I’d never even heard of, much less seen anyone use the Windows Script Encoding before Andy sent me a link to a site that had an interesting JS effect (IE only). It’s actually by Kokogiak. I actually think I hit that site a long time ago, but didn’t notice it either because it wasn’t there or I don’t browse w/ IE.

A quick google search led to an article describing the Windows Secript Encoder algorithm, and how relatively trivial it is to break (here’s MSDN’s description of Using Script Encoder). Two decoders: Windows Script Decoder (in C), and in one in Perl, and in Javascript, part of an apparently long since abandoned JS scripting API.

Related:

Along the way to posting this, I found a few interested related links, one On the (Im)possibility of Obfuscating Programs, and a second, a page of Obfuscated-HTML De-obfuscation Tools, which looks like it has some very useful tools.