Log in

View Full Version : Reversing "Encrypted" HTML pages


LLXX
October 29th, 2006, 04:33
Here's something interesting for all you Javascript reversers out there. Attempts at "protecting" the source code of web pages.

(In approximate order of increasing difficulty, from trivial to... moderate)

http://www.moonlight-software.com/webcrypt-pro-in-action.htm
http://www.aevita.com/web/lock/samples.htm
http://www.mtopsoft.com/encryptpro/example1.htm
http://www.htmlblock.co.uk/demo.php
http://www.flashpeak.com/crypthtml/index_enc.htm <- comment says "Feel free with any attempt to obtain the source code."
{ http://www.protware.com/e_demo.htm http://www.protware.com/demo_e.htm } approximately the same difficulty

Can you get the original source? Have phun


There are many more of these (IMHO rather pathetic) attempts at "protecting" webpages, but I wasn't able to find any example pages for them.

fr33ke
October 29th, 2006, 08:01
Pathetic indeed.. All but protware were easily found with Ctrl-A -> Right-Click -> Show source of selection (FireFox 1.5, don't now about others).

Protware redirects you if you select text, so either save the page or go to the DOM Inspector -> Right-Click "#document" -> Copy XML.

Less than 5 minutes work.

P.S. Protware has referer checking, so either enter from http://protware.com or spoof it.

LLXX
October 30th, 2006, 01:46
Good work!

Yet another example of how FireFox is better than IE

(Yes, all these are just a little bit harder without our furry friend

Shub-nigurrath
October 30th, 2006, 04:21
The normal developers tools are great for these pages, the javascript debugger for FF also can solve any of these pages easily (things like FireBUG, or Venkman JavaScript Debugger, I use). Anyway the protection tool is a good attempt to avoid scripting and kiddies out of your pages..

or even simpler, with MenuX, which opens contextual menus via button (then not disabled) select "Save Generated Page"

Silver
October 30th, 2006, 08:21
Quote:
P.S. Protware has referer checking, so either enter from http://protware.com or spoof it.


Related topic, anyone know of a plugin for firefox that will prompt for a referrer URL before loading a page with it? Google finds me lots of references to some company called Openly, which doesn't appear to be relevant to my search at all...

Shub-nigurrath
October 30th, 2006, 08:26
if you search in the addons pages of FF site, with the word "referrers" you will find a couple of addins that does what you need.

Silver
October 30th, 2006, 10:52
Oh, handy, thanks. Wonder how I missed that (there's one there that does what I want, "refspoof".

LLXX
October 31st, 2006, 03:45
I just use Proxomitron to do that... it can also do some other interesting thing with webpages too