|
Recursive javascript security
Last post 07-09-2008 7:27 PM by Carnildo. 28 replies.
-
07-07-2008 9:41 PM
|
|
-
ShaggyB


- Joined on 08-15-2007
- Posts 12
|
Recursive javascript security
Check out this page.
http://www.careercc.com/resumpr.shtml These guys don't want you to see how they made thier awesome HTML codes work so you cannot right click. If you happen to get through thier first line of defence, fear not they have a contingency for that! Darn! That the source code is not available. Now for you uber 1337 hackers out there who manage to hack your way past security measure number 2, you will NEVER get passed their 1337 obfuscation algorithm designed to hide thier first line of defence so you cannot discover how to defeat it.
See how far you can "hack" this site!
|
|
-
-
North Bus


- Joined on 10-04-2007
- California
- Posts 11
|
Re: Recursive javascript security
And, of course, the wonderful comment in their source code:
|
|
-
-
joemck


- Joined on 08-24-2007
- Posts 109
|
Re: Recursive javascript security
<center><center><center><center><center><center><center><center> <center><center> <p align="left">
...used repeatedly throughout the page, especially later on. In the last 1/8 of the source (as measured by scrollbar), they do this between every paragraph. There is one forest of 10 </center>'s, but that comes right before the real <center>ing starts. Whoever (or whatever) wrote this page is FREAKING INSANE. The obfuscated script also breaks middle-click by detecting right-clicks with "event.button>1".
|
|
-
-
joe.edwards


- Joined on 08-14-2006
- Dallas, TX
- Posts 229
|
Re: Recursive javascript security
One of the funniest and WTFy things I've seen in HTML is: <center align="left">.
|
|
-
-
WeatherGod


- Joined on 04-19-2006
- Posts 274
|
Re: Recursive javascript security
I loved this. I showed my 'uber skillz' to my wife, showing her the ridiculousness of these kinds of websites. When I went to 'view source', she saw the "Source code not available" and immediately noticed how tiny the scroll bar looked, and asked me to scrolll down. If this website can't fool my wife, who has no html and programming experience, who did it fool to convince someone that this would be useful?
|
|
-
-
MiffTheFox


- Joined on 07-03-2008
- Posts 58
|
Re: Recursive javascript security
Note the navigation that fails to work if JavaScript is off. And by the way, I never actually right-click to view source. All the cool kids use Ctrl+U.
It's more likely then you think.
|
|
-
-
fyjham


- Joined on 05-01-2008
- Posts 54
|
Re: Recursive javascript security
joe.edwards:One of the funniest and WTFy things I've seen in HTML is: <center align="left">.
At least that doesn't work, at least on firefox (it still centers), but you peaked my curiosity... <center style='text-align: left;'> works (And I use works very loosely here...).
|
|
-
-
-
Vempele


- Joined on 03-12-2008
- Posts 7
|
Re: Recursive javascript security
joemck:The obfuscated script also breaks middle-click by detecting right-clicks with "event.button>1".
Not on Opera - the script just doesn't work.
OTOH Opera spontaneously (and consistently) breaks middle-click if you don't restart it often enough.
|
|
-
-
Zecc


- Joined on 06-12-2007
- Posts 363
|
Re: Recursive javascript security
KludgeQueen:unless, of course, you have to deal with this sort of thing on a daily basis & you've written a handy utility
You should add an option of running the output through a code beautifier / indenter. As for the <center> non-sense: <meta name="GENERATOR" content="Microsoft FrontPage 5.0">
And does think it's better to use those arrows to scroll the page instead of using the scrollbar or the mouse wheel?
If mixed metaphors were illegal, I'd be having an indigestion.
|
|
-
-
WWWWolf


- Joined on 12-05-2005
- Oulu, Finland
- Posts 234
|
Re: Recursive javascript security
ShaggyB:
Aaah, you're making us scroll down! That is a lesson well learned from the last thread about JS obfuscation.
ShaggyB:
Funny how the left sidebar isn't word-wrapped at all. Why do people who hide source always have shitty web templates that no one wants to steal?
:right click: "You may not right click mouse this page" :click OK: :context menu springs right up:
Never fails to amuse me.
:ctrl+S: Works fine! :ctrl+U: Works fine!
Scroll down! Scroll down! (Like we learned in the last thread)
Too bad I don't have Firefox Web Developer toolbar installed on this computer or I'd grab the generated source in no time at all...
mysql> help contents; Nothing found Please try to run 'help contents' for a list of all accessible topics Desktop Search Rain - Gothic Computing's EASY button ( Go wild^H^H^H^H figure)
|
|
-
-
dhromed


- Joined on 04-13-2005
- Dutchland
- Posts 2,614
|
Re: Recursive javascript security
WWWWolf:Too bad I don't have Firefox Web Developer toolbar installed on this computer or I'd grab the generated source in no time at all... I'm glad that Firebug now has a view source option as well, because Pederick's webdev toolbar's view source stopped's working in FFX3 (known issue). I'm curious where the recursion is, by the way.
— Flurp.
|
|
-
-
ender


- Joined on 04-27-2006
- Posts 407
|
Re: Recursive javascript security
Vempele:OTOH Opera spontaneously (and consistently) breaks middle-click if you don't restart it often enough.
What's "often enough"? This instance of Opera has been running since 15:18:32 11.6.2008 (according to Process Explorer), and I have no problems with middle click scrolling (this reminds me, I should probably upgrade to 9.51 - I skipped on 9.50 final as it is).
Because 10 billion years' time is so fragile, so ephemeral... it arouses such a bittersweet, almost heartbreaking fondness.
|
|
-
-
Volmarias


- Joined on 07-14-2005
- Princeton, NJ
- Posts 402
|
Re: Recursive javascript security
ender: Vempele:OTOH Opera spontaneously (and consistently) breaks middle-click if you don't restart it often enough.
What's "often enough"? This instance of Opera has been running since 15:18:32 11.6.2008 (according to Process Explorer), and I have no problems with middle click scrolling (this reminds me, I should probably upgrade to 9.51 - I skipped on 9.50 final as it is).
9.5 (and 9.51) have been kind of touchy, it seems. I think they have some minor stability issues to work out. On the other hand, I love the improvements. On the first hand, they changed all the keyboard shotcuts! Argh!
|
|
-
-
vt_mruhlin


- Joined on 03-01-2007
- Austin, TX
- Posts 436
|
Re: Recursive javascript security
Guys, it's perfectly understandable that they don't want anybody stealing the code they've worked so hard on.... //Page Scroller (aka custom scrollbar)- By Dynamic Drive //For full source code and more DHTML scripts, visit http://www.dynamicdrive.com //This credit MUST stay intact for use At least they kept the credits around for (nobody) to see.
|
|
-
-
andrewbadera


- Joined on 12-17-2007
- Posts 7
|
Re: Recursive javascript security
404 Recursivity Not Found The title of this post is TRWTF.
|
|
-
-
Huf Lungdung


- Joined on 05-22-2008
- Posts 12
|
Re: Recursive javascript security
Umm.... so this is their uber-sensitive, top secret code they tried so depsparately hard to hide from us? WTF? The only code they're hiding is the code to prevent right-clicking, in an effort to hide their code. So that's why this is "recursive" security. :P
<SCRIPT type="text/javascript"> <!-- am="You may not right click mouse this page"; bV=parseInt(navigator.appVersion); bNS=navigator.appName=="Netscape"; bIE=navigator.appName=="Microsoft Internet Explorer";
function nrc(e) { if(bNS && e.which>1) { alert(am); return false } else if(bIE && (event.button>1)) { alert(am); return false } }
document.onmousedown=nrc;
if(document.layers) window.captureEvents(Event.MOUSEDOWN);
if(bNS && bV<5) window.onmousedown=nrc;
function one() { return true }
onerror=one;
//--></SCRIPT>
|
|
-
-
mrprogguy


- Joined on 01-05-2006
- Posts 184
|
Re: Recursive javascript security
Dudes have apparently never heard of wget. Geez. Do they think "View Source" is the only way to get to the source for a page?
|
|
-
-
topspin


- Joined on 03-07-2008
- Posts 30
|
Re: Recursive javascript security
WWWWolf:Funny how the left sidebar isn't word-wrapped at all. Why do people who hide source always have shitty web templates that no one wants to steal?
Another thing: Look at those strange scroll buttons. One of them is simply a rotated version of the other so the drop shadows don't match. And neither of them looks right! A drop shadow on the bottom right would probably look ok. Who would steal such crap?
|
|
-
-
PSWorx


- Joined on 04-28-2006
- Posts 713
|
Re: Recursive javascript security
KludgeQueen:Unless, of course, you have to deal with this sort of thing on a daily basis & you've written a handy utility
You just scared me...
|
|
-
-
Cap'n Steve


- Joined on 09-07-2006
- Posts 456
|
Re: Recursive javascript security
Volmarias: ender: Vempele:OTOH Opera spontaneously (and consistently) breaks middle-click if you don't restart it often enough.
What's "often enough"? This instance of Opera has been running since 15:18:32 11.6.2008 (according to Process Explorer), and I have no problems with middle click scrolling (this reminds me, I should probably upgrade to 9.51 - I skipped on 9.50 final as it is).
9.5 (and 9.51) have been kind of touchy, it seems. I think they have some minor stability issues to work out. On the other hand, I love the improvements. On the first hand, they changed all the keyboard shotcuts! Argh!
Agreed. Who though it would be a good idea to change the "find next" shortcut? I thought everyone got together and decided on F3 ages ago.
|
|
-
-
u2892


- Joined on 04-15-2008
- Posts 5
|
Re: Recursive javascript security
The right-click blocker seems to do absolutely nothing in Firefox... 
|
|
-
-
MiffTheFox


- Joined on 07-03-2008
- Posts 58
|
Re: Recursive javascript security
u2892: The right-click blocker seems to do absolutely nothing in Firefox...
Firefox has an option to keep the context menu intact, but that dosen't stop the alert form appearing. However, some web applications (*cough* Google Docs */cough*) require you to disable this option in order to use the custom context menus. If that option's off, the context menu dosen't show.
It's more likely then you think.
|
|
-
-
seconddevil


- Joined on 01-19-2007
- Posts 19
|
Re: Recursive javascript security
KludgeQueen:
Then they escaped some code, making it virtually indecipherable (LOL); unless, of course, you have to deal with this sort of thing on a daily basis & you've written a handy utility:
WScript.echo(unescape("...")); is a lot easier
|
|
-
-
MiffTheFox


- Joined on 07-03-2008
- Posts 58
|
Re: Recursive javascript security
seconddevil: KludgeQueen:
Then they escaped some code, making it virtually indecipherable (LOL); unless, of course, you have to deal with this sort of thing on a daily basis & you've written a handy utility:
WScript.echo(unescape("...")); is a lot easier
javascriptalert(unescape("...")); void 0; is even easier then that.
It's more likely then you think.
|
|
-
|
|