let a1 = hY['Boolean'](hY['navigator']['credentials']);
let a2 = hY['Boolean'](hY['navigator']['appMinorVersion']);
let a3 = hY['Boolean'](hY['navigator']['bluetooth']);
let a4 = hY['Boolean'](hY['navigator']['storage']);
let a5 = hY['Boolean'](hY['Math']['imul']);
let a6 = hY['Boolean'](hY['navigator']['getGamepads']);
let a7 = hY['Boolean'](hY['navigator']['getStorageUpdates']);
let a8 = hY['Boolean'](hY['navigator']['hardwareConcurrency']);
let a9 = hY['Boolean'](hY['navigator']['mediaDevices']);
let a10 = hY['Boolean'](hY['navigator']['mozAlarms']);
let a11 = hY['Boolean'](hY['navigator']['mozConnection']);
let a12 = hY['Boolean'](hY['navigator']['mozIsLocallyAvailable']);
let a13 = hY['Boolean'](hY['navigator']['mozPhoneNumberService']);
let a14 = hY['Boolean'](hY['navigator']['msManipulationViewsEnabled']);
let a15 = hY['Boolean'](hY['navigator']['permissions']);
let a16 = hY['Boolean'](hY['navigator']['registerProtocolHandler']);
let a17 = hY['Boolean'](hY['navigator']['requestMediaKeySystemAccess']);
let a18 = hY['Boolean'](hY['navigator']['requestWakeLock']);
let a19 = hY['Boolean'](hY['navigator']['sendBeacon']);
let a20 = hY['Boolean'](hY['navigator']['serviceWorker']);
let a21 = hY['Boolean'](hY['navigator']['storeWebWideTrackingException']);
let a22 = hY['Boolean'](hY['navigator']['webkitGetGamepads']);
let a23 = hY['Boolean'](hY['navigator']['webkitTemporaryStorage']);
let a24 = hY['Boolean'](hY['Number']['parseInt']);
let a25 = hY['Boolean'](hY['Math']['hypot']);
var FVz = hY['screen']['colorDepth'] ? hY['screen']['colorDepth'] : A6(HA);
var ZWz = hY['screen']['pixelDepth'] ? hY['screen']['pixelDepth'] : A6(HA);
var PWz = hY['navigator']['cookieEnabled'] ? hY['navigator']['cookieEnabled'] : A6(ZW[HA]);
var BLz = hY['navigator']['javaEnabled'] ? hY['navigator']['javaEnabled']() : A6(ZW[HA]);
var WWz = hY['navigator']['doNotTrack'] ? hY['navigator']['doNotTrack'] : A6(HA);
var vN=window['Function']['prototype']['toString'];
Object['create'](vN)['toString']();
TypeError: Function.prototype.toString requires that 'this' be a Function
at Function.toString (<anonymous>)
at bgz (oBbhUNHFM:251:484)
at IWz (oBbhUNHFM:455:9)
at Pjz (oBbhUNHFM:620:2831)
at v8z (oBbhUNHFM:549:15306)
at Module.ASz (oBbhUNHFM:620:31188)
at Module.<anonymous> (oBbhUNHFM:265:41314)
at NJ (oBbhUNHFM:265:44688)
at mYz (oBbhUNHFM:265:41563)
at oBbhUNHFM:265:41181
主动异常
Object.setPrototypeOf(Function['prototype']['toString'],window['Object']['create'](Function['prototype']['toString']))
TypeError: Cyclic __proto__ value
at Function.setPrototypeOf (<anonymous>)
at oBbhUNHFM:396:59
at TZz (oBbhUNHFM:378:17)
at Xjz (oBbhUNHFM:394:33)
at IWz (oBbhUNHFM:454:9)
at Pjz (oBbhUNHFM:620:2831)
at v8z (oBbhUNHFM:549:15306)
at Module.ASz (oBbhUNHFM:620:31188)
at Module.<anonymous> (oBbhUNHFM:265:41314)
at NJ (oBbhUNHFM:265:44688)
//取了异常里的这些值
{
"stackLen": 11,
"name": "TypeError",
"message": "Cyclic __proto__ value"
}
hY['Document']['prototype']['hasOwnProperty']('hasPrivateToken')
if(hY['Object']['getOwnPropertyDescriptor'](hY['window']['HTMLIFrameElement']['prototype'],'loading')){
}
if(KR(hY['window']['crossOriginIsolated'])){
var Bt=kh(typeof hY['window']['SharedArrayBuffer'],'undefined')
}
hY['Object']['keys'](hY['Object']['getOwnPropertyDescriptors'](hY['navigator']))['join'](',') ----> ""
hY['Object']['getOwnPropertyDescriptor'](hY['File']['prototype'],'path') ---> undefined
判断 refresh 可重写
var xnz=hY['navigator']['plugins']['refresh'];
try{
var hYz=Xh.length;
var xfz=KR([]);
var dEz=hY['Math']['floor'](TX(hY['Math']['random'](),DOz))['toString']();
hY['navigator']['plugins']['refresh']=dEz;
var pzz=kh(hY['navigator']['plugins']['refresh'],dEz);
var mdz=pzz?hH()[v4(HX)].call(null,lR,LV,tL,Bw):mR()[zL(HA)](xZ,DA);
hY['navigator']['plugins']['refresh']=xnz;
var Gfz;
var IRz = window['performance']['memory'];
l4z = ''['concat'](IRz['jsHeapSizeLimit'], ',')['concat'](IRz['totalJSHeapSize'], ',')['concat'](IRz['usedJSHeapSize']);
var jt=st['document']['createElement']('canvas');
var VYz=jt['getContext']('webgl');
if(VYz){
var NTz=VYz['getExtension']('WEBGL_debug_renderer_info');
if(NTz){
Fzz=VYz['getParameter'](NTz['UNMASKED_VENDOR_WEBGL']);
JSz=VYz['getParameter'](NTz['UNMASKED_RENDERER_WEBGL']);
}}
}
var St;
return St=ZK(C,[
'webGLVendor',Fzz,
'webGLRenderer',JSz
]),Xh.pop(),St;
var Mt=new (hY['RegExp'])(new (hY['RegExp'])('function (get )?contentWindow(\\(\\)) \\{(\\n {3})? \\[native code\\][\\n ]\\}'));
if(KR(KR(hY['window']['Object']))&&KR(KR(hY['window']['Object']['getOwnPropertyDescriptor']))){
var jfz=hY['Object']['getOwnPropertyDescriptor'](hY['HTMLIFrameElement']['prototype'],'contentWindow');
if(jfz){
QEz=Mt['test'](jfz['get']['toString']());
}
}
window.devicePixelRatio
var dx = hp['window']['addEventListener'] ? x3[bX] : QC;
var zq = hp['window']['XMLHttpRequest'] ? X6 : QC;
var p1 = hp['window']['XDomainRequest'] ? X6 : QC;
var WF = hp['window']['emit'] ? X6 : x3[X6];
var nU = hp['window']['DeviceOrientationEvent'] ? X6 : x3[X6];
var cF = hp['window']['DeviceMotionEvent'] ? x3[bX] : QC;
var I9 = hp['window']['TouchEvent'] ? X6 : QC;
var C1 = hp['window']['spawn'] ? X6 : QC;
var kz = hp['window']['chrome'] ? X6 : QC;
var wK = hp['Function']['prototype'].bind ? X6 : QC;
var lM = hp['window']['Buffer'] ? X6 : QC;
var S2 = hp['window']['PointerEvent'] ? X6 : QC;
var rx;
var Kn;
// try {
var lL = cJ.length;
var m2 = MN([]);
rx = hp['window']['innerWidth'] ? 1 : 0;
// } catch (Z9) {
// cJ.splice(q3(lL, X6), Infinity, CU);
// rx = QC;
// }
// try {
var Fq = cJ.length;
var OY = MN(MN(Mf));
Kn = hp['window']['outerWidth'] ? 1 : 0;
// } catch (nh) {
// cJ.splice(q3(Fq, X6), Infinity, CU);
// Kn = QC;
// }
var PEJ = fz.length;
var pEJ = w2(1);
var ZEJ = jL(jh["Boolean"](jh["window"]["__nightmare"]), SwJ(jh["Boolean"](jh["window"]["cdc_adoQpoasnfa76pfcZLmcfl_Array"]), 1));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["cdc_adoQpoasnfa76pfcZLmcfl_Promise"]), 2), SwJ(jh["Boolean"](jh["window"]['cdc_adoQpoasnfa76pfcZLmcfl_Symbol']), FZ["Agw"]()));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["OSMJIF"]), 4), SwJ(jh["Boolean"](jh["window"]['_Selenium_IDE_Recorder']), 5));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__$webdriverAsyncExecutor"]), 6), SwJ(jh["Boolean"](jh["window"]["__driver_evaluate"]), 7));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__driver_unwrapped"]), 8), SwJ(jh["Boolean"](jh["window"]["__fxdriver_evaluate"]), E6[17]));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__fxdriver_unwrapped"]), 10), SwJ(jh["Boolean"](jh["window"]['__lastWatirAlert']), 11));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__lastWatirConfirm"]), 12), SwJ(jh["Boolean"](jh["window"]['__lastWatirPrompt']), 13));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]['__phantomas']), E6[19]), SwJ(jh["Boolean"](jh["window"]['__selenium_evaluate']), FZ["AgN3"]()));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]['__selenium_unwrapped']), 16), SwJ(jh["Boolean"](jh["window"]["__webdriverFuncgeb"]), 17));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__webdriver__chr"]), E6[20]), SwJ(jh["Boolean"](jh["window"]["__webdriver_evaluate"]), E6[21]));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__webdriver_script_fn"]), E6[22]), SwJ(jh["Boolean"](jh["window"]['__webdriver_script_func']), 21));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["__webdriver_script_function"]), 22), SwJ(jh["Boolean"](jh["window"]["__webdriver_unwrapped"]), 23));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["awesomium"]), 24), SwJ(jh["Boolean"](jh["window"]["callSelenium"]), E6[23]));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]['calledPhantom']), 26), SwJ(jh["Boolean"](jh["window"]["calledSelenium"]), 27));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["domAutomationController"]), 28), SwJ(jh["Boolean"](jh["window"]['watinExpressionError']), 29));
ZEJ += jL(SwJ(jh["Boolean"](jh["window"]["watinExpressionResult"]), 30), SwJ(jh["Boolean"](jh["window"]['spynner_additional_js_loaded']), 31));
ZEJ += jL(jL(SwJ(jh["Boolean"](jh["document"]["$chrome_asyncScriptInfo"]), E6[24]), SwJ(jh["Boolean"](jh["window"]["fmget_targets"]), 33)), SwJ(jh["Boolean"](jh["window"]["geb"]), 34));
var GNJ;
// debugger ;;
GNJ = ZEJ["toString"]();
fz.pop();
return GNJ;
let aj_1 = jh["Boolean"](jh["navigator"]["credentials"]);
let aj_2 = jh["Boolean"](jh["navigator"]["appMinorVersion"]);
let aj_3 = jh["Boolean"](jh["navigator"]["bluetooth"]);
let aj_4 = jh["Boolean"](jh["navigator"]["storage"]);
let aj_5 = jh["Boolean"](jh["Math"]['imul']);
let aj_6 = jh["Boolean"](jh["navigator"]["getGamepads"]);
let aj_7 = jh["Boolean"](jh["navigator"]["getStorageUpdates"]);
let aj_8 = jh["Boolean"](jh["navigator"]["hardwareConcurrency"]);
let aj_9 = jh["Boolean"](jh["navigator"]["mediaDevices"]);
let aj_10 = jh["Boolean"](jh["navigator"]["mozAlarms"]);
let aj_11 = jh["Boolean"](jh["navigator"]['mozConnection']);
let aj_12 = jh["Boolean"](jh["navigator"]["mozIsLocallyAvailable"]);
let aj_13 = jh["Boolean"](jh["navigator"]["mozPhoneNumberService"]);
let aj_14 = jh["Boolean"](jh["navigator"]["msManipulationViewsEnabled"]);
let aj_15 = jh["Boolean"](jh["navigator"]["permissions"]);
let aj_16 = jh["Boolean"](jh["navigator"]['registerProtocolHandler']);
let aj_17 = jh["Boolean"](jh["navigator"]["requestMediaKeySystemAccess"]);
let aj_18 = jh["Boolean"](jh["navigator"]["requestWakeLock"]);
let aj_19 = jh["Boolean"](jh["navigator"]['sendBeacon']);
let aj_20 = jh["Boolean"](jh["navigator"]['serviceWorker']);
let aj_21 = jh["Boolean"](jh["navigator"]['storeWebWideTrackingException']);
let aj_22 = jh["Boolean"](jh["navigator"]["webkitGetGamepads"]);
let aj_23 = jh["Boolean"](jh["navigator"]['webkitTemporaryStorage']);
let aj_24 = jh["Boolean"](jh["Number"]["parseInt"]);
let aj_25 = jh["Boolean"](jh["Math"]["hypot"]);
typeof window["Symbol"] --- 'function'
window["Symbol"].toStringTag --- Symbol(Symbol.toStringTag)
navigator.onLine --- true
window.HTMLElement
window["Object"]["prototype"]["toString"].call(window["window"]["HTMLElement"])
window.RTCPeerConnection
navigator['vibrate']
navigator['getBattery']
navigator.userAgent
"FileReader" in window
document.currentScript
navigator.maxTouchPoints
window.screen.availWidth
window.screen.availHeight
window.screen.width
window.screen.height
window.innerHeight
"outerWidth" in window
window.outerWidth
window.navigator.webdriver = false
window["document"]['location']["protocol"]
navigator.permissions
window.speechSynthesis
window["speechSynthesis"]['getVoices']
window["speechSynthesis"]["onvoiceschanged"] = null
window["Document"]["prototype"]["hasOwnProperty"]("hasPrivateToken")
window.PushManager
window.Notification
window["navigator"]["productSub"]
window["navigator"]["language"]
window["navigator"]["product"]
window["navigator"]["plugins"]["length"]
window["DeviceMotionEvent"]
window.TouchEvent
window["chrome"]
window["Function"]["prototype"].bind
window["PointerEvent"]
window["innerWidth"]
window["outerWidth"]
window["XPathResult"]
window["document"]["documentElement"]["getAttribute"]("selenium") = null
//undefined 合集
window.callPhantom
window.ActiveXObject
document.documentMode
window.chrome.webstore
window.opera
"mozInnerScreenY" in window
window.__nightmare
window.cdc_adoQpoasnfa76pfcZLmcfl_Array
window.cdc_adoQpoasnfa76pfcZLmcfl_Promise
window.cdc_adoQpoasnfa76pfcZLmcfl_Symbol
window.OSMJIF
window._Selenium_IDE_Recorder
window.__$webdriverAsyncExecutor
window.__driver_evaluate
window.__driver_unwrapped
window.__fxdriver_evaluate
window.__lastWatirAlert
window.__lastWatirConfirm
window.__lastWatirPrompt
"ontouchstart" in window
navigator.msMaxTouchPoints
navigator.brave
window.["_phantom"]
window.webdriver
window.domAutomation
window["$cdc_asdjflasutopfhvcZLmcfl_"]
document["$cdc_asdjflasutopfhvcZLmcfl_"]
window.XDomainRequest
window.spawn
window["Buffer"]
//主动运行异常
a1 = Function.prototype.toString;
Object.setPrototypeOf(a1,Object.create(a1));
a1 = Function.prototype.toString;
Object.create(a1)["toString"]();
--VM122131:2 Uncaught TypeError: Function.prototype.toString requires that 'this' be a Function
//dom
a1 = document.createElement("span")
a1.style
a1 = document.createElement('span')
a1.nodeName
a1 = document.createElement('p')
a1.nodeType
document.currentScript.src
获取 'https://www.zimchina.com/pImzKW/4I/vt/zAqP/IyZwzOD7La/r51bXXwXJXSf/QFJ-eUU/J1wFYw/lgY1cB' 里面的r51bXXwXJXSf
document.location
document.location.hostname
document.getElementById
document.addEventListener
document.hidden
//时间
Date.now()
window["Math"]["random"]()
if (jh["window"]["localStorage"]) {
jh["window"]["localStorage"]["setItem"]("dummy", "test");
jh["window"]["localStorage"]["removeItem"]("dummy");
S6J = w2(w2(1));
}
hY['window']['document']['documentElement']['getAttribute']('webdriver') === null
浙公网安备 33010602011771号