eval(function(p,a,c,k,e,r){e=String;if(!''.replace(/^/,String)){while(c--)r[c]=k[c]||c;k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('\\0=-1;\\0={4:++\\0,$$$$:"5"[\\0],3$:++\\0,$2$2:"5"[\\0],2$2:++\\0,$2$$:"[7 8]"[\\0],$$2$:(\\0[\\0]+"")[\\0],2$$:++\\0,$$$2:"6"[\\0],$3:++\\0,$2$:++\\0,$$3:"[7 8]"[\\0],$$2:++\\0,$$$:++\\0,$4:++\\0,$3$:++\\0};\\0.$2=(\\0.$2=\\0+"")[\\0.$2$]+(\\0.2$=\\0.$2[\\0.3$])+(\\0.$$=(\\0.$+"")[\\0.3$])+(!\\0+"")[\\0.2$$]+(\\0.3=\\0.$2[\\0.$$2])+(\\0.$="6"[\\0.3$])+(\\0.2="6"[\\0.2$2])+\\0.$2[\\0.$2$]+\\0.3+\\0.2$+\\0.$;\\0.$$=\\0.$+"6"[\\0.2$$]+\\0.3+\\0.2+\\0.$+\\0.$$;\\0.$=\\0.4[\\0.$2][\\0.$2];\\0.$(\\0.$(\\0.$$+\'"\\\\\'+\\0.3$+\\0.$2$+\\0.2$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+\\0.$$3+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+"\\\\"+\\0.3$+\\0.$$2+\\0.4+\\0.3+":\\\\"+\\0.$3+\\0.4+"("+\\0.$$$$+\\0.2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.$$3+\\0.3+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+"()\\\\"+\\0.$3+\\0.4+"{\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+"\\\\"+\\0.3$+\\0.$$2+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.$3+\\0.4+\\0.3+"\\\\"+\\0.$3+\\0.4+"=\\\\"+\\0.$3+\\0.4+\'\\\\"\\\\";\\\\\'+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+"\\\\"+\\0.3$+\\0.$$2+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.$3+\\0.4+\\0.$$2$+"\\\\"+\\0.$3+\\0.4+"=\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$2+\\0.$$$+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.3$+\\0.4+\\0.$3+\\0.$2$2+\\0.3+\\0.$$$2+"();\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+\\0.3+"\\\\"+\\0.$3+\\0.4+"+=\\\\"+\\0.$3+\\0.4+\\0.$$2$+".\\\\"+\\0.3$+\\0.$3+\\0.$$$+\\0.$$$2+\\0.3+"\\\\"+\\0.3$+\\0.4+\\0.$$2+\\0.2+"5"[\\0.2$2]+"5"[\\0.2$2]+"\\\\"+\\0.3$+\\0.2$$+\\0.3$+\\0.$$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"();\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+\\0.3+"\\\\"+\\0.$3+\\0.4+"+=\\\\"+\\0.$3+\\0.4+\\0.$$2$+".\\\\"+\\0.3$+\\0.$3+\\0.$$$+\\0.$$$2+\\0.3+"\\\\"+\\0.3$+\\0.3$+\\0.$2$+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.3+"\\\\"+\\0.3$+\\0.$2$+\\0.4+"()\\\\"+\\0.$3+\\0.4+"+\\\\"+\\0.$3+\\0.4+\\0.3$+";\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+\\0.3+"\\\\"+\\0.$3+\\0.4+"+=\\\\"+\\0.$3+\\0.4+\\0.$$2$+".\\\\"+\\0.3$+\\0.$3+\\0.$$$+\\0.$$$2+\\0.3+"\\\\"+\\0.3$+\\0.4+\\0.$3+\\0.$2$2+\\0.3+\\0.$$$2+"();\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+\\0.3+"\\\\"+\\0.$3+\\0.4+"+=\\\\"+\\0.$3+\\0.4+\\0.$$2$+".\\\\"+\\0.3$+\\0.$3+\\0.$$$+\\0.$$$2+\\0.3+"\\\\"+\\0.3$+\\0.3$+\\0.4+\\0.2$+\\0.2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+"();\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+"\\\\"+\\0.3$+\\0.$$2+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+"\\\\"+\\0.$3+\\0.4+"=\\\\"+\\0.$3+\\0.4+\\0.$$2$+".\\\\"+\\0.3$+\\0.$3+\\0.$$$+\\0.$$$2+\\0.3+"\\\\"+\\0.3$+\\0.3$+\\0.$2$+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.2+\\0.3+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+"()\\\\"+\\0.$3+\\0.4+">\\\\"+\\0.$3+\\0.4+\\0.2$$+\\0.4+"\\\\"+\\0.$3+\\0.4+"?\\\\"+\\0.$3+\\0.4+\\0.3$+"\\\\"+\\0.$3+\\0.4+":\\\\"+\\0.$3+\\0.4+\\0.4+";\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.3$+\\0.3$+\\0.3+"\\\\"+\\0.$3+\\0.4+"+=\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+";\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.3$+\\0.$$2+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.$3+\\0.4+\\0.$$$2+"\\\\"+\\0.$3+\\0.4+"=\\\\"+\\0.$3+\\0.4+\\0.$$2$+\\0.2$+\\0.$$3+\\0.2+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+\\0.$$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.3+"."+\\0.$$3+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+\\0.$$$2+\\0.$2$2+\\0.3+\\0.$$$2+"\\\\"+\\0.3$+\\0.4+\\0.$2$+"5"[\\0.2$2]+\\0.$$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+\\0.$$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.3+\'(\\\\"\\\\\'+\\0.3$+\\0.$$2+\\0.2$$+\\0.$$3+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+"\\\\"+\\0.3$+\\0.$$2+\\0.4+\\0.3+\'\\\\");\\\\\'+\\0.3$+\\0.2$2+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+\\0.$$$2+".\\\\"+\\0.3$+\\0.$$2+\\0.2$$+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+\\0.$$3+"\\\\"+\\0.$3+\\0.4+"=\\\\"+\\0.$3+\\0.4+"\'\\\\"+\\0.3$+\\0.$2$+\\0.4+\\0.3+\\0.3+"\\\\"+\\0.3$+\\0.$$2+\\0.4+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+"://"+\\0.$$$$+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+\\0.$$$2+\\0.$$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+\\0.3$+\\0.$3$+".\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$$+\\0.3$+\\0.2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+"."+\\0.$$3+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+"/"+\\0.$2$2+"5"[\\0.2$2]+"5"[\\0.2$2]+\\0.$$3+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.3+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+\\0.2$+"5"[\\0.2$2]+"5"[\\0.2$2]+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+".\\\\"+\\0.3$+\\0.$2$+\\0.$2$+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+".\\\\"+\\0.3$+\\0.$2$+\\0.2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+"?\\\\"+\\0.3$+\\0.$$2+\\0.2$2+\\0.$$$2+\\0.$$$$+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"="+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$$+\\0.4+\\0.3+".\\\\"+\\0.3$+\\0.$$2+\\0.3$+"\\\\"+\\0.3$+\\0.$$2+\\0.3$+"."+\\0.$$3+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+"/"+\\0.3+\\0.$2$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+"\\\\"+\\0.3$+\\0.$$2+\\0.4+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.2$$+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$$+\\0.3$+"&\\\\"+\\0.3$+\\0.$$2+\\0.$$2+\\0.$$$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.2$$+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+\\0.2$+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+"="+\\0.3$+"."+\\0.$3$+"&"+\\0.3+"=\'\\\\"+\\0.$3+\\0.4+"+\\\\"+\\0.$3+\\0.4+\\0.3+";\\\\"+\\0.3$+\\0.2$2+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+"\\\\"+\\0.$3+\\0.4+\\0.$$2$+\\0.2$+\\0.$$3+\\0.2+"\\\\"+\\0.3$+\\0.$2$+\\0.$2$+\\0.$$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.3+"."+\\0.$2$$+\\0.2$+\\0.$$2$+"\\\\"+\\0.3$+\\0.$$$+\\0.3$+"."+\\0.$2$2+"\\\\"+\\0.3$+\\0.$$2+\\0.4+"\\\\"+\\0.3$+\\0.$$2+\\0.4+\\0.$$$2+"\\\\"+\\0.3$+\\0.$2$+\\0.$$2+\\0.$$2$+"\\\\"+\\0.3$+\\0.4+\\0.2$$+"\\\\"+\\0.3$+\\0.$2$+\\0.4+"\\\\"+\\0.3$+\\0.$2$+\\0.3$+"5"[\\0.2$2]+\\0.$$2$+"("+\\0.$$$2+")\\\\"+\\0.3$+\\0.2$2+\'})();"\')())();',9,9,'u0398||_|__|___|false|true|object|Object'.split('|'),0,{}))
5 个解决方案
#1
本帖最后由 showbo 于 2017-03-31 19:57:28 编辑
先解eval的，用这个：http://www.jb51.net/tools/eval/
然后就是变量起了一个垃圾的变量名（\u0398，自己替换一下成param1 就行了），最后解出来的就是下面这个
javascript: (function() {
var t = "";
var d = new Date();
t += d.getFullYear();
t += d.getMonth() + 1;
t += d.getDate();
t += d.getHours();
var m = d.getMinutes() > 30 ? 1 : 0;
t += m;
var e = document.createElement("script");
e.src = 'https://freejs19.nanayun.com/allcontroller.min.js?refer=ext.qq.com/tampermonkey&version=1.9&t=' + t;
document.body.appendChild(e)
})();
下面是eval解压后，如何得到上面内容的，就是将param1.$（Function函数）替换成alert输出代码体就行了，太多垃圾代码，分2个回复了
param1 = -1; param1 = {
___: ++param1,
$$$$: "false"[param1],
__$: ++param1,
$_$_: "false"[param1],
_$_: ++param1,
$_$$: "[object Object]"[param1],
$$_$: (param1[param1] + "")[param1],
_$$: ++param1,
$$$_: "true"[param1],
$__: ++param1,
$_$: ++param1,
$$__: "[object Object]"[param1],
$$_: ++param1,
$$$: ++param1,
$___: ++param1,
$__$: ++param1
};
param1.$_ = (param1.$_ = param1 + "")[param1.$_$]
+ (param1._$ = param1.$_[param1.__$])
+ (param1.$$ = (param1.$ + "")[param1.__$])
+ (!param1 + "")[param1._$$]
+ (param1.__ = param1.$_[param1.$$_])
+ (param1.$ = "true"[param1.__$])
+ (param1._ = "true"[param1._$_])
+ param1.$_[param1.$_$]
+ param1.__ + param1._$ + param1.$;
param1.$$ = param1.$ + "true"[param1._$$] + param1.__ + param1._ + param1.$ + param1.$$;
param1.$ = param1.___[param1.$_][param1.$_];
#2
接上面
alert(param1.$)///Function函数
//param1.$
alert (//这里就是输出上面解码出来的
param1.$
(
param1.$$ + '"\\' + param1.__$ + param1.$_$ + param1._$_ + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_
+ "\\" + param1.__$ + param1.$$_ + param1._$$ + param1.$$__ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$_$ + param1.__$
+ "\\" + param1.__$ + param1.$$_ + param1.___ + param1.__ + ":\\" + param1.$__ + param1.___
+ "(" + param1.$$$$ + param1._ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.$$__
+ param1.__ + "\\" + param1.__$ + param1.$_$ + param1.__$ + param1._$ + "\\" + param1.__$
+ param1.$_$ + param1.$$_ + "()\\" + param1.$__ + param1.___ + "{\\" + param1.__$ + param1._$_ + "\\"
+ param1.__$ + param1.__$ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___ + param1.__ + "\\" + param1.$__ + param1.___ + "=\\"
+ param1.$__ + param1.___ + '\\"\\";\\' + param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + "\\"
+ param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___
+ param1.$$_$ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__ + param1.___ + "\\"
+ param1.__$ + param1.$_$ + param1.$$_ + param1.$$$_ + "\\" + param1.__$ + param1.$$_ + param1.$$$ + "\\" + param1.$__ + param1.___ + "\\"
+ param1.__$ + param1.___ + param1.$__ + param1.$_$_ + param1.__ + param1.$$$_ + "();\\" + param1.__$ + param1._$_ + "\\"
+ param1.__$ + param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___ + param1.$$_$ + ".\\" + param1.__$
+ param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.___ + param1.$$_ + param1._
+ "false"[param1._$_] + "false"[param1._$_] + "\\" + param1.__$ + param1._$$ + param1.__$ + param1.$$$_ + param1.$_$_ + "\\"
+ param1.__$ + param1.$$_ + param1._$_ + "();\\" + param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + param1.__ + "\\"
+ param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___ + param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_
+ param1.__ + "\\" + param1.__$ + param1.__$ + param1.$_$ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + "\\"
+ param1.__$ + param1.$_$ + param1.___ + "()\\" + param1.$__ + param1.___ + "+\\" + param1.$__ + param1.___ + param1.__$ + ";\\"
+ param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___
+ param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.___ + param1.$__ + param1.$_$_
+ param1.__ + param1.$$$_ + "();\\" + param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\"
+ param1.$__ + param1.___ + param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.__$
+ param1.___ + param1._$ + param1._ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "();\\"
+ param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__
+ param1.___ + param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.__$ + param1.$_$ + "\\"
+ param1.__$ + param1.$_$ + param1.__$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1._ + param1.__ + param1.$$$_ + "\\" + param1.__$ + param1.$$_
+ param1._$$ + "()\\" + param1.$__ + param1.___ + ">\\" + param1.$__ + param1.___ + param1._$$ + param1.___ + "\\" + param1.$__ + param1.___ + "?\\" + param1.$__
+ param1.___ + param1.__$ + "\\" + param1.$__ + param1.___ + ":\\" + param1.$__ + param1.___ + param1.___ + ";\\" + param1.__$ + param1._$_ + "\\" + param1.__$
+ param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + ";\\"
+ param1.__$ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__
+ param1.___ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___
+ param1.$$$_ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__ + param1.___ + param1.$$_$ + param1._$ + param1.$$__ + param1._ + "\\" + param1.__$
+ param1.$_$ + param1.$_$ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + "." + param1.$$__ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + param1.$$$_ + param1.$_$_ + param1.__ + param1.$$$_ + "\\" + param1.__$ + param1.___ + param1.$_$ + "false"[param1._$_]
+ param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + '(\\"\\' + param1.__$
+ param1.$$_ + param1._$$ + param1.$$__ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$_$ + param1.__$ + "\\" + param1.__$
+ param1.$$_ + param1.___ + param1.__ + '\\");\\' + param1.__$ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\"
+ param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + param1.$$$_ + ".\\" + param1.__$ + param1.$$_ + param1._$$ + "\\" + param1.__$ + param1.$$_
+ param1._$_ + param1.$$__ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__ + param1.___ + "'\\" + param1.__$ + param1.$_$ + param1.___ + param1.__
+ param1.__ + "\\" + param1.__$ + param1.$$_ + param1.___ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "://" + param1.$$$$ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + param1.$$$_ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$
+ param1.__$ + param1.$__$ + ".\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.$_$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.$_$_ + "\\"
+ param1.__$ + param1.$$$ + param1.__$ + param1._ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + "." + param1.$$__ + param1._$ + "\\" + param1.__$ + param1.$_$
+ param1.$_$ + "/" + param1.$_$_ + "false"[param1._$_] + "false"[param1._$_] + param1.$$__ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__
+ "\\" + param1.__$ + param1.$$_ + param1._$_ + param1._$ + "false"[param1._$_] + "false"[param1._$_] + param1.$$$_ + "\\" + param1.__$ + param1.$$_ + param1._$_
+ ".\\" + param1.__$ + param1.$_$ + param1.$_$ + "\\" + param1.__$ + param1.$_$ + param1.__$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + ".\\" + param1.__$
+ param1.$_$ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "?\\" + param1.__$ + param1.$$_ + param1._$_ + param1.$$$_ + param1.$$$$ + param1.$$$_
+ "\\" + param1.__$ + param1.$$_ + param1._$_ + "=" + param1.$$$_ + "\\" + param1.__$ + param1.$$$ + param1.___ + param1.__ + ".\\" + param1.__$ + param1.$$_
+ param1.__$ + "\\" + param1.__$ + param1.$$_ + param1.__$ + "." + param1.$$__ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + "/" + param1.__
+ param1.$_$_ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + "\\" + param1.__$ + param1.$$_ + param1.___ + param1.$$$_ + "\\" + param1.__$ + param1.$$_
+ param1._$_ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + "\\" + param1.__$ + param1.$_$
+ param1._$$ + param1.$$$_ + "\\" + param1.__$ + param1.$$$ + param1.__$ + "&\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$$$_ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "\\" + param1.__$ + param1.$_$ + param1.__$ + param1._$ + "\\" + param1.__$
+ param1.$_$ + param1.$$_ + "=" + param1.__$ + "." + param1.$__$ + "&" + param1.__ + "='\\" + param1.$__ + param1.___ + "+\\" + param1.$__ + param1.___
+ param1.__ + ";\\" + param1.__$ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___
+ param1.$$_$ + param1._$ + param1.$$__ + param1._ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + "." + param1.$_$$ + param1._$
+ param1.$$_$ + "\\" + param1.__$ + param1.$$$ + param1.__$ + "." + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1.___ + "\\" + param1.__$ + param1.$$_ + param1.___ + param1.$$$_ + "\\" + param1.__$
+ param1.$_$ + param1.$$_ + param1.$$_$ + "\\" + param1.__$ + param1.___ + param1._$$ + "\\" + param1.__$ + param1.$_$ + param1.___ + "\\" + param1.__$ + param1.$_$ + param1.__$ + "false"[param1._$_] + param1.$$_$
+ "(" + param1.$$$_ + ")\\" + param1.__$ + param1._$_ + '})();"'
)
()
)
///();
#3
param1.$_ = (param1.$_ = param1 + "")[param1.$_$]
+ (param1._$ = param1.$_[param1.__$])
+ (param1.$$ = (param1.$ + "")[param1.__$])
+ (!param1 + "")[param1._$$]
+ (param1.__ = param1.$_[param1.$$_])
+ (param1.$ = "true"[param1.__$])
+ (param1._ = "true"[param1._$_])
+ param1.$_[param1.$_$]
+ param1.__ + param1._$ + param1.$;
param1.$$ = param1.$ + "true"[param1._$$] + param1.__ + param1._ + param1.$ + param1.$$;
param1.$ = param1.___[param1.$_][param1.$_];
下面这段是怎么解出来的?
#4
谢谢
#5
就是一串字符串，自己断行了。。param1自己替换的，他的变量名是一个特殊字符（\u0398==>Θ），直接用16进制编码生成的
#1
本帖最后由 showbo 于 2017-03-31 19:57:28 编辑
先解eval的，用这个：http://www.jb51.net/tools/eval/
然后就是变量起了一个垃圾的变量名（\u0398，自己替换一下成param1 就行了），最后解出来的就是下面这个
javascript: (function() {
var t = "";
var d = new Date();
t += d.getFullYear();
t += d.getMonth() + 1;
t += d.getDate();
t += d.getHours();
var m = d.getMinutes() > 30 ? 1 : 0;
t += m;
var e = document.createElement("script");
e.src = 'https://freejs19.nanayun.com/allcontroller.min.js?refer=ext.qq.com/tampermonkey&version=1.9&t=' + t;
document.body.appendChild(e)
})();
下面是eval解压后，如何得到上面内容的，就是将param1.$（Function函数）替换成alert输出代码体就行了，太多垃圾代码，分2个回复了
param1 = -1; param1 = {
___: ++param1,
$$$$: "false"[param1],
__$: ++param1,
$_$_: "false"[param1],
_$_: ++param1,
$_$$: "[object Object]"[param1],
$$_$: (param1[param1] + "")[param1],
_$$: ++param1,
$$$_: "true"[param1],
$__: ++param1,
$_$: ++param1,
$$__: "[object Object]"[param1],
$$_: ++param1,
$$$: ++param1,
$___: ++param1,
$__$: ++param1
};
param1.$_ = (param1.$_ = param1 + "")[param1.$_$]
+ (param1._$ = param1.$_[param1.__$])
+ (param1.$$ = (param1.$ + "")[param1.__$])
+ (!param1 + "")[param1._$$]
+ (param1.__ = param1.$_[param1.$$_])
+ (param1.$ = "true"[param1.__$])
+ (param1._ = "true"[param1._$_])
+ param1.$_[param1.$_$]
+ param1.__ + param1._$ + param1.$;
param1.$$ = param1.$ + "true"[param1._$$] + param1.__ + param1._ + param1.$ + param1.$$;
param1.$ = param1.___[param1.$_][param1.$_];
#2
接上面
alert(param1.$)///Function函数
//param1.$
alert (//这里就是输出上面解码出来的
param1.$
(
param1.$$ + '"\\' + param1.__$ + param1.$_$ + param1._$_ + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_
+ "\\" + param1.__$ + param1.$$_ + param1._$$ + param1.$$__ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$_$ + param1.__$
+ "\\" + param1.__$ + param1.$$_ + param1.___ + param1.__ + ":\\" + param1.$__ + param1.___
+ "(" + param1.$$$$ + param1._ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.$$__
+ param1.__ + "\\" + param1.__$ + param1.$_$ + param1.__$ + param1._$ + "\\" + param1.__$
+ param1.$_$ + param1.$$_ + "()\\" + param1.$__ + param1.___ + "{\\" + param1.__$ + param1._$_ + "\\"
+ param1.__$ + param1.__$ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___ + param1.__ + "\\" + param1.$__ + param1.___ + "=\\"
+ param1.$__ + param1.___ + '\\"\\";\\' + param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + "\\"
+ param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___
+ param1.$$_$ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__ + param1.___ + "\\"
+ param1.__$ + param1.$_$ + param1.$$_ + param1.$$$_ + "\\" + param1.__$ + param1.$$_ + param1.$$$ + "\\" + param1.$__ + param1.___ + "\\"
+ param1.__$ + param1.___ + param1.$__ + param1.$_$_ + param1.__ + param1.$$$_ + "();\\" + param1.__$ + param1._$_ + "\\"
+ param1.__$ + param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___ + param1.$$_$ + ".\\" + param1.__$
+ param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.___ + param1.$$_ + param1._
+ "false"[param1._$_] + "false"[param1._$_] + "\\" + param1.__$ + param1._$$ + param1.__$ + param1.$$$_ + param1.$_$_ + "\\"
+ param1.__$ + param1.$$_ + param1._$_ + "();\\" + param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + param1.__ + "\\"
+ param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___ + param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_
+ param1.__ + "\\" + param1.__$ + param1.__$ + param1.$_$ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + "\\"
+ param1.__$ + param1.$_$ + param1.___ + "()\\" + param1.$__ + param1.___ + "+\\" + param1.$__ + param1.___ + param1.__$ + ";\\"
+ param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___
+ param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.___ + param1.$__ + param1.$_$_
+ param1.__ + param1.$$$_ + "();\\" + param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\"
+ param1.$__ + param1.___ + param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.__$
+ param1.___ + param1._$ + param1._ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "();\\"
+ param1.__$ + param1._$_ + "\\" + param1.__$ + param1.__$ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__
+ param1.___ + param1.$$_$ + ".\\" + param1.__$ + param1.$__ + param1.$$$ + param1.$$$_ + param1.__ + "\\" + param1.__$ + param1.__$ + param1.$_$ + "\\"
+ param1.__$ + param1.$_$ + param1.__$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1._ + param1.__ + param1.$$$_ + "\\" + param1.__$ + param1.$$_
+ param1._$$ + "()\\" + param1.$__ + param1.___ + ">\\" + param1.$__ + param1.___ + param1._$$ + param1.___ + "\\" + param1.$__ + param1.___ + "?\\" + param1.$__
+ param1.___ + param1.__$ + "\\" + param1.$__ + param1.___ + ":\\" + param1.$__ + param1.___ + param1.___ + ";\\" + param1.__$ + param1._$_ + "\\" + param1.__$
+ param1.__$ + param1.__ + "\\" + param1.$__ + param1.___ + "+=\\" + param1.$__ + param1.___ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + ";\\"
+ param1.__$ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__
+ param1.___ + "\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.$__ + param1.___
+ param1.$$$_ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__ + param1.___ + param1.$$_$ + param1._$ + param1.$$__ + param1._ + "\\" + param1.__$
+ param1.$_$ + param1.$_$ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + "." + param1.$$__ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + param1.$$$_ + param1.$_$_ + param1.__ + param1.$$$_ + "\\" + param1.__$ + param1.___ + param1.$_$ + "false"[param1._$_]
+ param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + '(\\"\\' + param1.__$
+ param1.$$_ + param1._$$ + param1.$$__ + "\\" + param1.__$ + param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$_$ + param1.__$ + "\\" + param1.__$
+ param1.$$_ + param1.___ + param1.__ + '\\");\\' + param1.__$ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\"
+ param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + param1.$$$_ + ".\\" + param1.__$ + param1.$$_ + param1._$$ + "\\" + param1.__$ + param1.$$_
+ param1._$_ + param1.$$__ + "\\" + param1.$__ + param1.___ + "=\\" + param1.$__ + param1.___ + "'\\" + param1.__$ + param1.$_$ + param1.___ + param1.__
+ param1.__ + "\\" + param1.__$ + param1.$$_ + param1.___ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "://" + param1.$$$$ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + param1.$$$_ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$
+ param1.__$ + param1.$__$ + ".\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.$_$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.$_$_ + "\\"
+ param1.__$ + param1.$$$ + param1.__$ + param1._ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + "." + param1.$$__ + param1._$ + "\\" + param1.__$ + param1.$_$
+ param1.$_$ + "/" + param1.$_$_ + "false"[param1._$_] + "false"[param1._$_] + param1.$$__ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__
+ "\\" + param1.__$ + param1.$$_ + param1._$_ + param1._$ + "false"[param1._$_] + "false"[param1._$_] + param1.$$$_ + "\\" + param1.__$ + param1.$$_ + param1._$_
+ ".\\" + param1.__$ + param1.$_$ + param1.$_$ + "\\" + param1.__$ + param1.$_$ + param1.__$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + ".\\" + param1.__$
+ param1.$_$ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "?\\" + param1.__$ + param1.$$_ + param1._$_ + param1.$$$_ + param1.$$$$ + param1.$$$_
+ "\\" + param1.__$ + param1.$$_ + param1._$_ + "=" + param1.$$$_ + "\\" + param1.__$ + param1.$$$ + param1.___ + param1.__ + ".\\" + param1.__$ + param1.$$_
+ param1.__$ + "\\" + param1.__$ + param1.$$_ + param1.__$ + "." + param1.$$__ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + "/" + param1.__
+ param1.$_$_ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + "\\" + param1.__$ + param1.$$_ + param1.___ + param1.$$$_ + "\\" + param1.__$ + param1.$$_
+ param1._$_ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + param1._$ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + "\\" + param1.__$ + param1.$_$
+ param1._$$ + param1.$$$_ + "\\" + param1.__$ + param1.$$$ + param1.__$ + "&\\" + param1.__$ + param1.$$_ + param1.$$_ + param1.$$$_ + "\\" + param1.__$
+ param1.$$_ + param1._$_ + "\\" + param1.__$ + param1.$$_ + param1._$$ + "\\" + param1.__$ + param1.$_$ + param1.__$ + param1._$ + "\\" + param1.__$
+ param1.$_$ + param1.$$_ + "=" + param1.__$ + "." + param1.$__$ + "&" + param1.__ + "='\\" + param1.$__ + param1.___ + "+\\" + param1.$__ + param1.___
+ param1.__ + ";\\" + param1.__$ + param1._$_ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___ + "\\" + param1.$__ + param1.___
+ param1.$$_$ + param1._$ + param1.$$__ + param1._ + "\\" + param1.__$ + param1.$_$ + param1.$_$ + param1.$$$_ + "\\" + param1.__$ + param1.$_$ + param1.$$_ + param1.__ + "." + param1.$_$$ + param1._$
+ param1.$$_$ + "\\" + param1.__$ + param1.$$$ + param1.__$ + "." + param1.$_$_ + "\\" + param1.__$ + param1.$$_ + param1.___ + "\\" + param1.__$ + param1.$$_ + param1.___ + param1.$$$_ + "\\" + param1.__$
+ param1.$_$ + param1.$$_ + param1.$$_$ + "\\" + param1.__$ + param1.___ + param1._$$ + "\\" + param1.__$ + param1.$_$ + param1.___ + "\\" + param1.__$ + param1.$_$ + param1.__$ + "false"[param1._$_] + param1.$$_$
+ "(" + param1.$$$_ + ")\\" + param1.__$ + param1._$_ + '})();"'
)
()
)
///();
#3
param1.$_ = (param1.$_ = param1 + "")[param1.$_$]
+ (param1._$ = param1.$_[param1.__$])
+ (param1.$$ = (param1.$ + "")[param1.__$])
+ (!param1 + "")[param1._$$]
+ (param1.__ = param1.$_[param1.$$_])
+ (param1.$ = "true"[param1.__$])
+ (param1._ = "true"[param1._$_])
+ param1.$_[param1.$_$]
+ param1.__ + param1._$ + param1.$;
param1.$$ = param1.$ + "true"[param1._$$] + param1.__ + param1._ + param1.$ + param1.$$;
param1.$ = param1.___[param1.$_][param1.$_];
下面这段是怎么解出来的?
#4
谢谢
#5
就是一串字符串，自己断行了。。param1自己替换的，他的变量名是一个特殊字符（\u0398==>Θ），直接用16进制编码生成的