tes*_*ing 6 javascript email encryption
我有以下JavaScript代码:
<script type='text/javascript'>
var v2="xxxxx";
var v7=unescape("%2%3432jklsjdkls%");
var v5=v2.length;
var v1="";
for(var v4=0;v4<v5;v4++){
v1+=String.fromCharCode(v2.charCodeAt(v4)^v7.charCodeAt(v4));
}
document.write('<a href="javascript:void(0)" onclick="window.location=\'mail\u0074o\u003a'+v1+'?subject='+'\'">'+'test(at)test(dot)com<\/a>');
</script>
Run Code Online (Sandbox Code Playgroud)
这段代码在一行上,我没有其他可能性.现在我必须更改电子邮件地址,但我需要v2和v7我无法创建的地址.
你知道这个片段的来源吗?您是否知道另一种安全的算法(不仅仅是采用ASCI值)?这里使用ASCII码,XOR连接和加密值+密钥.
Zaf*_*ffy 15
我会做一些更简单,同样有效的事情:
<a href="javascript:window.location.href = 'mailto:' + ['john','smith.com'].join('@')">john<!---->@<!---->smith.com</a>
mailto: 链接被混淆并且对机器人来说是不可读的<span>带display: none这里提到了两个外部工具.对于这两种情况,您需要先使用电子邮件生成Javascript代码.
<!-- Add these lines to <head></head> -->
<script type="text/javascript"> <!--
function UnCryptMailto( s )
{
var n = 0;
var r = "";
for( var i = 0; i < s.length; i++)
{
n = s.charCodeAt( i );
if( n >= 8364 )
{
n = 128;
}
r += String.fromCharCode( n - 1 );
}
return r;
}
function linkTo_UnCryptMailto( s )
{
location.href=UnCryptMailto( s );
}
// --> </script>
<!-- Use above link to generate your crypted email (example): -->
<a href="javascript:linkTo_UnCryptMailto('nbjmup;uftuAuftu/dpn');">test [at] test [dot] com</a>
Run Code Online (Sandbox Code Playgroud)
<script type="text/javascript" language="javascript">
<!--
// Email obfuscator script 2.1 by Tim Williams, University of Arizona
// Random encryption key feature coded by Andrew Moulden
// This code is freeware provided these four comment lines remain intact
// A wizard to generate this code is at http://www.jottings.com/obfuscator/
{ coded = "34M3@34M3.nmp"
key = "594NIGdDgELkcwoAbPQirZaYCn1mWhURt0syV7Ojpqf8H3XMFvlezJTS2ux6KB"
shift=coded.length
link=""
for (i=0; i<coded.length; i++) {
if (key.indexOf(coded.charAt(i))==-1) {
ltr = coded.charAt(i)
link += (ltr)
}
else {
ltr = (key.indexOf(coded.charAt(i))-shift+key.length) % key.length
link += (key.charAt(ltr))
}
}
document.write("<a href='mailto:"+link+"'>Example</a>")
}
//-->
</script><noscript>Sorry, you need Javascript on to email me.</noscript>
Run Code Online (Sandbox Code Playgroud)
该工具最初由亚利桑那大学的蒂姆·威廉姆斯构思和编写.每次使用工具时随机生成不同加密密钥的代码都是由Andrew Moulden编写的.Celtic Productions Ltd的 Ross Killen 也创建了一个PHP版本,以便在Web应用程序中使用这种技术.
此代码作为免费软件发布,前提是作者的信用等完全如图所示.
| 归档时间: |
|
| 查看次数: |
21085 次 |
| 最近记录: |