Javascript text encoding/encrypting

[Piotr]

MS has published on its sites javascript encoder, which enables "encrypting"
javascript code. It allows hiding js code from being seen as a text file.
There is a decoder for it, available in the net, freeware, srcdec14.exe.

I have tested both, encrypting, decrypting, the source and the final files
are identical.

But what I met on a certain site is a js file, encoded I think in another
way, because I cannot decrypt it using the srcdec14.exe.

This is why I have a question for genarally any information cons. this
subject (are there several ways MS is able to read encrypted js files?, do
you know other decoders?,...)

 

[Lasse Reichstein Nielsen]

This is why I have a question for genarally any information cons. this
subject (are there several ways MS is able to read encrypted js files?, do
you know other decoders?,...)

I haven't heard of any other MS created encryption.
Show us the page, and we'll have more to go on!
/L

 

[Piotr]

I haven't heard of any other MS created encryption.

Show us the page, and we'll have more to go on!
/L

'Faith without judgement merely degrades the spirit divine.'

The page: http://pl.php.net/search.php
What is encrypted: functions.js
Why do I claim sth is in another way:
1) this js module doesn't start with "#@~^", which is the beginning of MS
encrypted js files
2) scrdec14.exe decoder simply doesn't work on it

Piotr

 

[Lasse Reichstein Nielsen]

The page: http://pl.php.net/search.php
What is encrypted: functions.js

Why do I claim sth is in another way:
1) this js module doesn't start with "#@~^", which is the beginning of MS
encrypted js files
2) scrdec14.exe decoder simply doesn't work on it

As I expected, it is encrypted using Javascript itself.
There are plenty of different javascript-encoders out there, claiming
different degrees of security. I haven't found one yet that I couldn't
crack.

This one doesn't seem to be protecting the code. It has merely
obfuscated the variable names (They are almost all two or three
letters starting with "F"), and they have compacted the (huge amount
of) data used by the page.
The variable "cdp" contains a very long string. When it is decoded,
it becomes the array Ff, which contains
"abs","acos","acosh","addcslashes",...
I.e., the list of names that they suggest when you start typing in the
search input box.
I guess it is only a matter of compression, not encryption.

/L