大神来看看这段JS返回值是什么

Harry·

<script>
var x="BtIo@Path@captcha@catch@07@e@attachEvent@return@1500@challenge@window@f@Expires@w@2@D@setTimeout@length@replace@href@4c@addEventListener@__jsl_clearance@String@3@1462637277@DOMContentLoaded@i@location@__phantomas@x@Sat@XG@document@toString@GMT@U@36@false@02@eval@_phantom@try@16@if@1@17@Bjq@May@for@else@fromCharCode@cd@57@parseInt@cookie@join@while@function@dc@4@var@0@l@onreadystatechange".replace(/@*$/,"").split("@"),y="26 28=23(){22(b.1e||b.12){};26 1p,24='n=q.1c|27|';26 c=[23(13){8 13},23(13){8 13;},23(13){8 1d('o.1o('+13+')')},23(13){1m(26 10=27;10<13.i;10++){13[10]=1r(13[10]).17(1a)};8 13.21('')}];1p=[[(-~[(-~{}+[((+!-[])<<(+!-[]))+((+!-[])<<(+!-[]))]>>-~{})]+[]+[[]][~~[]])+[-![]-~[-~-~{}]]],'25%f',[(-~[(-~{}+[((+!-[])<<(+!-[]))]>>((+!-[])<<(+!-[])))+(-~{}+[((+!-[])<<(+!-[]))]>>((+!-[])<<(+!-[])))]+[[]][~~{}])+(~~{}+[(+[]), []][-~{}])],'e',[[-~[-~-~{}]]+(~~{}+[(+[]), []][-~{}]),[f]+(~~{}+[(+[]), []][-~{}])],'15',[[f]+[-![]-~[-~-~{}]],[f]+[-~[-~-~{}]]],[-![]-~[-~-~{}]]+(-~[(-~{}+[((+!-[])<<(+!-[]))+((+!-[])<<(+!-[]))]>>-~{})]+[]+[[]][~~[]])+[-~[-~-~{}]],'%',[f],'1',[[f]+[f],[f]+(~~{}+[(+[]), []][-~{}])],'19',[-![]-~[-~-~{}]],'1k%f',[[-![]-~{}-~{}-~[-~-~{}]]+[-![]-~{}-~{}-~[-~-~{}]]],'l%',[-~[-~-~{}]],'g'];1m(26 10=27;10<1p.i;10++){1p[10]=c[[f,1i,f,1i,p,1i,p,27,1i,27,1i,p,1i,27,1i,f,1i,27,1i][10]](1p[10])};1p=1p.21('');24+=1p;h('11.k=11.k.j(/[\\?|&]3-a/,\\'\\')',9);16.20=(24+';d=14, 5-1l-1g 1j:5:1q 18;2=/;');};1h((23(){1f{8 !!b.m;}4(6){8 1b;}})()){16.m('r',28,1b);}1n{16.7('29',28);}",z=0,f=function(x,y)
{
        var a=0,b=0,c=0;
        x=x.split("");
        y=y||99;
        while((a=x.shift())&&(b=a.charCodeAt(0)-77.5))c=(Math.abs(b)<13?(b+48.5):parseInt(a,36))+y*c;
        return c
}
,g=y.match(/\b\w+\b/g).sort(function(x,y)
{
        return f(x)-f(y)
}
).pop();
while(f(g,++z)-x.length)
{
};
eval(y.replace(/\b\w+\b/g, function(y)
{
        return x[f(y,z)-1]
}
));
</script>

getpostor

解密后是这样的：

1. var l = function() {
   
2.     while (window._phantom || window.__phantomas) {};
   
3.     var cd, dc = '__jsl_clearance=1462637277.02|0|';
   
4.     var f = [function(x) {
   
5.         return x
   
6.     },
   
7.     function(x) {
   
8.         return x;
   
9.     },
   
10.     function(x) {
    
11.         return eval('String.fromCharCode(' + x + ')')
    
12.     },
    
13.     function(x) {
    
14.         for (var i = 0; i < x.length; i++) {
    
15.             x[i] = parseInt(x[i]).toString(36)
    
16.         };
    
17.         return x.join('')
    
18.     }];
    
19.     cd = [[( - ~ [( - ~ {} + [(( + !-[]) << ( + !-[])) + (( + !-[]) << ( + !-[]))] >> -~ {})] + [] + [[]][~~ []]) + [ - ![] - ~ [ - ~ - ~ {}]]], '4%2', [( - ~ [( - ~ {} + [(( + !-[]) << ( + !-[]))] >> (( + !-[]) << ( + !-[]))) + ( - ~ {} + [(( + !-[]) << ( + !-[]))] >> (( + !-[]) << ( + !-[])))] + [[]][~~ {}]) + (~~ {} + [( + []), []][ - ~ {}])], 'w', [[ - ~ [ - ~ - ~ {}]] + (~~ {} + [( + []), []][ - ~ {}]), [2] + (~~ {} + [( + []), []][ - ~ {}])], 'XG', [[2] + [ - ![] - ~ [ - ~ - ~ {}]], [2] + [ - ~ [ - ~ - ~ {}]]], [ - ![] - ~ [ - ~ - ~ {}]] + ( - ~ [( - ~ {} + [(( + !-[]) << ( + !-[])) + (( + !-[]) << ( + !-[]))] >> -~ {})] + [] + [[]][~~ []]) + [ - ~ [ - ~ - ~ {}]], '%', [2], 'BtIo', [[2] + [2], [2] + (~~ {} + [( + []), []][ - ~ {}])], 'U', [ - ![] - ~ [ - ~ - ~ {}]], 'Bjq%2', [[ - ![] - ~ {} - ~ {} - ~ [ - ~ - ~ {}]] + [ - ![] - ~ {} - ~ {} - ~ [ - ~ - ~ {}]]], '4c%', [ - ~ [ - ~ - ~ {}]], 'D'];
    
20.     for (var i = 0; i < cd.length; i++) {
    
21.         cd[i] = f[[2, 1, 2, 1, 3, 1, 3, 0, 1, 0, 1, 3, 1, 0, 1, 2, 1, 0, 1][i]](cd[i])
    
22.     };
    
23.     cd = cd.join('');
    
24.     dc += cd;
    
25.     setTimeout('location.href=location.href.replace(/[\?|&]captcha-challenge/,\'\')', 1500);
    
26.     document.cookie = (dc + ';Expires=Sat, 07-May-16 17:07:57 GMT;Path=/;');
    
27. };
    
28. if ((function() {
    
29.     try {
    
30.         return !! window.addEventListener;
    
31.     } catch(e) {
    
32.         return false;
    
33.     }
    
34. })()) {
    
35.     document.addEventListener('DOMContentLoaded', l, false);
    
36. } else {
    
37.     document.attachEvent('onreadystatechange', l);
    
38. }

复制代码

话说你竟敢在论坛中输入script标签。。