Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Script obfuscation, filter evasion, IDS/IPS/WAF bypassing... this is where it should live. Because this topic is too big to live anywhere else. Phj33r! 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Pages: Previous12
Current Page: 2 of 2
Re: Diminutive NoAlNum JS Contest
Posted by: Gareth Heyes
Date: September 01, 2009 03:42AM

Snipers, Snipers everywhere :P

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: LeverOne
Date: February 01, 2010 06:25PM

63

([,Á,È,ª,É,,Ó]=!{}+{},[[Ç,µ]=!!Á+Á][ª+Ó+µ+Ç])()[Á+È+É+µ+Ç](-~Á)

or in the same vein

([Ç,µ,,É,,Ó]=!''+{},[[,Á,È,ª]=!Ç+Ç][ª+Ó+µ+Ç])()[Á+È+É+µ+Ç](-~Ç)

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: sirdarckcat
Date: February 02, 2010 01:38AM

sweeet!! :)

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: Gareth Heyes
Date: February 02, 2010 02:43AM

Man, 63! I wonder how low this can go. I also wonder about the tricks we've not discovered

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: sirdarckcat
Date: February 02, 2010 02:50AM

this will go on forever haha

@gareth, dude, you should update your signature.. 88 chars!! that's oooolld :)


its interesting how we can get an answe for the JS great wall, but not for this one :P

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: Anonymous User
Date: February 02, 2010 04:17AM

Nice nice nice! 63 :) incredible haha... sweet trick with the string splitting!

I have a 62 - but I cheated lol
([,ø,ª,Á,µ,,È]=!$+{},[[Ç,Å]=!!$+ø][Á+È+Å+Ç])()[ø+ª+µ+Å+Ç](-~$)

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: sirdarckcat
Date: February 02, 2010 09:55AM

hmmm
$ is not defined
javascript:%20([,%C3%B8,%C2%AA,%C3%81,%C2%B5,,%C3%88]=!$+{},[[%C3%87,%C3%85]=!!$+%C3%B8][%C3%81+%C3%88+%C3%85+%C3%87])()[%C3%B8+%C2%AA+%C2%B5+%C3%85+%C3%87](-~$)
Line 1

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: Anonymous User
Date: February 02, 2010 11:08AM

I was douche-baggy and assumed Firebug is installed - as said.. cheated :P

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: Gareth Heyes
Date: February 02, 2010 03:42PM

I welcome the cheating :) cheating is a big part of js hacking

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: SW
Date: February 07, 2010 03:03PM

Nice find! Cannot imagine getting shorter, given there's barely anything extra in there.



Edited 2 time(s). Last edit at 02/07/2010 04:19PM by SW.

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: Gareth Heyes
Date: May 11, 2010 04:12AM

So was gonna write a decoder to decode non-alpha code but.....

$=-~-~[],_=-~$,$$$$=$<<$,$$=$$$$+~[];$$$$$$$$=(_-_)[$$$$$$$$$$$$$$$$=(''+{})[$+_]+(''+{})[_-$]+([]._+'')[_-$]+(!!''+'')[_]+({}+'')[_+_]+(!''+'')[_-$]+(!''+'')[$]+(''+{})[$+_]+({}+'')[_+_]+(''+{})[_-$]+(!''+'')[_-$]][$$$$$$$$$$$$$$$$];$$$$$$$$($$$$$$$$((!''+'')[_-$]+(!''+'')[_]+(!''+'')[_-_]+(!''+'')[$]+((!''+''))[_-$]+([].$+'')[_-$]+'\''+''+'\\'+(_-$)+($+$)+(_-$)+'\\'+(_-$)+($+_)+($+$)+'\\'+(_-$)+($+$)+($+_)+'\\'+(_-$)+(_+_)+($)+'\\'+(_-$)+(_+_)+($+$)+'\\'+($+_)+(_-_)+'\\'+(_-$)+($+_)+($+$)+'\\'+(_-$)+($+_)+($$)+'\\'+(_-$)+($+$)+(_)+'\\'+(_-$)+($+$)+(_-$)+'\\'+(_-$)+(_+_)+($+$)+'\\'+(_-$)+($+_)+(_-$)+'\\'+(_-$)+($+_)+($$)+'\\'+(_-$)+($+_)+(_+_)+'\\'+($+_)+(_-$)+'\'')())()

JSReg does it for me =)

var $$$,$_$,$$$$$$,$$$$,$$$$$$$$$$,$$$$$$$$$$$$$$$$$$,$anonymous$,$location$;$window$.$$$=$$$;$window$.$_$=$_$;$window$.$$$$$$=$$$$$$;$window$.$$$$=$$$$;$window$.$$$$$$$$$$=$$$$$$$$$$;$window$.$$$$$$$$$$$$$$$$$$=$$$$$$$$$$$$$$$$$$;$window$.$anonymous$=$anonymous$;$window$.$location$=$location$;
func=function $anonymous$() {if(!JSREG_FUNC.checkMaxFunctCalls()){return false};var __this__=JSREG_FUNC.getThis(this);var $arguments$=[].slice.call(arguments,0);
$alert$($location$);//decoded :D
}

Update...
Tried with other vectors and there are parsing errors but I think it could be used with a little tweaks

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]



Edited 1 time(s). Last edit at 05/11/2010 04:20AM by Gareth Heyes.

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: sirdarckcat
Date: May 20, 2010 08:40PM

> $alert$($location$)

nice!!
(it's in globals.Function code)

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: LeverOne
Date: June 10, 2011 02:01PM

I declare legendary contest is open again. :)
Sla.ckers.org is waiting for your shots!

----------------------
~Veritas~



Edited 1 time(s). Last edit at 06/10/2011 02:03PM by LeverOne.

Options: ReplyQuote
Re: Diminutive NoAlNum JS Contest
Posted by: peter
Date: December 04, 2013 03:51AM

http://sla.ckers.org/forum/read.php?24,28687

_=[]|[];$=_++;__=(_<<_);___=(_<<_)+_;____=__+__;_____=__+___;$$=({}+"")[_____]+({}+"")[_]+({}[$]+"")[_]+(($!=$)+"")[___]+(($==$)+"")[$]+(($==$)+"")[_]+(($==$)+"")[__]+({}+"")[_____]+(($==$)+"")[$]+({}+"")[_]+(($==$)+"")[_];$$$=(($!=$)+"")[_]+(($!=$)+"")[__]+(($==$)+"")[___]+(($==$)+"")[_]+(($==$)+"")[$];$_$=({}+"")[_____]+({}+"")[_]+({}+"")[_]+(($!=$)+"")[__]+({}+"")[__+_____]+({}+"")[_____]+({}+"")[_]+({}[$]+"")[__]+(($==$)+"")[___]; ($)[$$][$$]($$$+"('"+$_$+"')")()

1. pspad preformatovat na strukturovany css
2. alert([_, $, __, ___, ____, _____, $$, $_$]); //1,0,2,3,4,5,constructor,cool code
3. alert(($)[$$][$$]($$$+"('"+$_$+"')"));

function anonymous() {
alert('cool code')
}

========

http://kod.djpw.cz/ycu
<p onclick='toggle(this, "cervena")'>Text pro kliknuti</p>
<script>
eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]||c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('f 9=["\\c\\e\\a\\h\\h\\l\\a\\i\\d","\\i\\a\\k\\c\\m","","\\n\\d\\j\\e\\a\\c\\d","\\o"];f 7=[9[0],9[1],9[2],9[3],9[4]],5=[7[0],7[1],7[2],7[3],7[4]];g q(6,8,b){6&&(6[5[0]]=6[5[0]]==b?8:b)};g p(6,8){6[5[0]][5[1]](8)?6[5[0]]=6[5[0]][5[3]](8,5[2]):6[5[0]]+=5[4]+8};',27,27,'|||||_0x93ae|_0xaadex4|_0x59a5|_0xaadex5|_0xab05|x61|_0xaadex6|x63|x65|x6C|var|function|x73|x6D|x70|x74|x4E|x68|x72|x20|toggle|toggleClass'.split('|'),0,{}))
</script>


1. pspad preformatovat na strukturovany css
2. alert(function(p,a,c,k,e,d){...})
3. FF (firefox)
_0xaadex4 = document.getElementsByTagName('P')[0];
_0xaadex5 = "cervena";
reg = /([\[\]])/gm;
a = toggle.toSource().toString()
.replace(new RegExp('_0xaadex4','gm'),'el')
.replace(new RegExp('_0xaadex5','gm'),'str')
;
x = '_0x93ae';
for (i=0;i<eval(x).length;i++)
{
a = a.replace(new RegExp((x+'['+i+']').replace(reg,'\\$1'),'gm'),'\''+eval(x)+'\'')
}

alert([_0xab05, _0x59a5]) //className,match,,replace, ,className,match,,replace,
alert(_0x93ae) // className,match,,replace,
alert(a);

---

function toggle(el,str) {
el['className']['match'](str)?el['className']=el['className']['replace'](str,''): el['className']+=' '+str
}
//toggleClass - no use

Options: ReplyQuote
Pages: Previous12
Current Page: 2 of 2


Sorry, only registered users may post in this forum.