js逆向学习代码

zy-常见混淆原理/AA和OO混淆.md

@@ -1,5 +1,7 @@
 # js 默认支持unicode
 
+unicode 支持所有语言
+
 原始代码
 
     var ayf = 1;
@@ -8,4 +10,11 @@ AA加密
  
     ﾟωﾟﾉ= /｀ｍ´）ﾉ ~┻━┻   //*´∇｀sojson.com*/ ['_']; o=(ﾟｰﾟ)  =_=3; c=(ﾟΘﾟ) =(ﾟｰﾟ)-(ﾟｰﾟ); (ﾟДﾟ) =(ﾟΘﾟ)= (o^_^o)/ (o^_^o);(ﾟДﾟ)={ﾟΘﾟ: '_' ,ﾟωﾟﾉ : ((ﾟωﾟﾉ==3) +'_') [ﾟΘﾟ] ,ﾟｰﾟﾉ :(ﾟωﾟﾉ+ '_')[o^_^o -(ﾟΘﾟ)] ,ﾟДﾟﾉ:((ﾟｰﾟ==3) +'_')[ﾟｰﾟ] }; (ﾟДﾟ) [ﾟΘﾟ] =((ﾟωﾟﾉ==3) +'_') [c^_^o];(ﾟДﾟ) ['c'] = ((ﾟДﾟ)+'_') [ (ﾟｰﾟ)+(ﾟｰﾟ)-(ﾟΘﾟ) ];(ﾟДﾟ) ['o'] = ((ﾟДﾟ)+'_') [ﾟΘﾟ];(ﾟoﾟ)=(ﾟДﾟ) ['c']+(ﾟДﾟ) ['o']+(ﾟωﾟﾉ +'_')[ﾟΘﾟ]+ ((ﾟωﾟﾉ==3) +'_') [ﾟｰﾟ] + ((ﾟДﾟ) +'_') [(ﾟｰﾟ)+(ﾟｰﾟ)]+ ((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+((ﾟｰﾟ==3) +'_') [(ﾟｰﾟ) - (ﾟΘﾟ)]+(ﾟДﾟ) ['c']+((ﾟДﾟ)+'_') [(ﾟｰﾟ)+(ﾟｰﾟ)]+ (ﾟДﾟ) ['o']+((ﾟｰﾟ==3) +'_') [ﾟΘﾟ];(ﾟДﾟ) ['_'] =(o^_^o) [ﾟoﾟ] [ﾟoﾟ];(ﾟεﾟ)=((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+ (ﾟДﾟ) .ﾟДﾟﾉ+((ﾟДﾟ)+'_') [(ﾟｰﾟ) + (ﾟｰﾟ)]+((ﾟｰﾟ==3) +'_') [o^_^o -ﾟΘﾟ]+((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+ (ﾟωﾟﾉ +'_') [ﾟΘﾟ]; (ﾟｰﾟ)+=(ﾟΘﾟ); (ﾟДﾟ)[ﾟεﾟ]='\\'; (ﾟДﾟ).ﾟΘﾟﾉ=(ﾟДﾟ+ ﾟｰﾟ)[o^_^o -(ﾟΘﾟ)];(oﾟｰﾟo)=(ﾟωﾟﾉ +'_')[c^_^o];(ﾟДﾟ) [ﾟoﾟ]='\"';(ﾟДﾟ) ['_'] ( (ﾟДﾟ) ['_'] (ﾟεﾟ+(ﾟДﾟ)[ﾟoﾟ]+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) +(o^_^o))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (o^_^o))+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ ((o^_^o) +(o^_^o))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (o^_^o))+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+((o^_^o) +(o^_^o))+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (o^_^o))+ (o^_^o)+ (ﾟДﾟ)[ﾟoﾟ])(ﾟΘﾟ))((ﾟΘﾟ)+(ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ)+(ﾟΘﾟ))+(ﾟΘﾟ)+(ﾟДﾟ)[ﾟoﾟ]);
  
+底部是fun实际上封装了一层
+
+    function Function1(x)
+    {
+        return eval("function(){return " + x + "})()")
+    }
+
 测试网站： https://www.sojson.com/aaencode.html

zy-常见混淆原理/jj混淆.md

@@ -0,0 +1,74 @@
+# jj 加密
+
+    var ayf = 1;
+    
+## 加密
+
+    sojson = ~[];
+    /*sojson.com*/
+    sojson = {
+        ___: ++sojson,
+        /*sojson.com*/
+        $$$$: (![] + "")[sojson],
+        __$: ++sojson,
+        $_$_: (![] + "")[sojson],
+        _$_: ++sojson,
+        $_$$: ({} + "")[sojson],
+        $$_$: (sojson[sojson] + "")[sojson],
+        _$$: ++sojson,
+        $$$_: (!"" + "")[sojson],
+        $__: ++sojson,
+        $_$: ++sojson,
+        $$__: ({} + "")[sojson],
+        $$_: ++sojson,
+        $$$: ++sojson,
+        $___: ++sojson,
+        $__$: ++sojson
+    };
+    sojson.$_ = (sojson.$_ = sojson + "")[sojson.$_$] + (sojson._$ = sojson.$_[sojson.__$]) + (sojson.$$/*sojson.com*/
+    = (sojson.$ + "")[sojson.__$]) + ((!sojson) + "")[sojson._$$] + (sojson.__ = sojson.$_[sojson.$$_]) + (sojson.$ = (!"" + "")[sojson.__$]) + (sojson._ = (!"" + "")[sojson._$_]) + sojson.$_[sojson.$_$] + sojson.__ + sojson._$ + sojson.$;
+    /*sojson.com*/
+    sojson.$$ = sojson.$ + (!"" + "")[sojson._$$] + sojson.__ + sojson._ + sojson.$ + sojson.$$/*sojson.com*/
+    ;
+    sojson.$ = (sojson.___)[sojson.$_][sojson.$_];
+    sojson.$(sojson.$(sojson.$$ + "\"" + "\\" + sojson.__$ + sojson.$$_ + sojson.$$_ + sojson.$_$_ + "\\" + sojson.__$ + sojson.$$_ + sojson._$_ + " " + sojson.$_$_ + "\\" + sojson.__$ + sojson.$$$ + sojson.__$ + sojson.$$$$ + " \\" + sojson.$$$ + sojson.$_$ + " " + sojson.__$ + "\\" + sojson.$$$ + sojson._$$ + "\"")())(sojson = {
+        ___: ++sojson,
+        $$$$: (![] + "")[sojson]
+    });
+
+
+这里通过浏览器调试    
+     
+    (sojson.___)[sojson.$_][sojson.$_];
+    
+    0的constructor的constructor是一个大Function，原型链上拿到的数据
+    
+arguments
+
+    arguments 是一个类数组对象。代表传给一个function的参数列表。
+
+hook
+
+    sojson.$ = function(){debugger;}
+    
+通过 arguments 取到数据
+
+    sojson.$ = function(){debugger;}
+    ƒ (){debugger;}
+    arguments
+    Arguments ["return"\166a\162 a\171f \75 1\73"", callee: ƒ, Symbol(Symbol.iterator): ƒ]0: "return"\166a\162 a\171f \75 1\73""callee: ƒ ()length: 1Symbol(Symbol.iterator): ƒ values()__proto__: Object
+    "\166a"
+    "va"
+    
+    "\162"
+    "r"
+    
+    "a\171f"
+    "ayf"
+    
+    "\75"
+    "="
+    
+    "1\73"
+    "1;"
+