By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
458,107 Members | 1,253 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 458,107 IT Pros & Developers. It's quick & easy.

Javascript text encoding/encrypting

P: n/a
MS has published on its sites javascript encoder, which enables "encrypting"
javascript code. It allows hiding js code from being seen as a text file.
There is a decoder for it, available in the net, freeware, srcdec14.exe.

I have tested both, encrypting, decrypting, the source and the final files
are identical.

But what I met on a certain site is a js file, encoded I think in another
way, because I cannot decrypt it using the srcdec14.exe.

This is why I have a question for genarally any information cons. this
subject (are there several ways MS is able to read encrypted js files?, do
you know other decoders?,...)

--

Peter
Jul 20 '05 #1
Share this Question
Share on Google+
3 Replies


P: n/a
"Piotr" <pi*********@poczta.onet.pl> writes:
This is why I have a question for genarally any information cons. this
subject (are there several ways MS is able to read encrypted js files?, do
you know other decoders?,...)


I haven't heard of any other MS created encryption.
Show us the page, and we'll have more to go on!
/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'
Jul 20 '05 #2

P: n/a
> I haven't heard of any other MS created encryption.
Show us the page, and we'll have more to go on!
/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html> 'Faith without judgement merely degrades the spirit divine.'


The page: http://pl.php.net/search.php
What is encrypted: functions.js
Why do I claim sth is in another way:
1) this js module doesn't start with "#@~^", which is the beginning of MS
encrypted js files
2) scrdec14.exe decoder simply doesn't work on it

Piotr
Jul 20 '05 #3

P: n/a
"Piotr" <pi*********@poczta.onet.pl> writes:
The page: http://pl.php.net/search.php
What is encrypted: functions.js
I.e., the encrypted script is <URL:http://pl.php.net/functions.js>.
Why do I claim sth is in another way:
1) this js module doesn't start with "#@~^", which is the beginning of MS
encrypted js files
2) scrdec14.exe decoder simply doesn't work on it


As I expected, it is encrypted using Javascript itself.
There are plenty of different javascript-encoders out there, claiming
different degrees of security. I haven't found one yet that I couldn't
crack.

This one doesn't seem to be protecting the code. It has merely
obfuscated the variable names (They are almost all two or three
letters starting with "F"), and they have compacted the (huge amount
of) data used by the page.
The variable "cdp" contains a very long string. When it is decoded,
it becomes the array Ff, which contains
"abs","acos","acosh","addcslashes",...
I.e., the list of names that they suggest when you start typing in the
search input box.
I guess it is only a matter of compression, not encryption.

/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'
Jul 20 '05 #4

This discussion thread is closed

Replies have been disabled for this discussion.