Decompressing (p,a,c,k,e,d) Javascript Files

demo · 发表于 2013-9-23 13:49:04

Now, I know why most people compress they’re js files, because they don’t won’t people to steal the code, but it must be the case that sometimes, like what happened to me today, you’ve just gotta crack that encryption. I’m a bit worried about posting this, so I hope it’s in someway new and/or useful.
Basically we need to go into a js file that was given to us, in order to change a few DOM-based functions. I opened up the file, and lo and behold, this was the first few characters…

eval(function(p,a,c,k,e,d){…

This is the trademark sign of the packer by Dean Edwards. I’d seen this a few more times, and used it myself too, but never had to decode it before. So I did a little searching and found a nice method of decoding it:

Use the bookmarklet found here whilst on the packer encode/decode page. This will enable the decode button and remove the read-only limitation on the bottom text area.
Paste your encoded code into the bottom textarea and press decode. In theory, you should get the original code, but without line breaks, whitespace etc.
a better beautifer JS Beautifier, so use this to re-add the whitespace.

So yeah, that’s how to decode the p,a,c,k,e,r compressor. Theres other ways too, apparently replacing the eval function with alert works too, didn’t seem too for me unfortunately.

from: RedRoot

反編譯 eval(function(p,a,c,k,e,d) 格式的 Javascript

今天開始研究 Ajaxplorer 這個 Open Source Project，結果令人傻眼的居然將關鍵的 ajaxplorer.js 給編碼了，他採用的是 Dran Edwards 所提供的編碼方式，還好[1] 提供了解碼方式，我將他稍微修改整理成如下步驟(我用 FF3.5)

連線到 http://dean.edwards.name/packer/
將 javascript:for%20(i=0;i<document.forms.length;++i)%20{for(j=0;j<document.forms[ i].elements.length;++j){document.forms[ i].elements[j].removeAttribute(%22readonly%22);document.forms[ i].elements[j].removeAttribute(%22disabled%22);}} 貼到網址列並執行
將編碼的 js 複製到下方的文字方塊並執行「Decode」
複製下方解碼厚的內容
連線到 http://tool.chinaz.com/Tools/JsFormat.aspx
將解碼後的程式碼貼在文字方塊
執行格式化
複製格式化結果
完成

備註：[1] 有使用 Javascript Tidy 進行後處理，可是我的測試結果是會導致 js 錯誤

2013/1/30 更新
新版混淆方式破解可參考 [2]，可將 “while(c–){if(k[c]){p=p.replace(new egExp(‘\\b’+e(c)+’\\b’,'g’),k[c])}}return p"片段的 return p 改為 console.log(p) 即可取得 source code, 在透過 jsFormat 就可完全還原

參考資料
[1] http://www.red-root.com/code/decompressing-packed-javascript-files/
[2] http://www.cnblogs.com/wangchunm ... /04/01/2429455.html

From Chui-Wen Chiu's Note

MySense · 发表于 2013-9-23 14:06:20

本帖最后由 MySense 于 2013-9-23 14:13 编辑

This codes decoded from canadadebtsupport.com

It will pop up a farewell window when viewer palns leaving the webpage without click the submit buttom.

var Move = {
browserHeight: function () {
if (typeof window.innerWidth == 'number') {
return window.innerHeight - 2
} else {
if (document.documentElement && document.documentElement.clientHeight) {
return document.documentElement.clientHeight
} else {
if (document.body && document.body.clientHeight) {
return document.body.clientHeight
}
}
}
},
browserWidth: function () {
if (typeof window.innerWidth == 'number') {
return window.innerWidth - 2
} else {
if (document.documentElement && document.documentElement.clientWidth) {
return document.documentElement.clientWidth
} else {
if (document.body && document.body.clientWidth) {
return document.body.clientWidth
}
}
}
}
};
var actionTemplate;
var actionWidth, actionHeight, actionLeft, actionTop, actionColor, actionEffect, actionTimeout, actionLimit, actionDelay;
var actionThanks, actionRedirect;
var actionAffiliate;
var actionShowClose;
(function () {
var _jQuery = window.jQuery,
_$ = window.$;
var jQuery = window.jQuery = window.$ = function (selector, context) {
return new jQuery.fn.init(selector, context)
};
var quickExpr = /^[^<]*(<(.|\s)+>)[^>]*$|^#(\w+)$/,
isSimple = /^.[^:#\[\.]*$/,
undefined;
jQuery.fn = jQuery.prototype = {
init: function (selector, context) {
selector = selector || document;
if (selector.nodeType) {
this[0] = selector;
this.length = 1;
return this
}
if (typeof selector == "string") {
var match = quickExpr.exec(selector);
if (match && (match[1] || !context)) {
if (match[1]) selector = jQuery.clean([match[1]], context);
else {
var elem = document.getElementById(match[3]);
if (elem) {
if (elem.id != match[3]) return jQuery().find(selector);
return jQuery(elem)
}
selector = []
}
} else return jQuery(context).find(selector)
} else if (jQuery.isFunction(selector)) return jQuery(document)[jQuery.fn.ready ? "ready" : "load"](selector);
return this.setArray(jQuery.makeArray(selector))
},
jquery: "1.2.6",
size: function () {
return this.length
},
length: 0,
get: function (num) {
return num == undefined ? jQuery.makeArray(this) : this[num]
},
pushStack: function (elems) {
var ret = jQuery(elems);
ret.prevObject = this;
return ret
},
setArray: function (elems) {
this.length = 0;
Array.prototype.push.apply(this, elems);
return this
},
each: function (callback, args) {
return jQuery.each(this, callback, args)
},
index: function (elem) {
var ret = -1;
return jQuery.inArray(elem && elem.jquery ? elem[0] : elem, this)
},
attr: function (name, value, type) {
var options = name;
if (name.constructor == String)
if (value === undefined) return this[0] && jQuery[type || "attr"](this[0], name);
else {
options = {};
options[name] = value
}
return this.each(function (i) {
for (name in options) jQuery.attr(type ? this.style : this, name, jQuery.prop(this, options[name], type, i, name))
})
},
css: function (key, value) {
if ((key == 'width' || key == 'height') && parseFloat(value) < 0) value = undefined;
return this.attr(key, value, "curCSS")
},
text: function (text) {
if (typeof text != "object" && text != null) return this.empty().append((this[0] && this[0].ownerDocument || document).createTextNode(text));
var ret = "";
jQuery.each(text || this, function () {
jQuery.each(this.childNodes, function () {
if (this.nodeType != 8) ret += this.nodeType != 1 ? this.nodeValue : jQuery.fn.text([this])
})
});
return ret
},
wrapAll: function (html) {
if (this[0]) jQuery(html, this[0].ownerDocument).clone().insertBefore(this[0]).map(function () {
var elem = this;
while (elem.firstChild) elem = elem.firstChild;
return elem
}).append(this);
return this
},
wrapInner: function (html) {
return this.each(function () {
jQuery(this).contents().wrapAll(html)
})
},
wrap: function (html) {
return this.each(function () {
jQuery(this).wrapAll(html)
})
},
append: function () {
return this.domManip(arguments, true, false, function (elem) {
if (this.nodeType == 1) this.appendChild(elem)
})
},
prepend: function () {
return this.domManip(arguments, true, true, function (elem) {
if (this.nodeType == 1) this.insertBefore(elem, this.firstChild)
})
},
before: function () {
return this.domManip(arguments, false, false, function (elem) {
this.parentNode.insertBefore(elem, this)
})
},
after: function () {
return this.domManip(arguments, false, true, function (elem) {
this.parentNode.insertBefore(elem, this.nextSibling)
})
},
end: function () {
return this.prevObject || jQuery([])
},
find: function (selector) {
var elems = jQuery.map(this, function (elem) {
return jQuery.find(selector, elem)
});
return this.pushStack(/[^+>] [^+>]/.test(selector) || selector.indexOf("..") > -1 ? jQuery.unique(elems) : elems)
},
clone: function (events) {
var ret = this.map(function () {
if (jQuery.browser.msie && !jQuery.isXMLDoc(this)) {
var clone = this.cloneNode(true),
container = document.createElement("div");
container.appendChild(clone);
return jQuery.clean([container.innerHTML])[0]
} else return this.cloneNode(true)
});
var clone = ret.find("*").andSelf().each(function () {
if (this[expando] != undefined) this[expando] = null
});
if (events === true) this.find("*").andSelf().each(function (i) {
if (this.nodeType == 3) return;
var events = jQuery.data(this, "events");
for (var type in events)
for (var handler in events[type]) jQuery.event.add(clone[i], type, events[type][handler], events[type][handler].data)
});
return ret
},
......(see the attachment for whole code)
jQuery(function () {
actionpopup_start()
});

复制代码

Complete code:

账号		自动登录	找回密码
密码			注册

Decompressing (p,a,c,k,e,d) Javascript Files

sample code

本帖子中包含更多资源

浏览过的版块