Re: JavaScript
From: Shill (devnull_at_example.com)
Date: 04/28/03
- Next message: David Wilson: "Friendly "Go Away" message"
- Previous message: ošin: "Re: Simple cipher program help"
- In reply to: David Wilson: "Re: Covert Channels: a dead issue in TCP/IP v6? (currently world uses v4)"
- Next in thread: Bas Ruiter: "Re: Covert Channels: a dead issue in TCP/IP v6? (currently world uses v4)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 28 Apr 2003 22:35:48 +0200
> <script language="javascript1.2">
We are dealing with JavaScript.
> var bottomCodes = "a string of comma-separated integers";
In fact, decimal ASCII code.
> var spObj = bottomCodes.split(",");
Convert the string to an array, splitting along the commas.
> for(var i=0; i<bottomCodes.length; i++)
> document.write(String.fromCharCode(spObj[i]));
I think the author meant to write: for(var i=0; i<spObj.length; i++)
which loops through the array, writing a single character at a time.
bottomCodes.length is the length of the string (424 bytes).
spObj.length is the number of elements in the array (120).
A buffer overflow in 4 lines of code... wow!
After the obfuscation is removed, we get:
<img src="http://dc.co.kr" border=0 width=0 height=0>
<!--img src="http://www.sonyang.com" border=0 width=0 height=0-->
- Next message: David Wilson: "Friendly "Go Away" message"
- Previous message: ošin: "Re: Simple cipher program help"
- In reply to: David Wilson: "Re: Covert Channels: a dead issue in TCP/IP v6? (currently world uses v4)"
- Next in thread: Bas Ruiter: "Re: Covert Channels: a dead issue in TCP/IP v6? (currently world uses v4)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|