MJJ们，这段JS混淆代码应该是病毒吧？

muyijiang · 发表于 2023-7-4 22:02:49

['sojson.v4']["\x66\x69\x6c\x74\x65\x72"]["\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72"](((['sojson.v4']+[])["\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72"]['\x66\x72\x6f\x6d\x43\x68\x61\x72\x43\x6f\x64\x65']['\x61\x70\x70\x6c\x79'](null,"118V97a114n32p115d85X115m101b114J65l103p101g110M116L32r61w32O110e97X118u105D103C97S116k111O114n46o117R115H101N114N65q103Y101D110r116O46s116q111u76r111x119v101R114v67X97k115v101G40e41f59b10N10d105Q115U77s111v98n105d108Q101r61g47i40C105W112s104H111D110j101s124m105e111h115K124H97D110I100x114d111W105S100R124k109l105J110M105U124N109e111g98z105F108J101b124A109p111k98q105i124t110g111L107R105o97u124P115x121p109L98O105m97e110J124r105d112Z111c100q124I105I112j97V100l124o119E105S110i100M111r119e115S92N115M43t112R104B111j110C101S124W109r113C113M98L114h111X119A115e101k114g124c119s112o55T124T119h112p56z124c117W99r98y114d111j119a115g101t114w55R124z117w99E119K101X98P124H51f54B48w92f115z43C97j112k104I111p110I101U92P115X43P98F114H111J119y115I101K114N41W47v105E46C116X101H115h116a40M115q85a115m101i114q65y103C101o110J116Q41s59t10O10P118T97z114P32I105M109F97g103S101k115m61D110g101i119V32B65x114v114v97L121w40M34o104w116q116u112m58l47S47Z121t121b109j104x46H104W107J47E103j105Q102i47U49T46d103Z105W102D34J44c34N104E116k116C112V58i47S47U121t121E109y104b46N104h107Q47W103z105L102O47M50r46k103x105G102p34s44D34C104f116t116i112R58H47s47R121Z121w109x104a46b104F107q47G103g105m102R47c51E46y103T105o102u34S44H34e104P116I116k112h58r47k47o121K121U109v104r46H104M107J47S103N105z102D47m52f46F103x105e102n34m44C34I104J116Q116T112C58m47t47E121D121K109S104R46H104x107Y47B103y105n102o47K53w46C103O105t102c34z44x41C59u10k10u118G97u114P32s105L109J103t59y47u47U10r10m105D109X103O61X105Q109x97n103J101k115B91l112I97i114m115c101i73G110p116P40D77g97L116R104J46S114Z97f110Y100D111o109c40J41W42K40j105L109U97F103q101Z115k46R108O101M110m103v116i104Z41Q41B93F59f10A10K102W117i110e99S116f105s111f110t32t114d97d110s100U111D109n83g116c114I105D110W103O40e108m101U110H41Q123j108H101v110B61H108z101S110V124n124q51g50B59h118F97w114H32l36G99J104b97C114V115f61T34Y97g98H99B100q101o102z104S105J106r107S109h110p112j114O115I116N119H120A121u122d50E51z52W53N54R55O56N34R59z118q97O114Q32U109a97q120B80u111m115D61l36c99f104P97y114e115h46Z108j101A110t103C116W104N59a118W97e114I32p112n119C100x61X34T34w59u102v111o114n40a105j61i48J59C105d60J108Q101H110F59v105e43t43k41X123N112X119B100R43G61s36C99Z104T97T114R115j46p99G104f97o114R65C116a40F77f97l116A104q46M102A108l111A111b114r40c77v97D116Q104h46f114F97b110G100T111W109D40s41M42J109h97y120y80K111L115Z41s41e125y114l101m116j117u114b110t32L112R119z100L125w59K10W10w118e97O114q32U115N104k117j105i106o105z115h104e117S61W114p97e110t100n111c109w83M116q114G105C110e103m40S51b50r41s10g10v118e97P114X32V108o105s97S110l106h105h101m61F110N101p119V32b65n114V114u97B121f40H34X104d116B116Z112O58f47J47Z121A121p109G104O46q104v107g47P34E41n59m10m10q102X117n110q99k116U105H111W110C32f116y117Q114K110R111j102M102V40V111k98R106s41y123o100X111x99o117C109I101L110N116W46I103i101n116Y69q108i101q109O101G110Q116f66V121v73O100G40Q111T98s106H41v46l115P116w121X108d101j46j100T105R115Q112L108K97W121m61m34I110q111C110T101v34r59E125r10Q10f105z102x32c40O105A115S77M111n98W105w108v101D41Z32m123D10N10f100f111i99V117c109J101g110P116G46M119Y114s105r116v101q108X110h40q34p60p115G116q121o108r101f62x34C41g59N10N10U100p111x99O117d109T101A110l116c46h119N114k105P116p101G108z110e40m34m35X97v100Z95n56I56p56M108H109O95w102A111u111p116Z101f114u95I98u114G32o123K112Z111R115G105i116s105r111U110B58b102d105c120g101r100K59K108k101D102Y116g58c48I112P120j59B98w111r116R116Z111g109p58I48v112e120V59U119v105J100J116Z104H58Y49t48Y48W37y59P122Q45R105m110W100p101V120k58A57e57p57S57v57A57J57U57d57i57l59F98Z97p99y107t103v114S111C117y110P100R58B35R102g102s102L102r102r102y59N125Q34a41q59g10b10u100u111x99D117l109G101R110n116O46a119y114Y105v116J101A108G110L40B34j35p97j100A95H56Y56f56f108M109q95J102r111c111i116b101h114J95J98d114G32y100j105s118S32R123U104i101K105g103p104W116Y58T97D117L116s111y59f109i97s114u103c105Z110g58M48m112L120O59n100Y105n115y112P108t97R121x58a105H110F108J105C110a101p45W98s108G111s99a107r59M102S108O111j97F116e58G108n101q102r116s59g119V105C100y116b104u58u49b48t48v37v59W116D101x120M116a45P97K108g105k103p110k58s114e105j103L104o116m59t125c34v41J59r10c10s100H111k99A117h109X101A110m116s46d119g114u105R116S101B108R110J40e34s35m97J100a95o56A56g56S108s109x95A102J111A111y116e101g114v95O98b114m32H100s105Z118D32z105d109Z103D32N123l119G105A100R116w104B58b49n48i48t37y59k104P101v105C103v104a116M58b56d54Q112h120B59g112W111x115b105m116R105P111X110F58s114z101S108v97j116f105n118s101F59K116Z111e112N58U53d37t59r125R34H41B59i10c10h100W111X99y117u109Y101A110S116h46L119E114p105m116r101j108U110U40h34N60s47z115K116i121Z108I101e62J34S41o59p10R10o100G111S99O117T109c101r110y116z46w119C114W105t116i101j108M110C40N34x60r115O101T99Q116W105U111N110R32I105k100w61P39E97J100B95q56e56c56j108h109A95V102m111t111j116O101Q114S95P98M114M39y62I34J41R59l10g10D100m111m99g117r109l101q110w116U46k119O114p105o116t101g108a110T40L34e60z100A105e118G32L105j100g61i39v105K109h103S97i100w39d62D60n97i32r104T114w101J102Q61p39L34D43d108t105Z97L110r106l105H101v43A34j39h32w116K97H114Y103V101Q116Y61P39d95f98z108P97F110L107M39R62w60Q105E109s103S32n115r114k99v61s39n34s43p105B109b103W43j34c39o62n60m47R97z62i60O47j100m105r118d62q34K41F59j10p10z100K111W99B117q109n101j110K116Q46U119x114h105S116q101z108h110q40C34C60I47Z115T101x99J116K105E111C110V62e34C41Z59U10r10q125t101t108O115A101P123y10d10a125"['\x73\x70\x6c\x69\x74'](/[a-zA-Z]{1,}/))))('sojson.v4');

复制代码

hardwar · 发表于 2023-7-4 22:35:52

var shuijishu=randomString(32)

复制代码

“随机数” 这发音还不标准

晴晴晴 · 发表于 2023-7-4 22:05:17

这段代码是用 JavaScript 编写的，用于检查用户是否通过移动设备访问网站，并根据结果显示相应的广告内容。

muyijiang · 发表于 2023-7-4 22:08:32

晴晴晴发表于 2023-7-4 22:05
这段代码是用 JavaScript 编写的，用于检查用户是否通过移动设备访问网站，并根据结果显示相应的广告内容。 ...

不是病毒啊？网站中毒了，一直跳转菠菜，找不出病因

pi9 · 发表于 2023-7-4 22:09:01

https://ctf.bugku.com/tool/sojson4

用这个解密一目了然，大概就是往你的网页底部插一个固定的图片广告

muyijiang · 发表于 2023-7-4 22:12:30

pi9 发表于 2023-7-4 22:09
https://ctf.bugku.com/tool/sojson4

用这个解密一目了然，大概就是往你的网页底部插一个固定的图片广告 ...

谢谢，解密出来了，感觉跟病毒跳转菠菜关系不大

woniu · 发表于 2023-7-4 22:13:05

本帖最后由 woniu 于 2023-7-4 22:14 编辑

你可以看看我以前的回答

https://mjjj.ir/forum.php?mod=viewthread&tid=1156629&page=1#pid14037143

muyijiang · 发表于 2023-7-4 22:18:25

woniu 发表于 2023-7-4 22:13
你可以看看我以前的回答

好的，谢谢

		自动登录	找回密码
密码			注册