{"id":47316,"date":"2020-03-06T14:46:39","date_gmt":"2020-03-06T06:46:39","guid":{"rendered":"http:\/\/4563.org\/?p=47316"},"modified":"2020-03-06T14:46:39","modified_gmt":"2020-03-06T06:46:39","slug":"%e4%bb%98%e8%b4%b9%e6%b1%82%e4%bc%9ajs%e8%a7%a3%e5%af%86%e7%9a%84","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=47316","title":{"rendered":"\u4ed8\u8d39\u6c42\u4f1ajs\u89e3\u5bc6\u7684"},"content":{"rendered":"\n<p>  \t\t\t\t\t<strong>sunxiao123<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3>\u4ed8\u8d39\u6c42\u4f1ajs\u89e3\u5bc6\u7684<\/h3>\n<p>  \t\tsojson.v5\u7684\uff0c\u6709\u4e2a\u89e3\u5bc6\u811a\u672c\u4f46\u7528\u4e0d\u6765<\/p>\n<p>   (function (js_body) {&nbsp; &nbsp; \/\/ \u8131\u58f3 &amp;&amp; \u89e3\u5bc6&nbsp; &nbsp; let js_arr = js_body.split(&quot;n&quot;).pop().split(&#8216;;&#8217;),&nbsp; &nbsp;&nbsp; &nbsp;fun_name = \/vars+(_0x+)=\/.exec(js_arr),&nbsp; &nbsp;&nbsp; &nbsp;reg_str = fun_name + &#8216; \\(&#8216; + &quot;'([^&#8217;]+)&#8217;,s*'([^&#8217;]+)&#8217;&quot; + &#8216;\\)&#8217;,&nbsp; &nbsp;&nbsp; &nbsp;js_str = js_arr.slice(54, js_arr.length &#8211; 4).join(&#8216;;&#8217;),&nbsp; &nbsp;&nbsp; &nbsp;code_shell = js_arr.slice(0, 54).join(&#8216; ;&#8217;),&nbsp; &nbsp;&nbsp; &nbsp;shell_obj = eval(&quot;(function(){&quot; + code_shell + &quot;;return &quot; + fun_name + &quot;})()&quot;);&nbsp; &nbsp; js_str = js_str.replace(new RegExp(reg_str, &#8216;i&#8217;), function (str, id, key) {&nbsp; &nbsp;&nbsp; &nbsp;return &#8216;&quot;&#8217; + shell_obj(id, key) + &#8216;&quot;&#8217;;&nbsp; &nbsp; }).replace(\/(]+)s?[[&quot;&#8217;]([&quot;&#8217;]+)[&quot;&#8217;]]\/g, &#8216;$1.$2&#8217;).replace(\/(?&lt;!_)(0x+)\/g, function (hex) {&nbsp; &nbsp;&nbsp; &nbsp;return parseInt(hex).toString();&nbsp; &nbsp; });&nbsp; &nbsp; \/\/ \u8fd8\u539f\u6df7\u6dc6&nbsp; &nbsp; let obj = null, name = &#8221;;&nbsp; &nbsp; js_str = js_str.replace(\/{(va rs+(_0x+)= ({(.*)}));\/g, function (str, code_str, _name, obj_str) {&nbsp; &nbsp;&nbsp; &nbsp;obj = eval(&quot;(function () {return &quot; + obj_str + &quot;})()&quot;);&nbsp; &nbsp;&nbsp; &nbsp;name = _name;&nbsp; &nbsp;&nbsp; &nbsp;return &#8216;{&#8216;;&nbsp; &nbsp; });&nbsp; &nbsp; if (obj) {&nbsp; &nbsp;&nbsp; &nbsp;let i = 5;&nbsp; &nbsp;&nbsp; &nbsp;while (js_str.indexOf(name) &amp;&amp; &#8211;i &gt; 0) {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;for (const key in obj) {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; if (!obj.hasOwnProperty(key)) continue;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; if (typeof obj == &#8216;function&#8217;) {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;let fun_info = \/function s*_0x+(([^)]*)){returns*([^;]+);}\/.exec(obj.toString());&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;js_str = js_str.replace(new RegExp(name + &#8216;\\.&#8217; + key + &#8216;\\([^()]*)\\)&#8217;, &#8216;g&#8217;), function (string, args_str) {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;let args = args_str.split(&#8216;,&#8217;),&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; fun_args = fun_info.split(&#8216;,&#8217;),&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; fun_body = fun_info;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;fun_args.forEach(function (item, index) {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; fun_body = fun_body.replace(item, args);&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;});&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;return fun_body;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;});&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; } else if (typeof obj == &#8216;string&#8217;) {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;js_str = js_str.replace(name + &#8216;.&#8217; + key, &#8216;&quot;&#8217; + obj + &#8216;&quot;&#8217;);&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; } else {&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;js_str = js_str.replace(name + &#8216;.&#8217; + key, obj.toString());&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; }&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;}&nbsp; &nbsp;&nbsp; &nbsp;}&nbsp; &nbsp; }&nbsp; &nbsp; return js_str;})($(&#8216;#resultSource&#8217;).val() || $(&#8216;#jsdata&#8217;).val());<\/p>\n<p>  \t\t\t\t\t<strong>idc\u7cfb\u7edf<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\t\u4e0d\u9519\uff0c\u770b\u770b\u3002\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>\u4e00\u4f4d\u4e0d\u77e5\u540d\u7f51\u53cb<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\t\u4e0d\u9519\uff0c\u4f46\u662f\u6211\u4e0d\u4f1a\u554a\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>miniliuke<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\t\u8fd0\u884c\u4e00\u4e0b\u5c31\u80fd\u62ff\u5230\u89e3\u5bc6\u540e\u7684\u4ee3\u7801\u4e86\uff08\u4f46\u662f\u8fd8\u662f\u6df7\u6dc6\u7684\uff09\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>sunxiao123<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\tminiliuke \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-6 15:06<br \/>  \u8fd0\u884c\u4e00\u4e0b\u5c31\u80fd\u62ff\u5230\u89e3\u5bc6\u540e\u7684\u4ee3\u7801\u4e86\uff08\u4f46\u662f\u8fd8\u662f\u6df7\u6dc6\u7684\uff09<\/p>\n<p> \u600e\u4e48\u8fd0\u884c\uff0c\u6c42\u6307\u6559\t\t\t  <\/p>\n","protected":false},"excerpt":{"rendered":"<p>sunxiao123 \u5927\u4f6c\u6709\u8bdd\u8bf4 &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/47316"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=47316"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/47316\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=47316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=47316"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=47316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}