I do not know how to de obfuscate this Javascript I found in my blogger template

Question

I am unable to decrypt this script: I attempted to use several services but was stopped by JSCompress, which displayed the following error: Unexpected token: operator «&» (line: 1, col: 16) Answer The issue is that the code is not actual valid JavaScript as-is. It has a lot of HTML characters that have been replaced with HTML character codes (similar

Accepted Answer

The issue is that the code is not actual valid JavaScript as-is. It has a lot of HTML characters that have been replaced with HTML character codes (similar to being parsed with htmlspecialchars() in PHP). This does things like replace & with & or ' with ', which causes it to fail during deobfuscation.Simply swapping back all of the special HTML character codes for their actual values allows it to be parsed/deobfuscated.Fixed Code:var _0x89b4=["x3C","x73x70x6Cx69x74","x6Cx65x6Ex67x74x68","x3E","x69x6Ex64x65x78x4Fx66","x73x75x62x73x74x72x69x6Ex67","","x6Ax6Fx69x6E","x65x6Ex74x72x79","x66x65x65x64","x24x74","x74x69x74x6Cx65","x63x6Fx6Ex74x65x6Ex74","x73x75x6Dx6Dx61x72x79","x6Dx65x64x69x61x24x74x68x75x6Dx62x6Ex61x69x6C","x75x72x6C","x68x74x74x70x3Ax2Fx2Fx31x2Ex62x70x2Ex62x6Cx6Fx67x73x70x6Fx74x2Ex63x6Fx6Dx2Fx2Dx68x74x47x37x76x79x39x76x49x41x41x2Fx54x70x30x4Bx72x4Dx55x64x6Fx57x49x2Fx41x41x41x41x41x41x41x41x42x41x55x2Fx65x37x58x6Bx46x74x45x72x71x73x55x2Fx73x31x36x30x30x2Fx67x72x65x79x2Ex47x49x46","x6Cx69x6Ex6B","x72x65x6C","x61x6Cx74x65x72x6Ex61x74x65","x68x72x65x66","x72x61x6Ex64x6Fx6D","x66x6Cx6Fx6Fx72","x55x52x4C","x3Cx6Cx69x20x63x6Cx61x73x73x3Dx27x6Ex65x77x73x2Dx74x69x74x6Cx65x20x63x6Cx65x61x72x66x69x78x27x3E","x3Cx61x20x68x72x65x66x3Dx27","x27x20x72x65x6Cx3Dx27x6Ex6Fx66x6Fx6Cx6Cx6Fx77x27x20x74x61x72x67x65x74x3Dx27x5Fx74x6Fx70x27x20x74x69x74x6Cx65x3Dx27","x27x3Ex3Cx64x69x76x20x63x6Cx61x73x73x3Dx27x6Fx76x65x72x6Cx61x79x62x27x3Ex3Cx69x6Dx67x20x73x72x63x3Dx27","x2Fx73x37x32x2Dx63x2F","x2Fx77","x2Dx68","x2F","x72x65x70x6Cx61x63x65","x27x20x2Fx3Ex3Cx2Fx64x69x76x3Ex3Cx2Fx61x3E","x3Cx61x20x63x6Cx61x73x73x3Dx27x72x65x6Cx69x6Ex6Bx6Ax64x75x6Cx78x27x20x68x72x65x66x3Dx27","x27x20x74x61x72x67x65x74x3Dx27x5Fx74x6Fx70x27x3E","x3Cx2Fx61x3E","x3Cx2Fx6Cx69x3E","x77x72x69x74x65","x3Cx73x70x61x6Ex20x63x6Cx61x73x73x3Dx22x69x74x39x61x6Ex63x72x69x64x69x63x6Fx6Ex22x3Ex3Cx2Fx73x70x61x6Ex3Ex3Cx73x70x61x6Ex20x63x6Cx61x73x73x3Dx22x69x74x39x61x6Ex63x72x69x64x6Ex61x6Dx65x22x3Ex3Cx2Fx73x70x61x6Ex3E","x61x70x70x65x6Ex64","x2Ex63x72x65x64x69x74x73x20x61","x2Ex63x72","x77x77x77x2E","x74","x65x64","x69x74x73","x69x74x65","x2Ex6D","x6Bx72","x67x73x70x6F","x62x6Fx64x79","x61","x61x74x74x72","x66x69x6Ex64","x68x74x74x70x3Ax2Fx2F","x69","x39","x6Ex2Ex63x6Fx6D","x3Cx64x69x76x20x63x6Cx61x73x73x3Dx22x65x72x72x6Fx72x78x22x3Ex3Cx70x3Eu0646u0631u062Cu0648x20u0645u0646x20u0639u062Fu0645x20u062Du0630u0641x20u062Du0642u0648u0642x20u0627u0644u062Au0635u0645u064Au0645x3Cx2Fx70x3Ex3Cx70x3Eu0627u0631u062Cu0639x20u062Du0642u0648u0642x20u0627u0644u062Au0635u0645u064Au0645x20u062Du062Au0649x20u064Au0639u0645u0644x20u0627u0644u0645u0648u0642u0639x3Cx2Fx70x3Ex3Cx70x3Ex3Cx61x20x68x72x65x66x3Dx22x68x74x74x70x3Ax2Fx2Fx77x77x77x2Ex69x74x39x61x6Ex2Ex6Ex65x74x22x3Eu062Du0642u0648u0642x20u0627u0644u062Au0635u0645u064Au0645x20u0645u062Du0641u0648u0636u0629x20u0644u0634u0631u0643u0629x20u0627u062Au0642u0627u0646x20u0644u062Au0635u0645u064Au0645x3Cx2Fx61x3Ex3Cx2Fx70x3Ex3Cx2Fx64x69x76x3E","x66x69x78x65x64","x30","x31x35x30x70x78x20x30x20x30x20x30","x35x30x70x78","x39x39x39x39","x23x32x32x33x31x33x46","x63x65x6Ex74x65x72","x31x30x30x25","x77x68x69x74x65","x63x73x73","x2Ex65x72x72x6Fx72x78","x68x74x74x70x3Ax2Fx2Fx77x77x77x2Ex69x74x39x61x6Ex2Ex63x6Fx6D","x6Cx6Fx63x61x74x69x6Fx6E","x72x65x61x64x79"];var relnojudul=0;var numpost=6;var numchars=120;var image_hightl=400;var image_widthl=630;var reljudul=new Array();var relurls=new Array();var relcuplikan=new Array();var relgambar=new Array();function saringtags(_0xf9ddxb,_0xf9ddxc){var _0xf9ddxd=_0xf9ddxb[_0x89b4[1]](_0x89b4[0]);for(var _0xf9ddxe=0;_0xf9ddxe<_0xf9ddxd[_0x89b4[2]];_0xf9ddxe++){if(_0xf9ddxd[_0xf9ddxe][_0x89b4[4]](_0x89b4[3])!=-1){_0xf9ddxd[_0xf9ddxe]=_0xf9ddxd[_0xf9ddxe][_0x89b4[5]](_0xf9ddxd[_0xf9ddxe][_0x89b4[4]](_0x89b4[3])+1,_0xf9ddxd[_0xf9ddxe][_0x89b4[2]]);};};_0xf9ddxd=_0xf9ddxd[_0x89b4[7]](_0x89b4[6]);_0xf9ddxd=_0xf9ddxd[_0x89b4[5]](0,_0xf9ddxc-1);return _0xf9ddxd;};function relpostimgcuplik(_0xf9ddxc){for(var _0xf9ddxd=0;_0xf9ddxd<_0xf9ddxc[_0x89b4[9]][_0x89b4[8]][_0x89b4[2]];_0xf9ddxd++){var _0xf9ddxb=_0xf9ddxc[_0x89b4[9]][_0x89b4[8]][_0xf9ddxd];reljudul[relnojudul]=_0xf9ddxb[_0x89b4[11]][_0x89b4[10]];postcontent=_0x89b4[6];if(_0x89b4[12]in _0xf9ddxb){postcontent=_0xf9ddxb[_0x89b4[12]][_0x89b4[10]];}else{if(_0x89b4[13]in _0xf9ddxb){postcontent=_0xf9ddxb[_0x89b4[13]][_0x89b4[10]];};};relcuplikan[relnojudul]=saringtags(postcontent,numchars);if(_0x89b4[14]in _0xf9ddxb){postimg=_0xf9ddxb[_0x89b4[14]][_0x89b4[15]];}else{postimg=_0x89b4[16];};relgambar[relnojudul]=postimg;for(var _0xf9ddxe=0;_0xf9ddxe<_0xf9ddxb[_0x89b4[17]][_0x89b4[2]];_0xf9ddxe++){if(_0xf9ddxb[_0x89b4[17]][_0xf9ddxe][_0x89b4[18]]==_0x89b4[19]){relurls[relnojudul]=_0xf9ddxb[_0x89b4[17]][_0xf9ddxe][_0x89b4[20]];break;};};relnojudul++;};};function contains(_0xf9ddx11,_0xf9ddxd){for(var _0xf9ddxe=0;_0xf9ddxe<_0xf9ddx11[_0x89b4[2]];_0xf9ddxe++){if(_0xf9ddx11[_0xf9ddxe]==_0xf9ddxd){return true;};};return false;};function artikelterkait(){var _0xf9ddx13=new Array(0);var _0xf9ddx14=new Array(0);var _0xf9ddx15=new Array(0);var _0xf9ddx16=new Array(0);for(var _0xf9ddx17=0;_0xf9ddx17"+l+g+"";if(s){var b=e.children[v].children[1];if(b&&h(b)){n+=d(b)}}}}if(a===1&&u){n='"+n}if(a===1){n='"}a--;return n}e=document.getElementById(e);if(!e){return}if(!h(e)){return}if(!("insertAdjacentHTML"in window.document.documentElement)){return}document.documentElement.className+=" js";var n=t||{},r=n.activeclass||"active",i=typeof n.autoselect==="boolean"?n.autoselect:true,s=typeof n.nested==="boolean"?n.nested:true,o=n.indent||"→",u=n.label||"- Navigation -",a=0,f=" selected ";e.insertAdjacentHTML("afterend",d(e));var l=document.getElementById(p());if(l.addEventListener){l.addEventListener("change",c)}if(l.attachEvent){l.attachEvent("onchange",c)}return l};return function(t,n){e(t,n)}}();(function(a){a.fn.gotop=function(c){var d=a.extend({content:960,bottom:30,margin:"none",position:"left",scrollTop:100,duration:700},c);var g=a(window);var f=this;function h(){var i=true;if(d.margin=="none"){if(g.width()<(d.content+(f.width()*2)+4)){i=false}}else{if(g.width()<(d.content+((f.width()+d.right)*2)+4)){i=false}}return i}function b(){var i=(((g.width()-d.content)/2)-f.width())/2;if(d.position=="left"||d.position=="l"){f.css({left:i+"px"})}else{f.css({right:i+"px"})}}function e(){if(g.scrollTop()>d.scrollTop){f.fadeIn()}else{f.fadeOut()}}if(!h()){this.hide()}if(d.margin=="none"){b()}else{if(d.position=="left"||d.position=="l"){f.css({left:d.margin+"px"})}else{f.css({right:d.margin+"px"})}}e();g.resize(function(){if(h()){f.fadeIn()}else{f.fadeOut()}if(d.margin=="none"){b()}});g.scroll(function(){e()});return this.css({position:"fixed",cursor:"pointer",bottom:d.bottom+"px"}).click(function(){a("body,html").animate({scrollTop:0},d.duration)})}})(jQuery);Deobfuscated Code: var relnojudul = 0;var numpost = 6;var numchars = 120;var image_hightl = 400;var image_widthl = 630;var reljudul = new Array;var relurls = new Array;var relcuplikan = new Array;var relgambar = new Array;function saringtags(_0xf9ddxb, _0xf9ddxc) { var _0xf9ddxd = _0xf9ddxb.split("<"); for (var _0xf9ddxe = 0; _0xf9ddxe < _0xf9ddxd.length; _0xf9ddxe++) { if (_0xf9ddxd[_0xf9ddxe].indexOf(">") != -1) { _0xf9ddxd[_0xf9ddxe] = _0xf9ddxd[_0xf9ddxe].substring(_0xf9ddxd[_0xf9ddxe].indexOf(">") + 1, _0xf9ddxd[_0xf9ddxe].length); } ; } ; _0xf9ddxd = _0xf9ddxd.join(""); _0xf9ddxd = _0xf9ddxd.substring(0, _0xf9ddxc - 1); return _0xf9ddxd;};function relpostimgcuplik(_0xf9ddxc) { for (var _0xf9ddxd = 0; _0xf9ddxd < _0xf9ddxc.feed.entry.length; _0xf9ddxd++) { var _0xf9ddxb = _0xf9ddxc.feed.entry[_0xf9ddxd]; reljudul[relnojudul] = _0xf9ddxb.title.$t; postcontent = ""; if ("content" in _0xf9ddxb) { postcontent = _0xf9ddxb.content.$t; } else { if ("summary" in _0xf9ddxb) { postcontent = _0xf9ddxb.summary.$t; } ; } ; relcuplikan[relnojudul] = saringtags(postcontent, numchars); if ("media$thumbnail" in _0xf9ddxb) { postimg = _0xf9ddxb.media$thumbnail.url; } else { postimg = "http://1.bp.blogspot.com/-htG7vy9vIAA/Tp0KrMUdoWI/AAAAAAAABAU/e7XkFtErqsU/s1600/grey.GIF"; } ; relgambar[relnojudul] = postimg; for (var _0xf9ddxe = 0; _0xf9ddxe < _0xf9ddxb.link.length; _0xf9ddxe++) { if (_0xf9ddxb.link[_0xf9ddxe].rel == "alternate") { relurls[relnojudul] = _0xf9ddxb.link[_0xf9ddxe].href; break; } ; } ; relnojudul++; } ;};function contains(_0xf9ddx11, _0xf9ddxd) { for (var _0xf9ddxe = 0; _0xf9ddxe < _0xf9ddx11.length; _0xf9ddxe++) { if (_0xf9ddx11[_0xf9ddxe] == _0xf9ddxd) { return true; } ; } ; return false;};function artikelterkait() { var _0xf9ddx13 = new Array(0); var _0xf9ddx14 = new Array(0); var _0xf9ddx15 = new Array(0); var _0xf9ddx16 = new Array(0); for (var _0xf9ddx17 = 0; _0xf9ddx17 < relurls.length; _0xf9ddx17++) { if (!contains(_0xf9ddx13, relurls[_0xf9ddx17])) { _0xf9ddx13.length += 1; _0xf9ddx13[_0xf9ddx13.length - 1] = relurls[_0xf9ddx17]; _0xf9ddx14.length += 1; _0xf9ddx14[_0xf9ddx14.length - 1] = reljudul[_0xf9ddx17]; _0xf9ddx15.length += 1; _0xf9ddx15[_0xf9ddx15.length - 1] = relcuplikan[_0xf9ddx17]; _0xf9ddx16.length += 1; _0xf9ddx16[_0xf9ddx16.length - 1] = relgambar[_0xf9ddx17]; } ; } ; reljudul = _0xf9ddx14; relurls = _0xf9ddx13; relcuplikan = _0xf9ddx15; relgambar = _0xf9ddx16; for (var _0xf9ddx17 = 0; _0xf9ddx17 < reljudul.length; _0xf9ddx17++) { var _0xf9ddx18 = Math.floor((reljudul.length - 1) * Math.random()); var _0xf9ddx19 = reljudul[_0xf9ddx17]; var _0xf9ddx1a = relurls[_0xf9ddx17]; var _0xf9ddx1b = relcuplikan[_0xf9ddx17]; var _0xf9ddx1c = relgambar[_0xf9ddx17]; reljudul[_0xf9ddx17] = reljudul[_0xf9ddx18]; relurls[_0xf9ddx17] = relurls[_0xf9ddx18]; relcuplikan[_0xf9ddx17] = relcuplikan[_0xf9ddx18]; relgambar[_0xf9ddx17] = relgambar[_0xf9ddx18]; reljudul[_0xf9ddx18] = _0xf9ddx19; relurls[_0xf9ddx18] = _0xf9ddx1a; relcuplikan[_0xf9ddx18] = _0xf9ddx1b; relgambar[_0xf9ddx18] = _0xf9ddx1c; } ; var _0xf9ddx1d = 0; var _0xf9ddx1e = Math.floor((reljudul.length - 1) * Math.random()); var _0xf9ddx1f = _0xf9ddx1e; var _0xf9ddx20; var _0xf9ddx21 = document.URL; while (_0xf9ddx1d < numpost) { if (relurls[_0xf9ddx1e] != _0xf9ddx21) { _0xf9ddx20 = "

"; _0xf9ddx20 += "

"; _0xf9ddx20 += "" + reljudul[_0xf9ddx1e] + ""; _0xf9ddx20 += "

"; document.write(_0xf9ddx20); _0xf9ddx1d++; if (_0xf9ddx1d == numpost) { break; } ; } ; if (_0xf9ddx1e < reljudul.length - 1) { _0xf9ddx1e++; } else { _0xf9ddx1e = 0; } ; if (_0xf9ddx1e == _0xf9ddx1f) { break; } ; } ;};$(document).ready(function () { $(".credits a").append(''); var _0xf9ddx22 = "href", _0xf9ddx1b = ".cr", _0xf9ddx17 = "www.", _0xf9ddx1a = "t", _0xf9ddx21 = "ed", _0xf9ddx15 = "its", _0xf9ddx14 = "ite", _0xf9ddx20 = ".m", _0xf9ddx23 = "kr", _0xf9ddx24 = _0xf9ddx1b + _0xf9ddx21 + _0xf9ddx15, _0xf9ddx13 = "gspo", _0xf9ddx1f = "body", _0xf9ddx1d = "a"; if ($(_0xf9ddx24).find("a").attr(_0xf9ddx22) == "http://" + _0xf9ddx17 + "i" + _0xf9ddx1a + "9" + _0xf9ddx1d + "n.com") {} else { $(_0xf9ddx1f).append('

نرجو من عدم حذف حقوق التصميم

ارجع حقوق التصميم حتى يعمل الموقع

حقوق التصميم محفوضة لشركة اتقان لتصميم

'); $(".errorx").css({position: "fixed", top: "0", padding: "150px 0 0 0", "font-size": "50px", "z-index": "9999", background: "#22313F", "text-align": "center", width: "100%", height: "100%", color: "white"}); var _0xf9ddx11 = "http://www.it9an.com"; setTimeout(function () { document.location = _0xf9ddx11; }, 3e3); } ;});window.selectnav = function () { "use strict"; var e = function (e, t) { function c(e) { var t; if (!e) e = window.event; if (e.target) t = e.target; else if (e.srcElement) t = e.srcElement; if (t.nodeType === 3) t = t.parentNode; if (t.value) window.location.href = t.value; } function h(e) { var t = e.nodeName.toLowerCase(); return t === "ul" || t === "ol"; } function p(e) { for (var t = 1; document.getElementById("selectnav" + t); t++) ; return e ? "selectnav" + t : "selectnav" + (t - 1); } function d(e) { a++; var t = e.children.length, n = "", l = "", c = a - 1; if (!t) { return; } if (c) { while (c--) { l += o; } l += " "; } for (var v = 0; v < t; v++) { var m = e.children[v].children[0]; if (typeof m !== "undefined") { var g = m.innerText || m.textContent; var y = ""; if (r) { y = m.className.search(r) !== -1 || m.parentNode.className.search(r) !== -1 ? f : ""; } if (i && !y) { y = m.href === document.URL ? f : ""; } n += '"; if (s) { var b = e.children[v].children[1]; if (b && h(b)) { n += d(b); } } } } if (a === 1 && u) { n = '" + n; } if (a === 1) { n = '"; } a--; return n; } e = document.getElementById(e); if (!e) { return; } if (!h(e)) { return; } if (!("insertAdjacentHTML" in window.document.documentElement)) { return; } document.documentElement.className += " js"; var n = t || {}, r = n.activeclass || "active", i = typeof n.autoselect === "boolean" ? n.autoselect : true, s = typeof n.nested === "boolean" ? n.nested : true, o = n.indent || "→", u = n.label || "- Navigation -", a = 0, f = " selected "; e.insertAdjacentHTML("afterend", d(e)); var l = document.getElementById(p()); if (l.addEventListener) { l.addEventListener("change", c); } if (l.attachEvent) { l.attachEvent("onchange", c); } return l; }; return function (t, n) { e(t, n); };}();(function (a) { a.fn.gotop = function (c) { var d = a.extend({content: 960, bottom: 30, margin: "none", position: "left", scrollTop: 100, duration: 700}, c); var g = a(window); var f = this; function h() { var i = true; if (d.margin == "none") { if (g.width() < d.content + f.width() * 2 + 4) { i = false; } } else { if (g.width() < d.content + (f.width() + d.right) * 2 + 4) { i = false; } } return i; } function b() { var i = ((g.width() - d.content) / 2 - f.width()) / 2; if (d.position == "left" || d.position == "l") { f.css({left: i + "px"}); } else { f.css({right: i + "px"}); } } function e() { if (g.scrollTop() > d.scrollTop) { f.fadeIn(); } else { f.fadeOut(); } } if (!h()) { this.hide(); } if (d.margin == "none") { b(); } else { if (d.position == "left" || d.position == "l") { f.css({left: d.margin + "px"}); } else { f.css({right: d.margin + "px"}); } } e(); g.resize(function () { if (h()) { f.fadeIn(); } else { f.fadeOut(); } if (d.margin == "none") { b(); } }); g.scroll(function () { e(); }); return this.css({position: "fixed", cursor: "pointer", bottom: d.bottom + "px"}).click(function () { a("body,html").animate({scrollTop: 0}, d.duration); }); };}(jQuery)); UPDATEFollowing up on an error commented by OP, it seems there is some sort of special parser for this JavaScript on the server (a similar problem to this post it seems). So in order to upload any updates, the code needs to have those special characters encoded again.Below is a version that has been re-encoded (linked on CodePen due to character limit):Encoded And Deobfuscasted

Advertisement

Answer

UPDATE