Collected research

No Alnum JavaScript

Dollars JavaScript Code – Yet Another JavaScript Obfuscation Method for CC Frauds

Deobfuscates a symbols-only JavaScript payload found injected into Italian sites, stepping through it with alert() calls and a textarea to recover the Function() body. The recovered code rewrites every link on the page for a random one in five first-time visitors, funnelling them to a fake download site ending at a credit-card fraud checkout.

Record

Document

Dollars JavaScript Code – Yet Another JavaScript Obfuscation Method for CC Frauds

Published by

extraexploit.blogspot.com

Topic

Server

In the archive

• Collected in the 2010 research round

Related sources

• Java/script: no alnum cheat sheets
• jjencode - Encode any JavaScript program using only symbols

Tags

• javascript
• encoding
• case-study
• cookie
• dom
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of extraexploit.blogspot.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 August 2026.