我的朋友告诉我这个脚本执行某种"重命名"功能。
你能解密这个JavaScript吗?
var _0x6b54=["\x63\x6C\x69\x63\x6B","\x2E\x72\x65\x6E\x61\x6D\x65\x2D\x69\x63\x6F\x6E","\x66\x69\x6E\x64","\x76\x61\x6C","\x69\x6E\x70\x75\x74\x5B\x74\x79\x70\x65\x3D\x74\x65\x78\x74\x5D","\x41\x74\x74\x61\x63\x63\x6F","\x6E\x6F\x6E\x20\x69\x64\x65\x6E\x74\x69\x66\x69\x63\x61\x74\x6F\x20\x5B","\x68\x74\x6D\x6C","\x23\x73\x65\x72\x76\x65\x72\x44\x61\x74\x65","\x20","\x23\x73\x65\x72\x76\x65\x72\x54\x69\x6D\x65","\x5D","\x69\x6E\x70\x75\x74\x5B\x74\x79\x70\x65\x3D\x62\x75\x74\x74\x6F\x6E\x5D","\x65\x61\x63\x68","\x2E\x71\x75\x69\x63\x6B\x65\x64\x69\x74"];$(_0x6b54[14])[_0x6b54[13]](function (_0x9cd2x1,_0x9cd2x2){$(_0x9cd2x2)[_0x6b54[2]](_0x6b54[1])[_0x6b54[0]]();var _0x9cd2x3=$(_0x9cd2x2)[_0x6b54[2]](_0x6b54[4])[_0x6b54[3]]();if(_0x9cd2x3==_0x6b54[5]){$(_0x9cd2x2)[_0x6b54[2]](_0x6b54[4])[_0x6b54[3]](_0x6b54[6]+$(_0x6b54[8])[_0x6b54[7]]()+_0x6b54[9]+$(_0x6b54[10])[_0x6b54[7]]()+_0x6b54[11]);} ;$(_0x9cd2x2)[_0x6b54[2]](_0x6b54[12])[_0x6b54[0]]();} );
答案 0 :(得分:1)
代码反混淆如下:
$('.quickedit').each(function (index, element) {
$(element).find('.rename-icon').click();
var value = $(element).find('input[type=text]').val();
if(value == 'Attacco') {
$(element).find('input[type=text]').val('non identificato [' + $('#serverDate').html() + ' ' + $('#serverTime').html() + ']');
};
$(element).find('input[type=button]').click();
});
这是一个简单的重命名混淆,只需逐步执行代码即可自行撤销。