Dziwne zrodlo strony

[ahmed]

Witam w zrodle pewnej srtony znalazlem taki oto kod:

Kod: Zaznacz cały

<script type="text/javascript">
 document.write('\x3C\x21\x44\x4F\x43\x54\x59\x50\x45\x20\x68\x74\x6D\x6C\x20\x50\x55\x42\x4C\x49\x43\x20\x22\x2D\x2F\x2F\x57\x33\x43\x2F\x2F\x44\x54\x44\x20\x48\x54\x4D\x4C\x20\x34\x2E\x30\x31\x20\x54\x72\x61\x6E\x73\x69\x74\x69\x6F\x6E\x61\x6C\x2F\x2F\x45\x4E\x22\x20\x22\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x77\x33\x2E\x6F\x72\x67\x2F\x54\x52\x2F\x68\x74\x6D\x6C\x34\x2F\x6C\x6F\x6F\x73\x65\x2E\x64\x74\x64\x22\x3E\x3C\x68\x74\x6D\x6C\x3E\x0D\x0A\x3C\x68\x65\x61\x64\x3E\x0D\x0A\x20\x20\x3C\x6D\x65\x74\x61\x20\x68\x74\x74\x70\x2D\x65\x71\x75\x69\x76\x3D\x22\x43\x6F\x6E\x74\x65\x6E\x74\x2D\x74\x79\x70\x65\x22\x20\x63\x6F\x6E\x74\x65\x6E\x74\x3D\x22\x74\x65\x78\x74\x2F\x68\x74\x6D\x6C\x3B\x20\x63\x68\x61\x72\x73\x65\x74\x3D\x75\x74\x66\x2D\x38\x22\x3E\x0D\x0A\x20\x20\x3C\x74\x69\x74\x6C\x65\x3E\x5A\x6F\x73\x74\x61\x77\x20\x74\x61\x20\x73\x74\x72\x6F\x6E\x65\x20\x77\x6C\x61\x63\x7A\x6F\x6E\x61\x20\x69\x20\x7A\x64\x6F\x62\x79\x77\x61\x6A\x20\x70\x75\x6E\x6B\x74\x79\x3C\x2F\x74\x69\x74\x6C\x65\x3E\x0D\x0A\x09\x3C\x73\x63\x72\x69\x70\x74\x20\x74\x79\x70\x65\x3D\x22\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x20\x73\x72\x63\x3D\x22\x6A\x73\x2F\x6D\x69\x6E\x74\x41\x6A\x61\x78\x2E\x6A\x73\x22\x3E\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E\x0D\x0A\x3C\x2F\x68\x65\x61\x64\x3E\x0D\x0A\x3C\x62\x6F\x64\x79\x3E\x0D\x0A\x0D\x0A\x3C\x73\x63\x72\x69\x70\x74\x3E\x0D\x0A\x09\x09\x66\x75\x6E\x63\x74\x69\x6F\x6E\x20\x69\x6E\x69\x74\x28\x29\x7B\x0D\x0A\x09\x09\x09\x09\x73\x65\x74\x54\x69\x6D\x65\x6F\x75\x74\x28\x27\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x6C\x6F\x63\x61\x74\x69\x6F\x6E\x3D\x22\x70\x6B\x74\x2E\x70\x68\x70\x3F\x69\x64\x3D\x37\x38\x37\x22\x27\x2C\x20\x37\x32\x30\x30\x30\x30\x30\x29\x3B\x0D\x0A\x09\x09\x09\x7D\x0D\x0A\x09\x09\x77\x69\x6E\x64\x6F\x77\x2E\x6F\x6E\x6C\x6F\x61\x64\x3D\x69\x6E\x69\x74\x3B\x0D\x0A\x09\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E\x0D\x0A\x3C\x73\x63\x72\x69\x70\x74\x20\x74\x79\x70\x65\x3D\x27\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x27\x3E\x0D\x0A\x3C\x21\x2D\x2D\x0D\x0A\x66\x75\x6E\x63\x74\x69\x6F\x6E\x20\x72\x65\x66\x72\x65\x73\x68\x28\x29\x20\x7B\x0D\x0A\x76\x61\x72\x20\x72\x65\x71\x20\x3D\x20\x6D\x69\x6E\x74\x2E\x52\x65\x71\x75\x65\x73\x74\x28\x29\x3B\x0D\x0A\x72\x65\x71\x2E\x4F\x6E\x53\x75\x63\x63\x65\x73\x73\x20\x3D\x20\x66\x75\x6E\x63\x74\x69\x6F\x6E\x20\x28\x29\x20\x7B\x20\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64\x28\x27\x73\x74\x72\x6F\x6E\x79\x27\x29\x2E\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C\x20\x3D\x20\x74\x68\x69\x73\x2E\x72\x65\x73\x70\x6F\x6E\x73\x65\x54\x65\x78\x74\x3B\x7D\x2C\x0D\x0A\x72\x65\x71\x2E\x4F\x6E\x45\x72\x72\x6F\x72\x20\x3D\x20\x66\x75\x6E\x63\x74\x69\x6F\x6E\x20\x28\x29\x20\x7B\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64\x28\x27\x73\x74\x72\x6F\x6E\x79\x27\x29\x2E\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C\x20\x3D\x20\x27\x57\x79\x73\x74\xC4\x85\x70\x69\xC5\x82\x20\x62\xC5\x82\xC4\x85\x64\x20\x21\x21\x21\x20\x3C\x2F\x62\x72\x3E\x27\x20\x2B\x20\x74\x68\x69\x73\x2E\x72\x65\x73\x70\x6F\x6E\x73\x65\x54\x65\x78\x74\x20\x2B\x20\x27\x3C\x2F\x62\x72\x3E\x27\x20\x2B\x20\x72\x65\x71\x2E\x78\x6D\x6C\x48\x74\x74\x70\x52\x65\x71\x75\x65\x73\x74\x2E\x73\x74\x61\x74\x75\x73\x54\x65\x78\x74\x20\x3B\x7D\x0D\x0A\x72\x65\x71\x2E\x53\x65\x6E\x64\x20\x28\x27\x72\x61\x6D\x6B\x61\x2E\x70\x68\x70\x3F\x69\x64\x3D\x37\x38\x37\x26\x6B\x65\x79\x3D\x31\x33\x31\x38\x37\x39\x32\x35\x35\x34\x27\x29\x3B\x0D\x0A\x7D\x0D\x0A\x76\x61\x72\x20\x67\x69\x6E\x74\x65\x72\x3D\x73\x65\x74\x49\x6E\x74\x65\x72\x76\x61\x6C\x28\x72\x65\x66\x72\x65\x73\x68\x2C\x20\x31\x30\x30\x30\x30\x29\x3B\x20\x0D\x0A\x2F\x2F\x20\x2D\x2D\x3E\x0D\x0A\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E\x3C\x64\x69\x76\x20\x69\x64\x3D\x22\x73\x74\x72\x6F\x6E\x79\x22\x3E\x5A\x6F\x73\x74\x61\x77\x20\x74\x61\x20\x73\x74\x72\x6F\x6E\x65\x20\x77\x6C\x61\x63\x7A\x6F\x6E\x61\x20\x69\x20\x7A\x64\x6F\x62\x79\x77\x61\x6A\x20\x70\x75\x6E\x6B\x74\x79\x2E\x20\x57\x63\x7A\x79\x74\x79\x77\x61\x6E\x69\x65\x20\x73\x74\x72\x6F\x6E\x79\x2E\x2E\x2E\x3C\x2F\x64\x69\x76\x3E\x0D\x0A\x0D\x0A\x0D\x0A\x3C\x2F\x62\x6F\x64\x79\x3E\x0D\x0A\x3C\x2F\x68\x74\x6D\x6C\x3E');
 </script>

mam pytanie co to jest? Czy jest to rodzaj jakiegos szyfrowania?
pozdrawiam

[Gromed]

o "przetłumaczeniu" z heksowego na nasze, wychodzi:

Zostaw ta strone wlaczona i zdobywaj punkty. Wczytywanie strony...

[ahmed]

a w jaki sposob mozna tak zaszyfrowac kod, jak to odszyfrowales?

[fuma]

ahmed jest to kod javascript zapisany w systemie szasnastkowym. Kod dodany przez wirusa na komputerze administratora strony na ktorej ten kod znalazles.

[ahmed]

a jakiej funkcji uzyc zeby go tak zaszyfrowac?

[DeaDriam]

a po co Ci Kod dodany przez wirusa ?

[ahmed]

@matpol To nie jest wiruss tylko zaszyfrowany kod strony aby nie mozna go bylo edytowac w przeglodarce.
To poda ktos funkcje ktora tak szyfruje?

[LaY]

To nie jest szyfrowanie

http://www.swingnote.com/tools/texttohex.php