1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Can anyone decode this type of coding?

Discussion in 'BlackHat Lounge' started by graphicnut, Apr 27, 2009.

  1. graphicnut

    graphicnut Supreme Member

    Joined:
    Feb 21, 2008
    Messages:
    1,333
    Likes Received:
    240
    Here is a preview of the code

    <script>
    document.write(unescape("%3Cscript%20language%3Djavascript%3Edocument.write%28unescape%28%27%253C%2573%2563%2572%2569%2570%2574%2520%256C%2561%256E%2567%2575%2561%2567%2565%253D%2522%256A%2561%2576%2561%2573%2563%2572%2569%2570%2574%2522%253E%2566%2575%256E%2563%2574%2569%256F%256E%2520%2564%2546%2528%2573%2529%257B%2576%2561%2572%2520%2573%2531%253D%2575%256E%2565%2573%2563%2561%2570%2565%2528%2573%252E%2573%2575%2562%2573%2574%2572%2528%2530%252C%2573%252E%256C%2565%256E%2567%2574%2568%252D%2531%2529%2529%253B%2520%2576%2561%2572%2520%2574%253D%2527%2527%253B%2566%256F%2572%2528%2569%253D%2530%253B%2569%253C%2573%2531%252E%256C%2565%256E%2567%2574%2568%253B%2569%252B%252B%2529%2574%252B%253D%2553%2574%2572%2569%256E%2567%252E%2566%2572%256F%256D%2543%2568%2561%2572%2543%256F%2564%2565%2528%2573%2531%252E%2563%2568%2561%2572%2543%256F%2564%2565%2541%2574%2528%2569%2529%252D%2573%252E%2573%2575%2562%2573%2574%2572%2528%2573%252E%256C%2565%256E%2567%2574%2568%252D%2531%252C%2531%2529%2529%253B%2564%256F%2563%2575%256D%2565%256E%2574%252E%2577%2572%2569%2574%2565%2528%2575%256E%2565%2573%2563%2561%2570%2565%2528%2574%2529%2529%253B%257D%253C%252F%2573%2563%2572%2569%2570%2574%253E%27%29%29%3BdF%28%27%25264Dtdsjqu%252631mbohvbhf%25264Ekbwbtdsjqu%25264Fepdvnfou/xsjuf%252639voftdbqf%252639%252638%2526364D%25263684%25263674%25263683%2526367%253A%25263681%25263685%25263631%2526367D%25263672%2526367F%25263678%25263686%25263672%25263678%25263676%2526364E%25263633%2526367B%25263672%25263687%25263672%25263684%25263674%25263683%2526367%253A%25263681%25263685%25263633%2526364F%25263677%25263686%2526367F%25263674%25263685%2526367%253A%2526367G%2526367F%25263631%25263675%25263657%25263639%25263684%2526363%253A%2526368C%25263687%25263672%25263683%25263631%25263684%25263642%2526364E%25263686%2526367F%25263676%25263684%25263674%25263672%25263681%25263676%25263639%25263684%2526363F%25263684%25263686%25263673%25263684%25263685%25263683%25263639%25263641%2526363D%25263684%2526363F%2526367D%25263676%2526367F%25263678%25263685%25263679%2526363E%25263642%2526363%253A%2526363%253A%2526364C%25263631%25263687%25263672%25263683%25263631%25263685%2526364E%25263638%25263638%2526364C%25263677%2526367G%25263683%25263639%2526367%253A%2526364E%25263641%2526364C%2526367%253A%2526364D%25263684%25263642%2526363F%2526367D%25263676%2526367F%25263678%25263685%25263679%2526364C%2526367%253A%2526363C%2526363C%2526363%253A%25263685%2526363C%2526364E%25263664%25263685%25263683%2526367%253A%2526367F%25263678%2526363F%25263677%25263683%2526367G%2526367E%25263654%25263679%25263672%25263683%25263654%2526367G%25263675%25263676%25263639%25263684%25263642%2526363F%25263674%25263679%25263672%25263683%25263654%2526367G%25263675%25263676%25263652%25263685%25263639%2526367%253A%2526363%253A%2526363E%25263684%2526363F%25263684%25263686%25263673%25263684%25263685%25263683%25263639%25263684%2526363F%2526367D%25263676%2526367F%25263678%25263685%25263679%2526363E%25263642%2526363D%25263642%2526363%253A%2526363%253A%2526364C%25263675%2526367G%25263674%25263686%2526367E%25263676%2526367F%25263685%2526363F%25263688%25263683%2526367%253A%25263685%25263676%25263639%25263686%2526367F%25263676%25263684%25263674%25263672%25263681%25263676%25263639%25263685%2526363%253A%2526363%253A%2526364C%2526368E%2526364D%2526363G%25263684%25263674%25263683%2526367%253A%25263681%25263685%2526364F%252638%25263%253A%25263%253A%25264CeG%252639%252638+9In9+9K+9Ig+86nxkl+9J+8%2526364Dnzzv+9G55zkrr%2526368F%2526368Cojkuy4iu4ii+9KIROIQ+86NKXK+86LUX+86LXKK+86%2560YNGXK+86KSHKJ+86YIXOVZ+9I5g+9K+9I5n9+9K6%252638%25263%253A%25264D0tdsjqu%25264F%25261B1%27%29%3C/script%3E"));

    If someone thinks they can crack it, let me know :) $$
     
  2. plunge

    plunge BANNED BANNED

    Joined:
    Dec 22, 2008
    Messages:
    162
    Likes Received:
    45
    IM me, info in profile
     
  3. shm03

    shm03 Regular Member

    Joined:
    May 19, 2008
    Messages:
    284
    Likes Received:
    123
    Its encrypted javascript. Not sure on what encryption however.
     
  4. the_demon

    the_demon Jr. Executive VIP

    Joined:
    Nov 23, 2008
    Messages:
    3,177
    Likes Received:
    1,563
    Occupation:
    Search Engine Marketing
    Location:
    The Internet
    I almost broke it earlier but had to run out. It's like a 5 layered (i broke 3 layers) encryption... It's not horridly difficult to crack I can tell you that but, it is time consuming and they used a few good tactics to make a pain in the ass even more time consuming. I'll see if I can finish cracking tonight. Wish me luck. :)
     
  5. deadlocc

    deadlocc Newbie

    Joined:
    Apr 28, 2009
    Messages:
    24
    Likes Received:
    3
    heres the decode function broken down

    Code:
    function dF(s){var s1=unescape(s.substr(0,s.length-1)); var t='';for(i=0;i<s1.length;i++)t+=String.fromCharCode(s1.charCodeAt(i)-s.substr(s.length-1,1));document.write(unescape(t));}
    and then heres the call to that function

    Code:
    dF('*8Hm8*8J*8Hf*75mwjk*8I*7%3Cmyyu*8F44yjqq%7E%7Bnijtx3ht3hh*8JHQNHP*75MJWJ*75KTW*75KWJJ*75_XMFWJ*75JRGJI*75XHWNUY*8H4f*8J*8H4m8*8J5')
     
  6. deadlocc

    deadlocc Newbie

    Joined:
    Apr 28, 2009
    Messages:
    24
    Likes Received:
    3
    ends up printing this out

    Code:
    <h3><a href='tellyvideos.co.cc>CLICK HERE FOR FREE ZSHARE EMBED SCRIPT</a></h3>