Closed Thread Icon

Topic awaiting preservation: How do you decrypt html files? Pages that link to <a href="https://ozoneasylum.com/backlink?for=8146" title="Pages that link to Topic awaiting preservation: How do you decrypt html files?" rel="nofollow" >Topic awaiting preservation: How do you decrypt html files?\

 
Author Thread
Ultra
Nervous Wreck (II) Inmate

From:
Insane since: Jan 2002

posted posted 04-18-2002 10:48

How do you decrypt html files that have been encrypted?

like:

code:
<script language="Javascript">
<!--

function process(ar)
{
var Stri=''

var y, z, sum, n, n1, number, j=0
var x=0
var key = new Array(1685979152,1684996106,1684733952,1684499968)

n1=8
for (j=0; j<ar.length; ++j)
{
for (i=0; i<ar[j].length-1; ++i)
{
sum=4055616968
n=n1
y=ar[j][i]
z=ar[j][++i]
while(n-->0)
{
z-=(y<<4)+key[2]^y+sum^(y>>5)+key[3]
y-=(z<<4)+key[0]^z+sum^(z>>5)+key[1]
sum-=0x9E3779B9
}

Stri+=String.fromCharCode(y&0xFF)+String.fromCharCode((y>>8)&0xFF)+String.fromCharCode((y>>16)&0xFF)+String.fromCharCode((y>>24)&0xFF)
Stri+=String.fromCharCode(z&0xFF)+String.fromCharCode((z>>8)&0xFF)+String.fromCharCode((z>>16)&0xFF)+String.fromCharCode((z>>24)&0xFF)
}
document.write(Stri)
Stri=''
window.status="Decrypt the HTML : "+Math.ceil(x++*100/0)+" % done ..."
}
window.status=""
}

function start() {
var ar=new Array()
ar[0]=new Array(557164637,924013813,-1459904442,907934083,-1705395120,512929546,517007134,-817684656,1837880812,604141668,1344811945,1294877758,686257404,1942936311,408945080,-.............. ..................................................................................................................................................................


1843666560,1208808035,1068334371,-823384466,-1365303478,-1218974869,915705791,-316387825,1232416338,483293841,-1577993460,1404450654,1905494244,1285159113,2065576590)

process(ar)
}
start()
//-->
</script>




i just added the .................... to cut the code down

is it possible to decrypt?

can you tell me how?

thanx

U ltra

::UltrA::

Ultra
Nervous Wreck (II) Inmate

From:
Insane since: Jan 2002

posted posted 04-18-2002 11:19

or pages like:

<BLOCKQUOTE><FONT face="Verdana, Arial">code:</font><HR><pre>

<SCRIPT LANGAGE="JavaScript">s="%!0po9zuxjj T;{vk!0

GRUMBLE
Paranoid (IV) Mad Scientist

From: Omicron Persei 8
Insane since: Oct 2000

posted posted 04-18-2002 12:04

well in the first case its just an array that holds a lot of integers, but the second one....
dont know where the sense of this would be.
seems as if someone is storing a fucking long string of ascii-chars in the variable s.

InI
Paranoid (IV) Mad Scientist

From: Somewhere over the rainbow
Insane since: Mar 2001

posted posted 04-18-2002 12:46

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

Slime
Lunatic (VI) Mad Scientist

From: Massachusetts, USA
Insane since: Mar 2000

posted posted 04-18-2002 15:00

The best way to do this is find where the document.write function is, and replace it with something like changing the value of a textbox which you make yourself. Note that you have to save the page to your hard drive in order to do this. Or, in an onload function, say body.innerText = body.innerHTML.

I wrote a perl script once that will take hard-to-read javascript code and indent it and all for you; I'll run it on that second thing you've got later. There *is* some real code in it, it's not just a string assignment.

InI
Paranoid (IV) Mad Scientist

From: Somewhere over the rainbow
Insane since: Mar 2001

posted posted 04-18-2002 15:38

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

Slime
Lunatic (VI) Mad Scientist

From: Massachusetts, USA
Insane since: Mar 2000

posted posted 04-18-2002 16:08

Heh =)

OK, after the string assignment in the second thing Ultra posted, there is the following JS:

code:
k=25;
t="";
r=0;
for(i=0;i<s.length;i++)
{
a=s.charCodeAt(i);
if(a==36)
{
++i;
r=1;
a=s.charCodeAt(i);
}
if(a==32)
{
++i;
a=(s.charCodeAt(i)-48)^k;
}
else if(a==33)
{
++i;
a=(s.charCodeAt(i)+77)^k;
}
else if(a==35)
{
++i;
a=(s.charCodeAt(i)+141)^k;
}
else a=a^k;
if(r==1)
{
r=2;
e=a;
}
else if(r==2)
{
r=0;
t=t+String.fromCharCode(a*256+e);
}
else t=t+String.fromCharCode(a);
}
document.write(t);



What a handy script =)

lallous
Paranoid (IV) Inmate

From: Lebanon
Insane since: May 2001

posted posted 04-19-2002 08:57

hello,

you do not really want to learn how to decrypt them!

just let it decrypt itself by itself and grab the output and dump into a new unencrypted file!

so basically,
in the process() , replace the document.write with something like:
decryptedStr += [what was ment to be document.write]

then at the end, do write:
<form name='f1'>
<textarea name='t'>
</textare>
</form>


<script>
document.f1.t.value = decryptedStr;
</script>


then copy/paste what you've got into that textarea and paste them in notepad and save that file!


basically, what you gave us decrypts to:

code:
<html>
<head>
<title>Team TND</title>
<meta http-equi}D d©jtmenu="return false">
</body>
</noframes>
</html>




edit: sorry Slime, it sounds that i unintentionally repeated your previous solution! after i've answered i read yours...

[This message has been edited by lallous (edited 04-19-2002).]

Ultra
Nervous Wreck (II) Inmate

From:
Insane since: Jan 2002

posted posted 04-20-2002 04:47

thank you all for the help

::UltrA::

Ultra
Nervous Wreck (II) Inmate

From:
Insane since: Jan 2002

posted posted 05-11-2002 07:38

lallous can you please explain a bit more how to do it i have tryied to follow your advise but all i get is jumbo mambo ?!?

here is a simple one:

code:
<html>

<head>
<meta HTTP-EQUIV="Expires" CONTENT="HTMLcrypt">


<script language="Javascript">
<!--

function process(ar)
{
var Stri=''

var y, z, sum, n, n1, number, j=0
var x=0
var key = new Array(1560299635,1079069748,390858345,1275614564)

n1=8
for (j=0; j<ar.length; ++j)
{
for (i=0; i<ar[j].length-1; ++i)
{
sum=4055616968
n=n1
y=ar[j][i]
z=ar[j][++i]
while(n-->0)
{
z-=(y<<4)+key[2]^y+sum^(y>>5)+key[3]
y-=(z<<4)+key[0]^z+sum^(z>>5)+key[1]
sum-=0x9E3779B9
}

Stri+=String.fromCharCode(y&0xFF)+String.fromCharCode((y>>8)&0xFF)+String.fromCharCode((y>>16)&0xFF)+String.fromCharCode((y>>24)&0xFF)
Stri+=String.fromCharCode(z&0xFF)+String.fromCharCode((z>>8)&0xFF)+String.fromCharCode((z>>16)&0xFF)+String.fromCharCode((z>>24)&0xFF)
}
document.write(Stri)
Stri=''
window.status="Decrypt the HTML : "+Math.ceil(x++*100/0)+" % done ..."
}
window.status=""
}

function start() {
var ar=new Array()
ar[0]=new Array(-1823280738,-2137347124,-1992589957,955993603,1698991551,1366042919,478433734,1873313634,-1060992819,-1490885277,1185078516,-1567095507,522069262,-234739196,2040113940,-16226 9424,-687664182,-1536752040,-216164014,1783571860,1293838411,-898404623,1063727891,-462839913,1390998453,-2045770623,-1846339008,-623399864,1068090568,-351786513,-991275753,-209703 915,-1991055297,-1589190792,-149541258,-1736009545,-1236207594,1388435029,154866956,-720542549,-184009583,101433770,-1093025038,331547607,1018727121,1199642614,-1542709456,-1619523 402,1573325923,-1500815758,1012450551,-488981870,862035763,-78756173,-1843514810,26449272,1900453153,675155144,-1236382385,-924168469,686779360,1459731584,-541920736,-818106004,686 779360,1459731584,-1324212272,676288237,1634546448,635056318,-229897366,-1037255454,626815782,-1576683172,-1759860516,1153160213,1167656911,1745754993,1695025924,338787378,-1682928 917,1446507087,-2053909926,-513442924,-44684587,-576446028,818095092,1046415707,1799424516,-1147820260,-1474621596,2103179116,1319946196,-578405004,1015178199,401876295,-1418053344 ,-429777320,-299724538,-389003358,1966009461,-1377729934,1232347246,688546828,-874826097,-154066370,1533213727,82905110,599667712,761520954,1089565304,1216625986,1565328310,-149698 1617,-1244337813,-1613951040)

process(ar)
}
start()
//-->
</script>

</body>
</html>




thank you

again

U
L
T
R
A

::UltrA::

mr.maX
Maniac (V) Mad Scientist

From: Belgrade, Serbia
Insane since: Sep 2000

posted posted 05-11-2002 09:46

Well, Lallous explained pretty much everything that you need to do, so I don't see where is the problem. Anyway, you can find a ready made page that will show decrypted code here: http://www.max.co.yu/ozone/ultra-decrypt.html


Ultra
Nervous Wreck (II) Inmate

From:
Insane since: Jan 2002

posted posted 05-11-2002 14:32

thank you Mr MAx !
i couldn't get it to work 100% without giving me errors !

thx al ot for the already made page

M.

::UltrA::

« BackwardsOnwards »

Show Forum Drop Down Menu