Frage

I have the following encrypted script:

eval(function (p, a, c, k, e, r) {
    e = function (c) {
        return (c < a ? '' : e(parseInt(c / a))) + ((c = c % a) > 35 ? String.fromCharCode(c + 29) : c.toString(36))
    };
    if (!''.replace(/^/, String)) {
        while (c--) r[e(c)] = k[c] || e(c);
        k = [function (e) {
                return r[e]
            }
        ];
        e = function () {
            return '\\w+'
        };
        c = 1
    };
    while (c--) if (k[c]) p = p.replace(new RegExp('\\b' + e(c) + '\\b', 'g'), k[c]);
    return p
}('z(t(p,a,c,k,e,r){e=t(c){u c.F(a)};v(!\'\'.x(/^/,A)){y(c--)r[e(c)]=k[c]||e(c);k=[t(e){u r[e]}];e=t(){u\'\\\\w+\'};c=1};y(c--)v(k[c])p=p.x(B C(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c]);u p}(\'h(6(p,a,c,k,e,r){e=8;9(!\\\'\\\'.d(/^/,8)){f(c--)r[c]=k[c]||c;k=[6(e){7 r[e]}];e=6(){7\\\'\\\\\\\\i+\\\'};c=1};f(c--)9(k[c])p=p.d(j l(\\\'\\\\\\\\b\\\'+e(c)+\\\'\\\\\\\\b\\\',\\\'g\\\'),k[c]);7 p}(\\\'$(0).1(2(){3("4")});\\\',5,5,\\\'m|n|6|o|q\\\'.s(\\\'|\\\'),0,{}))\',D,D,\'||||||t|u|A|v||||x||y||z|w|B||C|G|H|I||J||E\'.E(\'|\'),0,{}))', 46, 46, '|||||||||||||||||||||||||||||function|return|if||replace|while|eval|String|new|RegExp|29|split|toString|document|ready|alert|hi'.split('|'), 0, {}))

Can anyone decrypt the script and let me know the source code?

War es hilfreich?

Lösung

$(document).ready(function () { alert("hi") });

Andere Tipps

First get the reEnable bookmarklet from here then go to Dean Edward Packer

Click the bookmarklet to enable the text area and press decode multiple times to get the message:

$(document).ready(function(){alert("hi")});

I believe it is the Dean Edwards /packer/:

Also, to see the code deobfuscated, simply replace the eval with alert, or simply use his unpacker:

Unpacked code:

$(document).ready(function() { 
    alert("hi")
});

try this one ,create html file and in script tag do something below one

this

     <script>
      eval(function(p, a,...);
     <script/>

to

     <script>
      document.write(function(p, a,...);
     <script/>
Lizenziert unter: CC-BY-SA mit Zuschreibung
Nicht verbunden mit StackOverflow
scroll top