Groups > microsoft.public.scripting.vbscript > #11131

JS De-obfuscator

Path	csiph.com!eternal-september.org!feeder.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail
From	"Mayayana" <mayayana@invalid.nospam>
Newsgroups	microsoft.public.scripting.vbscript
Subject	JS De-obfuscator
Date	Sat, 29 Aug 2015 10:44:56 -0400
Organization	A noiseless patient Spider
Lines	22
Message-ID	<mrsg7s$mtm$1@dont-email.me> (permalink)
Injection-Date	Sat, 29 Aug 2015 14:39:56 +0000 (UTC)
Injection-Info	mx02.eternal-september.org; posting-host="44399d2aa6e1aaa74660fc0017e9dad9"; logging-data="23478"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+2t9CfsOsWMhV2506biLAA33IUNsCPt/0="
X-MimeOLE	Produced By Microsoft MimeOLE V6.00.2900.5512
X-Priority	3
X-Newsreader	Microsoft Outlook Express 6.00.2900.5512
X-MSMail-Priority	Normal
Cancel-Lock	sha1:c4IkSp1fAB/4B+LtFFoqjC0+wL8=
Xref	csiph.com microsoft.public.scripting.vbscript:11131

Show key headers only | View raw

  I've been working on a fun project lately that
I though people might find useful. Maybe there
will also be comments or suggestions:

http://www.jsware.net/jsware/scrfiles.php5#jsdeob

  It's an HTA. I've been finding that webpage code
increasingly uses very bloated and obfuscated JS
to create the page. In some cases I've even found
JSON, embedded in script, which in turns embeds
the HTML of the page! In some cases the idea seems
to be to force people to enable script. In other cases
it seems to be to either hide or protect the code.

   In any case, I wanted to be able to dump the
obfuscated script into a window and clean it up.
The result is at the link above. It starts with an
OSS script to format, then uses my own VBS to
further clean up the code and add color syntax
highlighting.

Back to microsoft.public.scripting.vbscript | Previous | Next — Next in thread | Find similar

Thread

JS De-obfuscator "Mayayana" <mayayana@invalid.nospam> - 2015-08-29 10:44 -0400
  Re: JS De-obfuscator GS <gs@v.invalid> - 2015-11-02 14:42 -0500
    Re: JS De-obfuscator "Mayayana" <mayayana@invalid.nospam> - 2015-11-02 15:06 -0500
      Re: JS De-obfuscator GS <gs@v.invalid> - 2015-11-02 15:21 -0500

csiph-web