mirror of
https://github.com/luzhisheng/js_reverse.git
synced 2025-04-19 21:09:52 +08:00
2.2 KiB
2.2 KiB
jj 加密
var ayf = 1;
加密
sojson = ~[];
/*sojson.com*/
sojson = {
___: ++sojson,
/*sojson.com*/
$$$$: (![] + "")[sojson],
__$: ++sojson,
$_$_: (![] + "")[sojson],
_$_: ++sojson,
$_$$: ({} + "")[sojson],
$$_$: (sojson[sojson] + "")[sojson],
_$$: ++sojson,
$$$_: (!"" + "")[sojson],
$__: ++sojson,
$_$: ++sojson,
$$__: ({} + "")[sojson],
$$_: ++sojson,
$$$: ++sojson,
$___: ++sojson,
$__$: ++sojson
};
sojson.$_ = (sojson.$_ = sojson + "")[sojson.$_$] + (sojson._$ = sojson.$_[sojson.__$]) + (sojson.$$/*sojson.com*/
= (sojson.$ + "")[sojson.__$]) + ((!sojson) + "")[sojson._$$] + (sojson.__ = sojson.$_[sojson.$$_]) + (sojson.$ = (!"" + "")[sojson.__$]) + (sojson._ = (!"" + "")[sojson._$_]) + sojson.$_[sojson.$_$] + sojson.__ + sojson._$ + sojson.$;
/*sojson.com*/
sojson.$$ = sojson.$ + (!"" + "")[sojson._$$] + sojson.__ + sojson._ + sojson.$ + sojson.$$/*sojson.com*/
;
sojson.$ = (sojson.___)[sojson.$_][sojson.$_];
sojson.$(sojson.$(sojson.$$ + "\"" + "\\" + sojson.__$ + sojson.$$_ + sojson.$$_ + sojson.$_$_ + "\\" + sojson.__$ + sojson.$$_ + sojson._$_ + " " + sojson.$_$_ + "\\" + sojson.__$ + sojson.$$$ + sojson.__$ + sojson.$$$$ + " \\" + sojson.$$$ + sojson.$_$ + " " + sojson.__$ + "\\" + sojson.$$$ + sojson._$$ + "\"")())(sojson = {
___: ++sojson,
$$$$: (![] + "")[sojson]
});
这里通过浏览器调试
(sojson.___)[sojson.$_][sojson.$_];
0的constructor的constructor是一个大Function,原型链上拿到的数据
arguments
arguments 是一个类数组对象。代表传给一个function的参数列表。
hook
sojson.$ = function(){debugger;}
通过 arguments 取到数据
sojson.$ = function(){debugger;}
ƒ (){debugger;}
arguments
Arguments ["return"\166a\162 a\171f \75 1\73"", callee: ƒ, Symbol(Symbol.iterator): ƒ]0: "return"\166a\162 a\171f \75 1\73""callee: ƒ ()length: 1Symbol(Symbol.iterator): ƒ values()__proto__: Object
"\166a"
"va"
"\162"
"r"
"a\171f"
"ayf"
"\75"
"="
"1\73"
"1;"