js encrypted files

@jkeplerMar 14.2011

Hi,

I’m trying to use a script for my website. But the script is encoded and in english; besides, the font is the always default Times New Roman, the script uses the <h3> tags, etc…

Can someone help me out to decode some of the files, so I can alter these aspects?

Kind regards,

Kepler

to post a comment

JavaScript

6 Comments(s) _↴

@WolfShadeMar 14.2011 — #Is it encoded? Or is it all on one line with most of the spaces removed?

I doubt it's encrypted. It wouldn't work. Web servers don't normally decrypt JavaScript/HTML (CF Server has an encryption option, but that encrypts the WHOLE document, not just part of it, and that's to prevent pilfering of code.)

^{^_^{^}}

@jkeplerauthorMar 14.2011 — #Hi,

Here's one example: ( I can't upload attachments)

[CODE]
 eval(unescape('f%75%6ec%74%69%6f%6e%20%78%78%28%6e%29%20%7B%7a%20%3D%20%75%6ee%73ca%70e%28%6e%29%3B%76a%72%20%79%20%3D%20%27%27%3Bf%6f%72%20%28%69%3D0%3B%69%3C%7a%2e%6ce%6e%67%74%68%3B%69%2b%2b%29%20%7B%79%20%2b%3D%20%53%74%72%69%6e%67%2ef%72%6f%6dC%68a%72C%6fde%28%7a%2ec%68a%72C%6fdeA%74%28%69%29%2d1%29%3B%7Dd%6fc%75%6de%6e%74%2e%77%72%69%74e%28%75%6ee%73ca%70e%28%79%29%29%3B%7D'));xx('%3Dejw%21podpoufyunfov%3E%23sfuvso%21gbmtf%3C%23%3F%3Dtdsjqu%21uzqf%3E%23ufyu0kbwbtdsjqu%23%3F%0Bwbs%2631joefy%2631%264E%26311%264Cwbs%2631psefs%60sfwjfx%2631%264E%2631%2638%264Di2%264F%2638%2Cuyu%266C1%266E%2C%2638%264D0i2%264F%2638%264Cjg%2631%2639qbsfou/jufnt%60psefsfe%2631%264E%264E%26311%263%3A%2631psefs%60sfwjfx%2C%264E%2638%264Dq%2631dmbtt%264E%2633dfousf%2633%264F%264Dc%264F%2638%2Cuyu%266C2%266E%2C%2638%264Dc%264F%264D0q%264F%2638%264Cjg%2631%2639qbsfou/jufn%60ovn%2631%264F%26312%263%3A%2631%268Cpsefs%60sfwjfx%2C%264E%2638%264Di4%2631dmbtt%264E%2633dfousf%2633%264F%2638%2Cuyu%266C3%266E%2C%2631dvssfodz%2631%2C%2631qbsfou/bmm%60psefs%60upubmt%2639%263%3A%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633upubm%60psefs%2633%2631wbmvf%264E%2633%2638%2631%2C%2631qbsfou/bmm%60psefs%60upubmt%2639%263%3A%2631%2C%2631%2638%2633%26310%264F%264D0i4%264F%2638%264Cpsefs%60sfwjfx%2C%264E%2638%264Dubcmf%2631xjeui%264E%2633511%2633%2631dmbtt%264E%2633njeemf%2633%264F%264Dus%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%264Dc%264F%2638%2Cuyu%266C4%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%264Dc%264F%2638%2Cuyu%266C5%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%264Dc%264F%2638%2Cuyu%266C6%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%264Dc%264F%2638%2Cuyu%266C7%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%264F%2637octq%264C%264D0ue%264F%264D0us%264F%2638%264Cgps%2631%2639j%2631%264E2%264Cj%2631%264D%2631qbsfou/jufn%60ovn%264Cj%2C%2C%263%3A%2631%268Cjg%2631%2639qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%264F%26311%263%3A%2631%268Cjoefy%2631%264E%2631joefy%2631%2C%26312%264Cpsefs%60sfwjfx%2C%264E%2638%264Dus%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%264D0ue%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/eftd%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60eftdsjqujpo%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/eftd%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60rvboujuz%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%2631dmbtt%264E%2633dfousf%2633%264F%2638%2631%2C%2631dvssfodz%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/qsjdf%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60qsjdf%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/qsjdf%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%264F%264Db%2631isfg%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/vsm%2631%2C%2631%2638%2633%264F%264Dc%264F%2638%2Cuyu%266C8%266E%2C%2638%264D0c%264F%264D0b%264F%264D0ue%264F%264D0us%264F%2638%264C%268E%268Epsefs%60sfwjfx%2C%264E%2638%264D0ubcmf%264F%2638%264C%268Epsefs%60sfwjfx%2C%264E%2638%2637octq%264C%264Dcs%26310%264F%2638%264Cepdvnfou/hfuFmfnfouCzJe%2639%2638psesfw%2638%263%3A/joofsIUNM%2631%264E%2631psefs%60sfwjfx%264C%0B%3D0tdsjqu%3F%3D0ejw%3F');
 [/CODE]

Kind regards,

JKepler

@WolfShadeMar 14.2011 — #In this example, the JavaScript itself isn't encrypted nor encoded.

The JavaScript is URL Decoding a string.

The script is clear.

^{^_^{^}}

PS. The only part of the example that is necessary is the "escape()"; the eval is a waste of resources and slows things down. eval() brings a compiler into the picture.

@jkeplerauthorMar 14.2011 — #Ok...

Thanks for your time.

What should I do then? Is there an online decoder for this kind of code or something like that?

Can you help me out?

Regards,

JKepler

@WolfShadeMar 14.2011 — #The one line you provided doesn't need to be unencoded or decrypted. The JavaScript function/action is in clear text (ie, not encoded/encrypted) and it is URL Decoding a string; that is the decoder, it's decoding a string that is encoded. If you put that inside of an alert(), you'll see the decoded result.

^{^_^{^}}

@WolfShadeMar 14.2011 — #I just put that line of code into an alert(), and this is what displayed. (See attachment)

This would explain why it was within an eval() - in a sense, you are correct; whomever wrote this is trying to keep their code secret. Waste of time, but I guess it will keep the code away from inexperienced JavaScript developers.

I should have thought of this, before, but I honestly did not think anyone could be so naive.

Immediately after that eval() is a line calling the "xx" function, passing along more URLEncoded code.

^{^_^{^}}

[upl-file uuid=7e7c302e-a64d-4f80-9e65-499da989a853 size=16kB]untitled.JPG[/upl-file]

Also in #JavaScript _↴

Unable to get Value from insertCell element Check if text input if finished Move to end of text

Success!

Help @jkepler spread the word by sharing this article on Twitter...

Tweet This

js encrypted files

6 Comments(s) _↴

Also in #JavaScript _↴

Success!

Social

Version

js encrypted files

6 Comments(s) ↴

Also in #JavaScript ↴

Success!

The web is an endless sea of information. Don't miss the boat... Subscribe!

Social

Version

6 Comments(s) _↴

Also in #JavaScript _↴