Cómo desofuscar código JS: herramientas y técnicas

  • Autor Autor PacoBrown
  • Fecha de inicio Fecha de inicio
P

PacoBrown

Beta
¡Usuario con pocos negocios! ¡Utiliza siempre saldo de Forobeta!
Hola como puedo Desofuscar este código, me podrían decir con que herramienta lo puedo hacer y cual fue la ofuscación que le dieron

var _0xdd45=["\x55\x54\x49\x4C","\x4A\x51\x55\x45\x52\x59\x34\x55\x2E\x55\x54\x49\x4C","\x66\x69\x72\x73\x74\x6E\x61\x6D\x65","\x6A\x51\x75\x65\x72\x79","\x6D\x69\x64\x64\x6C\x65\x6E\x61\x6D\x65","\x34\x75","\x6C\x61\x73\x74\x6E\x61\x6D\x65","\x42\x6C\x6F\x67","\x6D\x6F\x62\x69\x6C\x65","\x30\x34\x31\x36\x34\x32\x35\x36\x39\x39","\x65\x6D\x61\x69\x6C","\x65\x6D\x61\x69\x6C\x40\x64\x6F\x6D\x61\x69\x6E\x2E\x63\x6F\x6D","\x68\x6F\x75\x73\x65","\x31\x32\x33","\x73\x74\x72\x65\x65\x74","\x42\x61\x6E\x6B\x20\x53\x74\x72\x65\x65\x74","\x63\x69\x74\x79","\x53\x75\x6E\x6E\x79\x62\x61\x6E\x6B","\x63\x6F\x75\x6E\x74\x72\x79","\x41\x75\x73\x74\x72\x61\x6C\x69\x61","\x70\x6F\x73\x74\x63\x6F\x64\x65","\x34\x31\x30\x39","\x6D\x65\x73\x73\x61\x67\x65","\x54\x68\x69\x73\x20\x69\x73\x20\x74\x68\x65\x20\x64\x65\x6D\x6F\x20\x65\x78\x61\x6D\x70\x6C\x65\x20\x6F\x66\x20\x6A\x51\x75\x65\x72\x79\x20\x41\x75\x74\x6F\x46\x6F\x72\x6D\x2E","\x65\x6D\x61\x69\x6C\x6E\x65\x77\x73\x6C\x65\x74\x74\x65\x72","\x6E\x65\x77\x73\x6C\x65\x74\x74\x65\x72","\x68\x6F\x75\x73\x65\x6E\x75\x6D\x62\x65\x72","\x6E\x61\x6D\x65","\x20","\x66\x75\x6C\x6C\x6E\x61\x6D\x65","\x70\x68\x6F\x6E\x65","\x73\x75\x62\x75\x72\x62","\x61\x64\x64\x72\x65\x73\x73\x31","\x61\x64\x64\x72\x65\x73\x73\x32","\x61\x64\x64\x72\x65\x73\x73\x33","\x30","\x67\x65\x74\x44\x61\x74\x65","\x67\x65\x74\x4D\x6F\x6E\x74\x68","\x2F","\x67\x65\x74\x46\x75\x6C\x6C\x59\x65\x61\x72","\x73\x65\x74\x44\x61\x74\x65","\x64\x61\x74\x65","\x73\x65\x72\x69\x61\x6C\x69\x7A\x65\x41\x72\x72\x61\x79","\x69\x6E\x70\x75\x74\x2C\x20\x73\x65\x6C\x65\x63\x74\x2C\x20\x74\x65\x78\x74\x61\x72\x65\x61","\x63\x68\x65\x63\x6B\x65\x64","\x61\x74\x74\x72","\x69\x6E\x70\x75\x74\x5B\x74\x79\x70\x65\x3D\x63\x68\x65\x63\x6B\x62\x6F\x78\x5D\x2C\x20\x69\x6E\x70\x75\x74\x5B\x74\x79\x70\x65\x3D\x72\x61\x64\x69\x6F\x5D","\x75\x6E\x64\x65\x66\x69\x6E\x65\x64","\x76\x61\x6C","\x69\x6E\x70\x75\x74\x5B\x6E\x61\x6D\x65\x3D","\x5D","\x74\x65\x78\x74\x61\x72\x65\x61\x5B\x6E\x61\x6D\x65\x3D","\x73\x65\x6C\x65\x63\x74\x65\x64\x49\x6E\x64\x65\x78","\x73\x65\x6C\x65\x63\x74\x5B\x6E\x61\x6D\x65\x3D","\x65\x61\x63\x68","\x61\x75\x74\x6F\x46\x6F\x72\x6D"];(function (_0x65dfx1){;;var _0x65dfx2={};;;_0x65dfx2[_0xdd45[0]]={name:_0xdd45[1],autoForm:function (){var _0x65dfx3=[];_0x65dfx3[_0xdd45[2]]=_0xdd45[3];_0x65dfx3[_0xdd45[4]]=_0xdd45[5];_0x65dfx3[_0xdd45[6]]=_0xdd45[7];_0x65dfx3[_0xdd45[8]]=_0xdd45[9];_0x65dfx3[_0xdd45[10]]=_0xdd45[11];_0x65dfx3[_0xdd45[12]]=_0xdd45[13];_0x65dfx3[_0xdd45[14]]=_0xdd45[15];_0x65dfx3[_0xdd45[16]]=_0xdd45[17];_0x65dfx3[_0xdd45[18]]=_0xdd45[19];_0x65dfx3[_0xdd45[20]]=_0xdd45[21];_0x65dfx3[_0xdd45[22]]=_0xdd45[23];_0x65dfx3[_0xdd45[24]]=true;_0x65dfx3[_0xdd45[25]]=_0x65dfx3[_0xdd45[24]];_0x65dfx3[_0xdd45[26]]=_0x65dfx3[_0xdd45[12]];_0x65dfx3[_0xdd45[27]]=_0x65dfx3[_0xdd45[2]]+_0xdd45[28]+_0x65dfx3[_0xdd45[4]]+_0xdd45[28]+_0x65dfx3[_0xdd45[6]];_0x65dfx3[_0xdd45[29]]=_0x65dfx3[_0xdd45[27]];_0x65dfx3[_0xdd45[30]]=_0x65dfx3[_0xdd45[8]];_0x65dfx3[_0xdd45[31]]=_0x65dfx3[_0xdd45[16]];_0x65dfx3[_0xdd45[32]]=_0x65dfx3[_0xdd45[26]]+_0xdd45[28]+_0x65dfx3[_0xdd45[14]];_0x65dfx3[_0xdd45[33]]=_0x65dfx3[_0xdd45[31]];_0x65dfx3[_0xdd45[34]]=_0x65dfx3[_0xdd45[18]]+_0xdd45[28]+_0x65dfx3[_0xdd45[20]];function _0x65dfx4(_0x65dfx5){return (_0x65dfx5>9)?_0x65dfx5:_0xdd45[35]+_0x65dfx5;} ;var _0x65dfx6= new Date();var _0x65dfx7=_0x65dfx4(_0x65dfx6[_0xdd45[36]]());var _0x65dfx8=_0x65dfx4(_0x65dfx6[_0xdd45[37]]()+1);var _0x65dfx9=_0x65dfx7+_0xdd45[38]+_0x65dfx8+_0xdd45[38]+_0x65dfx6[_0xdd45[39]]();_0x65dfx6[_0xdd45[40]](_0x65dfx6[_0xdd45[36]]()+7);_0x65dfx3[_0xdd45[41]]=_0x65dfx9;var _0x65dfxa=_0x65dfx1(_0xdd45[43])[_0xdd45[42]]();_0x65dfx1(_0xdd45[46])[_0xdd45[45]](_0xdd45[44],true);jQuery[_0xdd45[54]](_0x65dfxa,function (_0x65dfxb,_0x65dfxc){if(_0x65dfx3[_0x65dfxc[_0xdd45[27]]]!==_0xdd45[47]){_0x65dfx1(_0xdd45[49]+_0x65dfxc[_0xdd45[27]]+_0xdd45[50])[_0xdd45[48]](_0x65dfx3[_0x65dfxc[_0xdd45[27]]]);_0x65dfx1(_0xdd45[51]+_0x65dfxc[_0xdd45[27]]+_0xdd45[50])[_0xdd45[48]](_0x65dfx3[_0x65dfxc[_0xdd45[27]]]);_0x65dfx1(_0xdd45[53]+_0x65dfxc[_0xdd45[27]]+_0xdd45[50])[_0xdd45[45]](_0xdd45[52],1);_0x65dfx1(_0xdd45[49]+_0x65dfxc[_0xdd45[27]]+_0xdd45[50])[_0xdd45[45]](_0xdd45[44],_0x65dfx3[_0x65dfxc[_0xdd45[27]]]);} ;} );} };_0x65dfx2[_0xdd45[0]][_0xdd45[55]]();} )(jQuery); [/cc]
 
Insertar CODE, HTML o PHP: 
(function($) {
*
;var JQUERY4U = {};
*
;JQUERY4U.UTIL =
{
*
* * name: 'JQUERY4U.UTIL',
*
* * autoForm: function ()
* * {
* * * * /* field values fill forms */
* * * * var formValues *= [];
* * * * formValues['firstname'] = 'jQuery';
* * * * formValues['middlename'] = '4u';
* * * * formValues['lastname'] = 'Blog';
* * * * formValues['mobile'] = '0416425699';
* * * * formValues['email'] = 'email@domain.com';
* * * * formValues['house'] = '123';
* * * * formValues['street'] = 'Bank Street';
* * * * formValues['city'] = 'Sunnybank'; *
* * * * formValues['country'] = 'Australia';
* * * * formValues['postcode'] = '4109';
* * * * formValues['message'] = 'This is the demo example of jQuery AutoForm.';
* * * * formValues['emailnewsletter'] = true;
* * *
* * * * /* field name mappings */
* * * * formValues['newsletter'] = formValues['emailnewsletter'];
* * * * formValues['housenumber'] = formValues['house'];
* * * * formValues['name'] = formValues['firstname'] + ' ' + formValues['middlename'] + ' ' + formValues['lastname'];
* * * * formValues['fullname'] = formValues['name'];
* * * * formValues['phone'] = formValues['mobile'];
* * * * formValues['suburb'] = formValues['city'];
* * * * formValues['address1'] = formValues['housenumber'] + ' ' + formValues['street'];
* * * * formValues['address2'] = formValues['suburb'];
* * * * formValues['address3'] = formValues['country'] + ' ' + formValues['postcode'];
* * * * /* enter more field mappings here */

* * * * /* date functions */
* * * * function twodigits(digits) {
* * * * * * return (digits > 9) ? digits : '0' + digits;
* * * * }
* * * * var fullDate = new Date();
* * * * var twoDigitDays = twodigits(fullDate.getDate());
* * * * var twoDigitMonth = twodigits(fullDate.getMonth() + 1);
* * * * var date = twoDigitDays + "/" + twoDigitMonth + "/" + fullDate.getFullYear();
* * * * fullDate.setDate(fullDate.getDate()+7);
* * * * formValues['date'] = date; *
* * *
* * * * /*serialize every input field on page */
* * * * var fields = $("input, select, textarea").serializeArray();
* * *
* * * * /* init - special input type fixes */
* * * * $('input[type=checkbox], input[type=radio]').attr('checked', true);
* * *
* * * * jQuery.each(fields, function(i, field){
* * * * * * /* check if field has a value in array */
* * * * * * if (formValues[field.name] !== 'undefined') {
* * * * * * * * $('input[name='+field.name+']').val(formValues[field.name]); /* generic inputs */
* * * * * * * * $('textarea[name='+field.name+']').val(formValues[field.name]); /* textarea */
* * * * * * * * $('select[name='+field.name+']').attr('selectedIndex', 1); /* select */
* * * * * * * * $('input[name='+field.name+']').attr('checked', formValues[field.name]); /* checkbox/radio */
* * * * * * }
* * * * });
* * }
};
JQUERY4U.UTIL.autoForm();
*
})(jQuery);
 
deluxxin dijo:
Insertar CODE, HTML o PHP: 
(function($) {
*
;var JQUERY4U = {};
*
;JQUERY4U.UTIL =
{
*
* * name: 'JQUERY4U.UTIL',
*
* * autoForm: function ()
* * {
* * * * /* field values fill forms */
* * * * var formValues *= [];
* * * * formValues['firstname'] = 'jQuery';
* * * * formValues['middlename'] = '4u';
* * * * formValues['lastname'] = 'Blog';
* * * * formValues['mobile'] = '0416425699';
* * * * formValues['email'] = 'email@domain.com';
* * * * formValues['house'] = '123';
* * * * formValues['street'] = 'Bank Street';
* * * * formValues['city'] = 'Sunnybank'; *
* * * * formValues['country'] = 'Australia';
* * * * formValues['postcode'] = '4109';
* * * * formValues['message'] = 'This is the demo example of jQuery AutoForm.';
* * * * formValues['emailnewsletter'] = true;
* * *
* * * * /* field name mappings */
* * * * formValues['newsletter'] = formValues['emailnewsletter'];
* * * * formValues['housenumber'] = formValues['house'];
* * * * formValues['name'] = formValues['firstname'] + ' ' + formValues['middlename'] + ' ' + formValues['lastname'];
* * * * formValues['fullname'] = formValues['name'];
* * * * formValues['phone'] = formValues['mobile'];
* * * * formValues['suburb'] = formValues['city'];
* * * * formValues['address1'] = formValues['housenumber'] + ' ' + formValues['street'];
* * * * formValues['address2'] = formValues['suburb'];
* * * * formValues['address3'] = formValues['country'] + ' ' + formValues['postcode'];
* * * * /* enter more field mappings here */

* * * * /* date functions */
* * * * function twodigits(digits) {
* * * * * * return (digits > 9) ? digits : '0' + digits;
* * * * }
* * * * var fullDate = new Date();
* * * * var twoDigitDays = twodigits(fullDate.getDate());
* * * * var twoDigitMonth = twodigits(fullDate.getMonth() + 1);
* * * * var date = twoDigitDays + "/" + twoDigitMonth + "/" + fullDate.getFullYear();
* * * * fullDate.setDate(fullDate.getDate()+7);
* * * * formValues['date'] = date; *
* * *
* * * * /*serialize every input field on page */
* * * * var fields = $("input, select, textarea").serializeArray();
* * *
* * * * /* init - special input type fixes */
* * * * $('input[type=checkbox], input[type=radio]').attr('checked', true);
* * *
* * * * jQuery.each(fields, function(i, field){
* * * * * * /* check if field has a value in array */
* * * * * * if (formValues[field.name] !== 'undefined') {
* * * * * * * * $('input[name='+field.name+']').val(formValues[field.name]); /* generic inputs */
* * * * * * * * $('textarea[name='+field.name+']').val(formValues[field.name]); /* textarea */
* * * * * * * * $('select[name='+field.name+']').attr('selectedIndex', 1); /* select */
* * * * * * * * $('input[name='+field.name+']').attr('checked', formValues[field.name]); /* checkbox/radio */
* * * * * * }
* * * * });
* * }
};
JQUERY4U.UTIL.autoForm();
*
})(jQuery);
Hacer clic para expandir...

Hola deluxxin me podrías decir como lo hiciste

---------- Post agregado el 06-sep-2013 hora: 23:59 ----------



---------- Post agregado el 07-sep-2013 hora: 00:00 ----------

Hola alguien me podría enseñar como se desofusca este tipo de código, así como hizo el amigo , quisiera aprender como se hace.

Saludes.
 
Última edición:
deluxxin dijo:
Insertar CODE, HTML o PHP: 
(function($) {
*
;var JQUERY4U = {};
*
;JQUERY4U.UTIL =
{
*
* * name: 'JQUERY4U.UTIL',
*
* * autoForm: function ()
* * {
* * * * /* field values fill forms */
* * * * var formValues *= [];
* * * * formValues['firstname'] = 'jQuery';
* * * * formValues['middlename'] = '4u';
* * * * formValues['lastname'] = 'Blog';
* * * * formValues['mobile'] = '0416425699';
* * * * formValues['email'] = 'email@domain.com';
* * * * formValues['house'] = '123';
* * * * formValues['street'] = 'Bank Street';
* * * * formValues['city'] = 'Sunnybank'; *
* * * * formValues['country'] = 'Australia';
* * * * formValues['postcode'] = '4109';
* * * * formValues['message'] = 'This is the demo example of jQuery AutoForm.';
* * * * formValues['emailnewsletter'] = true;
* * *
* * * * /* field name mappings */
* * * * formValues['newsletter'] = formValues['emailnewsletter'];
* * * * formValues['housenumber'] = formValues['house'];
* * * * formValues['name'] = formValues['firstname'] + ' ' + formValues['middlename'] + ' ' + formValues['lastname'];
* * * * formValues['fullname'] = formValues['name'];
* * * * formValues['phone'] = formValues['mobile'];
* * * * formValues['suburb'] = formValues['city'];
* * * * formValues['address1'] = formValues['housenumber'] + ' ' + formValues['street'];
* * * * formValues['address2'] = formValues['suburb'];
* * * * formValues['address3'] = formValues['country'] + ' ' + formValues['postcode'];
* * * * /* enter more field mappings here */

* * * * /* date functions */
* * * * function twodigits(digits) {
* * * * * * return (digits > 9) ? digits : '0' + digits;
* * * * }
* * * * var fullDate = new Date();
* * * * var twoDigitDays = twodigits(fullDate.getDate());
* * * * var twoDigitMonth = twodigits(fullDate.getMonth() + 1);
* * * * var date = twoDigitDays + "/" + twoDigitMonth + "/" + fullDate.getFullYear();
* * * * fullDate.setDate(fullDate.getDate()+7);
* * * * formValues['date'] = date; *
* * *
* * * * /*serialize every input field on page */
* * * * var fields = $("input, select, textarea").serializeArray();
* * *
* * * * /* init - special input type fixes */
* * * * $('input[type=checkbox], input[type=radio]').attr('checked', true);
* * *
* * * * jQuery.each(fields, function(i, field){
* * * * * * /* check if field has a value in array */
* * * * * * if (formValues[field.name] !== 'undefined') {
* * * * * * * * $('input[name='+field.name+']').val(formValues[field.name]); /* generic inputs */
* * * * * * * * $('textarea[name='+field.name+']').val(formValues[field.name]); /* textarea */
* * * * * * * * $('select[name='+field.name+']').attr('selectedIndex', 1); /* select */
* * * * * * * * $('input[name='+field.name+']').attr('checked', formValues[field.name]); /* checkbox/radio */
* * * * * * }
* * * * });
* * }
};
JQUERY4U.UTIL.autoForm();
*
})(jQuery);
Hacer clic para expandir...

Hola Amigo deluxxin puedes decirme como Desofuscaste este Código, me podrías decir donde o como puedo hacerlo necesito hacerlo con un código que tengo.
 
Y al fin alguien nos puede enseñar donde se puede aprender a DESOFUSCAR estos tipo de CÓDIGOS, pido por favor que alguien me ayude, necesito saber como hacerlo porque tengo unos par de códigos que tengo que DESOFUSCAR, se los agradecería mucho si me pueden ayudar.

Bye Saludes.
 
cicklow dijo:
usa google...
Javascript Decryptor V2 | CrazyDavinci's Blog | Social Networking, Programming, Security, Web Development
Hacer clic para expandir...

Gracias cicklow por responder, pregunto aquí porque ya he buscado por Google mas de 2 semanas y no ha sido satisfecha la busqueda.

Saludes.

---------- Post agregado el 11-sep-2013 hora: 21:57 ----------
cicklow dijo:
usa google...
Javascript Decryptor V2 | CrazyDavinci's Blog | Social Networking, Programming, Security, Web Development
Hacer clic para expandir...

Y Gracias no me sirvió tampoco igual que todos los que he probado
 
Hay que estar conectado o registrado para responder aquí.

Temas similares

iCode
Ayuda a Desencriptar (desofuscar) código JavaScript
Respuestas
2
Visitas
2K
dreambreaker
dreambreaker
D
Ayuda con Desofuscar este codigo
Respuestas
6
Visitas
871
ddhubner
D
A
Cómo desencriptar un mensaje
Respuestas
3
Visitas
992
Alvaroxd
A
W
Problema con malware y código encriptado
Respuestas
8
Visitas
570
WilyV
W
krvaM
Me estan insertando archivos y codigos en mi pagina ¿Que hago?
Respuestas
11
Visitas
1K
krvaM
krvaM
Atrás
Arriba