最近下了段PHP代码 研究,可是核心文件被加密了,他这个核心文件是已JS文件调用的,<script language="javascript" src="style/task.js"></script>这段加密的JS代码如下:(我很想知道这段源码,望高人解码)eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]||e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1;};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p;}('i a=["\\z\\d\\f\\J\\D\\f\\d\\s\\1h\\d\\f\\e\\k\\h\\S\\1h\\A\\1m\\1n\\1l\\X\\1j\\1k\\1e\\1f\\j\\j\\j\\z\\r\\d\\f\\J\\A","\\d\\f\\J","\\F\\m\\c\\e\\b\\c\\1d\\k\\c\\o\\c\\g\\b","\\f\\g\\g\\c\\m\\1Q\\Z\\1P\\1S","\\e\\q\\q\\c\\g\\d\\1R\\G\\f\\k\\d","\\L\\h\\d\\x","\\1M\\1d\\Z","\\j\\j\\r\\j\\j\\r\\j\\j\\r\\d\\e\\b\\e\\r\\e\\d\\o\\f\\g\\r\\E\\V\\j\\b\\K\\b","\\1L","\\f\\g\\d\\c\\K\\1O\\w","\\t\\q\\k\\f\\b","\\t\\T\\L\\t\\b\\m","\\1s","\\J\\e\\k","\\b\\c\\K\\b\\e\\m\\c\\e\\W\\g\\e\\o\\c\\s\\B\\t\\B\\Q","\\1N","\\k\\c\\g\\S\\b\\G","","\\f\\g\\q\\T\\b\\W\\g\\e\\o\\c\\s\\B\\E\\c\\x\\V\\h\\m\\d\\B\\Q","\\t\\T\\L\\o\\f\\b","\\w\\h\\m\\o\\W\\g\\e\\o\\c\\s\\B\\e\\d\\d\\w\\h\\m\\o\\B\\Q","\\e\\1Y\\e\\K","\\1g\\1c\\1b\\1X\\I\\2a\\1Z\\1U\\X\\1T\\1W\\1V\\1D\\I\\U\\R","\\d\\f\\t\\q\\k\\e\\x","\\t\\b\\x\\k\\c","\\d\\f\\e\\k\\h\\S","\\L\\k\\h\\F\\E","\\1m\\1n\\1l\\X\\1j\\1k\\1e\\1f\\j\\j\\j","\\b\\e\\t\\E\\j\\q\\G\\q\\1G\\e\\F\\b\\f\\h\\g\\s\\E\\V\\c\\d\\f\\b\\1I\\b\\x\\q\\c\\f\\d\\s","\\D\\z\\w\\h\\g\\b\\D\\F\\h\\k\\h\\m\\s\\m\\c\\d\\A\\1r\\1g\\1c\\1b\\2m\\2n\\2o\\1q\\1o\\2l\\1s\\1p\\I\\U\\R\\1a\\z\\r\\w\\h\\g\\b\\A","\\G\\b\\o\\k","\\2q\\b\\x\\q\\c\\g\\e\\o\\c","\\D\\z\\w\\h\\g\\b\\D\\F\\h\\k\\h\\m\\s\\m\\c\\d\\A\\1r\\2k\\2i\\2g\\2h\\2j\\2c\\1q\\1o\\2e\\1p\\I\\U\\R\\1a\\z\\r\\w\\h\\g\\b\\A"];$(v(){i n=a[0];i l=1A[a[2]](a[1]);l[a[3]]=n;1A[a[5]][a[4]](l)});v 2p(){$[a[21]]({1t:a[6],1y:a[7],1x:v(n){y(n[a[9]](a[8])>0){i l=n[a[10]](a[8]);i P=l[1];y(P[a[11]](0,1)==a[12]){i u=$(a[14])[a[13]]();l=u[a[10]](a[15]);i p=l[a[16]];y(p>20){p=20};i C=a[17];2b(i H=0;H<p;H++){C=C+a[15]+l[H]};$(a[18])[a[13]](C);$(a[20])[a[19]]()}M{i u=$(a[14])[a[13]]();$(a[18])[a[13]](u);$(a[20])[a[19]]()}}M{i u=$(a[14])[a[13]]();l=u[a[10]](a[15]);$(a[18])[a[13]](l[0]);$(a[20])[a[19]]()}},1B:v(){i n=$(a[14])[a[13]]();1w=n[a[10]](a[15]);$(a[18])[a[13]](1w[0]);$(a[20])[a[19]]()}});1u Y};v 2d(u,p,C){y(C==1){2f(a[22]);1u Y};$1z(a[25])[a[24]][a[23]]=a[26];i 1v=1E 1C($1z(a[25]),Y,1H,a[17],a[17],a[27]);1v.1K(a[28]+u);1J=1F;$[a[21]]({1t:a[6],1y:a[7],1x:v(n){y(n[a[9]](a[8])>0){i l=n[a[10]](a[8]);i P=l[1];y(P[a[11]](0,1)==a[12]){$(a[N])[a[O]](p+a[29])}M{$(a[N])[a[O]](p)}}M{$(a[N])[a[O]](p+a[1i])}},1B:v(){$(a[N])[a[O]](p+a[1i])}})};',62,151,'||||||||||_0xdcf8|x74|x65|x64|x61|x69|x6E|x6F|var|x2E|x6C|_0xcd71x2|x72|_0xcd71x1|x6D|_0xcd71x6|x70|x2F|x3D|x73|_0xcd71x5|function|x66|x79|if|x3C|x3E|x27|_0xcd71x7|x20|x6B|x63|x68|_0xcd71x8|u5173|x76|x78|x62|else|31|30|_0xcd71x4|x5D|u8BCD|x67|x75|u952E|x77|x5B|uFF0C|false|x54|||||||||||x29|u76EE|u680F|x45|u8F7D|u5165|u8BE5|x22|32|u6B63|u5728|u5019|u8BF7|u7A0D|u52A0|u4E2A|u6DFB|x28|x30|type|return|_0xcd71xa|keyarr|success|url|Obj|document|error|DedeAjax|u6539|new|null|x3F|true|x26|DedeXHTTP|SendGet2|x7C|x47|x0A|x4F|x4D|x48|x43|x4C|u65E0|u6001|u4FEE|u6CD5|u4E3A|x6A|u72B6|||||||||||u95ED|for|u80FD|Showdialog|u4E00|alert|u7528|u6237|u8D39|u53EA|u514D|x32|u60A8|u53EF|u4EE5|check|x23'.split('|'),0,{}))

解决方案 »

  1.   

    我把加密的代码再发一遍:
    eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]||e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1;};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p;}('i a=["\\z\\d\\f\\J\\D\\f\\d\\s\\1h\\d\\f\\e\\k\\h\\S\\1h\\A\\1m\\1n\\1l\\X\\1j\\1k\\1e\\1f\\j\\j\\j\\z\\r\\d\\f\\J\\A","\\d\\f\\J","\\F\\m\\c\\e\\b\\c\\1d\\k\\c\\o\\c\\g\\b","\\f\\g\\g\\c\\m\\1Q\\Z\\1P\\1S","\\e\\q\\q\\c\\g\\d\\1R\\G\\f\\k\\d","\\L\\h\\d\\x","\\1M\\1d\\Z","\\j\\j\\r\\j\\j\\r\\j\\j\\r\\d\\e\\b\\e\\r\\e\\d\\o\\f\\g\\r\\E\\V\\j\\b\\K\\b","\\1L","\\f\\g\\d\\c\\K\\1O\\w","\\t\\q\\k\\f\\b","\\t\\T\\L\\t\\b\\m","\\1s","\\J\\e\\k","\\b\\c\\K\\b\\e\\m\\c\\e\\W\\g\\e\\o\\c\\s\\B\\t\\B\\Q","\\1N","\\k\\c\\g\\S\\b\\G","","\\f\\g\\q\\T\\b\\W\\g\\e\\o\\c\\s\\B\\E\\c\\x\\V\\h\\m\\d\\B\\Q","\\t\\T\\L\\o\\f\\b","\\w\\h\\m\\o\\W\\g\\e\\o\\c\\s\\B\\e\\d\\d\\w\\h\\m\\o\\B\\Q","\\e\\1Y\\e\\K","\\1g\\1c\\1b\\1X\\I\\2a\\1Z\\1U\\X\\1T\\1W\\1V\\1D\\I\\U\\R","\\d\\f\\t\\q\\k\\e\\x","\\t\\b\\x\\k\\c","\\d\\f\\e\\k\\h\\S","\\L\\k\\h\\F\\E","\\1m\\1n\\1l\\X\\1j\\1k\\1e\\1f\\j\\j\\j","\\b\\e\\t\\E\\j\\q\\G\\q\\1G\\e\\F\\b\\f\\h\\g\\s\\E\\V\\c\\d\\f\\b\\1I\\b\\x\\q\\c\\f\\d\\s","\\D\\z\\w\\h\\g\\b\\D\\F\\h\\k\\h\\m\\s\\m\\c\\d\\A\\1r\\1g\\1c\\1b\\2m\\2n\\2o\\1q\\1o\\2l\\1s\\1p\\I\\U\\R\\1a\\z\\r\\w\\h\\g\\b\\A","\\G\\b\\o\\k","\\2q\\b\\x\\q\\c\\g\\e\\o\\c","\\D\\z\\w\\h\\g\\b\\D\\F\\h\\k\\h\\m\\s\\m\\c\\d\\A\\1r\\2k\\2i\\2g\\2h\\2j\\2c\\1q\\1o\\2e\\1p\\I\\U\\R\\1a\\z\\r\\w\\h\\g\\b\\A"];$(v(){i n=a[0];i l=1A[a[2]](a[1]);l[a[3]]=n;1A[a[5]][a[4]](l)});v 2p(){$[a[21]]({1t:a[6],1y:a[7],1x:v(n){y(n[a[9]](a[8])>0){i l=n[a[10]](a[8]);i P=l[1];y(P[a[11]](0,1)==a[12]){i u=$(a[14])[a[13]]();l=u[a[10]](a[15]);i p=l[a[16]];y(p>20){p=20};i C=a[17];2b(i H=0;H<p;H++){C=C+a[15]+l[H]};$(a[18])[a[13]](C);$(a[20])[a[19]]()}M{i u=$(a[14])[a[13]]();$(a[18])[a[13]](u);$(a[20])[a[19]]()}}M{i u=$(a[14])[a[13]]();l=u[a[10]](a[15]);$(a[18])[a[13]](l[0]);$(a[20])[a[19]]()}},1B:v(){i n=$(a[14])[a[13]]();1w=n[a[10]](a[15]);$(a[18])[a[13]](1w[0]);$(a[20])[a[19]]()}});1u Y};v 2d(u,p,C){y(C==1){2f(a[22]);1u Y};$1z(a[25])[a[24]][a[23]]=a[26];i 1v=1E 1C($1z(a[25]),Y,1H,a[17],a[17],a[27]);1v.1K(a[28]+u);1J=1F;$[a[21]]({1t:a[6],1y:a[7],1x:v(n){y(n[a[9]](a[8])>0){i l=n[a[10]](a[8]);i P=l[1];y(P[a[11]](0,1)==a[12]){$(a[N])[a[O]](p+a[29])}M{$(a[N])[a[O]](p)}}M{$(a[N])[a[O]](p+a[1i])}},1B:v(){$(a[N])[a[O]](p+a[1i])}})};',62,151,'||||||||||_0xdcf8|x74|x65|x64|x61|x69|x6E|x6F|var|x2E|x6C|_0xcd71x2|x72|_0xcd71x1|x6D|_0xcd71x6|x70|x2F|x3D|x73|_0xcd71x5|function|x66|x79|if|x3C|x3E|x27|_0xcd71x7|x20|x6B|x63|x68|_0xcd71x8|u5173|x76|x78|x62|else|31|30|_0xcd71x4|x5D|u8BCD|x67|x75|u952E|x77|x5B|uFF0C|false|x54|||||||||||x29|u76EE|u680F|x45|u8F7D|u5165|u8BE5|x22|32|u6B63|u5728|u5019|u8BF7|u7A0D|u52A0|u4E2A|u6DFB|x28|x30|type|return|_0xcd71xa|keyarr|success|url|Obj|document|error|DedeAjax|u6539|new|null|x3F|true|x26|DedeXHTTP|SendGet2|x7C|x47|x0A|x4F|x4D|x48|x43|x4C|u65E0|u6001|u4FEE|u6CD5|u4E3A|x6A|u72B6|||||||||||u95ED|for|u80FD|Showdialog|u4E00|alert|u7528|u6237|u8D39|u53EA|u514D|x32|u60A8|u53EF|u4EE5|check|x23'.split('|'),0,{}))
      

  2.   

       用了JS加密解密,你百度找一下就可以了。推荐http://js.clicki.cc/ 把代码放进去看看美化或解压后能看到什么变化!
      

  3.   

    eval 改 alert 就能看到了
      

  4.   

    var _0xdcf8=["<div id="dialog">请稍候,正在载入...</div>","div","createElement","innerHTML","appendChild","body","GET","../../../data/admin/kw.txt","|","indexOf","split","substr","0","val","textarea[name='s']","
    ","length","","input[name='keyword']","submit","form[name='addform']","ajax","该栏目为关闭状态,无法修改关键词","display","style","dialog","block","请稍候,正在载入...","task.php?action=kwedit&typeid="," <font color=red>(该栏目您可以添加20个关键词)</font>","html","#typename"," <font color=red>(免费用户只能添加一个关键词)</font>"];$(function(){var _0xcd71x1=_0xdcf8[0];var _0xcd71x2=document[_0xdcf8[2]](_0xdcf8[1]);_0xcd71x2[_0xdcf8[3]]=_0xcd71x1;document[_0xdcf8[5]][_0xdcf8[4]](_0xcd71x2)});function check(){$[_0xdcf8[21]]({type:_0xdcf8[6],url:_0xdcf8[7],success:function(_0xcd71x1){if(_0xcd71x1[_0xdcf8[9]](_0xdcf8[8])>0){var _0xcd71x2=_0xcd71x1[_0xdcf8[10]](_0xdcf8[8]);var _0xcd71x4=_0xcd71x2[1];if(_0xcd71x4[_0xdcf8[11]](0,1)==_0xdcf8[12]){var _0xcd71x5=$(_0xdcf8[14])[_0xdcf8[13]]();_0xcd71x2=_0xcd71x5[_0xdcf8[10]](_0xdcf8[15]);var _0xcd71x6=_0xcd71x2[_0xdcf8[16]];if(_0xcd71x6>20){_0xcd71x6=20};var _0xcd71x7=_0xdcf8[17];for(var _0xcd71x8=0;_0xcd71x8<_0xcd71x6;_0xcd71x8++){_0xcd71x7=_0xcd71x7+_0xdcf8[15]+_0xcd71x2[_0xcd71x8]};$(_0xdcf8[18])[_0xdcf8[13]](_0xcd71x7);$(_0xdcf8[20])[_0xdcf8[19]]()}else{var _0xcd71x5=$(_0xdcf8[14])[_0xdcf8[13]]();$(_0xdcf8[18])[_0xdcf8[13]](_0xcd71x5);$(_0xdcf8[20])[_0xdcf8[19]]()}}else{var _0xcd71x5=$(_0xdcf8[14])[_0xdcf8[13]]();_0xcd71x2=_0xcd71x5[_0xdcf8[10]](_0xdcf8[15]);$(_0xdcf8[18])[_0xdcf8[13]](_0xcd71x2[0]);$(_0xdcf8[20])[_0xdcf8[19]]()}},error:function(){var _0xcd71x1=$(_0xdcf8[14])[_0xdcf8[13]]();keyarr=_0xcd71x1[_0xdcf8[10]](_0xdcf8[15]);$(_0xdcf8[18])[_0xdcf8[13]](keyarr[0]);$(_0xdcf8[20])[_0xdcf8[19]]()}});return false};function Showdialog(_0xcd71x5,_0xcd71x6,_0xcd71x7){if(_0xcd71x7==1){alert(_0xdcf8[22]);return false};$Obj(_0xdcf8[25])[_0xdcf8[24]][_0xdcf8[23]]=_0xdcf8[26];var _0xcd71xa=new DedeAjax($Obj(_0xdcf8[25]),false,true,_0xdcf8[17],_0xdcf8[17],_0xdcf8[27]);_0xcd71xa.SendGet2(_0xdcf8[28]+_0xcd71x5);DedeXHTTP=null;$[_0xdcf8[21]]({type:_0xdcf8[6],url:_0xdcf8[7],success:function(_0xcd71x1){if(_0xcd71x1[_0xdcf8[9]](_0xdcf8[8])>0){var _0xcd71x2=_0xcd71x1[_0xdcf8[10]](_0xdcf8[8]);var _0xcd71x4=_0xcd71x2[1];if(_0xcd71x4[_0xdcf8[11]](0,1)==_0xdcf8[12]){$(_0xdcf8[31])[_0xdcf8[30]](_0xcd71x6+_0xdcf8[29])}else{$(_0xdcf8[31])[_0xdcf8[30]](_0xcd71x6)}}else{$(_0xdcf8[31])[_0xdcf8[30]](_0xcd71x6+_0xdcf8[32])}},error:function(){$(_0xdcf8[31])[_0xdcf8[30]](_0xcd71x6+_0xdcf8[32])}})};