Hola me gustaria descifrar lo siguiente:
;var serverip=$(_0x1ce8[1])_0x1ce8[0];function checkServer(){var _0xf6b7x3;var _0xf6b7x4=$(_0x1ce8[1])_0x1ce8[0];switch(_0xf6b7x4){case _0x1ce8[3]:_0xf6b7x3= _0x1ce8[2];break;case _0x1ce8[5]:_0xf6b7x3= _0x1ce8[4];break;case _0x1ce8[7]:_0xf6b7x3= _0x1ce8[6];break;case _0x1ce8[9]:_0xf6b7x3= _0x1ce8[8];break;default:_0xf6b7x3= _0x1ce8[10]};$(_0x1ce8[12])_0x1ce8[11]}setInterval(checkServer,2000);function pingServer(){ping(serverip_0x1ce8[27])_0x1ce8[26]_0x1ce8[15]}setInterval(pingServer,2000);function serverPlayers(){var _0xf6b7x9;var serverip=$(_0x1ce8[1])_0x1ce8[0];switch(serverip){case _0x1ce8[3]:_0xf6b7x9= _0x1ce8[28];break;case _0x1ce8[5]:_0xf6b7x9= _0x1ce8[29];break;case _0x1ce8[7]:_0xf6b7x9= _0x1ce8[30];break;case _0x1ce8[9]:_0xf6b7x9= _0x1ce8[31];break;default:_0xf6b7x9= _0x1ce8[10]};$_0x1ce8[37]}setInterval(serverPlayers,1000);function serverPlayersButtons(){$_0x1ce8[37];$_0x1ce8[37];$_0x1ce8[37];$_0x1ce8[37]}setInterval(serverPlayersButtons,6000);function hideSkinUrl(){$(_0x1ce8[49])_0x1ce8[48];$(_0x1ce8[52])_0x1ce8[51]}function showSkinUrl(){$(_0x1ce8[49])_0x1ce8[48];$(_0x1ce8[55])_0x1ce8[51]}function hideTeam(){$(_0x1ce8[56])_0x1ce8[48];$(_0x1ce8[58])_0x1ce8[51]}function showTeam(){$(_0x1ce8[56])_0x1ce8[48];$(_0x1ce8[60])_0x1ce8[51]}deletead();function deletead(){$(_0x1ce8[62])_0x1ce8[61]}$(_0x1ce8[64])_0x1ce8[63];$(_0x1ce8[65])_0x1ce8[61];$(_0x1ce8[66])_0x1ce8[61];$(_0x1ce8[67])_0x1ce8[61];$(_0x1ce8[68])_0x1ce8[61];$(_0x1ce8[70])_0x1ce8[69];$(_0x1ce8[70])_0x1ce8[61];$(_0x1ce8[71])_0x1ce8[61];$(_0x1ce8[72])_0x1ce8[61];$(_0x1ce8[73])_0x1ce8[61];$(_0x1ce8[74])_0x1ce8[61];$(_0x1ce8[75])_0x1ce8[61];$(_0x1ce8[77])_0x1ce8[51];$(_0x1ce8[80])_0x1ce8[79];$(_0x1ce8[81])_0x1ce8[79];$(_0x1ce8[1])_0x1ce8[83];$(_0x1ce8[85])_0x1ce8[83];$(_0x1ce8[1])_0x1ce8[51];$(_0x1ce8[87])_0x1ce8[51];$(_0x1ce8[88])_0x1ce8[61];$(_0x1ce8[89])_0x1ce8[83];$(_0x1ce8[49])_0x1ce8[83];$(_0x1ce8[92])_0x1ce8[91];$(_0x1ce8[94])_0x1ce8[83];$(_0x1ce8[54])_0x1ce8[91];$(_0x1ce8[59])_0x1ce8[91];$(_0x1ce8[97])_0x1ce8[96];$(_0x1ce8[97])_0x1ce8[96];$(_0x1ce8[93])_0x1ce8[96];$(_0x1ce8[93])_0x1ce8[96];$(_0x1ce8[93])_0x1ce8[96];$(_0x1ce8[103])_0x1ce8[96];$(_0x1ce8[105])_0x1ce8[96];$(_0x1ce8[107])_0x1ce8[96];$(_0x1ce8[105])_0x1ce8[96];$(_0x1ce8[110])_0x1ce8[96];$(_0x1ce8[110])_0x1ce8[96];$(_0x1ce8[110])_0x1ce8[96];$(_0x1ce8[107])_0x1ce8[96];$(_0x1ce8[107])_0x1ce8[96];$(_0x1ce8[107])_0x1ce8[96];$(_0x1ce8[80])_0x1ce8[20];$(_0x1ce8[56])_0x1ce8[48];$(_0x1ce8[94])_0x1ce8[83];$(_0x1ce8[121])_0x1ce8[48];window_0x1ce8[127];$(_0x1ce8[49])_0x1ce8[129];$(_0x1ce8[130])_0x1ce8[0];connect(_0x1ce8[3]);localStorage_0x1ce8[132];document[_0x1ce8[133]]= _0x1ce8[134];$(document)_0x1ce8[135]
ME HAN DICHO QUE UN TAL JXBEUTIFIER ES LO MAS LEJOS QUE SE PUEDE LLEGAR , PERO NO ME descifra BIEN QUE HAGO !!
Cita de: Eduarjr en 6 Julio 2016, 23:50 PMNO ME descifra BIEN
¿Qué resultado esperas conseguir?. No puedes recuperar los nombres reales de las variables sencillamente por que han dejado de existir tras la ofuscación del código.
Lee mi comentario en este post:
- javascript deobfuscation (http://foro.elhacker.net/buscador-t451925.0.html)
Este es el código indentado:
;
var serverip = $(_0x1ce8[1]) _0x1ce8[0];
function checkServer() {
var _0xf6b7x3;
var _0xf6b7x4 = $(_0x1ce8[1]) _0x1ce8[0];
switch (_0xf6b7x4) {
case _0x1ce8[3]:
_0xf6b7x3 = _0x1ce8[2];
break;
case _0x1ce8[5]:
_0xf6b7x3 = _0x1ce8[4];
break;
case _0x1ce8[7]:
_0xf6b7x3 = _0x1ce8[6];
break;
case _0x1ce8[9]:
_0xf6b7x3 = _0x1ce8[8];
break;
default:
_0xf6b7x3 = _0x1ce8[10]
};
$(_0x1ce8[12]) _0x1ce8[11]
}
setInterval(checkServer, 2000);
function pingServer() {
ping(serverip_0x1ce8[27]) _0x1ce8[26] _0x1ce8[15]
}
setInterval(pingServer, 2000);
function serverPlayers() {
var _0xf6b7x9;
var serverip = $(_0x1ce8[1]) _0x1ce8[0];
switch (serverip) {
case _0x1ce8[3]:
_0xf6b7x9 = _0x1ce8[28];
break;
case _0x1ce8[5]:
_0xf6b7x9 = _0x1ce8[29];
break;
case _0x1ce8[7]:
_0xf6b7x9 = _0x1ce8[30];
break;
case _0x1ce8[9]:
_0xf6b7x9 = _0x1ce8[31];
break;
default:
_0xf6b7x9 = _0x1ce8[10]
};
$_0x1ce8[37]
}
setInterval(serverPlayers, 1000);
function serverPlayersButtons() {
$_0x1ce8[37];
$_0x1ce8[37];
$_0x1ce8[37];
$_0x1ce8[37]
}
setInterval(serverPlayersButtons, 6000);
function hideSkinUrl() {
$(_0x1ce8[49]) _0x1ce8[48];
$(_0x1ce8[52]) _0x1ce8[51]
}
function showSkinUrl() {
$(_0x1ce8[49]) _0x1ce8[48];
$(_0x1ce8[55]) _0x1ce8[51]
}
function hideTeam() {
$(_0x1ce8[56]) _0x1ce8[48];
$(_0x1ce8[58]) _0x1ce8[51]
}
function showTeam() {
$(_0x1ce8[56]) _0x1ce8[48];
$(_0x1ce8[60]) _0x1ce8[51]
}
deletead();
function deletead() {
$(_0x1ce8[62]) _0x1ce8[61]
}
$(_0x1ce8[64]) _0x1ce8[63];
$(_0x1ce8[65]) _0x1ce8[61];
$(_0x1ce8[66]) _0x1ce8[61];
$(_0x1ce8[67]) _0x1ce8[61];
$(_0x1ce8[68]) _0x1ce8[61];
$(_0x1ce8[70]) _0x1ce8[69];
$(_0x1ce8[70]) _0x1ce8[61];
$(_0x1ce8[71]) _0x1ce8[61];
$(_0x1ce8[72]) _0x1ce8[61];
$(_0x1ce8[73]) _0x1ce8[61];
$(_0x1ce8[74]) _0x1ce8[61];
$(_0x1ce8[75]) _0x1ce8[61];
$(_0x1ce8[77]) _0x1ce8[51];
$(_0x1ce8[80]) _0x1ce8[79];
$(_0x1ce8[81]) _0x1ce8[79];
$(_0x1ce8[1]) _0x1ce8[83];
$(_0x1ce8[85]) _0x1ce8[83];
$(_0x1ce8[1]) _0x1ce8[51];
$(_0x1ce8[87]) _0x1ce8[51];
$(_0x1ce8[88]) _0x1ce8[61];
$(_0x1ce8[89]) _0x1ce8[83];
$(_0x1ce8[49]) _0x1ce8[83];
$(_0x1ce8[92]) _0x1ce8[91];
$(_0x1ce8[94]) _0x1ce8[83];
$(_0x1ce8[54]) _0x1ce8[91];
$(_0x1ce8[59]) _0x1ce8[91];
$(_0x1ce8[97]) _0x1ce8[96];
$(_0x1ce8[97]) _0x1ce8[96];
$(_0x1ce8[93]) _0x1ce8[96];
$(_0x1ce8[93]) _0x1ce8[96];
$(_0x1ce8[93]) _0x1ce8[96];
$(_0x1ce8[103]) _0x1ce8[96];
$(_0x1ce8[105]) _0x1ce8[96];
$(_0x1ce8[107]) _0x1ce8[96];
$(_0x1ce8[105]) _0x1ce8[96];
$(_0x1ce8[110]) _0x1ce8[96];
$(_0x1ce8[110]) _0x1ce8[96];
$(_0x1ce8[110]) _0x1ce8[96];
$(_0x1ce8[107]) _0x1ce8[96];
$(_0x1ce8[107]) _0x1ce8[96];
$(_0x1ce8[107]) _0x1ce8[96];
$(_0x1ce8[80]) _0x1ce8[20];
$(_0x1ce8[56]) _0x1ce8[48];
$(_0x1ce8[94]) _0x1ce8[83];
$(_0x1ce8[121]) _0x1ce8[48];
window_0x1ce8[127];
$(_0x1ce8[49]) _0x1ce8[129];
$(_0x1ce8[130]) _0x1ce8[0];
connect(_0x1ce8[3]);
localStorage_0x1ce8[132];
document[_0x1ce8[133]] = _0x1ce8[134];
$(document) _0x1ce8[135]
Saludos
no esta cifrado está ofuscado (como deja entendido Elektro) es solo seguir el codigo y reconstruir