最新IE7 0day shellcode解密

解密最新IE7 0day shellcode
原始链接

http://bbs.kafan.cn/viewthread.php?tid=383769&page=1&extra=page%3D1#pid5736829解密代码

‘解密代码

code=”%u5549%u5155%u0E1B%u560E%u5656%u520F%u494E%u0F54%u4E42%u0E4C%u0F10%u5944%u0044″function replaceregex(str)
Sstr=Replace(str,”%u”,”")
set regex=new regExp
regex.pattern=”(..)(..)”
regex.IgnoreCase=true
regex.global=true
matches=regex.replace(Sstr,”$2$1″)
replaceregex=matches
end Function
Function Hex2Str(hexStr)
Dim sstr,hextmp
For i = 1 To Len(hexStr) step 2
hexTmp = Mid(hexStr,i,2)
If hexTmp <> “00″ Then
sstr = sstr & Chr(CLng(“&h” & hexTmp) Xor &H21)
End If
Next
Hex2Str = sstr
End Function

set fso=CreateObject(“scripting.filesystemobject”)
set fileS=fso.opentextfile(“a.txt”,8,true)
fileS.writeline Hex2Str(replaceregex(code))
files.close
set fso=Nothing

目前官方已经发布补丁，请及时更新补丁!

http://www.microsoft.com/china/technet/security/bulletin/MS09-002.mspx