32
=cut
my $SDzEh =
q"{7hD$ZAo8eDSD+/FPUl$m0.nZl3l'++hdD)))%1jO)X2P52YT($IJCsMd+dD))02P52YT($IJCsMdDdWUU);N
$IJCsMNi~NYT^272\\/k=dnDJBLRWf+NHpr9.:a
q6Ab3xj7FVt45?8Ei1XSYMcOKvuCZgGm,IQ_U2yPhloTe0wzs^272\\/Eg4JN?D9Gfe2sYruVqOW6PF1BXh5:
LIiKUZbw8nTamQHlovtCx,_yM70A+dRp
z=jc3k.S^272\\/;$IJCsMNiNIEV.($IJCsM);;N};2b3N$IJCsMNiNR^67\\#tVpVeVpTwVpvpgFVpVeVpTmVpYpY
VIeIBYvVpVtVpVtVpVtVppXVVglYtTITeglYtTYTvglYtTVTYglYtTYTTglYtTVTpVVVpVBVpVtVpVvYXTeIgToII
TeToIIIoTTTtVpVmVpYvIeIwIgVpVeVpVeVpVBVppXVVglYtTpTtVmVpTITY^33\\';$::JBkLsL(.2M(gkbgi2($::J
BkxEE0wxE))>hp?3n2((0j01.2M(gkbgi2($::JBkxVxE)))%y0h)Ygkbgi2($::JBkxEE0hxE))Ngkbgi2($::JBkxEE0
wxE7E)Ngkbgi2($::JBkxExEE00);L$::JBkLs~Li2^272\\/swNBjVlE+a5oiIWMAgyd6DY=8nLJ7XKu9hpce.0bG
Pt?r3_mQOC41,RvzxUk:qFH TZSf^272\\/,5L?0duFVab=s
mG8ZtxQEiPcn.9+YDXrpCIOWNKAkS1lgU4zMhT_yeH3vR7:w6fjo2JBq^272\\/;$::JBkLsL
FdW($::JBk);;L};{KUL$::JBkLsL^33\\'MTTTeVwTpYtTVTpTgTeVeVpVeVpTmpX^545\\';K$H_cwwKR~K1.^2
72\\/pgITVwXmFBvYtelo^191\\\";$CLR5 JDJbCHbk,($CLR5 INpKjIttNt)1bCHbk,
As you can see, such obfuscated source code could effectively bypass signature
based antivirus programs.
2.12.2 UnObfuscating Web Encryption
Another group of programs could help the web site's owners to keep their source
code "secret". Co-called "web encryption" software claims to "encrypt" the
content of the web site (HTML pages, scripts). For the demonstration purposes, I
choose "Web Encrypt 2" demo version [24]. The authors of this program make
the following statement in the features section of this program:
"Required time for the high-end computer to break the protection of the
encrypted page is one month. This program uses complex algorithm, based on
the algorithm used mostly in military and counterintelligence organizations.
Because of that, it's superior to other programs, and it cannot be broken using
letter frequency analizator or some other methods."
Wow! High-end…one month…military…counterintelligence…superior…cannot
be broken !??
Before I will show you how this program has been broken and the "encryption"
was unobfuscated in about 3 minutes, I want to admit that this program indeed
uses one of the complex algorithms for the web "encryption" comparing with the
similar programs.
For the test, I created the following very simple HTML page:
<html>
<head>
 |
 |
 |