[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: decyphering spam



michael wrote:
> how do i decypher what the following HTML/javascript attempts (original
> 'write' was all one line)?

    Personally, I used Python's urllib.unquote and got the following:

<SCRIPT LANGUAGE="javascript">document.write('empty..');</SCRIPT><script
language="javascript">function dF(s){var s1=unescape(s.substr(0,s.length-1));
var
t='';for(i=0;i<s1.length;i++)t+=String.fromCharCode(s1.charCodeAt(i)-s.substr(s.length-1,1));document.write(unescape(t));}</script>

> dF('*8HXHWNUY*75QFSLZFLJ*8I*77of%
> 7Bfxhwnuy*77*75XWH*8I*77ktyt3ox*77*8J*5I*5F44*75XFRUQJ*75XHWNUY*75*787*752*75HFQQNSL*75FS*75J%5DYJWSFQ*75OX*75KNQJ*5I*5F*8H4XHWNUY*8J*5I*5F5')</script>

    Which is then fed the above segment to decode.  Don't feel like digging
into the above javascript to make a Python equivolant decoder for that
section.  Maybe someone else will jump in?  :D

--
         Steve C. Lamb         | I'm your priest, I'm your shrink, I'm your
       PGP Key: 8B6E99C5       | main connection to the switchboard of souls.
-------------------------------+---------------------------------------------

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: