Shulou(Shulou.com)06/01 Report--

This article introduces how to carry on the website js confusion structure simple analysis, the content is very detailed, interested friends can refer to, hope to be helpful to everyone.

Hello, everyone. Today we are going to talk about an idea of manual analysis and restoration that is confused by js.

It looks like this.

After testing, he can run even if he deducts it directly, but let's take a look at his strange confusion, and we analyze it and write it down, so that we can use it as one of the ways when we write confusion tools in the future.

Because he is a closure, so let's go straight to the end.

Finally, a V function is executed and the first one passes a bunch of garbled characters, and the second obviously passes a bunch of object functions that come with the browser. This confusion is a bit problematic. If we play the key functions like this, we'll just replace them and ok them.

Let's analyze where his v entrance is.

Copy this closure and execute it.

Then click this and you can locate the position of the v function.

Jump here, this is the entrance of V, as for how he decrypts the garbled string, we don't care. For the time being, there are no hidden piles that do not need to be analyzed, so let's take a look at the structure at the beginning of him.

You can see that the V statement is here. Let's take a look. Let's start with the analysis in the middle.

We can determine the scope by parentheses, and a mouse click on Google, the developer tool, will highlight the corresponding

In fact, the scope in js () is not {}. It only returns the last object, so

This large segment only returns I as a function.

From the previous rule, we know that the one in the middle will only return the last one (1meme2jor3pyr4). He will only return four, that is, the last one. Let's look at the next s.

S is an empty array, next

All he has is this rule, so he won't look at it one by one. We know that no matter how many parentheses will only return one, let's look at the beginning.

Click the mouse first to see the end of him.

In the end, it is a Z, that is to say, the V function, which will return a Z after the execution of this long section.

Let's take a look at where the function Z is.

Ai

Z is here, and the last one back is here. Does it look familiar?

This is where we located directly at the beginning, so we have a complete analysis of his confusion, and now it seems that it is not so difficult.

About how to carry on the website js confusion structure simple analysis to share here, hoped that the above content can have the certain help to everybody, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.