4 replies to this topic

[BR Invertia]

Hello,

I am new in this forum, but maybe you can help me.

There's a programming contest in Brazil ( fisl.softwarelivre.org/8.0/www/?q=en/arena ), but I don't understand how to register. in the webpage, they have an obfuscated code that might mean something... maybe you can help me.

Check the code in the source of the URL I pointed... It's too long to paste here (maybe I'll be kicked out for flooding :-) ).

TIA.

[John]

Im not really sure what you want. To register, I would probably start by click on the big blinking button that says "Register," but after that I cant direct you any further because I don't know the language.

As for their source code being obfuscated, I see nothing other than plain HTML...

[BR Invertia]

Nope. That "Register" means registering to the conference. The Programming contest is going to happen in parallel.

The code is in the middle of the HTML of that url, in HTML comments. Here it is:

<!--<br />

// Guvf jbex vf urerol eryrnfrq vagb gur Choyvp Qbznva. Gb ivrj n pbcl bs gur choyvp qbznva qrqvpngvba, ivfvg uggc://perngvirpbzzbaf.bet/yvprafrf/choyvpqbznva/ be fraq n yrggre gb Perngvir Pbzzbaf, 559 Anguna Noobgg Jnl, Fgnasbeq, Pnyvsbeavn 94305, HFN.<br />

// bevtva: 2000-01-08 abfcnz@trug.arg uggc://gbbyf.trug.arg/ebg13.ugzy<br />

// Hfr ng bja evfx.<br />

ine ynfg="";<br />

ine ebg13znc;</p>

<p>// Gur ceboyrz vf gung WninFpevcg 1.0<br />

// qbrf abg cebivqr n Pune gb Ahzrevp inyhr pbairefvba<br />

// Guhf jr qrsvar n znc.<br />

// Orpnhfr gurer ner 64X HavPbqr punenpgref, guvf znc qbrf abg pbire nyy punenpgref.<br />

shapgvba ebg13vavg()<br />

{<br />

  ine znc = arj Neenl();<br />

  ine f   = "nopqrstuvwxyzabcdefghijklm";</p>

<p>  sbe (v=0; v<f.yratgu; v++)<br />

    znc[f.puneNg(v)]			= f.puneNg((v+13)%26);<br />

  sbe (v=0; v<f.yratgu; v++)<br />

    znc[f.puneNg(v).gbHccrePnfr()]	= f.puneNg((v+13)%26).gbHccrePnfr();<br />

  erghea znc;<br />

}</p>

<p>shapgvba ebg13(n)<br />

{<br />

  vs (!ebg13znc)<br />

    ebg13znc=ebg13vavg();<br />

  f = "";<br />

  sbe (v=0; v<n.yratgu; v++)<br />

    {<br />

      ine o = n.puneNg(v);</p>

<p>      f	+= (o>='N' && o<='M' || o>='n' && o<='m' ? ebg13znc[o] : o);<br />

    }<br />

  erghea f;<br />

}</p>

<p>shapgvba hcq()<br />

{<br />

  vs (qbphzrag.sbezf[0].grkg.inyhr==ynfg)<br />

    erghea;</p>

<p>  ynfg = qbphzrag.sbezf[0].grkg.inyhr;<br />

  qbphzrag.sbezf[0].ebg13.inyhr = ebg13(ynfg);<br />

}<br />

// -->

I still have no clue of that...

[John]

Everything from

<!--

to

-->

is a comment, so it might not be any particular language. Although it does look like it could possible be JavaScript, I wouldn't say it is obfuscated more like encoded, but I don't think browsers have any sort of JavaScript decoder built in. As far as I can deduce, that code does nothing, it may be obfuscated, encoded, or encrypted, but it servers no purpose so I cant say for sure.

And searching google for some of what appear to be "functions" in that code yields no results, but its a comment so it doesn't mean anything.

[BR Invertia]

I have searched google for the string "nopqrstuvwxyzabcdefghijklm" which was the only one that made any sense to me, and the results were interesting... It seems to be part of a ROT13 encryption/decryption function...

Still have to understand how that fits the big picture... Any ideas?