Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.javascript > #27369
| From | Andreas Bergmaier <andber93@web.de> |
|---|---|
| Newsgroups | comp.lang.javascript |
| Subject | Re: JavaScript Packer + Password Protection |
| Date | 2015-04-14 00:47 +0200 |
| Organization | albasani.net |
| Message-ID | <mghh1c$215$1@news.albasani.net> (permalink) |
| References | <ececbd2e-2326-4f17-9ada-4784d3ebeb3f@googlegroups.com> <fe19571b-213a-4cc2-b888-3163404691d1@googlegroups.com> |
MASTER TROLL BAIT schrieb: > On Thursday, April 9, 2015 at 6:52:34 PM UTC-4, MASTER TROLL BAIT wrote: >> […] >> >> The pass word is never included in the script so it cannot be hacked or even unpacked! > > Now you can use the full page URL as password, but the password prompt has been replaced by a check of the pages web address and it is used for the password, so now the JavaScript will only run from that exact URL or the page will fail! You're contradicting yourself here. The password might not be included in the script code itself, but it is an intrinsic property of the resource you are trying to protect. Everybody who accesses your script does know your domain. And yes, it can be trivially unpacked. Just open the console on that page that uses the script, paste the script there and replace `this[__]($$)` (in the end) by `console.log($$)`. Hit enter and the "decrypted" code is printed. Bergi
Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
JavaScript Packer + Password Protection MASTER TROLL BAIT <0ntariokingston@gmail.com> - 2015-04-09 15:52 -0700
Re: JavaScript Packer + Password Protection MASTER TROLL BAIT <0ntariokingston@gmail.com> - 2015-04-09 22:22 -0700
Re: JavaScript Packer + Password Protection Andreas Bergmaier <andber93@web.de> - 2015-04-14 00:47 +0200
Re: JavaScript Packer + Password Protection Dave Brown <0ntariokingston@gmail.com> - 2015-05-18 18:36 -0700
csiph-web