>
> Update of OBFU chr's rule.
I think we can call them Fred's OBFU rules now. You did much more work on
them then I did. Heck, you looked at a bunch of dictionaries. I can't even
spell dictionary! :-)
>
> rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
> body __FVGT_b_OBFU_J
Taking advice from the group, I've switched these rules to using chr set's
[]
body __FVGT_b_OBFU_J /j[bcfgw]/i
body __FVGT_b_OBFU_OTHER /(vj|vk|xj|xk|yy|zf|zj)/i
body __FVGT_b_OBFU_Q0 /[jkpqtvwz]q/i
body __FVGT_b_OBFU_Q1 /q[afhjkmnsy]/i
body __FVGT_b_OBFU_V /[fgqw]v/i
body __FVGT_b_OBFU_X
Fred I-IS COM <[EMAIL PROTECTED]> writes:
> Update of OBFU chr's rule.
> rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
> body __FVGT_b_OBFU_J /j(b|c|f|g|w)/i
You really really need to use character classes.
/j[bcfgw]/i
> Is this rule syntax legal? I didn't know I could c
Update of OBFU chr's rule.
rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
body __FVGT_b_OBFU_J /j(b|c|f|g|w)/i
body __FVGT_b_OBFU_OTHER /(vj|vk|xj|xk|yy|zf|zj)/i
body __FVGT_b_OBFU_Q0 /(j|k|p|q|t|v|w|z)q/i
body __FVGT_b_OBFU_Q1 /q(a|f|h|j|k|m|n|s|y)/i
body __FVGT_b_OBFU_V
