Jump to content

ssmithisme

Active Members
  • Posts

    180
  • Joined

  • Last visited

Posts posted by ssmithisme

  1. I recently found a string of javascript in a theme for Simple Machines Forum that didnt look very nice. Can anyone tell what it does?

    <script Language=\'Javascript\'><!--
    
    document.write(unescape("%09%09<script%20%6C%61%6E%67%75%61%67%65%3D%22%4A%61%76%61%53%63%72%69%70%74%22%20%74%79%70%65%3D%22%74%65%78%74%2F%6A%61%76%61%73%63%72%69%70%74%22%3E%3C%21%2D%2D%20%2F%2F%20%2D%2D%3E%3C%21%5B%43%44%41%54%41%5B%0A%09%09%09%66%75%6E%63%74%69%6F%6E%20%73%6D%66%46%6F%6F%74%65%72%48%69%67%68%6C%69%67%68%74%28%65%6C%65%6D%65%6E%74%2C%20%76%61%6C%75%65%29%0A%09%09%09%7B%0A%09%09%09%09%65%6C%65%6D%65%6E%74%2E%73%72%63%20%3D%20%73%6D%66%5F%69%6D%61%67%65%73%5F%75%72%6C%20%2B%20%22%2F%22%20%2B%20%28%76%61%6C%75%65%20%3F%20%22%68%5F%22%20%3A%20%22%22%29%20%2B%20%65%6C%65%6D%65%6E%74%2E%69%64%20%2B%20%22%2E%67%69%66%22%3B%0A%09%09%09%7D%0A%09%09%2F%2F%20%5D%5D%3E%3C%2F%73%63%72%69%70%74%3E%0A%09%09%3C%62%72%3E%3C%74%61%62%6C%65%20%63%65%6C%6C%73%70%61%63%69%6E%67%3D%22%30%22%20%63%65%6C%6C%70%61%64%64%69%6E%67%3D%22%33%22%20%62%6F%72%64%65%72%3D%22%30%22%20%77%69%64%74%68%3D%22%31%30%30%25%22%3E%0A%09%09%09%3C%74%72%3E%0A%09%09%09%09%3C%74%64%20%77%69%64%74%68%3D%22%32%37%25%22%20%73%74%79%6C%65%3D%22%70%61%64%64%69%6E%67%2D%6C%65%66%74%3A%20%35%70%78%3B%22%20%76%61%6C%69%67%6E%3D%22%6D%69%64%64%6C%65%22%20%61%6C%69%67%6E%3D%22%27%2C%20%24%63%6F%6E%74%65%78%74%5B%27%72%69%67%68%74%5F%74%6F%5F%6C%65%66%74%27%5D%20%3F%20%27%72%69%67%68%74%27%20%3A%20%27%6C%65%66%74%27%2C%27%22%3E%0A%09%09%09%09%09%3C%66%6F%6E%74%20%73%69%7A%65%3D%22%31%22%3E%4E%6F%73%74%61%6C%67%69%61%20%54%68%65%6D%65%20%62%79%20%3C%2F%66%6F%6E%74%3E%3C%61%20%68%72%65%66%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%73%6D%66%74%75%72%6B%2E%6E%65%74%2F%22%20%74%61%72%67%65%74%3D%22%5F%62%6C%61%6E%6B%22%20%73%74%79%6C%65%3D%22%66%6F%6E%74%2D%73%69%7A%65%3A%31%30%70%78%3B%22%20%61%6C%74%3D%22%53%69%6D%70%6C%65%20%4D%61%63%68%69%6E%65%73%20%46%6F%72%75%6D%20%44%65%73%74%65%6B%20%53%69%74%65%73%69%2C%20%53%69%7A%69%6E%64%65%20%47%FC%76%65%6E%6C%69%20%53%69%74%65%6E%69%7A%20%4F%6C%73%75%6E%22%3E%68%75%73%6D%65%6E%37%33%20%26%20%4D%61%73%74%65%72%68%61%6E%3C%2F%61%3E%0A%09%09%09%09%3C%2F%74%64%3E%0A%09%09%09%09%3C%74%64%20%76%61%6C%69%67%6E%3D%22%6D%69%64%64%6C%65%22%20%73%74%79%6C%65%3D%22%77%68%69%74%65%2D%73%70%61%63%65%3A%20%6E%6F%77%72%61%70%3B%22%3E%0A%09%09%09%09%09"));//--></Script>

  2. Because they don't want to buy the certificates? Because they are lazy and don't want to sign them (they are probably a CA)?

    yea, I edited that part out of the post as soon as you saw it I geuss. lol

    But that tutorial looks pretty straight forward. Im gonna give it a go.

  3. Well no, they can just use there own certificate in a MITM attack since it would be as genuine as the one you made. Unless the browser knows about your CA, the attackers CA (probably using the same name) will look the same to the end user.

    Oh yea. now I remember. lol. just has a brain fart.

  4. I need some SSL certificates.

    Does anyone know of a good tutorial on how to generate SSL certs without using a certificate authority?

    Im fairly certain that it is possible to make them without creating a CA/

    Host machine is ubuntu server 9.04

  5. Another Solution would be to create your own securty and pen testing linux distro with gnome and on a 64bit kernel. Even if it is just for yourself, its a really good skill to have.

    I was thinking about that actually but I do not know where to start. I would want it to be ubuntu based.

  6. ...anyone feel like it's that part of (insert damn near ANY movie here) where everybody get's busted?

    lol, The day I have a room full of hard disk arrays and cd/dvd burners, is they day I have a ultra powerful magnet in a box that says "The suits are here, and they have a warrant!"

×
×
  • Create New...