Post Reply 
javascript unescape hidden ads
Jul. 24, 2009, 10:55 AM
Post: #1
javascript unescape hidden ads
ran into completely escaped javascript document.writein..
Code:
<script type="text/javascript"><!--
mybb_ad0='%3C%61%20%74%61%72%67%65%74%3D%22%5F%62%6C%61%6E%6B%22%20%74%69%74%6C%65%3D%22%74%69%74%6C%65%22%20%68%72%65%66%3D%22%63%6C%69%63%6B%2E%70%68%70%3F%76%6B%3D%30%30%30%30%22%3E%3C%69%6D%67%20%77%69%64%74%68%3D%22%34%36%38%22%20%68%65%69%67%68%74%3D%22%36%30%22%20%61%6C%74%3D%22%61%6C%74%22%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%62%73%2E%6D%79%62%62%2E%72%75%2F%69%2F%31%31%35%2E%67%69%66%22%20%2F%3E%3C%2F%61%3E'
document.write(unescape(mybb_ad0))//--></script>
tried to set up in the exceptions-U like this
Code:
$SET(sUserJS=mybb_ad1='&lt;--cut_out--&gt;')
and i think i am doing something wrong.
in any case there are two variables that i would like strip: mybb_ad0 and mybb_ad1
would appreciate any help. and thanks in advance...
ps
huh Wink if you cheat, you end up with this
Code:
eval(unescape('V64V6FV63V75V6DV65V6EV74V2EV77V72V69V74V65V28V27V3CV69V6DV67V20V73V72V63V3DV22V68V74V74V70V3AV2FV2FV6DV79V62V62V2EV72V75V2FV66V2FV61V63V68V74V75V6EV67V5FV63V68V65V61V74V65V72V2EV70V68V70V3FV68V74V74V70V3AV2FV2FV66V6FV72V75V6DV2EV72V75V22V20V77V69V64V74V68V3DV22V31V22V20V68V65V69V67V68V74V3DV22V31V22V20V2FV3EV27V29V3B'.replace(/V([\w]{2})/g,'%$1')));
Add Thank You Quote this message in a reply
Jul. 24, 2009, 11:23 AM
Post: #2
RE: javascript unescape hidden ads
Try adding:

Code:
mybb_ad(0|1) $TST(\3=[1s])

to AdKeys-J Smile!
Visit this user's website
Add Thank You Quote this message in a reply
Jul. 24, 2009, 11:45 AM
Post: #3
RE: javascript unescape hidden ads
nope. tried [n1s] and > too
didn't work for me
here's an example
_http://forum.amahrov.ru/viewtopic.php?id=893&p=92
Add Thank You Quote this message in a reply
Jul. 24, 2009, 03:55 PM
Post: #4
RE: javascript unescape hidden ads
Add:

Code:
mybb_ad(0|1)

And then make sure you reload your block files in Proxomitron (right-click on the system tray icon and click on "Reload Block Files"). It works here on my end Smile!
Visit this user's website
Add Thank You Quote this message in a reply
Jul. 25, 2009, 12:57 PM
Post: #5
RE: javascript unescape hidden ads
very strange... only one gets caught... mybb_ad0 one
i've tried (0|1), [0-9], i've even inserted them separately...
the second mybb_ad1 still gets through..
only
body Content: AdKey.2 referrer
body Content: AdKey.3 mybb_ad0
Add Thank You Quote this message in a reply
Jul. 25, 2009, 04:08 PM
Post: #6
RE: javascript unescape hidden ads
Hmm, you're right. Since that didn't work, we can take advantage of the "block specific functions" feature by putting the following in Exceptions-U:

Code:
forum.amahrov.ru/viewtopic.php    forum.amahrov.ru/    $SET(sUserFn=§mybb_ad0§mybb_ad1§getElementComputedStyle§)

The "getElementComputedStyle" is there to prevent a JS error from occurring.

Note that the top ad will randomly display as sometimes there is an additional "unescape(eval" line of code injected above the mybb_ad0 line, and it gets matched while the mybb_ad0 function doesn't.
Visit this user's website
Add Thank You Quote this message in a reply
Post Reply 


Forum Jump: