spider/js_reverse
1
0
Fork 0
mirror of https://github.com/luzhisheng/js_reverse.git synced 2025-04-21 07:35:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

猿人学第5题-js 混淆-乱码增强

Browse Source
This commit is contained in:
luzhisheng 2023-03-08 15:56:22 +08:00
parent 5140204503
commit fedf0f5706
3 changed files with 128 additions and 100 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
猿人学第5题-js 混淆-乱码增强/main.py Normal file
View File

18
猿人学第5题-js 混淆-乱码增强/server.js Normal file
View File

@ -0,0 +1,18 @@
const express = require('express');
const app = express();
const encryption = require("./aes-test");
var bodyParser = require('body-parser');
app.use(bodyParser());
app.post('/sign_60', function (req, res) {
let result = '';
let pageNum = req.body.pageNum;
result = encryption.sign(pageNum);
res.send(result.toString());
});
app.listen(3005, () => {
console.log("开启服务，端口 3005")
});

210
猿人学第5题-js 混淆-乱码增强/案例.js
View File

@ -1,27 +1,49 @@
const CryptoJS = require("crypto-js");
window = global; window = global;
document = {}; document = {};
var _$Wa = 1678247136000; var _0xceb4b2 = [];
_0x4e96b4 = window; window.$_tb = [];
_0x4e96b4['_$pr'] = []; window.$_zw = [];
_0x1171c8 = 1732584193; history = {
_0x4dae05 = -271733879; 'pushState': function () {},
_0x183a1d = -1732584194; };
_0xcfa373 = 271733878; var _0x1171c8 = 0x67452301;
b64pad = 1; var _0x4dae05 = -0x10325477;
_0x30bc70 = String; var _0x183a1d = -0x67452302;
_0x3912f2 = Error; var _0xcfa373 = 0x10325476;
_0x4d2d2c = Array; var b64pad = 1;
_0x109910 = Math; function _0x48d200(_0x4b706e, _0x3c3a85, _0x111154, _0x311f9f, _0x5439cf, _0x38cac7, _0x26bd2e) {
_0xff7e93 = parseInt; return _0xaaef84(_0x3c3a85 & _0x111154 | ~_0x3c3a85 & _0x311f9f, _0x4b706e, _0x3c3a85, _0x5439cf, _0x38cac7, _0x26bd2e);
_0x35bb1d = Date; }
_0x3d0f3f = document; function _0xaaef84(_0xaf3112, _0x2a165a, _0x532fb4, _0x10aa40, _0x41c4e7, _0x1cb4da) {
_0x5cd506 = Object; return _0x12e4a8(_0x3634fc(_0x12e4a8(_0x12e4a8(_0x2a165a, _0xaf3112), _0x12e4a8(_0x10aa40, _0x1cb4da)), _0x41c4e7), _0x532fb4);
_0x3bdc68 = unescape; }
_0x1ec3c0 = encodeURIComponent; function _0x12e4a8(_0x7542c8, _0x5eada0) {
_0x3b2c8e = Function; var _0x41f81f = (0xffff & _0x7542c8) + (0xffff & _0x5eada0);
var _0xceb4b2 = [ return (_0x7542c8 >> 0x10) + (_0x5eada0 >> 0x10) + (_0x41f81f >> 0x10) << 0x10 | 0xffff & _0x41f81f;
}
function _0x3634fc(_0x5803ba, _0x1ce5b2) {
return _0x5803ba << _0x1ce5b2 | _0x5803ba >>> 0x20 - _0x1ce5b2;
}
function _0x3180ec(_0x401705, _0x240e6a, _0x56b131, _0x5a5c20, _0x1f2a72, _0x2bfc1, _0x19741a) {
return _0xaaef84(_0x240e6a & _0x5a5c20 | _0x56b131 & ~_0x5a5c20, _0x401705, _0x240e6a, _0x1f2a72, _0x2bfc1, _0x19741a);
}
function _0x32032f(_0x520fdf, _0x13921d, _0x1af9d5, _0x4a2311, _0xb6d40a, _0x1d58da, _0x361df0) {
return _0xaaef84(_0x13921d ^ _0x1af9d5 ^ _0x4a2311, _0x520fdf, _0x13921d, _0xb6d40a, _0x1d58da, _0x361df0);
}
var _0x4e96b4 = window
, _0x30bc70 = String;
var _0x3912f2 = Error
, _0x4d2d2c = Array
, _0x109910 = Math
, _0xff7e93 = parseInt
, _0x35bb1d = Date
, _0x3d0f3f = document
, _0x5cd506 = Object
, _0x3bdc68 = unescape
, _0x1ec3c0 = encodeURIComponent
, _0x3b2c8e = Function;
_$eP = 'eval';
_$UH = [
"name", "name",
"setAttribute", "setAttribute",
"type", "type",
@ -747,21 +769,54 @@ var _0xceb4b2 = [
"$_YWTU", "$_YWTU",
"setClientData", "setClientData",
"getExtension" "getExtension"
] ];
_0x4e96b4['$_zw']['push'](_0xceb4b2);
var _0x21b30e = _0x4e96b4[_0xceb4b2[0x49]]
// , _0x1c1e87 = _0x4e96b4['top'][_0xceb4b2[0x17]]
, _0x1624e9 = _0x109910[_0xceb4b2[0x20f]]
, _0x1fcadd = _0x109910['abs']
, _0x3599f7 = _0x109910[_0xceb4b2[0x55]]
, _0x598d6f = _0x4e96b4[_0xceb4b2[0x34]]
, _0x14528e = _0x4e96b4[_0xceb4b2[0x1a]];
var _0x4e4c00 = _0x4e96b4[_0xceb4b2[0x3c]]
, _0x22e053 = _0x4e96b4[_0xceb4b2[0x27f]]
, _0xd13014 = _0x4e96b4[_0xceb4b2[0x9d]]
, _0x21e9ec = _0x4e96b4[_0xceb4b2[0x2b7]]
, _0x598d6f = _0x4e96b4[_0xceb4b2[0x34]]
, _0x284ecc = _0x4e96b4[_0xceb4b2[0x292]]
, _0x341b6b = _0x4e96b4[_0xceb4b2[0x17]]
, _0x551dbe = _0x4e96b4[_0xceb4b2[0xf8]]
, _0x5562e4 = _0x4e96b4[_0xceb4b2[0x1d6]]
, _0x4c8b7b = _0x4e96b4[_0xceb4b2[0x1ba]];
var _0x19ec04 = _0x4e96b4[_0xceb4b2[0x20e]] || (_0x4e96b4[_0xceb4b2[0x20e]] = {});
var _0x502102 = _0x30bc70['prototype'][_0xceb4b2[0x118]]
, _0x418037 = _0x30bc70['prototype'][_0xceb4b2[0xf]]
, _0x158537 = _0x30bc70['prototype'][_0xceb4b2[0x1d]]
, _0x29da67 = _0x30bc70['prototype'][_0xceb4b2[0x46]]
, _0x414dbb = _0x30bc70['prototype'][_0xceb4b2[0xf1]]
, _0x4d4b1c = _0x30bc70['prototype'][_0xceb4b2[0x13a]]
, _0x4441d1 = _0x30bc70['prototype'][_0xceb4b2[0x4e]]
, _0x557b15 = _0x30bc70['prototype'][_0xceb4b2[0x31]]
, _0x50bb6d = _0x30bc70['prototype'][_0xceb4b2[0x9]]
, _0x3fbba8 = _0x30bc70['prototype'][_0xceb4b2[0x19]]
, _0x34a1d4 = _0x30bc70['prototype'][_0xceb4b2[0x12e]]
, _0x4e160c = _0x30bc70['prototype'][_0xceb4b2[0x1e6]]
, _0x318f6d = _0x30bc70['prototype'][_0xceb4b2[0x256]]
, _0x274250 = _0x30bc70['prototype'][_0xceb4b2[0x2bb]]
, _0x1e37ca = _0x30bc70['prototype'][_0xceb4b2[0x172]]
, _0x2b11f1 = _0x30bc70[_0xceb4b2[0x114]];
_0x4e96b4['_$pr'] = new _0x4d2d2c();
var _0x6b463e = _0x5cd506['prototype'][_0xceb4b2[0x1f]];
_$JM = _0x3b2c8e['prototype'][_0xceb4b2[0x1f]];
_0x4e96b4['_$tT'] = -0xa40bd9c;
_0x4e96b4['_$Jy'] = 0x1b821d58;
function _0x474032(_0x233f82, _0xe2ed33, _0x3229f9) {
global.Buffer = global.Buffer || require('buffer').Buffer; return _0xe2ed33 ? _0x3229f9 ? v(_0xe2ed33, _0x233f82) : y(_0xe2ed33, _0x233f82) : _0x3229f9 ? _0x41873d(_0x233f82) : _0x37614a(_0x233f82);
if (typeof btoa === 'undefined') {
global.btoa = function (str) {
return new Buffer.from(str).toString('base64');
};
} }
if (typeof atob === 'undefined') { function _0x37614a(_0x32e7c1) {
global.atob = function (b64Encoded) { return _0x499969(_0x41873d(_0x32e7c1));
return new Buffer.from(b64Encoded, 'base64').toString();
};
} }
function _0x499969(_0x82fe7e) { function _0x499969(_0x82fe7e) {
@ -772,14 +827,6 @@ function _0x499969(_0x82fe7e) {
return _0x21f411; return _0x21f411;
} }
function _0x37614a(_0x32e7c1) {
return _0x499969(_0x41873d(_0x32e7c1));
}
function _0x474032(_0x233f82) {
return _0x37614a(_0x233f82);
}
function _0x41873d(_0x5a6962) { function _0x41873d(_0x5a6962) {
return _0x1ee7ec(_0x2b8a17(_0x5a6962)); return _0x1ee7ec(_0x2b8a17(_0x5a6962));
} }
@ -798,27 +845,6 @@ function _0x12b47d(_0x149183) {
_0x1145c3 += _0x30bc70[_$UH[0x114]](_0x149183[_0xabbcb3 >> 0x5] >>> _0xabbcb3 % 0x20 & 0xff); _0x1145c3 += _0x30bc70[_$UH[0x114]](_0x149183[_0xabbcb3 >> 0x5] >>> _0xabbcb3 % 0x20 & 0xff);
return _0x1145c3; return _0x1145c3;
} }
function _0xaaef84(_0xaf3112, _0x2a165a, _0x532fb4, _0x10aa40, _0x41c4e7, _0x1cb4da) {
return _0x12e4a8(_0x3634fc(_0x12e4a8(_0x12e4a8(_0x2a165a, _0xaf3112), _0x12e4a8(_0x10aa40, _0x1cb4da)), _0x41c4e7), _0x532fb4);
}
function _0x12e4a8(_0x7542c8, _0x5eada0) {
var _0x41f81f = (0xffff & _0x7542c8) + (0xffff & _0x5eada0);
return (_0x7542c8 >> 0x10) + (_0x5eada0 >> 0x10) + (_0x41f81f >> 0x10) << 0x10 | 0xffff & _0x41f81f;
}
function _0x3634fc(_0x5803ba, _0x1ce5b2) {
return _0x5803ba << _0x1ce5b2 | _0x5803ba >>> 0x20 - _0x1ce5b2;
}
function _0x3180ec(_0x401705, _0x240e6a, _0x56b131, _0x5a5c20, _0x1f2a72, _0x2bfc1, _0x19741a) {
return _0xaaef84(_0x240e6a & _0x5a5c20 | _0x56b131 & ~_0x5a5c20, _0x401705, _0x240e6a, _0x1f2a72, _0x2bfc1, _0x19741a);
}
var _0x3a316b = 'T';
var _0x390c66;
function _0x32032f(_0x520fdf, _0x13921d, _0x1af9d5, _0x4a2311, _0xb6d40a, _0x1d58da, _0x361df0) {
return _0xaaef84(_0x13921d ^ _0x1af9d5 ^ _0x4a2311, _0x520fdf, _0x13921d, _0xb6d40a, _0x1d58da, _0x361df0);
}
function _0x48d200(_0x4b706e, _0x3c3a85, _0x111154, _0x311f9f, _0x5439cf, _0x38cac7, _0x26bd2e) {
return _0xaaef84(_0x3c3a85 & _0x111154 | ~_0x3c3a85 & _0x311f9f, _0x4b706e, _0x3c3a85, _0x5439cf, _0x38cac7, _0x26bd2e);
}
var _0x53308f = 0x1; var _0x53308f = 0x1;
var _0x31ef9c = 0x0; var _0x31ef9c = 0x0;
var _0x312cd6; var _0x312cd6;
@ -833,24 +859,25 @@ function _0x11a7a2(_0x193f00, _0x1cfe89) {
} catch (_0x1b1b35) { } catch (_0x1b1b35) {
var _0x42fb36 = 0x1; var _0x42fb36 = 0x1;
} }
// try { try {
// _0x4e96b4['$_z2'][0x0] = 'Q'; _0x4e96b4['$_z2'][0x0] = 'Q';
// } catch (_0x4c574d) { } catch (_0x4c574d) {
// try { try {
// op = _0x4e96b4['$_zw'][_$UH[0x6c]]; op = _0x4e96b4['$_zw']["length"];
// } catch (_0x58af26) { console.log(_0x4e96b4['$_zw'])
// var _0x3b7935 = 0x0; } catch (_0x58af26) {
// for (var _0x1badc3 = 0x0; _0x1badc3 < 0xf4240; _0x1badc3++) { var _0x3b7935 = 0x0;
// _0x3b7935 = _0x3b7935 + _0x1badc3[_$UH[0x1f]](); for (var _0x1badc3 = 0x0; _0x1badc3 < 0xf4240; _0x1badc3++) {
// history['pushState'](0x0, 0x0, _0x3b7935); _0x3b7935 = _0x3b7935 + _0x1badc3[_$UH[0x1f]]();
// } history['pushState'](0x0, 0x0, _0x3b7935);
// } }
// if (op > 0x14) { }
// eval('b64pad = _0x4e96b4[\'$_zw\'][9][\'length\'];'); if (op > 0x14) {
// } else if (op < 0xa) { eval('b64pad = _0x4e96b4[\'$_zw\'][9][\'length\'];');
// _0x4e96b4['$_zw'] = [0x1, 0x8, 0x2, 0x4, 0x17, 0x2d, 0x8, 0xf, 0x51, 0x44, 0xd, 0x48, 0x46]; } else if (op < 0xa) {
// } _0x4e96b4['$_zw'] = [0x1, 0x8, 0x2, 0x4, 0x17, 0x2d, 0x8, 0xf, 0x51, 0x44, 0xd, 0x48, 0x46];
// } }
}
var _0x1badc3, _0x38ca59, _0x431764, _0x43f1b4, _0x5722c0, _0x3e0c38 = _0x1171c8, _0xdb4d2c = _0x4dae05, var _0x1badc3, _0x38ca59, _0x431764, _0x43f1b4, _0x5722c0, _0x3e0c38 = _0x1171c8, _0xdb4d2c = _0x4dae05,
_0x1724c5 = _0x183a1d, _0x257ec6 = _0xcfa373; _0x1724c5 = _0x183a1d, _0x257ec6 = _0xcfa373;
try { try {
@ -948,24 +975,7 @@ function _0x35f5f2(_0x243853) {
return _0xa791a1; return _0xa791a1;
} }
_$UH = _0xceb4b2; _$Wa = 1678261692000;
_0x4e96b4['_$pr']['push'](_0x474032(_$Wa)); _0x4e96b4['_$pr']['push'](_0x474032(_$Wa));
console.log(_0x474032(_$Wa));
_$Ww = CryptoJS['enc']['Utf8']['parse'](_0x4e96b4['_$pr']['toString']());
_0x4e96b4['_$qF'] = CryptoJS['enc']['Utf8']['parse'](_0x4e96b4['btoa']('1678243662154')['slice'](0, 16));
console.log(0x4e96b4['_$qF']);
_0x29dd83 = CryptoJS['AES']['encrypt'](_$Ww, _0x4e96b4['_$qF'], {
'mode': CryptoJS['mode']['ECB'],
'padding': CryptoJS['pad']['Pkcs7']
});
// _0x29dd83['toString']();
// console.log(_0x29dd83['toString']());
_$Wa = 1678247136000;
w =_0x37614a(_$Wa);
console.log(w);