-
Notifications
You must be signed in to change notification settings - Fork 343
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
jsconfuser: 新混淆工具 #112
Comments
根据后续留言,该混淆工具确定为 https://github.com/MichaelXF/js-confuser 。 这种混淆方式的核心内容是头尾的两部分代码: // 头部
function ggsElv() {}
PS61TpK = Object["defineProperty"]
function b2YUfe(ggsElv) {
return x_bH3Yz[ggsElv < 48 ? ggsElv - 94 : ggsElv > 281 ? ggsElv - 80 : ggsElv - 49];
}
x_bH3Yz = UehMhMQ.call(this);
function nS3LeN(ggsElv, PS61TpK) {
GrpZibt(ggsElv, "length", {
value: PS61TpK,
configurable: b2YUfe(104)
});
return ggsElv;
}
GrpZibt = Object.defineProperty;
var XPU2Of = [], MrnEyjO = [...]
// 尾部
function UehMhMQ() {
return [...];
}
function JBApsSj(ggsElv, x_bH3Yz = 0) {
var GrpZibt = function () {
return ggsElv(...arguments);
};
return PS61TpK(GrpZibt, "length", {
"value": x_bH3Yz,
"configurable": true
});
}
|
好的,目前该项目解不了这种新型的是吧 |
如果这是一种公开的混淆工具,可以考虑添加 |
okk期待佬适配 |
我近期也发现了这类加密的不断出现,格式均形如:
期待佬适配 |
所以你知道这个工具的链接吗 |
新混淆工具,求佬支持: |
适配中,不定时更新到分支 jsconfuser |
现在能解吗?我这报错还是不行。 |
你可以把你的样本贴出来。 |
https://raw.githubusercontent.com/6dylan6/jdpro/refs/heads/main/jd_dpqd_sign.js 更新代码后这个可以,但是其他加密的还是报错,这个加密这么牛吗,一个加密一个样,例如下面这个。 TypeError: Cannot read properties of null (reading 'traverse') |
TypeError: Cannot read properties of undefined (reading 'constantViolations') |
这个混淆工具剩下的几个流程比较复杂,最近有很多别的事,这个月没有足够的时间用来分析和编码,等空下来再看。 |
好像还是解不了、。。 |
这里面,Stack混淆比较难搞。 |
Which plugin are you reporting a bug for?
obfuscator
Version of Node
20.14
Input code
https://github.com/goodwenhao/study/blob/main/test.js
Additional context
No response
The text was updated successfully, but these errors were encountered: