469,936 Members | 2,422 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,936 developers. It's quick & easy.

Javascript text encoding/encrypting

MS has published on its sites javascript encoder, which enables "encrypting"
javascript code. It allows hiding js code from being seen as a text file.
There is a decoder for it, available in the net, freeware, srcdec14.exe.

I have tested both, encrypting, decrypting, the source and the final files
are identical.

But what I met on a certain site is a js file, encoded I think in another
way, because I cannot decrypt it using the srcdec14.exe.

This is why I have a question for genarally any information cons. this
subject (are there several ways MS is able to read encrypted js files?, do
you know other decoders?,...)

--

Peter
Jul 20 '05 #1
3 9623
"Piotr" <pi*********@poczta.onet.pl> writes:
This is why I have a question for genarally any information cons. this
subject (are there several ways MS is able to read encrypted js files?, do
you know other decoders?,...)


I haven't heard of any other MS created encryption.
Show us the page, and we'll have more to go on!
/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'
Jul 20 '05 #2
> I haven't heard of any other MS created encryption.
Show us the page, and we'll have more to go on!
/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html> 'Faith without judgement merely degrades the spirit divine.'


The page: http://pl.php.net/search.php
What is encrypted: functions.js
Why do I claim sth is in another way:
1) this js module doesn't start with "#@~^", which is the beginning of MS
encrypted js files
2) scrdec14.exe decoder simply doesn't work on it

Piotr
Jul 20 '05 #3
"Piotr" <pi*********@poczta.onet.pl> writes:
The page: http://pl.php.net/search.php
What is encrypted: functions.js
I.e., the encrypted script is <URL:http://pl.php.net/functions.js>.
Why do I claim sth is in another way:
1) this js module doesn't start with "#@~^", which is the beginning of MS
encrypted js files
2) scrdec14.exe decoder simply doesn't work on it


As I expected, it is encrypted using Javascript itself.
There are plenty of different javascript-encoders out there, claiming
different degrees of security. I haven't found one yet that I couldn't
crack.

This one doesn't seem to be protecting the code. It has merely
obfuscated the variable names (They are almost all two or three
letters starting with "F"), and they have compacted the (huge amount
of) data used by the page.
The variable "cdp" contains a very long string. When it is decoded,
it becomes the array Ff, which contains
"abs","acos","acosh","addcslashes",...
I.e., the list of names that they suggest when you start typing in the
search input box.
I guess it is only a matter of compression, not encryption.

/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'
Jul 20 '05 #4

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

2 posts views Thread by Derrick | last post: by
6 posts views Thread by larry mckay | last post: by
reply views Thread by Lotta P | last post: by
16 posts views Thread by namemattersnot | last post: by
2 posts views Thread by zakhirn | last post: by
2 posts views Thread by andy.z | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.