Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Coding

0 views
Skip to first unread message

ame...@iwc.net

unread,
May 16, 2008, 9:23:36 AM5/16/08
to

Hi,

One of our programmers left, and we think he might have encoded some
Javascript code. We cannot seem to decode it. We've tried many
utilities. The code looks like this:

t E l e~i t B y I d ;~ ~H~J~L .~" d e b a r ?
t r u e : f~^~ ; i z N = n a v i g a t~+ . u~ r A~

Any ideas? I cannot tell what this is, and we've tried over 20
decoders and no luck.....

Thanks!

jdd

unread,
May 16, 2008, 10:06:54 AM5/16/08
to

document.getElementById something ternary expression returning true or
false, window.navigate something or other.

there's a start.

Is this just a text-encoding issue perhaps?

ame...@iwc.net

unread,
May 16, 2008, 10:35:03 AM5/16/08
to


Well, the code has some options we want to change. So, we need to see
the source in order to do that. We've tried several decoders and un-
escape stuff with no luck.......so, any help is really appreciated.

Thank you.

Stevo

unread,
May 16, 2008, 11:00:03 AM5/16/08
to
a...@unsu.com wrote:
> Well, the code has some options we want to change. So, we need to see
> the source in order to do that. We've tried several decoders and un-
> escape stuff with no luck.......so, any help is really appreciated.
> Thank you.

Open the file in Ultraedit. Choose File->Conversions->Unicode to Ascii
and you'll be all set.

ame...@iwc.net

unread,
May 16, 2008, 11:40:31 AM5/16/08
to


Ok, according to a co-worker that file has been obfuscated. I'm not
sure if this can be un-done........

Álvaro G. Vicario

unread,
May 16, 2008, 4:10:14 PM5/16/08
to
*** a...@unsu.com escribió/wrote (Fri, 16 May 2008 06:23:36 -0700 (PDT)):
> One of our programmers left, and we think he might have encoded some
> Javascript code. We cannot seem to decode it. We've tried many
> utilities. The code looks like this:
>
> t E l e~i t B y I d ;~ ~H~J~L .~" d e b a r ?
> t r u e : f~^~ ; i z N = n a v i g a t~+ . u~ r A~

Load the page in Firefox and open the DOM Inspector. I'd say you'll see a
new <script> node with the plain code. Here's some code that looks similar
to your sample and can be read that way:

http://foro.elhacker.net/ingenieria_inversa/desencriptar_javascript-t117234.0.html;msg543217#msg543217

I'm curious, tell us if it works.


--
-- http://alvaro.es - Álvaro G. Vicario - Burgos, Spain
-- Mi sitio sobre programación web: http://bits.demogracia.com
-- Mi web de humor en cubitos: http://www.demogracia.com
--

0 new messages