Shulou(Shulou.com)06/01 Report--

How to carry out MmEwMD analysis, in view of this problem, this article introduces the corresponding analysis and answers in detail, hoping to help more partners who want to solve this problem to find a more simple and feasible method.

Today we take a look at this kind of anti-climbing confusion, which only provides academic exchanges.

First of all, search for this keyword: MmEwMD will not take a screenshot and nothing will be found.

Take a look at the call stack and look at the first one first

Look at the breakpoint of severe confusion.

We find that he is the object requested by hook, and the breakpoint is on send. We know that the request object send of js is post submission data, while url is requesting the open method of the object, so we look at the external object of his function.

We saw that his last function was open, and we made a breakpoint here and resubmitted it.

After the breakpoint, we found that there was no problem. Since this is a normal link, the submission has one more encrypted field. Let's move on.

When we get here, we find that there is an encrypted value of _ $Fe (arguments [1]); returned

Enter the _ $Fe method and let's break point

When it's off, let's go one step by step to see where his encryption appears.

We see it here. Let's take a look at the parameters.

This is the end of the answer to the question on how to conduct MmEwMD analysis. I hope the above content can be of some help to you. If you still have a lot of doubts to solve, you can follow the industry information channel to learn more about it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.