大佬帮忙看下这种v7加密的解出来报错

[echo094]

大佬帮忙看下这种v7加密的解出来报错

[wzal2008]

脚本地址https://github.com/walle1798/EVE/blob/master/m_jd_wx_cartKoi.js

[echo094]

脚本地址https://github.com/walle1798/EVE/blob/master/m_jd_wx_cartKoi.js

是无法解混淆还是运行报错？

[wzal2008]

解密时这种const lll11llI=IiI1IiII;function IiI1IiII解不出，感谢回复

[echo094]

贴一下报错内容吧

[wzal2008]

[wzal2008]

解密后，运行报错

[echo094]

解密后，运行报错

从图上看解混淆都是正常的，输出的都是正常的提示内容。

这个jsjiami的配置包括防格式化检查，如果解混淆了会被这个函数检测到然后执行死循环。
在这个脚本里解混淆后到第一个函数就是检测函数，你把它删了就能正常运行。

我后续看看有没有特征，在解混淆时一并把它删除。

以下是脚本里的检测代码：

const lIliIi11 = function () {
  let lilI1Ii = true;
  return function (llll1I11, ll1l1lI) {
    const ii11il1 = lilI1Ii ? function () {
      if (ll1l1lI) {
        const IiI1li = ll1l1lI.apply(llll1I11, arguments);
        return ll1l1lI = null, IiI1li;
      }
    } : function () {};
    return lilI1Ii = false, ii11il1;
  };
}(),
      lI11I1l = lIliIi11(this, function () {
  return lI11I1l.toString().search("(((.+)+)+)+$").toString().constructor(lI11I1l).search("(((.+)+)+)+$");
});

lI11I1l();

[wzal2008]

谢谢

[echo094]

解密时这种const lll11llI=IiI1IiII;function IiI1IiII解不出，感谢回复

这个函数是解了混淆的，只是变量名太多让你以为没有解。

为了提高混淆的复杂度，大部分混淆器在混淆时会将变量名会不可逆地变为可读性差的名字（不会影响这段代码的运行，但会导致外部代码无法调用），而解混淆只能还原可逆变换。

正是因为不可逆的副作用，加密网站（比如jsjiami）会让你输入需要保留名字的变量。

[wzal2008]

谢谢大佬回复，脚本运行报没有授权，这个链接里的脚本EVE/magic.js at master · walle1798/EVE (github.com)最后一段也是v7加密，解密后，不知授权在哪一段，大佬看有空能帮我删除掉不？我在一个无界收费群里，但一些定制脚本我都没有，放出来了，又要授权。

…

------------------ 原始邮件 ------------------ 发件人: "echo094/decode-js" ***@***.***>; 发送时间: 2023年7月27日(星期四) 晚上9:17 ***@***.***>; ***@***.******@***.***>; 主题: Re: [echo094/decode-js] 大佬帮忙看下这种v7加密的解出来报错 (Issue #20) 解密时这种const lll11llI=IiI1IiII;function IiI1IiII解不出，感谢回复 这个函数是解了混淆的，只是变量名太多让你以为没有解。 为了提高混淆的复杂度，大部分混淆器在混淆时会将变量名会不可逆地变为可读性差的名字（不会影响这段代码的运行，但会导致外部代码无法调用），而解混淆只能还原可逆变换。 正是因为不可逆的副作用，加密网站（比如jsjiami）会让你输入需要保留名字的变量。 — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: ***@***.***>

[echo094]

谢谢大佬回复，脚本运行报没有授权，这个链接里的脚本EVE/magic.js at master · walle1798/EVE (github.com)最后一段也是v7加密，解密后，不知授权在哪一段，大佬看有空能帮我删除掉不？我在一个无界收费群里，但一些定制脚本我都没有，放出来了，又要授权。

我只解决有关本工具的问题，magic.js的解混淆没问题，你直接在本地调试一下就知道该删什么代码了。

[wzal2008]

------------------ 原始邮件 ------------------ 发件人: "echo094/decode-js" ***@***.***>; 发送时间: 2023年7月27日(星期四) 下午4:36 ***@***.***>; ***@***.******@***.***>; 主题: Re: [echo094/decode-js] 大佬帮忙看下这种v7加密的解出来报错 (Issue #20) — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: ***@***.***>

[wzal2008]

报错截图

[echo094]

报错截图

这是哪个脚本，看着像是脚本自己的代码有问题啊，本身能运行吗？

unterminated comment：注释的*/是不是被删了

[wzal2008]

注释删掉了 脚本是这个

[wzal2008]

邮箱附件里发了脚本

[echo094]

邮箱附件里发了脚本

没发上来吧，这边没看到

[wzal2008]

------------------ 原始邮件 ------------------ 发件人: "echo094/decode-js" ***@***.***>; 发送时间: 2023年7月29日(星期六) 下午5:12 ***@***.***>; ***@***.******@***.***>; 主题: Re: [echo094/decode-js] 大佬帮忙看下这种v7加密的解出来报错 (Issue #20) 脚本已发附件 — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: ***@***.***>

[echo094]

脚本已发附件

邮件里发附件这边看不到，你要在网页上贴进来，直接拖到编辑框里。

[wzal2008]

今日头条多号.zip

[wzal2008]

直接发脚本报错，我发压缩包

[echo094]

今日头条多号.zip

这个文件在我这边没问题啊。

[echo094]

脚本地址https://github.com/walle1798/EVE/blob/master/m_jd_wx_cartKoi.js

已更新，能够自动删除这类保护代码。

[wzal2008]

谢了，大佬

…

------------------ 原始邮件 ------------------ 发件人: ***@***.***>; 发送时间: 2023年7月31日(星期一) 晚上7:19 收件人: ***@***.***>; 抄送: ***@***.***>; ***@***.***>; 主题: Re: [echo094/decode-js] 大佬帮忙看下这种v7加密的解出来报错 (Issue #20) 脚本地址https://github.com/walle1798/EVE/blob/master/m_jd_wx_cartKoi.js 已更新，能够自动删除这类保护代码。 — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: ***@***.***>

[wzal2008]

这段是卡密验证段，怎样修改能过验证，想学习学习，费心了 !(async () =&gt; { &nbsp; if (!(await checkEnv())) return; &nbsp; DoubleLog("\n??��Աע�᣺http://www.lekebo.top"); &nbsp; DoubleLog("\n🎉交流 Q群：104062430、317929242"); &nbsp; await checktoken(); &nbsp; console.log("\n================ 本次运行脚本结束 ==============="); })().catch(_0x1f2150 =&gt; console.log(_0x1f2150)).finally(() =&gt; $.done()); async function checkEnv() { &nbsp; if (userCookie) { &nbsp; &nbsp; let _0x30ba2b = envSplitor[0]; &nbsp; &nbsp; for (let _0x51635d of envSplitor) if (userCookie.indexOf(_0x51635d) &gt; -1) { &nbsp; &nbsp; &nbsp; _0x30ba2b = _0x51635d; &nbsp; &nbsp; &nbsp; break; &nbsp; &nbsp; } &nbsp; &nbsp; for (let _0x5afcd4 of userCookie.split(_0x30ba2b)) _0x5afcd4 &amp;&amp; userList.push(new UserInfo(_0x5afcd4)); &nbsp; &nbsp; userCount = userList.length; &nbsp; } else { &nbsp; &nbsp; console.log("\n\n ��ܰ��ʾ����û�н���ϵͳ��������û��д����\n\n"); &nbsp; &nbsp; return; &nbsp; } &nbsp; return true; } async function checktoken() { &nbsp; let _0x42914 = [], &nbsp; &nbsp; &nbsp; _0x3c1ac1 = ($.isNode() ? process.env.lekebo_user_token : $.getdata("lekebo_user_token")) || "", &nbsp; &nbsp; &nbsp; _0x12f0d9 = _0x3c1ac1.includes("@") ? "@" : "\n", &nbsp; &nbsp; &nbsp; _0x4a78d1 = _0x3c1ac1.split(_0x12f0d9); &nbsp; for (let _0x24a21b of _0x4a78d1) if (_0x24a21b) _0x42914.push(_0x24a21b); &nbsp; if (_0x42914.length == 0) { &nbsp; &nbsp; return console.log("\n\n 温馨提示：您没有建立平台参数或没有填写账号密码\n\n"), false; &nbsp; } &nbsp; console.log("\n================ ƽ̨�� " + _0x42914.length + " 个会员 ================ \n\n 脚本执行✌北京时间(UTC+8)：" + new Date(new Date().getTime() + new Date().getTimezoneOffset() * 60 * 1000 + 8 * 60 * 60 * 1000).toLocaleString() + " "); &nbsp; versionupdate == 1 ? (await getVersion(), console.log("\n================ 版本对比检查更新 ==============="), scriptVersionLatest != scriptVersion ? (console.log("\n 当前版本：" + scriptVersion + "，更新时间：" + update_tines), console.log("\n 最新版本：" + scriptVersionLatest), console.log("\n ������Ϣ��" + update_data)) : console.log("\n �汾��Ϣ��" + scriptVersion + " ，已是最新版本无需更新开始执行脚本")) : (console.log("\n================ 版本对比检查更新 ==============="), console.log("\n 当前版本:" + scriptVersion + "，更新时间:" + update_tines + "�����費���°汾")); &nbsp; console.log("\n================ 脚本会员登陆检查 ==============="); &nbsp; for (userIdx = 0; userIdx < _0x42914.length; userIdx++) { &nbsp; &nbsp; let _0x59f5d8 = _0x42914[userIdx].split("&amp;"); &nbsp; &nbsp; await usertoken_login(_0x59f5d8[0], _0x59f5d8[1], 2 * 1000); &nbsp; } } async function usertoken_login(_0x3f66ff, _0x33d650, _0x1e4e23 = 2000) { &nbsp; return new Promise(_0x404fec =&gt; { &nbsp; &nbsp; let _0x56f685 = { &nbsp; &nbsp; &nbsp; "url": "http://www.lekebo.top/api/index.php?mod=user&amp;act=login", &nbsp; &nbsp; &nbsp; "headers": { &nbsp; &nbsp; &nbsp; &nbsp; "Host": "www.lekebo.top", &nbsp; &nbsp; &nbsp; &nbsp; "Connection": "Keep-Alive", &nbsp; &nbsp; &nbsp; &nbsp; "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8", &nbsp; &nbsp; &nbsp; &nbsp; "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.5359.125 Safari/537.36" &nbsp; &nbsp; &nbsp; }, &nbsp; &nbsp; &nbsp; "body": "username=" + _0x3f66ff + "&amp;code=&amp;checkcode=0&amp;password=" + _0x33d650 &nbsp; &nbsp; }; &nbsp; &nbsp; $.post(_0x56f685, async (_0x40707c, _0x5e413e, _0x3718db) =&gt; { &nbsp; &nbsp; &nbsp; try { &nbsp; &nbsp; &nbsp; &nbsp; if (_0x40707c) { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $.logErr(_0x40707c); &nbsp; &nbsp; &nbsp; &nbsp; } else { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; let _0x5f0027 = JSON.parse(_0x3718db); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (_0x5f0027.code == 1) { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; let _0x3b9def = getTime(_0x5f0027.data.userdate * 1000); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (_0x5f0027.data.groupid == 1) _0x5f0027.data.userdate &gt; 0 ? (DoubleLog("\n 普通用户: " + _0x5f0027.data.username + "���ű�ʱ��:" + _0x3b9def), userList.length &gt; 10 ? (DoubleLog("\n================ 执行脚本 " + userList.length + " ���˺� ================"), DoubleLog("\n\n ��ܰ��ʾ�������˻���������ָ�������������������˺�\n")) : (DoubleLog("\n================ 执行脚本 " + userList.length + " 个账号 ================"), await start())) : (DoubleLog("\n 普通用户: " + _0x5f0027.data.username + "，脚本时间:" + getTime(times * 1000)), DoubleLog("\n================ ִ�нű� " + userList.length + " 个账号 ================"), DoubleLog("\n\n 温馨提示：您是本站普通用户无法运行，请升级此账号\n"));else { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (_0x5f0027.data.groupid == 2) { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (_0x5f0027.data.userdate &gt; 0) { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DoubleLog("\n 会员用户: " + _0x5f0027.data.username + "，脚本时间:" + _0x3b9def); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (userList.length &gt; 100) { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DoubleLog("\n================ 脚本共 " + userList.length + " 个账号 ================"); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DoubleLog("\n\n 温馨提示：您的账户超出作者指定的数量，请升级此账号\n"); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else DoubleLog("\n================ �ű��� " + userList.length + " 个账号 ================"), await start(); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else DoubleLog("\n ��Ա�û�: " + _0x5f0027.data.username + "，脚本时间:" + getTime(times * 1000)), userList.length &gt; 10 ? (DoubleLog("\n================ 脚本共 " + userList.length + " ���˺� ================"), DoubleLog("\n\n 温馨提示：您的账户超出作者指定的数量，请升级此账号\n")) : (DoubleLog("\n================ �ű��� " + userList.length + " 个账号 ================"), await start()); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else DoubleLog("\n 登陆错误: " + _0x5f0027.message), DoubleLog("\n================ 开始执行会员脚本 ==============="), DoubleLog("\n\n ��ܰ��ʾ�����IJ�û�е�½����ִ����������ϵ����\n"); &nbsp; &nbsp; &nbsp; &nbsp; } &nbsp; &nbsp; &nbsp; } catch (_0x6b9814) { &nbsp; &nbsp; &nbsp; &nbsp; $.logErr(_0x6b9814, _0x5e413e); &nbsp; &nbsp; &nbsp; } finally { &nbsp; &nbsp; &nbsp; &nbsp; _0x404fec(); &nbsp; &nbsp; &nbsp; } &nbsp; &nbsp; }, _0x1e4e23); &nbsp; }); } function getVersion(_0x180e40 = 3 * 1000) { &nbsp; return new Promise(_0x3ded12 =&gt; { &nbsp; &nbsp; let _0x498056 = { &nbsp; &nbsp; &nbsp; "url": "https://ghproxy.com/https://raw.githubusercontent.com/qq274023/lekebo/master/lekebo_akrd.js" &nbsp; &nbsp; }; &nbsp; &nbsp; $.get(_0x498056, async (_0x4111ab, _0x49dd3a, _0x1f5a46) =&gt; { &nbsp; &nbsp; &nbsp; try { &nbsp; &nbsp; &nbsp; &nbsp; scriptVersionLatest = _0x1f5a46.match(/scriptVersion = "([\d\.]+)"/)[1]; &nbsp; &nbsp; &nbsp; &nbsp; update_data = _0x1f5a46.match(/update_data = "(.*?)"/)[1]; &nbsp; &nbsp; &nbsp; } catch (_0x58f652) { &nbsp; &nbsp; &nbsp; &nbsp; $.logErr(_0x58f652, _0x49dd3a); &nbsp; &nbsp; &nbsp; } finally { &nbsp; &nbsp; &nbsp; &nbsp; _0x3ded12(); &nbsp; &nbsp; &nbsp; } &nbsp; &nbsp; }, _0x180e40); &nbsp; }); } Message ID: ***@***.***&gt;

[echo094]

这段是卡密验证段，怎样修改能过验证，想学习学习，费心了

这不在本项目的讨论范围内。

这部分代码还是比较简单的，建议自己尝试看懂。