nb_es006.html: Reversing some other commercial page protections

'; document.writeln(my_chunk); } } // -->

	<a target="_top" href="http://ad.doubleclick.net/jump/fc.us468/member/tech;abr=!ie;s1=m;s3=tech;pos=1;tag=i;sz=468x60;mtile=1;ord=2001?"><img src="http://ad.doubleclick.net/ad/fc.us468/member/tech;abr=!ie;s1=m;s3=tech;pos=1;tag=i;sz=468x60;mtile=1;ord=2001?" border=0 height="60" width="468"></a>

<A HREF="http://ad.doubleclick.net/jump/fc.us88/member/tech;abr=!ie;s1=m;s3=tech;pos=2;tag=i;sz=88x31;mtile=2; ord=3100?"><IMG SRC="http://ad.doubleclick.net/ad/fc.us88/member/tech;abr=!ie;s1=m;s3=tech;pos=2;tag=i;sz=88x31;mtile=2; ord=3100?" height=31 width=88 border=0></A>

<A HREF="http://ad.doubleclick.net/jump/fc.us88/member/tech;abr=!ie;s1=m;s3=tech;pos=3;tag=i;sz=88x31;mtile=3; ord=3101?"><IMG SRC="http://ad.doubleclick.net/ad/fc.us88/member/tech;abr=!ie;s1=m;s3=tech;pos=3;tag=i;sz=88x31;mtile=3; ord=3101?" height=31 width=88 border=0></A>

--> nb_es006.html: Reversing some other commercial page protections

	Reversing some other commercial page protections Money for nothing (but the essay is for free :-))	Hyper Javascript
5 Nov 1999	by The Seeker
	(always) Courtesy of Fravia's page of reverse engineering	NOT edited
fra_00xx 98xxxx handle 1100 NA PC	A short and quick look of what you can get for 55 USD
	There is a crack, a crack in everything That's how the light gets in
Rating	(x)Beginner ( )Intermediate ( )Advanced ( )Expert

Never believe what 'money-oriented' people say about their products. Always check by yourself if the product really worth it.
If sp!ke's and Laurent's very good essays didn't convinced you of that, keep reading.

Reversing some commercial page protections
Money for nothing
Written by The Seeker

Introduction

Laurent sent me today his essay about webCrypt. This reminded me at some other 'commercials' at the workshop's compilation-page. To use Laurent's words : I thought it could be worth to have a look at it. What a disapointment when, after a few minutes, I discovered those 'software' were totally crap. This essay is not about how to 'crack' this protection cause there is nothing to crack. I just want to show what some 'money oriented' people seems to -unfortunately- be able to sell.
Nothing more to say. - Sorry for this banal essay, just to fill some white place in the workshop.

Tools required

A Brain (a little one should be enough :)

Target's URL/FTP

Jammer http://rzr.online.fr/jammer.htm
JMyth http://www.geocities.com/SiliconValley/Vista/5233/jmyth.htm
JavascriptScrambler http://members.tripod.com/~tier/

Program History

Not important

Essay

Part 1 : Jammer
So let's start with Jammer. The author says :
jammer will allow you to

Obfuscate your HTML, Javascripts and VRML code on your webpages from the browsers' VIEW SOURCE Window (then the potential thief will not be able to cut and paste your script)

Put extra Space at the top of file
Remove comments
Shrink all the code on one line
Remove ident space and any space that can be cut

Make programing languages (c,java...) sources very hard to read (usefull when you're distribuating a program with C sources for unix )
It can also compress the files size up to 50% (and makes your site faster to see)
Clean imported PC text files for UNIX or Amiga with extra ^M
File types supported : *.htm ; *.asp ; *.wrl ; *.c ; *.java ; *.pov ; *.txt

Oh my, that reminds me of what ?! Let's have a look at the output (you can make a online-test, THANKS - that saves a lot of time for downloading/installing !) :
When viewing the output-text in your browser, you see nothing - til you scroll down ! And then : the code is crowded together in some lines. No encryption, nothing else. This should be enough !

Costs : USD 15
No, thanks

Part 2 : JMyth
let's continue with JMyth. The author says :
JMyth can

encrypt one or multiple HTML and js files

map function names and method names from user-defined objects to randomly generated 3 letter codes

map declared global and local variables to randomly generated 3 letter codes

optionally add finishing ":" when appropriate

eliminate comments, white spaces and pack the codes to arbitrary line width

no file size limit.

Registered version of "JMyth" program adds the ability to exclude selected names from encryption and step-by-step control of code processing.

Your input :

  var digits = "0123456789";

Your output :

  var Dvq="0123456789";

Ok, the same "encryption" is done with the functions, all code is crowded together. Again : this should be enough !

Costs : USD 25
No, thanks again

Part 3 : Javascript Scrambler
let's end with Javascript Scrambler. The author says :

JavaScript Scrambler is a utility for all JavaScript programmers who are fed up with the fact, that their source code can be stolen and simply modified. It will scramble any JavaScript source code until it is almost impossible to comprehend for others. Your input :

                        Speed = 100; // milliseconds between scrolls
                        CharNum = 1; // number of chars scrolled per time period

                        function doTicker() { 
                        text = " Welcome!";
                        Scroll();
                        }
                        function Scroll() {
                        window.setTimeout('Scroll()',Speed);
                        window.status = text;
                        text = text.substring(CharNum) + text.substring(0,CharNum);
                        }
                        doTicker();

Your output :

                        Speed=100;CharNum=1;function x0822631(){text=" Welcome!";
                        x06530();}function x06530(){window.setTimeout('x06530()',
                        Speed);window.status=text;text=text.substring(CharNum)+
                        text.substring(0,CharNum);}x0822631();

Finally : this should be enough !

Costs : USD 15
No, thanks again

Final Notes

I am tired of this stuff ! Sorry for this banal essay !
Let's repeat what Laurent said :
Well, it's time to conclude now. I have been writing already too much. I just don't understand how people dare to SELL things like that. I did not checked their other products, but I doubt they are any better. Maybe someone else will have a look at them.
So, if you are looking to protect your pages or site, look around the net, you'll certainly find something better than this and for free. Or even better, write your own stuff -and you don't need Java applet for that, JavaScript can do a great work. - Of course, you won't get a nice packaging, but if you really want to spend 55 dollars for nothing, you can always send them to me, they will be welcome :)

Ob Duh

"Ob Duh" section doesn't apply since we aren't cracking anyones _program_, are we ;)

choose your way out:

Fravia's (frozen) homepage The Seeker's homepage The javascript workshop What's new