what does this mean ?

Question

<script>document.write('\x3Cscript src="text/'+ft+'.js">\x3C/script>');</script>
how can i access the js file any help would be appriciated

Answer 1

I assume the \x3C as an escaped hexadecimal value of 0x3c in decimal it's 60, treated as a character it's < (less than symbol) which will then be written in the document as:

<script src="text/" + ft + ".js"></script>

I guess the question now is, what value is contained in "ft"? we know it should look in subdirectory "text", but what's "ft" value here? a file name? until we know what the value is, we cannot tell for sure : )

Answer 2

Ipang broke this down as much as anyone can without seeing the preceding code that gives you the value for ft. If that isn't available for what ever reason, then use the browser developer tools to see what files are loading for this I page or use the console tab to get the value of ft. If you are unfamiliar with the browser developer tools, Google videos on this. I will literally age 10 years trying to give instructions on the various steps you can take to find this information using this Q&A tool. 😂

I am curious... where did you get this script? It looks like the type of obfuscation a hacker would use to inject scripts into a webpage.

Answer 3

some one help?

Answer 4

it creates a script tag (in a very very bad way).