vps交流

关于之前论坛的在线工具箱源码


本帖最后由 Zynstream 于 2022-3-16 13:56 编辑

今天查看了下里面的部分代码,发现有个JS被加密了,static/script/pcjs/img2base64.js

不知道是不是有什么见不得人的操作,图片base64的js都要加密。里面好像涉及到文件读写?

不会JS逆向,有能力大佬破解逆向看看。

  1. __=["x6fx6ex6cx6fx61x64","x67x65x74x45x6cx65x6dx65x6ex74x42x79x49x64","x64x65x6dx6fx5fx69x6ex70x75x74","x72x65x73x75x6cx74","x69x6dx67x5fx61x72x65x61",’x75x6ex64x65x66x69x6ex65x64′,"x23x72x65x73x75x6cx74","x68x74x6dx6c","u62b1u6b49uff0cu4f60u7684u6d4fu89c8u5668u4e0du652fu6301 x46x69x6cx65x52x65x61x64x65x72uff0cu8bf7u4f7fu7528u6700u65b0u7684u4e3bu6d41u6d4fu89c8u5668u64cdu4f5cuff01","x73x65x74x41x74x74x72x69x62x75x74x65",’x64x69x73x61x62x6cx65x64′,"x61x64x64x45x76x65x6ex74x4cx69x73x74x65x6ex65x72",’x63x68x61x6ex67x65′,"x66x69x6cx65x73","x74x65x73x74","x74x79x70x65","x63x6fx6cx6fx72","x72x65x64","u8bf7u786eu4fddu6587u4ef6u4e3au56feu50cfu7c7bu578b","x72x65x61x64x41x73x44x61x74x61x55x52x4c","x76x61x6c","x23x69x6dx67x5fx61x72x65x61",’x3cx69x6dx67 x73x72x63x3dx22′,’x22 x61x6cx74x3dx22x70x63x6ax73x6fx6ex2ex63x6fx6du56feu7247x42x61x73x65x36x34u7f16u7801x22 x73x74x79x6cx65x3dx22x6dx61x72x67x69x6ex3ax61x75x74x6fx3bx6dx61x78x2dx77x69x64x74x68x3ax39x39x25x3b x6dx61x78x2dx68x65x69x67x68x74x3ax31x30x30x30x70x78x3bx22x2fx3e’,"x69x6ex64x65x78x4fx66","x3cx69x6dx67",’x22 x61x6cx74x3dx22x70x63x6ax73x6fx6ex2ex63x6fx6du56feu7247x42x61x73x65x36x34u7f16u7801x22 x73x74x79x6cx65x3dx22x6dx61x78x2dx77x69x64x74x68x3ax39x39x25x3b x6dx61x78x2dx68x65x69x67x68x74x3ax31x30x30x30x70x78x3bx22 x2fx3e’,”,’u8bf7u8f93u5165x42x61x73x65x36x34u7f16u7801x21′,"x62x61x73x65x36x34",’u8bf7u8f93u5165u6b63u786eu7684x42x61x73x65x36x34u56feu7247u7f16u7801x21′,"","x73x65x6cx65x63x74"];window[__[0]] = function () {var s1 = window["x64x6fx63x75x6dx65x6ex74"][__[1]](__[2]);var iEhm_Wab2 = window["x64x6fx63x75x6dx65x6ex74"][__[1]](__[3]);var U3 = window["x64x6fx63x75x6dx65x6ex74"][__[1]](__[4]);if (typeof (FileReader) === __[5]) {$(__[6])[__[7]](__[8]);s1[__[9]](__[10], __[10]);} else {s1[__[11]](__[12], readFile, false);}};function readFile() {var HdFtRd4 = this[__[13]][0];if (!/image/w+/[__[14]](HdFtRd4[__[15]])) {result[__[9]](__[16], __[17]);$(__[6])[__[7]](__[18]);return false;};var QKjaGzEwW5 = new FileReader();QKjaGzEwW5[__[19]](HdFtRd4);QKjaGzEwW5[__[0]] = function (__2) {$(__[6])[__[20]](this[__[3]]);$(__[21])[__[7]](__[22] + this[__[3]] + __[23]);}};function imgfun() {var FvLIJXGV6 = $(__[6])[__[20]]();if (FvLIJXGV6[__[24]](__[25]) < 0) {$(__[6])[__[20]](__[22] + FvLIJXGV6 + __[26]);$(__[21])[__[7]](__[27] + $(__[6])[__[20]]() + __[27]);}};function base642img(){var $PCqnyyI7 = $(__[6])[__[20]]();if ($PCqnyyI7==__[27]){pcjson_com_msg($(__[6]),__[28]);};if ($PCqnyyI7[__[24]](__[29]) < 0){pcjson_com_msg($(__[6]),__[30]);};if ($PCqnyyI7[__[24]](__[25]) < 0) {$(__[6])[__[20]](__[22] + $PCqnyyI7 + __[26]);$(__[21])[__[7]](__[27] + $(__[6])[__[20]]() + __[27]);}};function empty() {$(__[21])[__[7]](__[31]);$(__[6])[__[20]](__[31]);$(__[6])[__[32]]();}

复制代码

这个?
https://tool.tvv.tw/关于之前论坛的在线工具箱源码
好像没什么。你看看:https://netcut.cn/hostloc
粘贴进去了
https://tool.lu/js/  

只是简单的替换关键词。