Spamhunter's Resource

Decrypting JavaScript Using Your Browser

The problem:

The hassle is that the html code on the page sent to you contains REALLY obfusticated entries, using mathmatical functions so deep it simply takes too long to wade through it all even if you are a programmer.

Here is a sample of the code:

var num = '.';
var etc
="http://000000000000000000000000000000000365.00000000000000000000000000
0000000000000000000000000000000000365.0000000000000000000000000000000000
0000000364.00000000000000000000000000000000325&@";
bon = '000000000000';
with (Math) {
var teg = sqrt((sqrt(97219114.15490465)*PI));var jik = (sqrt((sqrt(sqrt
(1.0710279010594471e+22))*PI))/PI);var tel = sqrt((sqrt(sqrt
(1770880923.211230012101011245472572457215721015745154541))
*75.041)/PI);var uyr = (sqrt(sqrt(39605126153.338170001001))/PI);teg =
round(teg);uyr = round(uyr);tel = round(tel);jik = round(jik);
}
rry = etc + bon; cjk = rry + jik + num;   tgh = cjk + bon + tel;   uhy
= tgh + num;   yth = uhy + uyr;   kiw = yth + num;   red = kiw + bon +
teg;   wes = red + '/v';  tyh = wes + 'a';   iuj = tyh + '3/';   svd =
iuj + 'index.html';  etc = svd + ....

Don't wade through it. Do it the easy way. You can pretty much tell the part where he is manufacturing the string. I created an HTML template like so:

<HTML>
<HEAD>
<TITLE>Testing</TITLE>
</HEAD>

<BODY BGCOLOR="#FFFFFFF" TEXT="#000000">
<SCRIPT LANGUAGE="JavaScript">

<!-- Tricky Code Goes Here -->

document.write( decoded-string )
</SCRIPT>
</BODY>
</HTML>

Then I paste the string manufacturing part in between <SCRIPT LANGUAGE="Javascript> and document.write(), insert the name of the manufactured string (usually etc) between the parentheses in document.write() (where decoded-string is shown), save it as a .htm file under a different name, fire up my browser, load the file, enable Javascript and reload. My browser does all the work of translating:-) I did do a couple by hand, but you'd have to be a real maschist to do more than a couple like that.

Technique courtesy of "SusieB"

Reading JavaScript Using Lynx Browser

Tricks used to grab source from unfriendly JS morons:
lynx -source <url>
Opening up your browser's raw cache files works well too.

Lynx is available at the Unix command prompt for those with shell access via their Internet Service Provider. Use the telnet command to log on to the command prompt.

Technique courtesy of "AntiSpam"