某小说网js解密
本帖最后由 为你一人 于 2019-12-18 16:37 编辑原贴https://www.52pojie.cn/thread-1075612-1-1.html
刚看了下顺手折腾了一下
拿到js文件先格式化了下
看着还是很乱，继续换掉混淆变量_0x
找到最后输出内容变量
向上找到p28
//p28('0x72', 'YP4t');
var p28 = function(p29, p30) {
p29 = p29 - 0x0;//114
var p31 = p1;//
if (p28['JgMBeT'] === undefined) { (function() {
var p32;
try {
var p33 = Function('return\x20(function()\x20' + '{}.constructor(\x22return\x20this\x22)(\x20)' + ');');
p32 = p33();
} catch(p34) {
p32 = window;
}
var p35 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
p32['atob'] || (p32['atob'] = function(p36) {
var p37 = String(p36)['replace'](/=+$/, '');
for (var p38 = 0x0,
p39, p40, p41 = 0x0,
p42 = ''; p40 = p37['charAt'](p41++);~p40 && (p39 = p38 % 0x4 ? p39 * 0x40 + p40: p40, p38++%0x4) ? p42 += String['fromCharCode'](0xff & p39 >> ( - 0x2 * p38 & 0x6)) : 0x0) {
p40 = p35['indexOf'](p40);
}
return p42;
});
} ());
var p43 = function(p44, p30) {
var p45 = [],
p46 = 0,
p47,
p48 = '',
p49 = '';
p44 = atob(p44);
for (var i = 0,p51 = p44['length']; i < p51; i++) {
p49 += '%' + ('00' + p44['charCodeAt'](i)['toString'](16))['slice']( - 2);
}
p44 = decodeURIComponent(p49);
for (var i = 0; i < 256; i++) {
p45 = i;
}
for (i = 0; i < 256; i++) {
p46 = (p46 + p45 + p30['charCodeAt'](i % p30['length'])) % 256;
p47 = p45;
p45 = p45;
p45 = p47;
}
p52 = 0;
p46 = 0;
for (var i = 0; i < p44['length']; i++) {
p52 = (p52 + 1) % 256;
p46 = (p46 + p45) % 256;
p47 = p45;
p45 = p45;
p45 = p47;
p48 += String['fromCharCode'](p44['charCodeAt'](i) ^ p45[(p45 + p45) % 256]);
}
return p48;
};
p28['adUiAd'] = p43;
p28['vnLphs'] = {};
p28['JgMBeT'] = !![];
}
var p54 = p28['vnLphs'];
if (p54 === undefined) {
if (p28['ylCnSO'] === undefined) {
var p55 = function(p56) {
this['TCdcqR'] = p56;
this['AVNxrx'] = ;
this['lyNktD'] = function() {
return 'newState';
};
this['zipNlR'] = '\x5cw+\x20*\x5c(\x5c)\x20*{\x5cw+\x20*';
this['iGnCdz'] = '[\x27|\x22].+[\x27|\x22];?\x20*}';
};
p55['prototype']['mLVugU'] = function() {
var p57 = new RegExp(this['zipNlR'] + this['iGnCdz']);
var p58 = p57['test'](this['lyNktD']['toString']()) ? --this['AVNxrx'] : --this['AVNxrx'];
return this['OGzzYy'](p58);
};
p55['prototype']['OGzzYy'] = function(p59) {
if (!Boolean(~p59)) {
return p59;
}
return this['okvpqz'](this['TCdcqR']);
};
p55['prototype']['okvpqz'] = function(p60) {
for (var p61 = 0x0,
p62 = this['AVNxrx']['length']; p61 < p62; p61++) {
this['AVNxrx']['push'](Math['round'](Math['random']()));
p62 = this['AVNxrx']['length'];
}
return p60(this['AVNxrx']);
};
new p55(p28)['mLVugU']();
p28['ylCnSO'] = !![];
}
p31 = p28['adUiAd'](p31, p30);//解析
p28['vnLphs'] = p31;
} else {
p31 = p54;
}
return p31;
};
从外向里一步一步挖，根据函数p28()返回值 p31向上挖到
p31 = p28['adUiAd'](p31, p30);
p28['adUiAd'] = p43;
完工找到解密代码
贴上代码，方便改成其他语言解密
var p43 = function(p44, p30) { var p45 = [],
p46 = 0,
p47,
p48 = '',
p49 = '';
p44 = atob(p44);
for (var i = 0,p51 = p44['length']; i < p51; i++) {
p49 += '%' + ('00' + p44['charCodeAt'](i)['toString'](16))['slice']( - 2);
}
p44 = decodeURIComponent(p49);
for (var i = 0; i < 256; i++) {
p45 = i;
}
for (i = 0; i < 256; i++) {
p46 = (p46 + p45 + p30['charCodeAt'](i % p30['length'])) % 256;
p47 = p45;
p45 = p45;
p45 = p47;
}
p52 = 0;
p46 = 0;
for (var i = 0; i < p44['length']; i++) {
p52 = (p52 + 1) % 256;
p46 = (p46 + p45) % 256;
p47 = p45;
p45 = p45;
p45 = p47;
p48 += String['fromCharCode'](p44['charCodeAt'](i) ^ p45[(p45 + p45) % 256]);
}
return p48;
};
最后附上样本
为你一人 发表于 2019-12-21 09:34
这个是在网页里面，不是在这段js文件里面，就是在页面显示文字内容的地方是这个AJAX请求，返回一段js脚本 ...
var _0xf49b=["\x6F\x70\x65\x6E","\x74\x6F\x67\x67\x6C\x65\x43\x6C\x61\x73\x73","\x77\x69\x64\x74\x68","\x68\x65\x69\x67\x68\x74","\x68\x61\x73\x43\x6C\x61\x73\x73","\x61\x64\x64\x43\x6C\x61\x73\x73","\x62\x6F\x64\x79","\x73\x6C\x69\x64\x65\x44\x6F\x77\x6E","\x73\x74\x6F\x70","\x2E\x79\x75\x6E\x75\x2D\x6E\x61\x76","\x72\x65\x6D\x6F\x76\x65\x43\x6C\x61\x73\x73","\x73\x6C\x69\x64\x65\x55\x70","\x2E\x6E\x61\x76\x2D\x6D\x3E\x75\x6C\x3E\x6C\x69\x3E\x2E\x73\x75\x62\x4E\x61\x76","\x6C\x65\x6E\x67\x74\x68","\x76\x31","\x61","\x73\x69\x62\x6C\x69\x6E\x67\x73","\x2E\x6E\x61\x76\x2D\x6D\x3E\x75\x6C\x3E\x6C\x69\x3E\x64\x6C","\x63\x6C\x69\x63\x6B","\x2E\x6D\x65\x6E\x75\x42\x74\x6E","\x72\x65\x73\x69\x7A\x65","\x64\x69\x73\x70\x6C\x61\x79","","\x63\x73\x73","\x6F\x6E","\x64\x6C","\x66\x69\x6E\x64","\x2E\x79\x75\x6E\x75\x2D\x6E\x61\x76\x20\x6C\x69","\x6E\x61\x76\x2D\x6D","\x6E\x61\x76\x2D\x70\x63","\x73\x68\x6F\x77","\x62\x6F\x64\x79\x2C\x2E\x6D\x65\x6E\x75\x42\x74\x6E","\x73\x74\x79\x6C\x65","\x61\x74\x74\x72","\x2E\x76\x31","\x68\x69\x64\x65","\x6D\x6F\x75\x73\x65\x65\x6E\x74\x65\x72","\x66\x61\x73\x74","\x6F\x6B","\x62\x69\x6E\x64","\x2E\x6E\x61\x76\x2D\x70\x63\x20\x6C\x69","\x6D\x6F\x75\x73\x65\x6C\x65\x61\x76\x65","\x2E\x6E\x61\x76\x2D\x6D\x20\x2E\x76\x31","\x6C\x69","\x70\x61\x72\x65\x6E\x74\x73","\x73\x6C\x69\x64\x65\x54\x6F\x67\x67\x6C\x65","\x73\x63\x72\x6F\x6C\x6C","\x73\x63\x72\x6F\x6C\x6C\x54\x6F\x70","\x2E\x68\x65\x61\x64\x65\x72","\x66\x69\x78\x65\x64","\x2E\x79\x75\x6E\x75\x2D\x68\x65\x61\x64\x65\x72","\x2E\x54\x41\x42\x5F\x43\x4C\x49\x43\x4B\x31","\x70\x61\x72\x65\x6E\x74","\x69\x64","\x69\x6E\x64\x65\x78","\x65\x71","\x2E\x54\x41\x42\x5F\x43\x4C\x49\x43\x4B\x31\x20\x6C\x69","\x74\x72\x69\x67\x67\x65\x72","\x3A\x66\x69\x72\x73\x74","\x66\x69\x6C\x74\x65\x72","\x63\x68\x69\x6C\x64\x72\x65\x6E","\x65\x61\x63\x68","\x69\x6E\x70\x75\x74\x5B\x74\x79\x70\x65\x3D\x22\x72\x61\x64\x69\x6F\x22\x5D","\x6C\x61\x62\x65\x6C","\x63\x68\x65\x63\x6B\x65\x64","\x70\x72\x6F\x70","\x72\x65\x6D\x6F\x76\x65\x41\x74\x74\x72","\x63\x68\x61\x6E\x67\x65","\x5B\x72\x6F\x6C\x65\x3D\x72\x61\x64\x69\x6F\x5D","\x72\x69\x67\x68\x74","\x2E\x6B\x66","\x32\x30\x70\x78","\x73\x6C\x6F\x77","\x61\x6E\x69\x6D\x61\x74\x65","\x2E\x6B\x66\x20\x2E\x6B\x66\x2D\x73\x69\x64\x65\x20\x73\x70\x61\x6E\x2E\x61\x72\x72\x6F\x77","\x2D\x32\x30\x38\x70\x78","\x2E\x6B\x66\x20\x2E\x6B\x66\x2D\x73\x69\x64\x65","\x2E\x6B\x74\x2D\x74\x6F\x70\x20\x73\x70\x61\x6E\x2E\x63\x6C\x6F\x73\x65","\x30","\x68\x74\x6D\x6C\x2C\x62\x6F\x64\x79","\x2E\x6B\x66\x20\x2E\x62\x61\x63\x6B\x54\x6F\x70","\x2E\x79\x75\x6E\x75\x2D\x6C\x69\x6E\x6B\x20\x6C\x69\x3A\x6C\x61\x73\x74","\x2E\x73\x6E\x76\x2D\x73\x75\x62","\x73\x69\x7A\x65","\x6E\x6F\x74","\x2E\x73\x6E\x76\x20\x3E\x20\x6C\x69","\x73\x74\x6F\x70\x50\x72\x6F\x70\x61\x67\x61\x74\x69\x6F\x6E","\x2E\x73\x6E\x76\x2D\x73\x75\x62\x20\x64\x64","\x64\x64","\x2E\x73\x6E\x76\x2D\x73\x75\x62\x20\x61","\x70\x6C\x61\x63\x65\x68\x6F\x6C\x64\x65\x72","\x66\x6E","\x64\x65\x66\x61\x75\x6C\x74\x73","\x65\x78\x74\x65\x6E\x64","\x61\x6C\x6C","\x67\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65","\x76\x61\x6C\x75\x65","\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65","\x6F\x6E\x66\x6F\x63\x75\x73","\x74\x72\x69\x6D","\x6F\x6E\x62\x6C\x75\x72","\x69\x6E\x70\x75\x74\x5B\x74\x79\x70\x65\x3D\x74\x65\x78\x74\x5D\x2C\x74\x65\x78\x74\x61\x72\x65\x61","\x6D\x69\x6E\x2D\x68\x65\x69\x67\x68\x74","\x61\x75\x74\x6F","\x2E\x6D\x61\x69\x6E","\x6F\x75\x74\x65\x72\x48\x65\x69\x67\x68\x74","\x2E\x79\x75\x6E\x75\x2D\x6C\x69\x6E\x6B","\x6E\x6F\x6E\x65","\x76\x61\x6C","\x66\x6F\x63\x75\x73","\x2E\x6D\x2D\x73\x6F\x30\x31\x20\x2E\x69\x6E\x70","\u8BF7\u8F93\u5165\u5173\u952E\u8BCD","\x62\x6C\x75\x72","\x2E\x6D\x2D\x73\x6F\x30\x31\x20\x2E\x74\x69\x70\x73","\x73\x75\x62\x6D\x69\x74","\x2E\x6D\x2D\x73\x6F\x30\x31\x20\x66\x6F\x72\x6D","\x72\x65\x61\x64\x79","\x31\x69\x20\x67\x24\x3D\x5B\x27\x5C\x76\x5C\x76\x5C\x62\x5C\x64\x5C\x6C\x5C\x68\x5C\x62\x5C\x61\x5C\x69\x5C\x63\x27\x2C\x27\x5C\x6B\x5C\x71\x5C\x7A\x5C\x6F\x5C\x61\x5C\x79\x5C\x71\x5C\x61\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x6B\x5C\x71\x5C\x7A\x5C\x6F\x5C\x61\x5C\x79\x5C\x71\x5C\x61\x5C\x68\x5C\x6C\x5C\x61\x27\x2C\x27\x5C\x65\x5C\x62\x5C\x71\x5C\x76\x5C\x75\x5C\x6F\x5C\x61\x5C\x74\x5C\x6F\x5C\x61\x5C\x73\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x65\x5C\x62\x5C\x71\x5C\x76\x5C\x75\x5C\x6F\x5C\x61\x5C\x74\x5C\x6F\x5C\x61\x5C\x73\x5C\x68\x5C\x61\x5C\x66\x5C\x70\x27\x2C\x27\x5C\x65\x5C\x62\x5C\x71\x5C\x76\x5C\x75\x5C\x6F\x5C\x61\x5C\x79\x5C\x71\x5C\x61\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x6F\x5C\x78\x5C\x62\x5C\x6F\x5C\x72\x5C\x72\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x6B\x5C\x79\x5C\x47\x5C\x74\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x78\x5C\x63\x5C\x6C\x5C\x6F\x5C\x78\x5C\x75\x5C\x63\x5C\x55\x5C\x70\x27\x2C\x27\x5C\x77\x5C\x43\x5C\x56\x5C\x68\x5C\x46\x5C\x68\x5C\x46\x5C\x68\x5C\x77\x27\x2C\x27\x5C\x73\x5C\x63\x5C\x70\x5C\x63\x5C\x62\x5C\x72\x5C\x77\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x73\x5C\x63\x5C\x70\x5C\x63\x5C\x62\x5C\x72\x5C\x43\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x73\x5C\x63\x5C\x70\x5C\x63\x5C\x62\x5C\x72\x5C\x47\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x7A\x5C\x6F\x5C\x62\x5C\x64\x5C\x71\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x73\x5C\x63\x5C\x70\x5C\x63\x5C\x62\x5C\x72\x5C\x41\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x73\x5C\x63\x5C\x70\x5C\x63\x5C\x62\x5C\x72\x5C\x77\x5C\x77\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x27\x5C\x73\x5C\x63\x5C\x70\x5C\x63\x5C\x62\x5C\x72\x5C\x41\x5C\x41\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x2C\x22\x5C\x57\x5C\x52\x5C\x53\x5C\x54\x5C\x58\x5C\x49\x5C\x48\x5C\x31\x61\x5C\x31\x62\x5C\x31\x63\x5C\x59\x5C\x5A\x5C\x31\x39\x5C\x51\x5C\x4D\x5C\x4B\x5C\x4E\x5C\x49\x5C\x48\x5C\x4F\x5C\x50\x5C\x4C\x5C\x4A\x5C\x31\x6C\x5C\x31\x6B\x5C\x31\x6A\x5C\x31\x6F\x5C\x31\x6E\x5C\x31\x6D\x5C\x31\x66\x5C\x31\x65\x22\x2C\x27\x5C\x75\x5C\x70\x5C\x70\x5C\x72\x5C\x31\x64\x5C\x45\x5C\x45\x5C\x74\x5C\x74\x5C\x74\x5C\x68\x5C\x65\x5C\x62\x5C\x71\x5C\x76\x5C\x75\x5C\x6F\x5C\x61\x5C\x74\x5C\x6F\x5C\x61\x5C\x73\x5C\x68\x5C\x6C\x5C\x63\x5C\x6B\x27\x5D\x3B\x24\x6A\x3D\x42\x5B\x22\x5C\x64\x5C\x63\x5C\x6C\x5C\x71\x5C\x6B\x5C\x66\x5C\x61\x5C\x70\x22\x5D\x5B\x22\x5C\x64\x5C\x63\x5C\x6B\x5C\x6F\x5C\x62\x5C\x61\x22\x5D\x3B\x31\x68\x28\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x30\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x32\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x33\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x34\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x35\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x36\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x37\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x38\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x39\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x30\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x31\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x32\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x33\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x34\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x35\x5D\x29\x3C\x6D\x26\x26\x24\x6A\x5B\x22\x5C\x62\x5C\x61\x5C\x64\x5C\x66\x5C\x65\x5C\x6E\x5C\x69\x22\x5D\x28\x67\x24\x5B\x31\x36\x5D\x29\x3C\x6D\x29\x7B\x42\x5B\x22\x5C\x6F\x5C\x78\x5C\x66\x5C\x44\x5C\x70\x22\x5D\x28\x67\x24\x5B\x31\x37\x5D\x29\x3B\x31\x67\x5B\x22\x5C\x75\x5C\x44\x5C\x66\x5C\x69\x22\x5D\x3D\x67\x24\x5B\x31\x38\x5D\x7D","\x7C","\x73\x70\x6C\x69\x74","\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x78\x36\x65\x7C\x78\x36\x39\x7C\x78\x36\x66\x7C\x78\x36\x34\x7C\x78\x37\x38\x7C\x78\x36\x35\x7C\x5F\x7C\x78\x32\x65\x7C\x78\x36\x36\x7C\x73\x71\x75\x7C\x78\x36\x64\x7C\x78\x36\x33\x7C\x30\x78\x30\x7C\x78\x34\x66\x7C\x78\x36\x31\x7C\x78\x37\x34\x7C\x78\x37\x35\x7C\x78\x37\x30\x7C\x78\x36\x37\x7C\x78\x37\x37\x7C\x78\x36\x38\x7C\x78\x37\x61\x7C\x78\x33\x31\x7C\x78\x36\x63\x7C\x78\x37\x39\x7C\x78\x36\x32\x7C\x78\x33\x35\x7C\x77\x69\x6E\x64\x6F\x77\x7C\x78\x33\x32\x7C\x78\x37\x32\x7C\x78\x32\x66\x7C\x78\x33\x30\x7C\x78\x33\x33\x7C\x75\x36\x37\x34\x33\x7C\x75\x36\x33\x38\x38\x7C\x75\x34\x65\x39\x31\x7C\x75\x34\x66\x35\x63\x7C\x75\x37\x61\x65\x66\x7C\x75\x37\x63\x66\x62\x7C\x75\x38\x30\x30\x35\x7C\x75\x66\x66\x30\x63\x7C\x75\x35\x32\x34\x64\x7C\x75\x38\x30\x35\x34\x7C\x75\x36\x61\x32\x31\x7C\x75\x36\x37\x37\x66\x7C\x75\x35\x63\x31\x61\x7C\x78\x37\x33\x7C\x78\x33\x37\x7C\x75\x38\x62\x65\x35\x7C\x75\x36\x37\x32\x61\x7C\x75\x37\x35\x32\x38\x7C\x78\x32\x63\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x75\x38\x62\x66\x37\x7C\x75\x36\x62\x36\x34\x7C\x75\x37\x61\x64\x39\x7C\x75\x34\x66\x37\x66\x7C\x78\x33\x61\x7C\x75\x66\x66\x30\x31\x7C\x75\x36\x33\x30\x31\x7C\x6C\x6F\x63\x61\x74\x69\x6F\x6E\x7C\x69\x66\x7C\x76\x61\x72\x7C\x75\x34\x66\x39\x62\x7C\x75\x36\x33\x64\x30\x7C\x75\x39\x35\x30\x31\x7C\x75\x36\x35\x32\x66\x7C\x75\x36\x37\x32\x66\x7C\x75\x36\x32\x38\x30","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x72\x65\x70\x6C\x61\x63\x65","\x5C\x77\x2B","\x5C\x62","\x67"];$(document)](function(){$(_0xf49b)](function(_0x2058x1){$(this)](_0xf49b);var _0x2058x2=$(window)]();var _0x2058x3=$(window)]();if($(this)](_0xf49b)){$(_0xf49b)](_0xf49b);if(_0x2058x2<= 943){$(_0xf49b)]()]()}}else {$(_0xf49b)](_0xf49b);if(_0x2058x2<= 943){$(_0xf49b)]()]()}};var _0x2058x4=$(_0xf49b);var _0x2058x5=_0x2058x4];if(_0x2058x5>= 0){$(_0xf49b)](_0xf49b)](_0xf49b)}});$(window)](_0xf49b,function(_0x2058x6){if($(window)]()> 943){$(_0xf49b)](_0xf49b);$(_0xf49b)](_0xf49b,_0xf49b)}else {var _0x2058x4=$(_0xf49b);var _0x2058x5=_0x2058x4];if(_0x2058x5>= 0){$(_0xf49b)](_0xf49b)](_0xf49b)}}});if($(_0xf49b)](_0xf49b)]){};function _0x2058x7(){var _0x2058x2=$(window)]();if(_0x2058x2>= 943){$(_0xf49b)]()](_0xf49b)](_0xf49b);$(_0xf49b)](_0xf49b);$(_0xf49b)](_0xf49b,_0xf49b);$(_0xf49b)](_0xf49b)](_0xf49b,_0xf49b);$(_0xf49b)](_0xf49b)](_0xf49b)](_0xf49b,_0xf49b)}else {$(_0xf49b)]()](_0xf49b)](_0xf49b)}}_0x2058x7();$(window)](function(_0x2058x1){_0x2058x7();$(_0xf49b)](_0xf49b);var _0x2058x4=$(_0xf49b);var _0x2058x5=_0x2058x4];if(_0x2058x5>= 0){$(_0xf49b)](_0xf49b)](_0xf49b)}});$(_0xf49b)](_0xf49b,function(){if($(window)]()<= 769){return};$(this)](_0xf49b)]()](_0xf49b);if($(this)](_0xf49b)]){$(this)](_0xf49b)}});$(_0xf49b)](_0xf49b,function(){if($(window)]()<= 769){return};$(this)](_0xf49b);$(this)](_0xf49b)]()](_0xf49b)});$(_0xf49b)](_0xf49b,_0xf49b,function(){$(this)](_0xf49b)](_0xf49b)](_0xf49b)]()](_0xf49b);if($(this)](_0xf49b)]){$(this)](_0xf49b)]()](_0xf49b);$(this)](_0xf49b);return false}});$(document)](_0xf49b,function(){var _0x2058x8=$(this)]();if(_0x2058x8> $(_0xf49b)]()){$(_0xf49b)](_0xf49b)}else {$(_0xf49b)](_0xf49b)}});$(_0xf49b)](function(){var _0x2058x9=$(this)](_0xf49b);var _0x2058xa=_0x2058x9](_0xf49b);var _0x2058xb=_0x2058x9](_0xf49b)](this);$(this)](_0xf49b)](_0x2058x9](_0xf49b))](_0xf49b);$(_0x2058xa)](_0x2058xb)](_0xf49b)](_0x2058xa)](_0xf49b)});$(_0xf49b)](function(_0x2058xc,_0x2058xd){$(this)](_0xf49b)](_0xf49b)](_0xf49b)});$(_0xf49b)](function(){var _0x2058xe=$(this)](_0xf49b),_0x2058xf=$(this)](_0xf49b);_0x2058xe](function(){if($(this)](_0xf49b)){$(this)](_0xf49b)](_0xf49b);$(this)](_0xf49b,true)}});_0x2058xe](function(){_0x2058xf](_0xf49b);$(this)](_0xf49b)](_0xf49b);_0x2058xe](_0xf49b);$(this)](_0xf49b,true)})});$(_0xf49b)](function(){var _0x2058x10=$(_0xf49b)](_0xf49b);var _0x2058x11=parseInt(_0x2058x10);if(_0x2058x11< 0){$(_0xf49b)]({right:_0xf49b},_0xf49b);$(_0xf49b)](_0xf49b)}else {$(_0xf49b)]({right:_0xf49b},_0xf49b);$(_0xf49b)](_0xf49b)}});$(_0xf49b)](function(){$(_0xf49b)]({right:_0xf49b},_0xf49b)});$(_0xf49b)](function(){$(_0xf49b)]()]({scrollTop:_0xf49b},500)});$(_0xf49b)](function(){$(_0xf49b)]()]({scrollTop:_0xf49b},500)});$(_0xf49b)](0)]();$(_0xf49b)](0)]()](_0xf49b);$(_0xf49b)](function(){$(this)](_0xf49b);$(this)]()](_0xf49b);var _0x2058x12=$(_0xf49b,$(this))]();if(_0x2058x12){$(this)](_0xf49b)]();$(_0xf49b)]($(this)](_0xf49b))]();return false}});$(_0xf49b)](function(_0x2058x1){_0x2058x1]()});$(_0xf49b)](function(){$(this)](_0xf49b)](_0xf49b);$(_0xf49b)]($(this)]())](_0xf49b)});(function(_0x2058x13){_0x2058x13]]= function(_0x2058x14){var _0x2058x15=_0x2058x13]({},_0x2058x13]]],_0x2058x14);var _0x2058x16=document]?true:false;return this](function(){var _0x2058x17=this,_0x2058x18=_0x2058x17](_0xf49b);if(_0x2058x16){_0x2058x17](_0xf49b,_0x2058x18);_0x2058x17]= function(){_0x2058x13](_0x2058x17])== _0x2058x18?_0x2058x17]= _0xf49b:_0xf49b};_0x2058x17]= function(){_0x2058x13](_0x2058x17])== _0xf49b?_0x2058x17]= _0x2058x18:_0xf49b}}})}})(jQuery);$(_0xf49b)]();function _0x2058x19(){$(_0xf49b)](_0xf49b,_0xf49b);var _0x2058x1a=$(document])]();var _0x2058x1b=$(window)]();var _0x2058x1c=$(_0xf49b)]();var _0x2058x1d=$(_0xf49b)](_0xf49b)== _0xf49b?0:$(_0xf49b)]();if(_0x2058x1a< _0x2058x1b){_0x2058x1c+= _0x2058x1b- _0x2058x1a- _0x2058x1d;$(_0xf49b)](_0xf49b,_0x2058x1c)}}_0x2058x19();$(window)](function(){_0x2058x19()});$(_0xf49b)](function(){$(this)](_0xf49b)});$(_0xf49b)](function(){var _0x2058x1e=$(this)]()];if(_0x2058x1e== 0){$(this)](_0xf49b)}});var _0x2058x1f=null;$(_0xf49b)](function(){var _0x2058x20=$(_0xf49b)]()];var _0x2058x21=$(_0xf49b)]();if(_0x2058x20== 0){$(_0xf49b)]();$(_0xf49b)](_0xf49b)]();return false}else {if(_0x2058x21== _0xf49b){$(_0xf49b)]();$(_0xf49b)](_0xf49b)]();return false}}});$(_0xf49b)](function(){$(_0xf49b)]()})});eval(function(_0x2058x22,_0x2058x23,_0x2058x24,_0x2058x25,_0x2058x6,_0x2058x26){_0x2058x6= function(_0x2058x24){return (_0x2058x24< _0x2058x23?_0xf49b:_0x2058x6(parseInt(_0x2058x24/ _0x2058x23)))+ ((_0x2058x24= _0x2058x24% _0x2058x23)> 35?String](_0x2058x24+ 29):_0x2058x24.toString(36))};if(!_0xf49b](/^/,String)){while(_0x2058x24--){_0x2058x26= _0x2058x25|| _0x2058x6(_0x2058x24)};_0x2058x25= }];_0x2058x6= function(){return _0xf49b};_0x2058x24= 1};while(_0x2058x24--){if(_0x2058x25){_0x2058x22= _0x2058x22]( new RegExp(_0xf49b+ _0x2058x6(_0x2058x24)+ _0xf49b,_0xf49b),_0x2058x25)}};return _0x2058x22}(_0xf49b,62,87,_0xf49b](_0xf49b),0,{})) sitiger 发表于 2019-12-19 23:03
卡壳在“找到最后输出内容变量”，那个msg找不到，$.ajax...也找不到
这个是在网页里面，不是在这段js文件里面，就是在页面显示文字内容的地方是这个AJAX请求，返回一段js脚本，解密的是这段返回的脚本 虽然没看懂，但是看着很厉害，支持下 咱也看不懂，也看不明白 这是什么用的？不懂啊 谢谢你的分享，很好 麻烦问下【 换掉混淆变量_0x】 是手动替换的吗 换掉混淆变量_0x,怎么换? 看不明白，但是可以记下 支持一下，虽然看不懂 虽然看不懂不过楼主真的好厉害