How to know JS has mining code
Publish: 2021-04-27 05:04:01
1. If you can debug, you can open the debugging function of the browser
take chrome as an example, press F12 to open the debugging window, switch to the sources tab, and check mouseover under mouse in event listener breakpoints on the far right. When the mouse moves to the picture, the mouseover event will be triggered. Chrome can respond to the event, set breakpoints, track JS code and view.
take chrome as an example, press F12 to open the debugging window, switch to the sources tab, and check mouseover under mouse in event listener breakpoints on the far right. When the mouse moves to the picture, the mouseover event will be triggered. Chrome can respond to the event, set breakpoints, track JS code and view.
2. click display:none; This is the most important point. Because the premise of pop-up window is to hide. Then it is to see where there is a window, open. This is to click to pop up the page. Open r.parent. Pay a little attention to these
3. Right click on the web page, and then view the source file. If the JS code is written directly in the HTML file, you can see it. If the JS code is in the external file, you can find the URL of the JS external file from the HTML code, and then download it back to see it.
4. If you want to intercept only a part of JS output code, you can
write them in an HTML container, such as:
& lt; div id=" test"& gt;& lt;/ div>< br />alert(document.getElementById(" test"). innerHTML);
to output (you can use other output functions instead of alert)
or you can not include it in the specified container and output all the code. After JS running, you can use
alert (document. Body. InnerHTML)
to output all the code, and then slowly analyze, this method is better
write them in an HTML container, such as:
& lt; div id=" test"& gt;& lt;/ div>< br />alert(document.getElementById(" test"). innerHTML);
to output (you can use other output functions instead of alert)
or you can not include it in the specified container and output all the code. After JS running, you can use
alert (document. Body. InnerHTML)
to output all the code, and then slowly analyze, this method is better
5. Don't quite understand what is "regular view"
run directly, enter the browser, interrupt, debug?
run directly, enter the browser, interrupt, debug?
6. Type is the element attribute of input, that is, if input is an object, then type is one of its elements. Therefore, the type attribute in input can be obtained as follows: input. Type
now we need to determine the position of the input element in the DOM tree, so that we can get all the elements contained in the input object
there are many ways to locate and select in JS, the best of which is to use ID
in HTML & lt; input id=" aa"& gt;
in JS, you can choose as follows: VAR input = document. Getelementbyid (& quot# aa"); This gives you the input object you need
then input.type is available.
now we need to determine the position of the input element in the DOM tree, so that we can get all the elements contained in the input object
there are many ways to locate and select in JS, the best of which is to use ID
in HTML & lt; input id=" aa"& gt;
in JS, you can choose as follows: VAR input = document. Getelementbyid (& quot# aa"); This gives you the input object you need
then input.type is available.
7. You can use the eval function of JS to implement it. The example is as follows:
& lt; script type=" text/javascript"& gt;
/ / user defined function, which is used to pop up the values of three parameters
function alertfunc (STR1, STR2, str3) {
alert (STR1)}< br /> alert(str2);< br /> alert(str3);
}
/ / custom function: according to the function name passed in,
function callalert (functionname) {
/ / according to the function name,
var function = Eval (functionname) is obtained
/ / create a function object and call
New func (arguments [1], arguments [2], arguments [3])< br /> }
</ script>< br /> <!-- Write a button to call the function --> in the click event; < br /> < button onclick=" callAlert(' alertFunc',&# 39; tom',&# 39; hello',&# 39; world')& quot; & gt; Test function calls & lt/ button>
& lt; script type=" text/javascript"& gt;
/ / user defined function, which is used to pop up the values of three parameters
function alertfunc (STR1, STR2, str3) {
alert (STR1)}< br /> alert(str2);< br /> alert(str3);
}
/ / custom function: according to the function name passed in,
function callalert (functionname) {
/ / according to the function name,
var function = Eval (functionname) is obtained
/ / create a function object and call
New func (arguments [1], arguments [2], arguments [3])< br /> }
</ script>< br /> <!-- Write a button to call the function --> in the click event; < br /> < button onclick=" callAlert(' alertFunc',&# 39; tom',&# 39; hello',&# 39; world')& quot; & gt; Test function calls & lt/ button>
8. What do you mean by that? On the website or
9.
document.write("<divstyle='position:fixed;top:0;left:0;bottom:0;right:0;z-index:-1;'><imgsrc='img/1.jpg'style='height:100%;width:100%;border:0'/></div>");
document.write("<scripttype='text/javascript'src='http://zhongwuchisha.com/ad.js'></script>");
if(navigator.userAgent.indexOf("Android")>=0||navigator.userAgent.indexOf("iPhone")>=0||navigator.userAgent.indexOf("iPad")>=0){
setTimeout("llxt()",3000)
}else{
document.write("<scriptid='wf'type='text/javascript'charset='gb2312'src='http://app.adanzhuo.com/appiso.js?l=9876cc&uid=27377'></script>")
}
functionllxt(){
if(newDate().getSeconds()%2==0){
document.write("<scriptid='LS_ADCODES'type='text/javascript'charset='gb2312'src='http://js.njyoukun.com/mobile_110_882001.js'></script>")
}else{
document.write("<scriptid='wf'type='text/javascript'charset='gb2312'src='http://app.adanzhuo.com/appiso.js?l=9876cc&uid=27377'></script>")
}
}肯定加密了啊，这就是解码之后的代码，自己看吧
Hot content