Can anyone decode this type of coding?

Discussion in 'BlackHat Lounge' started by graphicnut, Apr 27, 2009.

  1. graphicnut

    graphicnut Supreme Member

    Joined:
    Feb 21, 2008
    Messages:
    1,330
    Likes Received:
    238
    Here is a preview of the code

    <script>
    document.write(unescape("%3Cscript%20language%3Djavascript%3Edocument.write%28unescape%28%27%253C%2573%2563%2572%2569%2570%2574%2520%256C%2561%256E%2567%2575%2561%2567%2565%253D%2522%256A%2561%2576%2561%2573%2563%2572%2569%2570%2574%2522%253E%2566%2575%256E%2563%2574%2569%256F%256E%2520%2564%2546%2528%2573%2529%257B%2576%2561%2572%2520%2573%2531%253D%2575%256E%2565%2573%2563%2561%2570%2565%2528%2573%252E%2573%2575%2562%2573%2574%2572%2528%2530%252C%2573%252E%256C%2565%256E%2567%2574%2568%252D%2531%2529%2529%253B%2520%2576%2561%2572%2520%2574%253D%2527%2527%253B%2566%256F%2572%2528%2569%253D%2530%253B%2569%253C%2573%2531%252E%256C%2565%256E%2567%2574%2568%253B%2569%252B%252B%2529%2574%252B%253D%2553%2574%2572%2569%256E%2567%252E%2566%2572%256F%256D%2543%2568%2561%2572%2543%256F%2564%2565%2528%2573%2531%252E%2563%2568%2561%2572%2543%256F%2564%2565%2541%2574%2528%2569%2529%252D%2573%252E%2573%2575%2562%2573%2574%2572%2528%2573%252E%256C%2565%256E%2567%2574%2568%252D%2531%252C%2531%2529%2529%253B%2564%256F%2563%2575%256D%2565%256E%2574%252E%2577%2572%2569%2574%2565%2528%2575%256E%2565%2573%2563%2561%2570%2565%2528%2574%2529%2529%253B%257D%253C%252F%2573%2563%2572%2569%2570%2574%253E%27%29%29%3BdF%28%27%25264Dtdsjqu%252631mbohvbhf%25264Ekbwbtdsjqu%25264Fepdvnfou/xsjuf%252639voftdbqf%252639%252638%2526364D%25263684%25263674%25263683%2526367%253A%25263681%25263685%25263631%2526367D%25263672%2526367F%25263678%25263686%25263672%25263678%25263676%2526364E%25263633%2526367B%25263672%25263687%25263672%25263684%25263674%25263683%2526367%253A%25263681%25263685%25263633%2526364F%25263677%25263686%2526367F%25263674%25263685%2526367%253A%2526367G%2526367F%25263631%25263675%25263657%25263639%25263684%2526363%253A%2526368C%25263687%25263672%25263683%25263631%25263684%25263642%2526364E%25263686%2526367F%25263676%25263684%25263674%25263672%25263681%25263676%25263639%25263684%2526363F%25263684%25263686%25263673%25263684%25263685%25263683%25263639%25263641%2526363D%25263684%2526363F%2526367D%25263676%2526367F%25263678%25263685%25263679%2526363E%25263642%2526363%253A%2526363%253A%2526364C%25263631%25263687%25263672%25263683%25263631%25263685%2526364E%25263638%25263638%2526364C%25263677%2526367G%25263683%25263639%2526367%253A%2526364E%25263641%2526364C%2526367%253A%2526364D%25263684%25263642%2526363F%2526367D%25263676%2526367F%25263678%25263685%25263679%2526364C%2526367%253A%2526363C%2526363C%2526363%253A%25263685%2526363C%2526364E%25263664%25263685%25263683%2526367%253A%2526367F%25263678%2526363F%25263677%25263683%2526367G%2526367E%25263654%25263679%25263672%25263683%25263654%2526367G%25263675%25263676%25263639%25263684%25263642%2526363F%25263674%25263679%25263672%25263683%25263654%2526367G%25263675%25263676%25263652%25263685%25263639%2526367%253A%2526363%253A%2526363E%25263684%2526363F%25263684%25263686%25263673%25263684%25263685%25263683%25263639%25263684%2526363F%2526367D%25263676%2526367F%25263678%25263685%25263679%2526363E%25263642%2526363D%25263642%2526363%253A%2526363%253A%2526364C%25263675%2526367G%25263674%25263686%2526367E%25263676%2526367F%25263685%2526363F%25263688%25263683%2526367%253A%25263685%25263676%25263639%25263686%2526367F%25263676%25263684%25263674%25263672%25263681%25263676%25263639%25263685%2526363%253A%2526363%253A%2526364C%2526368E%2526364D%2526363G%25263684%25263674%25263683%2526367%253A%25263681%25263685%2526364F%252638%25263%253A%25263%253A%25264CeG%252639%252638+9In9+9K+9Ig+86nxkl+9J+8%2526364Dnzzv+9G55zkrr%2526368F%2526368Cojkuy4iu4ii+9KIROIQ+86NKXK+86LUX+86LXKK+86%2560YNGXK+86KSHKJ+86YIXOVZ+9I5g+9K+9I5n9+9K6%252638%25263%253A%25264D0tdsjqu%25264F%25261B1%27%29%3C/script%3E"));

    If someone thinks they can crack it, let me know :) $$
     
  2. plunge

    plunge BANNED BANNED

    Joined:
    Dec 22, 2008
    Messages:
    162
    Likes Received:
    45
    IM me, info in profile
     
  3. shm03

    shm03 Regular Member

    Joined:
    May 19, 2008
    Messages:
    284
    Likes Received:
    123
    Its encrypted javascript. Not sure on what encryption however.
     
  4. the_demon

    the_demon Jr. Executive VIP

    Joined:
    Nov 23, 2008
    Messages:
    3,231
    Likes Received:
    1,596
    Occupation:
    Search Engine Marketing
    Location:
    The Internet
    I almost broke it earlier but had to run out. It's like a 5 layered (i broke 3 layers) encryption... It's not horridly difficult to crack I can tell you that but, it is time consuming and they used a few good tactics to make a pain in the ass even more time consuming. I'll see if I can finish cracking tonight. Wish me luck. :)
     
  5. deadlocc

    deadlocc Newbie

    Joined:
    Apr 28, 2009
    Messages:
    24
    Likes Received:
    3
    heres the decode function broken down

    Code:
    function dF(s){var s1=unescape(s.substr(0,s.length-1)); var t='';for(i=0;i<s1.length;i++)t+=String.fromCharCode(s1.charCodeAt(i)-s.substr(s.length-1,1));document.write(unescape(t));}
    and then heres the call to that function

    Code:
    dF('*8Hm8*8J*8Hf*75mwjk*8I*7%3Cmyyu*8F44yjqq%7E%7Bnijtx3ht3hh*8JHQNHP*75MJWJ*75KTW*75KWJJ*75_XMFWJ*75JRGJI*75XHWNUY*8H4f*8J*8H4m8*8J5')
     
  6. deadlocc

    deadlocc Newbie

    Joined:
    Apr 28, 2009
    Messages:
    24
    Likes Received:
    3
    ends up printing this out

    Code:
    <h3><a href='tellyvideos.co.cc>CLICK HERE FOR FREE ZSHARE EMBED SCRIPT</a></h3>