Dịch ngược mã Javascript đã bị mã hóa

Giải mã code eval(function(p,a,c,k,e,r) - Decode packed javascript

Hướng dẫn dịch ngược mã Javascript đã bị mã hóa, giải mã Javascript.

Chào các bạn hiện nay có khá nhiều các coder share nhiều mã nguồn nhưng khi họ share họ lại chèn vào đó 1 loại mã code đã được mã hóa mà ta đọc không thể nào hiểu được nó đang viết gì. Vì vậy các bạn rất dễ bị chèn mã độc và chính mã nguồn đấy như: auto like, code popup, text link , banner ..... Vậy để làm sao có thể giải mã code này?

Ví dụ về dạng code mã hóa:

eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('4R(4J(p,a,c,k,e,r){e=4J(c){4I(c<a?\'\':e(4O(c/a)))+((c=c%a)>35?4N.4T(c+29):c.4S(36))};4M(!\'\'.4L(/^/,4N)){4K(c--)r[e(c)]=k[c]||e(c);k=[4J(e){4I r[e]}];e=4J(){4I\'\\\\w+\'};c=1};4K(c--)4M(k[c])p=p.4L(4Q 4U(\'\\\\b\'+e(c)+\'\\\\b\',\'g\'),k[c]);4I p}(\'12 3C(e){L(2 i=0;i<2r;i++){2 f=e.W.Z[i];2 g=f.V.$t;2 h;6(i==e.W.Z.E)13;L(2 k=0;k<f.C.E;k++){6(f.C[k].X==\\\'1l\\\'&&f.C[k].1m==\\\'1a/1f\\\'){2 j=f.C[k].V;2 l=f.C[k].D}6(f.C[k].X==\\\'1j\\\'){h=f.C[k].D;13}}2 m;1q{m=f.1b$18.15;m=m.M("/1w-c/","/w"+1t+"-h"+1s+"-c/")}1p(1o){s=f.R.$t;a=s.J("<N");b=s.J("Y=\\\\"",a);c=s.J("\\\\"",b+5);d=s.1n(b+5,c-b-5);6((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){m=d}I m=1X}2 n=f.1d.$t;2 o=n.G(0,4);2 p=n.G(5,7);2 q=n.G(8,10);x.z(\\\'\\\');x.z(\\\'<11>\\\');6(24==F)x.z(\\\'<a D="\\\'+h+\\\'"><H B="2x"><N 1k="\\\'+1t+\\\'" 1c="\\\'+1s+\\\'" 1r="\\\'+g+\\\'" Y="\\\'+m+\\\'"/></H></a>\\\');x.z(\\\'<A B="1u"><a D="\\\'+h+\\\'" T ="O">\\\'+g+\\\'</a></A>\\\');2 r=\\\'\\\';x.z(\\\'<A B="1J">\\\');6(2D==F){r=r+\\\'<A B="1z">\\\'+q+\\\'/\\\'+p+\\\'/\\\'+o+\\\'</A>\\\'}6(1Y==F){6(j==\\\'1 P\\\')j=\\\'1 1C\\\';6(j==\\\'0 P\\\')j=\\\'1D P\\\';j=\\\'<A B="1E"><a D="\\\'+l+\\\'" T ="O">\\\'+j+\\\'</a></A>\\\';r=r+j}6(2z==F){r=r+\\\'<A B="1F"><a D="\\\'+h+\\\'" B="15" T ="O">1H 1I...</a></A>\\\'}x.z(r);x.z(\\\'</A>\\\');x.z(\\\'<A B="27">\\\');6("R"17 f){2 t=f.R.$t}I 6("19"17 f){2 t=f.19.$t}I 2 t="";2 u=/<\\\\S[^>]*>/g;t=t.M(u,"");6(1W==F){6(t.E<1v){x.z(\\\'\\\');x.z(t);x.z(\\\'\\\')}I{x.z(\\\'\\\');t=t.G(0,1v);2 v=t.21(" ");t=t.G(0,v);x.z(t+\\\'...\\\');x.z(\\\'\\\')}}x.z(\\\'</A>\\\');x.z(\\\'</11>\\\');x.z(\\\'\\\')}x.z(\\\'\\\');L(2 i=1;i<2S;i++){2 f=e.W.Z[i];2 g=f.V.$t;2 h;6(i==e.W.Z.E)13;L(2 k=1;k<f.C.E;k++){6(f.C[k].X==\\\'1l\\\'&&f.C[k].1m==\\\'1a/1f\\\'){2 j=f.C[k].V;2 l=f.C[k].D}6(f.C[k].X==\\\'1j\\\'){h=f.C[k].D;13}}2 w;1q{w=f.1b$18.15.M("/1w-c/","/w"+1x+"-h"+1y+"-c/")}1p(1o){s=f.R.$t;a=s.J("<N");b=s.J("Y=\\\\"",a);c=s.J("\\\\"",b+5);d=s.1n(b+5,c-b-5);6((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){w=d}I w=28}2 n=f.1d.$t;2 o=n.G(0,4);2 p=n.G(5,7);2 q=n.G(8,10);6(29==F)x.z(\\\'<a D="\\\'+h+\\\'"><H B="2c"><N 1k="\\\'+1x+\\\'" 1c="\\\'+1y+\\\'" 1r="\\\'+g+\\\'" Y="\\\'+w+\\\'"/></H></a>\\\');x.z(\\\'<11>\\\');x.z(\\\'<A B="1u 2d"><a D="\\\'+h+\\\'" T ="O">\\\'+g+\\\'</a></A>\\\');2 r=\\\'\\\';x.z(\\\'<A B="1J 2e">\\\');6(2f==F){r=r+\\\'<A B="1z 2l">\\\'+q+\\\'/\\\'+p+\\\'/\\\'+o+\\\'</A>\\\'}6(2m==F){6(j==\\\'1 P\\\')j=\\\'1 1C\\\';6(j==\\\'0 P\\\')j=\\\'1D P\\\';j=\\\'<A B="1E 2n"><a D="\\\'+l+\\\'" T ="O">\\\'+j+\\\'</a></A>\\\';r=r+j}6(2o==F){r=r+\\\'<A B="1F 2p"><a D="\\\'+h+\\\'" B="15" T ="O">1H 1I...</a></A>\\\'}x.z(r);x.z(\\\'</A>\\\');x.z(\\\'</11>\\\')}x.z("")}12 2V(e){L(2 i=0;i<2r;i++){2 f=e.W.Z[i];2 g=f.V.$t;2 h;6(i==e.W.Z.E)13;L(2 k=0;k<f.C.E;k++){6(f.C[k].X==\\\'1l\\\'&&f.C[k].1m==\\\'1a/1f\\\'){2 j=f.C[k].V;2 l=f.C[k].D}6(f.C[k].X==\\\'1j\\\'){h=f.C[k].D;13}}2 m;1q{m=f.1b$18.15;m=m.M("/1w-c/","/w"+1t+"-h"+1s+"-c/")}1p(1o){s=f.R.$t;a=s.J("<N");b=s.J("Y=\\\\"",a);c=s.J("\\\\"",b+5);d=s.1n(b+5,c-b-5);6((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){m=d}I m=1X}2 n=f.1d.$t;2 o=n.G(0,4);2 p=n.G(5,7);2 q=n.G(8,10);x.z(\\\'\\\');x.z(\\\'<11>\\\');6(24==F)x.z(\\\'<a D="\\\'+h+\\\'"><H B="2x"><N 1k="\\\'+1t+\\\'" 1c="\\\'+1s+\\\'" 1r="\\\'+g+\\\'" Y="\\\'+m+\\\'"/></H></a>\\\');x.z(\\\'<A B="1u"><a D="\\\'+h+\\\'" T ="O">\\\'+g+\\\'</a></A>\\\');2 r=\\\'\\\';x.z(\\\'<A B="1J">\\\');6(2D==F){r=r+\\\'<A B="1z">\\\'+q+\\\'/\\\'+p+\\\'/\\\'+o+\\\'</A>\\\'}6(1Y==F){6(j==\\\'1 P\\\')j=\\\'1 1C\\\';6(j==\\\'0 P\\\')j=\\\'1D P\\\';j=\\\'<A B="1E"><a D="\\\'+l+\\\'" T ="O">\\\'+j+\\\'</a></A>\\\';r=r+j}6(2z==F){r=r+\\\'<A B="1F"><a D="\\\'+h+\\\'" B="15" T ="O">1H 1I...</a></A>\\\'}x.z(r);x.z(\\\'</A>\\\');x.z(\\\'<A B="27">\\\');6("R"17 f){2 t=f.R.$t}I 6("19"17 f){2 t=f.19.$t}I 2 t="";2 u=/<\\\\S[^>]*>/g;t=t.M(u,"");6(1W==F){6(t.E<1v){x.z(\\\'\\\');x.z(t);x.z(\\\'\\\')}I{x.z(\\\'\\\');t=t.G(0,1v);2 v=t.21(" ");t=t.G(0,v);x.z(t+\\\'...\\\');x.z(\\\'\\\')}}x.z(\\\'</A>\\\');x.z(\\\'</11>\\\');x.z(\\\'\\\')}x.z(\\\'\\\');L(2 i=1;i<2E;i++){2 f=e.W.Z[i];2 g=f.V.$t;2 h;6(i==e.W.Z.E)13;L(2 k=1;k<f.C.E;k++){6(f.C[k].X==\\\'1l\\\'&&f.C[k].1m==\\\'1a/1f\\\'){2 j=f.C[k].V;2 l=f.C[k].D}6(f.C[k].X==\\\'1j\\\'){h=f.C[k].D;13}}2 w;1q{w=f.1b$18.15.M("/1w-c/","/w"+1x+"-h"+1y+"-c/")}1p(1o){s=f.R.$t;a=s.J("<N");b=s.J("Y=\\\\"",a);c=s.J("\\\\"",b+5);d=s.1n(b+5,c-b-5);6((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){w=d}I w=28}2 n=f.1d.$t;2 o=n.G(0,4);2 p=n.G(5,7);2 q=n.G(8,10);6(29==F)x.z(\\\'<a D="\\\'+h+\\\'"><H B="2c"><N 1k="\\\'+1x+\\\'" 1c="\\\'+1y+\\\'" 1r="\\\'+g+\\\'" Y="\\\'+w+\\\'"/></H></a>\\\');x.z(\\\'<11>\\\');x.z(\\\'<A B="1u 2d"><a D="\\\'+h+\\\'" T ="O">\\\'+g+\\\'</a></A>\\\');2 r=\\\'\\\';x.z(\\\'<A B="1J 2e">\\\');6(2f==F){r=r+\\\'<A B="1z 2l">\\\'+q+\\\'/\\\'+p+\\\'/\\\'+o+\\\'</A>\\\'}6(2m==F){6(j==\\\'1 P\\\')j=\\\'1 1C\\\';6(j==\\\'0 P\\\')j=\\\'1D P\\\';j=\\\'<A B="1E 2n"><a D="\\\'+l+\\\'" T ="O">\\\'+j+\\\'</a></A>\\\';r=r+j}6(2o==F){r=r+\\\'<A B="1F 2p"><a D="\\\'+h+\\\'" B="15" T ="O">1H 1I...</a></A>\\\'}x.z(r);x.z(\\\'</A>\\\');x.z(\\\'</11>\\\')}x.z("")}12 1V(e){(12(t){2 n={1T:"",2u:5,1B:"",1S:3t,1R:4c,1L:4E,1P:"2F",1Z:"1G://4.22.23.1i/-2W/30/3e/3f/25/3B.4H",26:["3E","3F","3G","3P","3R","3S","3V","3W","3Z","41","48","4a"],1O:1N};n=t.4w({},n,e);2 r=t(n.1B);r.1f(\\\'<H B="1Q-2a"></H>\\\').2b(n.1P);t.2G((n.1T===""?1K.1M.2J+"//"+1K.1M.2K:n.1T)+"/2L/2M/19"+(n.1O===1N?"":"/-/"+n.1O)+"?2N-2O="+n.2u+"&2P=1d&1r=2Q-17-2R",12(e){2 i,s,o,u,a,f,l,c,h,p,d,v,m="",g=e.W.Z;L(2 y=0;y<g.E;y++){L(2 b=0;b<g[y].C.E;b++){6(g[y].C[b].X=="1j"){i=g[y].C[b].D;13}}L(2 v=0;v<b;v++){6(g[y].C[v].X=="1l"&&g[y].C[v].1m=="1a/1f"){u=g[y].C[v].V.2T(" ")[0];13}}6("1b$18"17 g[y]){a=g[y].1b$18.15}I{a=n.1Z}6("R"17 g[y]){o=g[y].R.$t}I{6("19"17 g[y]){o=g[y].19.$t}I{o=""}}o=o.M(/<\\\\S[^>]*>/g,"");6(o.E>n.1L){o=o.G(0,n.1L)+"..."}6("1b$18"17 g[y]){a=a.M(/\\\\/s[0-9]+\\\\-c/g,"/s"+n.1S+"");6(a.J("N.2g.1i")!=-1){a=a.M("2h","0")}l=""+o+""}I{a=a.M(/\\\\/s[0-9]+\\\\-c/g,"/s"+n.1R+"");l=""}6(g[y]===g[0]){a=a.M(/\\\\/s[0-9]+\\\\-c/g,"/s"+n.1S+"");6(a.J("N.2g.1i")!=-1){a=a.M("2h","0")}l=""+o+""}I{a=a.M(/\\\\/s[0-9]+\\\\-c/g,"/s"+n.1R+"");l=""}s=g[y].V.$t;v=g[y].1d.$t.G(0,10);c=v.G(0,4);h=v.G(5,7);p=v.G(8,10);d=n.26[2X(h,10)-1];f=\\\'<H B="1Q-18"><a V="\\\'+s+\\\'" B=" " D="\\\'+i+\\\'"><N Y="\\\'+a+\\\'"/><H B="2Y"></H></a></H>\\\';j="";m+=\\\'<11><H B="2Z-R" >\\\'+f+\\\'<2i><a D="\\\'+i+\\\'">\\\'+s+\\\'</a></2i><A B="31-32"><A B="33"><A B="34"></A><a D="\\\'+i+\\\'#36-37">\\\'+u+\\\' </A>/</a> <A B="38"> <A B="39"></A> \\\'+p+\\\'</A> <A B="3a">\\\'+d+\\\'</A> <A B="3b">\\\'+c+"</A></A>"+l+" "+j+"</H></11>"}t("U",r).3c(m);6(n.3d){t("U",r).2b("2j-2k");t(n.1B+" a.3g").3h({3i:F,3j:F});t(n.1B+" .1Q-2a").3k({3l:"3m",3n:".2j-2k > 11",3o:F,3p:3q,3r:F,3s:3,3u:0,3v:3,3w:F,3x:4})}I{}r.3y(n.1P)},"3z")})(3A)}2 K=1h 1g();2 14=0;2 Q=1h 1g();2 16=1h 1g();12 3H(e){L(2 i=0;i<e.W.Z.E;i++){2 f=e.W.Z[i];K[14]=f.V.$t;1q{16[14]=f.3I.15}1p(1o){s=f.R.$t;a=s.J("<N");b=s.J("Y=\\\\"",a);c=s.J("\\\\"",b+5);d=s.1n(b+5,c-b-5);6((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){16[14]=d}I 16[14]=\\\'1G://3.22.23.1i/-3J/3K/3L/3M/25/3N.3O\\\'}6(K[14].E>35)K[14]=K[14].G(0,35)+"...";L(2 k=0;k<f.C.E;k++){6(f.C[k].X==\\\'1j\\\'){Q[14]=f.C[k].D;14++}}}}12 3Q(){2 a=1h 1g(0);2 b=1h 1g(0);2 c=1h 1g(0);L(2 i=0;i<Q.E;i++){6(!2s(a,Q[i])){a.E+=1;a[a.E-1]=Q[i];b.E+=1;c.E+=1;b[b.E-1]=K[i];c[c.E-1]=16[i]}}K=b;Q=a;16=c}12 2s(a,e){L(2 j=0;j<a.E;j++)6(a[j]==e)2t F;2t 1N}12 3T(){L(2 i=0;i<Q.E;i++){6((Q[i]==3U)||(!(K[i]))){Q.1e(i,1);K.1e(i,1);16.1e(i,1);i--}}2 r=2v.3X((K.E-1)*2v.3Y());2 i=0;6(K.E>0)x.z(\\\'<2w>\\\'+40+\\\'</2w>\\\');x.z(\\\'<H 1U="42: 43;"/>\\\');44(i<K.E&&i<20&&i<45){x.z(\\\'<a 1U="1a-46:47;2y:0 49 1A 0;4b:2A;\\\');6(i!=0)x.z(\\\'"\\\');I x.z(\\\'"\\\');x.z(\\\' D="\\\'+Q[r]+\\\'"><N B="4d" Y="\\\'+16[r]+\\\'"/><4e/><H 1U="1k:4f;4g:4h 4i 2B;4k:#4l;1c:4m;1a-4n:2A;2y:-4o 1A 1A 1A; 4p: 4q 4r 4s; 4t-1c:2B;4u: #4v;2C: 0.7;4x: 4y(2C = 4z);">\\\'+K[r]+\\\'</H></a>\\\');6(r<K.E-1){r++}I{r=0}i++}x.z(\\\'</H>\\\');Q.1e(0,Q.E);16.1e(0,16.E);K.1e(0,K.E)}1K.4A=12(){2 e=x.4B("4C");6(e==4D){1K.1M.D="1G://2q.1V.1i/"}e.4F("D","1G://2q.1V.1i/");e.4G="2U"}\',62,4V,\'||4W||||4M|||||||||||||||||||||||||||4X||4Y|4Z|51|52|53|54|55|56|57|58|59|5a|5b|4L|5c|5d|5e|5f|5g||5h|5i|5j|5k|5l|5m|5n||5o|4J|5p|5q|5r|5s|5t|5u|5v|5w|5x|5y|5z|5A|5B|5C|4Q|5D|5E|5F|5G|5H|5I|5J|5K|5L|5M|5N|5O|5P|5Q|5R|5S|5T|5U|5V|5W|5X|5Y|5Z|60|61|63|64|65|66|67|68|69|6a|6b|6c|6d|6e|6f|6g|6h|6i|6j|6k|6l||6m|6n|6o|6p|6q|6r|6s|6t|6u|6v|6w|6x|6y|6z|6A|6B|6C|6D|6E|6F|6G|6H|6I|6J|6K|6L|6M|6N|4I|6O|6P|6Q|6R|6S|6T|6U|6V|6W|6X|6Y|6Z|71|72|73|74|75|76|77|78|79|7a|7b|7c|7d|4P|7e|7f|7g|4O|7h|7i|7j|7k|7l|7m|7n||7o|7p|7q|7r|7s|7t|7u|7v|7w|7x|7y|7z|7A|7B|7C|7D|7E|7F|7G|7H|7I|7J|7K|7L|7M|7N|7O|7P|7Q|7R|7S|7T|7U|7V|7W|7X|7Y|7Z|80|81|82|83|84|85|86|87|88|89|8a|8b|8c|8d|8e|8f|8g|8h|8i|8j|8k|8l|4K|8m|8n|8o|8p|8q|8r|8s|50|8t|8u|8v|8w|8x|8y|8z|8A|8B|8C|8D|8E|8F|8G|8H|8I|8J|8K|8L|8M|8N|8O|70|8P|8Q|8R|8S|8T|8U|8V|8W\'.4P(\'|\'),0,{}))',62,555,'||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||return|function|while|replace|if|String|parseInt|split|new|eval|toString|fromCharCode|RegExp|292|var|document|write|span||class|link|href|length|true|substring|div|else|indexOf|relatedTitles|for|img|_top|Comments|relatedUrls|content|target|ul|title|feed|rel|src|entry|li|break|relatedTitlesNum|url|thumburl|in|thumbnail|summary|text|media|height|published|splice|html|Array|com|alternate|width|replies|type|substr|error|catch|try|alt|thumb_height|thumb_width|xpose_title|numchars|s72|thumb_width2|thumb_height2|xpose_meta_date|0px|idxpose|Comment|No|xpose_meta_comment|xpose_meta_more|http||Read|More|xpose_meta|window|Summarylength|location|false|tagName|loadingClass|tag|ImageSize|FirstImageSize|blogURL|style|themexpose|showpostsummary|no_thumb|showcommentnum|pBlank|lastIndexOf|bp|blogspot|showpostthumbnails|s1600|MonthNames|rp_summary|no_thumb2|showpostthumbnails2|ct2|addClass|xpose_thumb2|xpose_title2|xpose_meta2|showpostdate2|youtube|default|h3|scroll|item|xpose_meta_date2|showcommentnum2|xpose_meta_comment2|displaymore2|xpose_meta_more2|www|numposts|contains_thumbs|maxpost|Math|h1|xpose_thumb|margin|displaymore|left|20px|opacity|showpostdate|numposts3|loding||get|xpose_thumbs|xpose_thumbs2|protocol|host|feeds|posts|max|results|orderby|json|script|numposts2|ThemeXpose|mythumb1|44trijSlV2Y|tube|inner|UgU0J6RU87I|post|meta|comt|comnum|comment|form|dd|date|dm|dy|append|animated|AAAAAAAAASU|Nppm2hzUboU|zoom|fancybox|centerOnScroll|hideOnContentClick|flexslider|animation|slide|selector|animationLoop|itemWidth|240|pauseOnHover|move|300|itemMargin|minItems|mousewheel|maxItems|removeClass|jsonp|jQuery|no_image|mythumb|xpose_thumbs1|Jan|Feb|Mar|related_results_labels_thumbs|gform_foot|zP87C2q9yog|UVopoHY30SI|AAAAAAAAE5k|AIyPvrpGLn8|picture_not_available|png|Apr|removeRelatedDuplicates_thumbs|May|Jun|printRelatedLabels_thumbs|currentposturl|Jul|Aug|floor|random|Sep|relatedpoststitle|Oct|clear|both|maxresults|decoration|none|Nov|7px|Dec|float|related_img|br|172px|padding|9px|14px|xpose_thumbs22|color|fff|25px|align|59px|font|normal|13px|OpenSansRegular|line|background|111|extend|filter|alpha|onload|getElementById|mycontents|null|150|setAttribute|innerHTML|jpg'.split('|'),0,{}))

Cách 1: Cách nhanh nhất bạn có thể truy cập địa chỉ sau ==> http://adf.ly/uZuW4

Cách 2: Cách bạn tìm kiếm trên google với từ khóa sau: decode packed javascript

hoặc click vào link sau rồi test qua các web site top đầu từ khóa đó ==> Tại Đây

Nguồn: Bittuot

Dịch ngược mã Javascript đã bị mã hóa

0 nhận xét:

Đăng nhận xét