c')]('textarea,\x20input')[_0xa474('0x2d')]('');_0x5eab80[_0xa474('0x2e')]();});_0x258e33(_0x5bcdd0)['on'](_0xa474('0x5'),_0xa474('0x2f'),function(_0x2babcd){var _0x45908d=_0x258e33(this)[_0xa474('0x30')]('tr'),_0x3c2fda,_0x5bd4ea=_0x45908d[_0xa474('0x31')]();if(_0x45908d[_0xa474('0x32')](_0xa474('0x33'))&&_0x5bd4ea['hasClass'](_0xa474('0x34'))){_0x45908d=_0x5bd4ea;}_0x3c2fda=_0x238a04[_0xa474('0xe')](_0x45908d)['id']();parent[_0xa474('0x35')][_0xa474('0x36')](_0xa474('0x37'),function(_0xcffe56){_0x258e33[_0xa474('0x1f')]({'url':_0x258e33[_0xa474('0x20')]+_0xa474('0x38')+_0x3c2fda,'type':_0xa474('0x22'),'dataType':_0xa474('0x39'),'success':function(_0x14de2c){if(_0x14de2c[_0xa474('0x9')]){_0x238a04['row'](_0x45908d)[_0xa474('0x3a')]()[_0xa474('0x26')](![]);toastr['success'](_0xa474('0x3b'));parent['layer'][_0xa474('0x3c')](_0xcffe56);}else{toastr[_0xa474('0x29')](_0xa474('0x8'));}},'error':function(){toastr['error'](_0xa474('0x2a'));}});});_0x2babcd[_0xa474('0x3d')]();});}};_0xb32962[_0xa474('0x3e')]();}(window,document,jQuery));

...全文

Mythos大模型如何重构AI安全攻防范式大模型在安全领域的应用正从辅助分析迈向自主攻防决策。其核心原理在于融合高保真沙箱模拟、推理时计算扩展与多步错误控制机制，突破传统静态分析的局限性。这种技术升级显著提升了漏洞发现深度与POC生成可靠性，尤其在SWE-bench Pro、CyberGym等专业基准中表现突出。典型应用场景覆盖开源组件审计、企业级红队自动化、CI/CD安全左移及0day响应闭环。随着Mythos等新一代模型落地Project Glasswing生态，开发者需关注沙箱保真度、SBOM可追溯性与输入输出熔断机制等工程化关键点。阅读详情

「已注销」

JavaScript 87,984 成员 224,681 内容

+ 关注 + 加入社区

切换为时间正序

「已注销」 2018-10-08

打赏
举报

引用 2 楼 t15137830 的回复:

混淆是没办法真正的还原的, 只有你一点一点去理解里面的函数是什么意思,一点点的去改,改到差不多你都理解为止.

引用 1 楼 apollokk 的回复:

就是替换字符串，第一个变量是数组，存储了一些后面要用的字符串，紧接着又加入了一些元素；第一个函数就是用于获取指定索引的元素，最后那个才是真正的功能，大概是这样：
var items = ['row', 'loginIp', '<a\x20href=\x22javascript:;\x22\x20class=\x22ip-msg\x22\x20data-url=\x22/query/ip?', '</a>', 'createTime', 'comment', '<a\x20class=\x22btn\x20btn-pure\x20btn-xs\x20btn-default\x20icon\x20wb-close\x20delete-tr\x22\x20href=\x22#\x22></a>', 'api', 'column', 'nodes', 'innerHTML', 'queryIp', 'one', 'shown.bs.modal', 'validate', '.ignore',  

感谢二位指点!~

田小瘦 2018-09-18

打赏
举报

混淆是没办法真正的还原的, 只有你一点一点去理解里面的函数是什么意思,一点点的去改,改到差不多你都理解为止.

Hello World, 2018-09-17

打赏
举报

就是替换字符串，第一个变量是数组，存储了一些后面要用的字符串，紧接着又加入了一些元素；第一个函数就是用于获取指定索引的元素，最后那个才是真正的功能，大概是这样：

var items = ['row', 'loginIp', '<a\x20href=\x22javascript:;\x22\x20class=\x22ip-msg\x22\x20data-url=\x22/query/ip?', '</a>', 'createTime', 'comment', '<a\x20class=\x22btn\x20btn-pure\x20btn-xs\x20btn-default\x20icon\x20wb-close\x20delete-tr\x22\x20href=\x22#\x22></a>', 'api', 'column', 'nodes', 'innerHTML', 'queryIp', 'one', 'shown.bs.modal', 'validate', '.ignore', '[name=\x22ip\x22]', 'ajax', 'ctx', '/blacklist/save', 'POST', 'serialize', 'blId', 'blacklist', 'draw', 'modal', 'hide', 'error', ' err！', 'hide.bs.modal', 'find', 'val', 'resetForm', '.delete-tr', 'closest', 'prev', 'hasClass', 'child', 'parent', 'layer', 'confirm', 'del?', '/blacklist/delete?blId=', 'JSON', 'remove', 'delsuc！', 'close', 'preventDefault', 'run', '#add', 'extend', 'webuiPopover', '.ip-msg', 'data', 'click', 'detail', 'async', 'error！', 'success', 'message', '.dataTable', 'DataTable', 'dataTable'];

(function (_0x2442f2, _0x1ec373) {

    var _0x4d2ef3 = function (_0x7c9c02) {

        while (--_0x7c9c02) {

            _0x2442f2['push'](_0x2442f2['shift']());

        }

    };

    _0x4d2ef3(++_0x1ec373);

}(items, 0xaf));

var getItem = function (index, _0x17c050) {

    index = index - 0x0;

    var item = items[index];

    return item;

};

(function (window, document, jQuery) {

    'use strict';

    var addElement = jQuery('#add');

    var myplug = {

        'queryIp': function () {

            var _0x548c78 = jQuery['extend'](!![], {}, jQuery['po']('webuiPopover'), jQuery('.ip-msg')['data'](), {

                'trigger': 'click',

                'title': 'detail',

                'type': 'async',

                'content': function (_0x489836) {

                    var _0x503ab4 = 'error！';

                    if (_0x489836['success']) {

                        _0x503ab4 = _0x489836['message'];

                    }

                    return _0x503ab4;

                }

            });

            jQuery('.ip-msg')['webuiPopover'](_0x548c78);

        },

        'run': function () {

            var _0x238a04, _0x2749a4 = this,

                blackList = jQuery('#blackList');

            var _0x5eab80 = null;

            _0x238a04 = jQuery('.dataTable')['DataTable'](jQuery['po']('dataTable', {

                'rowId': 'blId',

                'autoWidth': ![],

                'columns': [{

                    'render': function (_0x2f0cc8, _0x4c32a3, _0x149767, _0x14cd66) {

                        return _0x14cd66['row'] + 0x1;

                    }

                }, {

                    'render': function (_0x3864dd, _0x2c34b0, _0x1b6806) {

                        var _0x371e38, _0x41f28d = _0x1b6806['loginIp'];

                        if (_0x41f28d === undefined) {

                            _0x371e38 = _0x1b6806[0x1];

                        } else {

                            _0x371e38 = '<a href="javascript:;" class="ip-msg" data-url="/query/ip?' + _0x41f28d + '\x22>' + _0x41f28d + '</a>';

                        }

                        return _0x371e38;

                    }

                }, {

                    'data': 'createTime'

                }, {

                    'data': 'comment'

                }, {

                    'render': function () {

                        return '<a class="btn btn-pure btn-xs btn-default icon wb-close delete-tr" href="#"></a>';

                    }

                }],

                'drawCallback': function () {

                    this['api']()['column'](0x0)['nodes']()['each'](function (_0x3536d8, _0x3e950c) {

                        _0x3536d8['innerHTML'] = _0x3e950c + 0x1;

                    });

                    _0x2749a4['queryIp']();

                }

            }));

            addElement['one']('shown.bs.modal', function () {

                _0x5eab80 = blackList['validate']({

                    'ignore': '.ignore',

                    'rules': {

                        'ip': {

                            'required': !![],

                            'ipv4': !![]

                        }

                    },

                    'submitHandler': function (_0x5c281c) {

                        var _0x1b8a53 = jQuery(_0x5c281c);

                        var _0x10a056 = {

                            'loginIp': _0x1b8a53['find']('[name="ip"]')['val'](),

                            'comment': _0x1b8a53['find']('[name=\x22comment\x22]')['val']()

                        };

                        jQuery['ajax']({

                            'url': jQuery['ctx'] + '/blacklist/save',

                            'type': 'POST',

                            'data': _0x1b8a53['serialize'](),

                            'dataType': 'JSON',

                            'success': function (_0x2e1cff) {

                                if (_0x2e1cff['success']) {

                                    _0x10a056['blId'] = _0x2e1cff['blacklist']['blId'];

                                    _0x10a056['createTime'] = _0x2e1cff['blacklist']['createTime'];

                                    addElement['one']('hidden.bs.modal', function () {

                                        _0x238a04['row']['add'](_0x10a056)['draw'](![]);

                                        toastr['success']('添加成功！');

                                    })['modal']('hide');

                                } else {

                                    toastr['error'](_0x2e1cff['msg']);

                                }

                            },

                            'error': function () {

                                toastr['error'](' err！');

                            }

                        });

                    }

                });

            })['on']('hide.bs.modal', function () {

                blackList['find']('textarea,\x20input')['val']('');

                _0x5eab80['resetForm']();

            });

            jQuery(document)['on']('click', '.delete-tr', function (_0x2babcd) {

                var _0x45908d = jQuery(this)['closest']('tr'),

                    _0x3c2fda, _0x5bd4ea = _0x45908d['prev']();

                if (_0x45908d['hasClass']('child') && _0x5bd4ea['hasClass']('parent')) {

                    _0x45908d = _0x5bd4ea;

                }

                _0x3c2fda = _0x238a04['row'](_0x45908d)['id']();

                parent['layer']['confirm']('del?', function (_0xcffe56) {

                    jQuery['ajax']({

                        'url': jQuery['ctx'] + '/blacklist/delete?blId=' + _0x3c2fda,

                        'type': 'POST',

                        'dataType': 'JSON',

                        'success': function (_0x14de2c) {

                            if (_0x14de2c['success']) {

                                _0x238a04['row'](_0x45908d)['remove']()['draw'](![]);

                                toastr['success']('delsuc！');

                                parent['layer']['close'](_0xcffe56);

                            } else {

                                toastr['error']('error！');

                            }

                        },

                        'error': function () {

                            toastr['error'](' err！');

                        }

                    });

                });

                _0x2babcd['preventDefault']();

            });

        }

    };

    myplug['run']();

}(window, document, jQuery));

JavaScript 高分 求大神反混淆方法

相关推荐

JavaScript 高分求大神反混淆方法