Javascript encryptor XOR

[polychrom]

Is there some handy Javascript encryptor based on XOR algorithm? (html
page with encoded javascript will have a "decoder stub" prefixed before
the code that is actually executed.)

[Lasse Reichstein Nielsen]

po*******@softhome.net writes:

Is there some handy Javascript encryptor based on XOR algorithm? (html
page with encoded javascript will have a "decoder stub" prefixed before
the code that is actually executed.)

Undoubtedly. You can definitly pay for some, and there are probably also
some free versions floating around.

What you should ask yourself first is what you hope to achieve by
encoding. If it's security, then you should consider the threat model,
what you are trying to counter, including the likelyhood that the
deterrence will work and the cost if it fails.
I doubt there is any real gain to be had.

/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'

[polychrom]

Lasse Reichstein Nielsen пи�ал(а):

po*******@softhome.net writes:
Is there some handy Javascript encryptor based on XOR algorithm? (html
page with encoded javascript will have a "decoder stub" prefixed
before
the code that is actually executed.)
--------------------------------------------------------
Undoubtedly. You can definitly pay for some, and there are probably also
some free versions floating around. What you should ask yourself first is what you hope to achieve by
encoding. If it's security, then you should consider the threat model,
what you are trying to counter, including the likelyhood that the
deterrence will work and the cost if it fails.
I doubt there is any real gain to be had. /L Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'

---------------------------------

well, what is some handy utility for encryption(obfuscation) without
any issues affecting on script functionality? Just make to difficult
reading if someone tries to explore source.

[Matt Kruse]

po*******@softhome.net wrote:

well, what is some handy utility for encryption(obfuscation) without
any issues affecting on script functionality? Just make to difficult
reading if someone tries to explore source.

Well, read the FAQ or the 10,000 posts to this group in the archive
discussing this topic.

Obfuscation is a mostly pointless exercise. Most people who think they need
to obfuscate really don't. They just haven't figured that out yet.

--
Matt Kruse
http://www.JavascriptToolbox.com
http://www.AjaxToolbox.com

[polychrom]

Matt Kruse пи�ал(а):

po*******@softhome.net wrote:
well, what is some handy utility for encryption(obfuscation) without
any issues affecting on script functionality? Just make to difficult
reading if someone tries to explore source.

----------------------------------------------------------------------------

Well, read the FAQ or the 10,000 posts to this group in the archive
discussing this topic. Obfuscation is a mostly pointless exercise. Most people who think they needto obfuscate really don't. They just haven't figured that out yet.
-- Matt Kruse
http://www.JavascriptToolbox.com
http://www.AjaxToolbox.com

-----------------------------------------------------------
Amplification: I want find exact thing I need: XOR-based Javascript
encryptor.
(html page with encoded javascript will have a "decoder stub" prefixed
before
the code that is actually executed.) Simple and effective.

[Julian Turner]

[e-mail] wrote:

Amplification: I want find exact thing I need: XOR-based Javascript
encryptor.
(html page with encoded javascript will have a "decoder stub" prefixed
before
the code that is actually executed.) Simple and effective.

In my amateur opinion, you are unlikely to find XOR based encryption,
because XOR could produce characters not recognised by the web page
encoding (e.g. control characters in the 0x80 to 0x9F range).

Also if the "decoder stub" is prefixed, in what sense is it encrypted?
It would only stop the most casual user. Any person who was interested
in seeing your source, would also have the capability to easily extract
the code using the decoder stub provided.

For simple method of compacting your JS files (with the side effect of
mild obfuscation), including a "decompacting stub", see:-

<URL:http://dean.edwards.name/packer/>

Regards

Julian Turner

[mistral]

Julian Turner пи�ал(а):

[e-mail] wrote:
Amplification: I want find exact thing I need: XOR-based Javascript
encryptor.
(html page with encoded javascript will have a "decoder stub" prefixed
before the code that is actually executed.) Simple and effective.
In my amateur opinion, you are unlikely to find XOR based encryption,
because XOR could produce characters not recognised by the web page
encoding (e.g. control characters in the 0x80 to 0x9F range). Also if the "decoder stub" is prefixed, in what sense is it encrypted?
It would only stop the most casual user. Any person who was interested
in seeing your source, would also have the capability to easily extract
the code using the decoder stub provided. For simple method of compacting your JS files (with the side effect of
mild obfuscation), including a "decompacting stub", see:- <URL:http://dean.edwards.name/packer/> Regards Julian Turner

--------------------------
yes, it is true objection for characters not recognised by the web page
encoding.
As to prefixed "decoder stub", this method is used for XOR encryption
in more advanced solutions, where is necessary encrypt C code (mainly
to prevent AV). However, any decryptor can be placed before the
encrypted code.

[Julian Turner]

mistral wrote:

As to prefixed "decoder stub", this method is used for XOR encryption
in more advanced solutions, where is necessary encrypt C code (mainly
to prevent AV). However, any decryptor can be placed before the
encrypted code.

Ahh, yes. With a bit of self-education, googling on "decode stub" gives
results in relation to:-

(a) Hiding viruses from Anti Virus software (as you say).

(b) Trying to hide/obfuscate .exe code in general. This seems to
receive the same treatment as hiding .js code. You can try, but there
are a lot of clever folks out there.

Regards

Julian Turner