PDA

View Full Version : [Javascript] sorgente "criptato" ???


rayman2
04-12-2007, 23:28
Ciao a tutti, volevo porvi questo dubbio: ho trovato uno script che è fatto in questo modo illeggibile.

eval(unescape('f%75%6ec%74%69%6f%6e%20%78%78%28%6e%29%20%7B%7a%20%3D%20%75%6ee%73ca%70e%28%6e%29%3B%76a%72%20%79%20%3D%20%27%27%3Bf%6f%72%20%28%69%3D0%3B%69%3C%7a%2e%6ce%6e%67%74%68%3B%69%2b%2b%29%20%7B%79%20%2b%3D%20%53%74%72%69%6e%67%2ef%72%6f%6dC%68a%72C%6fde%28%7a%2ec%68a%72C%6fdeA%74%28%69%29%2d1%29%3B%7Dd%6fc%75%6de%6e%74%2e%77%72%69%74e%28%75%6ee%73ca%70e%28%79%29%29%3B%7D'));xx('%3Dtdsjqu%21uzqf%3E%23ufyu0kbwbtdsjqu%23%3F%0Bepdvnfou/xsjuf%2639%2638%264Dq%2631bmjho%264E%2633dfoufs%2633%264F%264Dgpou%2631dpmps%264E%2633%2638%2Cdpmpvs%2C%2638%2633%2631tj%7Bf%264E%2633%2C2%2633%264F%2638%2Cuyu%266C1%266E%2C%2638%264D0gpou%264F%264D0q%264F%2638%263%3A%264Cjoefy%2631%264E%26311%264Cwbs%2631cfhjo%264Cwbs%2631foe%264Cwbs%2631wbmtus%264Cwbmtus%2631%264E%2631%2633%2633%2631%2C%2631qbsfou/bmm%60psefs%60upubmt%2639%263%3A%264Cwbs%2631efdqpjou%2631%264E%2631wbmtus/joefyPg%2639%2633/%2633%263%3A%264Cjg%2631%2639efdqpjou%2631%2632%264E%2631.2%263%3A%2631%268Ccfhjo%2631%264E%2631wbmtus/tvctusjoh%26391%263Defdqpjou%263%3A%264Cfoe%2631%264E%2631wbmtus/tvctusjoh%2639efdqpjou%2C2%263Dwbmtus/mfohui%263%3A%264C%268E%261Bfmtf%2631%268Ccfhjo%2631%264E%2631wbmtus%264Cfoe%2631%264E%2631%2633%2633%264C%268E%2631jg%2631%2639foe/mfohui%2631%264D%2631ovn%60efdt%263%3A%2631%268Cxijmf%2631%2639foe/mfohui%2631%264D%2631ovn%60efdt%263%3A%2631%268Cfoe%2631%2C%264E%2631%26331%2633%264C%268E%268Efoe%2631%264E%2631foe/tvctusjoh%26391%263Dovn%60efdt%263%3A%264Cjg%2631%2639qbsfou/jufnt%60psefsfe%2631%264E%264E%26311%263%3A%2631epdvnfou/xsjuf%2639%2638%264Dq%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C2%266E%2C%2638%264Dc%264F%264D0q%264F%2638%263%3A%264Cjg%2631%2639qbsfou/jufn%60ovn%2631%264F%26312%263%3A%2631%268Cepdvnfou/xsjuf%2639%2638%264Dq%2631bmjho%264E%2633dfoufs%2633%264F%264Dgpou%2631tj%7Bf%264E%2C2%264F%2638%2Cuyu%266C3%266E%2C%2631dvssfodz%2631%2C%2631cfhjo%2631%2C%2631%2638/%2638%2631%2C%2631foe%2631%2C%2631%2638%264D0gpou%264F%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633upubm%60psefs%2633%2631wbmvf%264E%2633%2638%2631%2C%2631cfhjo%2631%2C%2631%2638/%2638%2631%2C%2631foe%2631%2C%2631%2638%2633%26310%264F%264D0q%264F%2638%263%3A%264C%261Bepdvnfou/xsjuf%2639%2638%264Dubcmf%2631xjeui%264E%2633511%2633%2631bmjho%264E%2633dfoufs%2633%264F%264Dus%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C4%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%263%3A%264Cepdvnfou/xsjuf%2639%2638%264Dc%264F%2638%2Cuyu%266C5%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C6%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C7%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%264F%2637octq%264C%264D0ue%264F%264D0us%264F%2638%263%3A%264Cgps%2631%2639j%2631%264E2%264Cj%2631%264D%2631qbsfou/jufn%60ovn%264Cj%2C%2C%263%3A%2631%268Cjg%2631%2639qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%264F%26311%263%3A%2631%268Cjoefy%2631%264E%2631joefy%2631%2C%26312%264C%261Bepdvnfou/xsjuf%2639%2638%264Dus%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/eftd%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60eftdsjqujpo%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/eftd%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60rvboujuz%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%2C%261B%2638%2633%26310%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631dvssfodz%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/qsjdf%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60qsjdf%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/qsjdf%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%264F%264Db%2631isfg%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/vsm%2631%2C%2631%2638%2633%264F%264Dc%264F%2638%2Cuyu%266C8%266E%2C%2638%264D0c%264F%264D0b%264F%264D0ue%264F%264D0us%264F%2638%263%3A%264C%268E%268Eepdvnfou/xsjuf%2639%2638%264D0ubcmf%264F%2638%263%3A%264C%268Eepdvnfou/xsjuf%2639%2638%2637octq%264C%264Dcs%26310%264F%2638%263%3A%264C%0B%3D0tdsjqu%3F');


Mi piacerebbe leggerne il sorgente, ma non ho idea di come fare. Avete suggerimenti? Perchè è stato fatto in questo modo?

MEMon
05-12-2007, 00:04
Dove l'hai trovato?
Se il proprietario l'ha voluto scrivere così si vede che desiderava che il suo codice non venisse usato no...

Carino come metodo cmq, uno curioso però in 5 minuti risale al codice...

rayman2
05-12-2007, 07:39
Si tratta di questo carrello online: http://www.felgall.com/jstip39.htm .
In realtà viene detto che si può usare ma non modificare. Io volevo semplicemente localizzarlo in italiano e dovrei modificare quindi il codice dello script "review.js". L'array "txt", che contiene le stringhe che vengono poi usate per scrivere le pagine del sito, non è "criptato" in quel modo. Tuttavia anche se lo cambio la localizzazione non cambia. Ecco perchè vorrei vedere se per caso in quella parte dello script c'è qualcosa che lo sovrascrive. Potete aiutarmi a leggerlo?

cionci
05-12-2007, 09:06
document.write(unescape('f%75%6ec%74%69%6f%6e%20%78%78%28%6e%29%20%7B%7a%20%3D%20%75%6ee%73ca%70e%28%6e%29%3B%76a%72%20%79%20%3D%20%27%27%3Bf%6f%72%20%28%69%3D0%3B%69%3C%7a%2e%6ce%6e%67%74%68%3B%69%2b%2b%29%20%7B%79%20%2b%3D%20%53%74%72%69%6e%67%2ef%72%6f%6dC%68a%72C%6fde%28%7a%2ec%68a%72C%6fdeA%74%28%69%29%2d1%29%3B%7Dd%6fc%75%6de%6e%74%2e%77%72%69%74e%28%75%6ee%73ca%70e%28%79%29%29%3B%7D'));xx('%3Dtdsjqu%21uzqf%3E%23ufyu0kbwbtdsjqu%23%3F%0Bepdvnfou/xsjuf%2639%2638%264Dq%2631bmjho%264E%2633dfoufs%2633%264F%264Dgpou%2631dpmps%264E%2633%2638%2Cdpmpvs%2C%2638%2633%2631tj%7Bf%264E%2633%2C2%2633%264F%2638%2Cuyu%266C1%266E%2C%2638%264D0gpou%264F%264D0q%264F%2638%263%3A%264Cjoefy%2631%264E%26311%264Cwbs%2631cfhjo%264Cwbs%2631foe%264Cwbs%2631wbmtus%264Cwbmtus%2631%264E%2631%2633%2633%2631%2C%2631qbsfou/bmm%60psefs%60upubmt%2639%263%3A%264Cwbs%2631efdqpjou%2631%264E%2631wbmtus/joefyPg%2639%2633/%2633%263%3A%264Cjg%2631%2639efdqpjou%2631%2632%264E%2631.2%263%3A%2631%268Ccfhjo%2631%264E%2631wbmtus/tvctusjoh%26391%263Defdqpjou%263%3A%264Cfoe%2631%264E%2631wbmtus/tvctusjoh%2639efdqpjou%2C2%263Dwbmtus/mfohui%263%3A%264C%268E%261Bfmtf%2631%268Ccfhjo%2631%264E%2631wbmtus%264Cfoe%2631%264E%2631%2633%2633%264C%268E%2631jg%2631%2639foe/mfohui%2631%264D%2631ovn%60efdt%263%3A%2631%268Cxijmf%2631%2639foe/mfohui%2631%264D%2631ovn%60efdt%263%3A%2631%268Cfoe%2631%2C%264E%2631%26331%2633%264C%268E%268Efoe%2631%264E%2631foe/tvctusjoh%26391%263Dovn%60efdt%263%3A%264Cjg%2631%2639qbsfou/jufnt%60psefsfe%2631%264E%264E%26311%263%3A%2631epdvnfou/xsjuf%2639%2638%264Dq%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C2%266E%2C%2638%264Dc%264F%264D0q%264F%2638%263%3A%264Cjg%2631%2639qbsfou/jufn%60ovn%2631%264F%26312%263%3A%2631%268Cepdvnfou/xsjuf%2639%2638%264Dq%2631bmjho%264E%2633dfoufs%2633%264F%264Dgpou%2631tj%7Bf%264E%2C2%264F%2638%2Cuyu%266C3%266E%2C%2631dvssfodz%2631%2C%2631cfhjo%2631%2C%2631%2638/%2638%2631%2C%2631foe%2631%2C%2631%2638%264D0gpou%264F%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633upubm%60psefs%2633%2631wbmvf%264E%2633%2638%2631%2C%2631cfhjo%2631%2C%2631%2638/%2638%2631%2C%2631foe%2631%2C%2631%2638%2633%26310%264F%264D0q%264F%2638%263%3A%264C%261Bepdvnfou/xsjuf%2639%2638%264Dubcmf%2631xjeui%264E%2633511%2633%2631bmjho%264E%2633dfoufs%2633%264F%264Dus%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C4%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%263%3A%264Cepdvnfou/xsjuf%2639%2638%264Dc%264F%2638%2Cuyu%266C5%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C6%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%264Dc%264F%2638%2Cuyu%266C7%266E%2C%2638%264D0c%264F%264D0ue%264F%264Due%264F%2637octq%264C%264D0ue%264F%264D0us%264F%2638%263%3A%264Cgps%2631%2639j%2631%264E2%264Cj%2631%264D%2631qbsfou/jufn%60ovn%264Cj%2C%2C%263%3A%2631%268Cjg%2631%2639qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%264F%26311%263%3A%2631%268Cjoefy%2631%264E%2631joefy%2631%2C%26312%264C%261Bepdvnfou/xsjuf%2639%2638%264Dus%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/eftd%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60eftdsjqujpo%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/eftd%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60rvboujuz%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/rvbo%2631%2C%261B%2638%2633%26310%264F%264D0ue%264F%264Due%2631bmjho%264E%2633dfoufs%2633%264F%2638%2631%2C%2631dvssfodz%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/qsjdf%2631%2C%2631%2638%264Djoqvu%2631uzqf%264E%2633ijeefo%2633%2631obnf%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/dpef%2631%2C%2631%2638%60qsjdf%2633%2631wbmvf%264E%2633%2638%2C%2631qbsfou/jufnmjtu%266Cj%266E/qsjdf%2631%2C%2631%2638%2633%26310%264F%264D0ue%264F%264Due%264F%264Db%2631isfg%264E%2633%2638%2631%2C%2631qbsfou/jufnmjtu%266Cj%266E/vsm%2631%2C%2631%2638%2633%264F%264Dc%264F%2638%2Cuyu%266C8%266E%2C%2638%264D0c%264F%264D0b%264F%264D0ue%264F%264D0us%264F%2638%263%3A%264C%268E%268Eepdvnfou/xsjuf%2639%2638%264D0ubcmf%264F%2638%263%3A%264C%268Eepdvnfou/xsjuf%2639%2638%2637octq%264C%264Dcs%26310%264F%2638%263%3A%264C%0B%3D0tdsjqu%3F');

MEMon
05-12-2007, 11:52
mha... cmq questo è quello che viene fuori...


<script type="text/javascript">
document.write('<p align="center"><font color="'+colour+'" size="+1">'+txt[0]+'</font></p>');index = 0;var begin;var end;var valstr;valstr = "" + parent.all_order_totals();var decpoint = valstr.indexOf(".");if (decpoint != -1) {begin = valstr.substring(0,decpoint);end = valstr.substring(decpoint+1,valstr.length);}
else {begin = valstr;end = "";} if (end.length < num_decs) {while (end.length < num_decs) {end += "0";}}end = end.substring(0,num_decs);if (parent.items_ordered == 0) document.write('<p align="center"><b>'+txt[1]+'<b></p>');if (parent.item_num > 1) {document.write('<p align="center"><font size=+1>'+txt[2]+ currency + begin + '.' + end + '</font><input type="hidden" name="total_order" value="' + begin + '.' + end + '" /></p>');
document.write('<table width="400" align="center"><tr><td align="center"><b>'+txt[3]+'</b></td><td align="center">');document.write('<b>'+txt[4]+'</b></td><td align="center"><b>'+txt[5]+'</b></td><td align="center"><b>'+txt[6]+'</b></td><td>&nbsp;</td></tr>');for (i =1;i < parent.item_num;i++) {if (parent.itemlist[i].quan > 0) {index = index + 1;
document.write('<tr><td align="center">' + parent.itemlist[i].code + '</td><td align="center">' + parent.itemlist[i].desc + '<input type="hidden" name="' + parent.itemlist[i].code + '_description" value="'+ parent.itemlist[i].desc + '" /></td><td align="center">' + parent.itemlist[i].quan + '<input type="hidden" name="' + parent.itemlist[i].code + '_quantity" value="'+ parent.itemlist[i].quan +
'" /></td><td align="center">' + currency + parent.itemlist[i].price + '<input type="hidden" name="' + parent.itemlist[i].code + '_price" value="'+ parent.itemlist[i].price + '" /></td><td><a href="' + parent.itemlist[i].url + '"><b>'+txt[7]+'</b></a></td></tr>');}}document.write('</table>');}document.write('&nbsp;<br />');
</script>

rayman2
05-12-2007, 12:04
c'è ancora qualcosa che non mi quadra.
l'output della document.write(unescape(...)); è il seguente:
function xx(n) {z = unescape(n);var y = '';for (i=0;i
L'errore segnalato da bugzilla è: "xx is not defined"

MEMon
05-12-2007, 12:05
quella funzione serve per tirare fuori quello che ti ho tirato fuori...

rayman2
05-12-2007, 12:46
grazie, ma quindi cos'è che sbaglio? anche per capire quello che sto facendo!

rayman2
05-12-2007, 18:58
null