-
Notifications
You must be signed in to change notification settings - Fork 15
Open
Labels
enhancementNew feature or requestNew feature or request
Description
To Bypass Sucuri we need to solve this JavaScript code to extract another code and solve it to get the cookie
Level 1 Obfuscation
This the base JavaScript appear on the browser
<script>
var s={},u,c,U,r,i,l=0,a,e=eval,w=String.fromCharCode,sucuri_cloudproxy_js='',S='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';L=S.length;U=0;r='';var A='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';for(u=0;u<64;u++){s[A.charAt(u)]=u;}for(i=0;i<L;i++){c=s[S.charAt(i)];U=(U<<6)+c;l+=6;while(l>=8){((a=(U>>>(l-=8))&0xff)||(i<(L-2)))&&(r+=w(a));}}e(r);
</script>
Level 2 Obfuscation
This script is to generate cookie string.
o="4".slice(0,1) + "0sucur".charAt(0)+'8j79'.substr(3, 1) +"csucur".charAt(0)+String.fromCharCode(50) + 'VpI6'.substr(3, 1) +"" +'6' + 'iS6'.charAt(2)+"" +'7' + '' +''+'6' + 'oSc'.charAt(2)+String.fromCharCode(0x65) + "c".slice(0,1) + 'sDa'.charAt(2)+ '' +
'b' + '' +"0su".slice(0,1) + String.fromCharCode(0x66) + 'WeP8'.substr(3, 1) +'nH5'.charAt(2)+"" +"c" + '' +String.fromCharCode(51) + '' +'hV3'.charAt(2)+String.fromCharCode(57) + 'Ze'.slice(1,2)+"a" + '6' + 'Na'.slice(1,2)+"3su".slice(0,1) + "bsucur".charAt(0)+ '' +'b' + 'xZ5'.charAt(2)+ '' +
String.fromCharCode(0x62) + '' +''+'';document.cookie='ssuc'.charAt(0)+ 'u'+'c'+'sucuu'.charAt(4)+ 'rs'.charAt(0)+'i'+'_suc'.charAt(0)+ 'csucur'.charAt(0)+ 'lsucuri'.charAt(0) + 'o'+''+'usucuri'.charAt(0) + 'd'+'p'+'sur'.charAt(2)+'sucurio'.charAt(6)+'x'+'ysuc'.charAt(0)+ 'sucuri_'.charAt(6)+'u'+''+'u'+'i'+'d'.charAt(0)+'s_'.charAt(1)+'su0'.charAt(2)+'3'.charAt(0)+'3sucur'.charAt(0)+ '9sucu'.charAt(0) +'2'+'8'+''+'2suc'.charAt(0)+ 'csucu'.charAt(0) +'s5'.charAt(1)+"=" + o + ';path=/;max-age=86400'; location.reload();
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request